| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Windows Firewall lässt sich nicht aktivieren fehlercode 0x80070424Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
21.08.2013, 11:31
| #1 |
 |  Windows Firewall lässt sich nicht aktivieren fehlercode 0x80070424 Mein Firewall lässt sich nicht mehr aktivieren und es wir dieser fehlercode angezeigt 0x80070424 ebenfalls lassen sich windows defender und update nicht ausführen im rookit scan von kaspersky werden diese dateien angezeigt SkypeSetup.exe Gepackt: UPX 21.08.2013 10:39:25 c:\Users\Hanss-Rauch\AppData\Local\Temp\ Untersuchung des Computers unbekannt Gepackt: PE_Patch.Juba 21.08.2013 10:38:01 Untersuchung des Computers unbekannt Gepackt: PE_Patch.Juba 21.08.2013 10:37:59 Untersuchung des Computers unbekannt Gepackt: WiseSFXDropper 21.08.2013 10:36:29 Untersuchung des Computers unbekannt Gepackt: PE_Patch 21.08.2013 10:36:07 Untersuchung des Computers unbekannt Gepackt: ASPack 21.08.2013 10:34:50 Untersuchung des Computers unbekannt Gepackt: UPX 21.08.2013 10:34:33 Untersuchung des Computers unbekannt Gepackt: UPX 21.08.2013 10:33:46 Untersuchung des Computers unbekannt Gepackt: ASPack 21.08.2013 10:33:16 Untersuchung des Computers unbekannt Gepackt: UPX 21.08.2013 10:32:24 Untersuchung des Computers unbekannt Gepackt: UPX 21.08.2013 10:32:10 Untersuchung des Computers unbekannt Gepackt: UPX 21.08.2013 10:32:04 Untersuchung des Computers unbekannt Gepackt: UPX 21.08.2013 10:30:01 Untersuchung des Computers unbekannt Gepackt: UPX 21.08.2013 10:29:54 Untersuchung des Computers unbekannt Gepackt: UPX 21.08.2013 10:29:04 Untersuchung des Computers unbekannt Gepackt: UPX 21.08.2013 10:27:50 Untersuchung des Computers unbekannt Gepackt: UPX 21.08.2013 10:25:57 Untersuchung des Computers unbekannt Gepackt: UPX 21.08.2013 10:25:22 Untersuchung des Computers unbekannt Gepackt: UPX 21.08.2013 10:24:58 Untersuchung des Computers unbekannt Gepackt: UPX 21.08.2013 10:22:45 Untersuchung des Computers unbekannt Gepackt: PE_Patch 21.08.2013 10:22:00 Untersuchung des Computers unbekannt Gepackt: UPX 21.08.2013 10:21:24 Untersuchung des Computers unbekannt Gepackt: UPX 21.08.2013 10:20:28 Untersuchung des Computers unbekannt Gepackt: UPX 21.08.2013 10:20:27 Untersuchung des Computers unbekannt Gepackt: UPX 21.08.2013 10:20:18 Untersuchung des Computers unbekannt Gepackt: UPX 21.08.2013 10:19:54 Untersuchung des Computers unbekannt Gepackt: PE_Patch 21.08.2013 10:19:23 Untersuchung des Computers unbekannt Gepackt: UPX 21.08.2013 10:18:06 Untersuchung des Computers unbekannt Gepackt: UPX 21.08.2013 10:12:53 unbekannt Gepackt: UPX 21.08.2013 10:10:40 unbekannt Gepackt: UPX 21.08.2013 10:10:36 |
|
21.08.2013, 11:50
| #2 |
| /// the machine /// TB-Ausbilder    | Windows Firewall lässt sich nicht aktivieren fehlercode 0x80070424 hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
21.08.2013, 12:25
| #3 |
| | Windows Firewall lässt sich nicht aktivieren fehlercode 0x80070424Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 21-08-2013 Ran by Hanss-Rauch at 2013-08-21 13:19:06 Running from C:\Users\Hanss-Rauch\Desktop Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= Adobe AIR (x32 Version: 3.7.0.1530) Adobe Download Assistant (x32 Version: 1.2.5) Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94) Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224) Adobe Photoshop Elements 11 (x32 Version: 11.0) Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03) Alarm für Cobra 11 - Das Syndikat (x32) Alarm für Cobra 11 - Undercover Demo (x32) Amazon MP3-Downloader 1.0.17 (x32 Version: 1.0.17) AMD Accelerated Video Transcoding (Version: 12.5.100.21219) AMD APP SDK Runtime (Version: 10.0.1084.4) AMD Catalyst Install Manager (Version: 8.0.903.0) AMD Drag and Drop Transcoding (Version: 2.00.0000) AMD Fuel (Version: 2012.1219.1521.27485) AMD Media Foundation Decoders (Version: 1.0.71219.1540) AMD OverDrive Beta (x32 Version: 4.2.6.0659) AMD VISION Engine Control Center (x32 Version: 2012.1219.1521.27485) Apple Application Support (x32 Version: 2.3.4) Apple Mobile Device Support (Version: 6.1.0.13) Apple Software Update (x32 Version: 2.1.3.127) Ask Toolbar (x32 Version: 1.15.26.0) ASUS VGA Driver (x32 Version: 3.0.0.1) ATI AVIVO64 Codecs (Version: 11.6.0.50930) AVG Security Toolbar (x32 Version: 15.5.0.2) Avira SearchFree Toolbar plus Web Protection Updater (HKCU Version: 1.2.6.45268) AVS Screen Capture version 2.0.1 (x32) AVS Update Manager 1.0 (x32) AVS Video Editor 6 (x32) AVS4YOU Software Navigator 1.4 (x32) Bandicam (x32 Version: 1.8.9.371) Bandisoft MPEG-1 Decoder (x32) Battlefield 1942™ (x32 Version: 1.6.20.0) Battlefield 3™ (x32 Version: 1.4.0.0) Battlefield Play4Free (HKCU) Battlelog Web Plugins (x32 Version: 2.1.7) Bing Bar (x32 Version: 7.0.619.0) Bonjour (Version: 3.0.0.10) BrowserProtect (x32) Bundled software uninstaller (x32) Catalyst Control Center - Branding (x32 Version: 1.00.0000) Catalyst Control Center Graphics Previews Common (x32 Version: 2012.1219.1521.27485) Catalyst Control Center InstallProxy (x32 Version: 2012.1219.1521.27485) Catalyst Control Center Localization All (x32 Version: 2012.1219.1521.27485) CCC Help Chinese Standard (x32 Version: 2012.1219.1520.27485) CCC Help Chinese Traditional (x32 Version: 2012.1219.1520.27485) CCC Help Czech (x32 Version: 2012.1219.1520.27485) CCC Help Danish (x32 Version: 2012.1219.1520.27485) CCC Help Dutch (x32 Version: 2012.1219.1520.27485) CCC Help English (x32 Version: 2012.1219.1520.27485) CCC Help Finnish (x32 Version: 2012.1219.1520.27485) CCC Help French (x32 Version: 2012.1219.1520.27485) CCC Help German (x32 Version: 2012.1219.1520.27485) CCC Help Greek (x32 Version: 2012.1219.1520.27485) CCC Help Hungarian (x32 Version: 2012.1219.1520.27485) CCC Help Italian (x32 Version: 2012.1219.1520.27485) CCC Help Japanese (x32 Version: 2012.1219.1520.27485) CCC Help Korean (x32 Version: 2012.1219.1520.27485) CCC Help Norwegian (x32 Version: 2012.1219.1520.27485) CCC Help Polish (x32 Version: 2012.1219.1520.27485) CCC Help Portuguese (x32 Version: 2012.1219.1520.27485) CCC Help Russian (x32 Version: 2012.1219.1520.27485) CCC Help Spanish (x32 Version: 2012.1219.1520.27485) CCC Help Swedish (x32 Version: 2012.1219.1520.27485) CCC Help Thai (x32 Version: 2012.1219.1520.27485) CCC Help Turkish (x32 Version: 2012.1219.1520.27485) ccc-utility64 (Version: 2012.1219.1521.27485) ChatZum Toolbar (x32 Version: 1.0.14) Compatibility Pack für 2007 Office System (x32 Version: 12.0.6514.5001) D3DX10 (x32 Version: 15.4.2368.0902) Delta toolbar (x32 Version: 1.8.22.0) Die Sims™ 3-Teaser (x32 Version: 1.0.0.0) DSL-Manager (x32) Elements 11 Organizer (x32 Version: 11.0) ESN Sonar (x32 Version: 0.70.4) FilesFrog Update Checker (x32) Flight Simulator X (x32) Flight Simulator X Service Pack 1 (x32) Fraps (x32) fTalk (HKCU Version: 4.0.0.4087) GamesBar (W) (x32 Version: 3.2.0.36) Ghost Recon Online (HKCU Version: 1.30.8665.2) Google Chrome (x32 Version: 28.0.1500.95) Google Earth (x32 Version: 7.1.1.1888) Google Talk Plugin (x32 Version: 4.4.2.14502) Google Update Helper (x32 Version: 1.3.21.153) Heaven DX11 Benchmark version 3.0 (Version: 3.0) IB Updater Service (x32 Version: 3.0.3.3) iCloud (Version: 2.1.2.8) Internet-TV für Windows Media Center (x32 Version: 4.2.2.0) IrfanView (remove only) (x32 Version: 4.36) iTunes (Version: 11.0.3.42) Java 7 Update 11 (64-bit) (Version: 7.0.110) Java 7 Update 25 (x32 Version: 7.0.250) Java Auto Updater (x32 Version: 2.1.9.5) JavaFX 2.1.0 (x32 Version: 2.1.0) Junk Mail filter update (x32 Version: 15.4.3502.0922) Kaspersky Internet Security 2013 (x32 Version: 13.0.1.4190) LEGO Digital Designer (x32) LogMeIn Hamachi (x32 Version: 2.1.0.374) Lyrics-Pal (x32) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) MapCreator 2 (x32 Version: 2.0) Medal of Honor™ Warfighter (x32 Version: 1.0.0.3) Mesh Runtime (x32 Version: 15.4.5722.2) Messenger Companion (x32 Version: 15.4.3502.0922) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320) Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Flight Simulator X (x32 Version: 10.0.60905) Microsoft Flight Simulator X: Acceleration (x32 Version: 10.0.61637.0) Microsoft Games for Windows - LIVE (x32 Version: 3.3.24.0) Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.2.3.0) Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0) Microsoft Silverlight (x32 Version: 5.1.20125.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (x32 Version: 11.0.50727.1) Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727) Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727) Motherboard Monitor 5 (x32 Version: 5) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT_amd64 (x32 Version: 15.4.2862.0708) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) MSXML 4.0 SP2 Parser und SDK (x32 Version: 4.20.9818.0) Music Manager (HKCU) MyFreeCodec (HKCU) Need For Speed™ World (x32 Version: 1.0.0.857) NVIDIA Install Application (Version: 2.275.78.0) NVIDIA Update 1.3.5 (Version: 1.3.5) NVIDIA Update Components (Version: 1.3.5) Online Weather (HKCU Version: 1.0) OpenOffice.org 3.4.1 (x32 Version: 3.41.9593) Origin (x32 Version: 9.1.15.109) PDF-Viewer (Version: 2.5.211.0) PlayReady PC Runtime amd64 (Version: 1.3.0) Power Sound Editor Free (x32) ProtectDisc Driver, Version 11 (x32 Version: 11.0.0.14) PSE11 STI Installer (x32 Version: 11.0) PunkBuster Services (x32 Version: 0.993) Realtek Ethernet Controller Driver (x32 Version: 7.46.610.2011) rosoft .NET Framework 4 Client Profile (Version: 4.0.30320) Samsung Kies (x32 Version: 2.5.1.12123_2) SAMSUNG USB Driver for Mobile Phones (Version: 1.5.16.0) Search-Results Toolbar (x32 Version: 1.2.0.0) Skype Click to Call (x32 Version: 6.3.11079) Skype™ 6.6 (x32 Version: 6.6.106) Softonic toolbar on IE (x32) Sony Ericsson Update Engine (x32 Version: 2.13.7.201306141231) Sony PC Companion 2.10.165 (x32 Version: 2.10.165) Sophos Anti-Rootkit 1.5.0 (x32 Version: 1.5.0) Spotify (HKCU Version: 0.9.1.57.ge7405149) TeamSpeak 3 Client (Version: 3.0.10) Tom Clancy's Ghost Recon Future Soldier (x32 Version: 1.8) Tom Clancy's H.A.W.X. 2 (x32 Version: 1.0.1) Tom Clancy's Splinter Cell 3 - Chaos Theory (x32 Version: 1.00.0000) Top German Apps (x32 Version: 0.7.5.2700) Ubisoft Game Launcher (x32 Version: 1.0.0.0) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) VirtualDJ Home FREE (x32 Version: 7.0.5) Web Assistant 2.0.0.572 (Version: 2.0.0.572) Werksfeuerwehr-Simulator Version 1.0 (x32) Windows Live Communications Platform (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3555.0308) Windows Live Family Safety (Version: 15.4.3555.0308) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922) Windows Live ID Sign-in Assistant (Version: 7.250.4232.0) Windows Live Installer (x32 Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3555.0308) Windows Live Mail (x32 Version: 15.4.3502.0922) Windows Live Mesh (x32 Version: 15.4.3502.0922) Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2) Windows Live Messenger (x32 Version: 15.4.3538.0513) Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922) Windows Live MIME IFilter (Version: 15.4.3502.0922) Windows Live Movie Maker (x32 Version: 15.4.3502.0922) Windows Live Photo Common (x32 Version: 15.4.3502.0922) Windows Live Photo Gallery (x32 Version: 15.4.3502.0922) Windows Live PIMT Platform (x32 Version: 15.4.3508.1109) Windows Live Remote Client (Version: 15.4.5722.2) Windows Live Remote Client Resources (Version: 15.4.5722.2) Windows Live Remote Service (Version: 15.4.5722.2) Windows Live Remote Service Resources (Version: 15.4.5722.2) Windows Live SOXE (x32 Version: 15.4.3502.0922) Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922) Windows Live UX Platform (x32 Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109) Windows Live Writer (x32 Version: 15.4.3502.0922) Windows Live Writer Resources (x32 Version: 15.4.3502.0922) Windows Media Center Add-in for Silverlight (x32 Version: 4.7.3.0) Windows Searchqu Toolbar (x32 Version: 4.1.0.2912) WinRAR 4.20 (64-Bit) (Version: 4.20.0) Yontoo 2.052 (Version: 2.052) ==================== Restore Points ========================= 16-08-2013 17:08:46 Installed LogMeIn Hamachi 21-08-2013 09:51:57 Installed Microsoft Fix it 50884 ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {02B756A0-AAC5-42F7-9AC8-52BA07D0B7DA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-11] (Adobe Systems Incorporated) Task: {11DBA657-C701-4747-B115-7575FC0E91AB} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv => C:\Windows\TEMP\{5302F7AC-907C-4661-B1D6-20D696C5CE26}.exe No File Task: {1A599739-6ABF-4AB8-8140-46F1E24C3E86} - System32\Tasks\Your File Updater => C:\Program Files (x86)\YourFileDownloader\YourFileUpdater.exe No File Task: {206F76F2-6BF1-4DA4-874E-AC809BA647D3} - System32\Tasks\BrowserProtect => C:\Windows\system32\sc.exe [2009-07-14] (Microsoft Corporation) Task: {2B71A810-004C-4936-84C8-995E974B7059} - System32\Tasks\User_Feed_Synchronization-{E87E6DD8-1205-4645-869B-BEFAEB93D838} => C:\Windows\system32\msfeedssync.exe [2013-03-28] (Microsoft Corporation) Task: {410184AC-4A2A-4423-AFCD-8FBFFDEB794D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {51D59E47-1B36-4B95-A233-7F59806E501B} - System32\Tasks\ASUS\ASUS RegRun Loader => C:\Program Files (x86)\ASUS\AASP\1.01.02\AsLoader.exe [2012-08-06] (ASUSTeK Computer Inc.) Task: {64F94223-FED3-43FE-B535-4860F320A48D} - System32\Tasks\EPUpdater => C:\Users\HANSS-~1\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe [2013-06-06] () Task: {7E8280BB-EAD0-4647-A824-989EACCC0DAF} - System32\Tasks\YourFile DownloaderUpdate => C:\Program Files (x86)\YourFileDownloader\YourFileUpdater.exe No File Task: {8B579AC1-32C2-4E0A-BC99-163DC564D722} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe [2013-04-30] () Task: {AF6A1F73-6AA7-43F7-8ABD-F1E6C9E99346} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-28] (Google Inc.) Task: {B8AB8B31-A972-4E86-9C0F-303DE9AFA789} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2922039653-137104462-887748758-1000Core => C:\Users\Hanss-Rauch\AppData\Local\Google\Update\GoogleUpdate.exe [2012-10-12] (Google Inc.) Task: {BF03FB55-5028-4107-8FD2-D08870565D19} - System32\Tasks\AdobeAAMUpdater-1.0-LUCA-PC-Hanss-Rauch => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2011-06-16] (Adobe Systems Incorporated) Task: {C138F704-A91B-407F-9B68-35DEA178CAB9} - System32\Tasks\0 => c:\program files (x86)\internet explorer\iexplore.exe [2013-03-28] (Microsoft Corporation) Task: {C7578D67-E6A3-4893-BDBE-F4705E26F2DC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-28] (Google Inc.) Task: {D00A6FF3-28C7-4817-B931-8516CB24685E} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2922039653-137104462-887748758-1000UA => C:\Users\Hanss-Rauch\AppData\Local\Google\Update\GoogleUpdate.exe [2012-10-12] (Google Inc.) Task: {D1BA3B0D-D61B-4B57-B160-358FC6CC7A38} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Task: {D90E59C4-0CB4-48B4-BFA4-AD09894E4674} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation) Task: {E30B4EE5-232E-447B-A301-7DD1691B7DBC} - System32\Tasks\4782 => C:\Windows\System32\wscript.exe [2009-07-14] (Microsoft Corporation) Task: {E5016DD3-D57F-416E-943D-C5418A16F41B} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-21] (Microsoft Corporation) Task: {EA51EAFA-4798-4760-894B-6A069E62A30C} - System32\Tasks\GoforFilesUpdate => C:\Program Files (x86)\GoforFiles\GFFUpdater.exe No File Task: {FBB5D090-FDDF-409E-9395-A53236DC8FB7} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv => C:\Windows\TEMP\{D5AF0B74-FAFF-4712-8F64-08568AD009B6}.exe No File Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job => C:\Windows\TEMP\{D5AF0B74-FAFF-4712-8F64-08568AD009B6}.exe Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\Windows\TEMP\{5302F7AC-907C-4661-B1D6-20D696C5CE26}.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2922039653-137104462-887748758-1000Core.job => C:\Users\Hanss-Rauch\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2922039653-137104462-887748758-1000UA.job => C:\Users\Hanss-Rauch\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (08/21/2013 01:08:49 PM) (Source: Application Hang) (User: ) Description: Programm FRST64.exe, Version 3.3.8.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 25f0 Startzeit: 01ce9e5d932c49ad Endzeit: 11 Anwendungspfad: C:\Users\Hanss-Rauch\Desktop\FRST64.exe Berichts-ID: Error: (08/21/2013 00:58:30 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: bf3.exe, Version: 1.6.0.0, Zeitstempel: 0x511c9356 Name des fehlerhaften Moduls: bf3.exe, Version: 1.6.0.0, Zeitstempel: 0x511c9356 Ausnahmecode: 0xc0000005 Fehleroffset: 0x002413bb ID des fehlerhaften Prozesses: 0x267c Startzeit der fehlerhaften Anwendung: 0xbf3.exe0 Pfad der fehlerhaften Anwendung: bf3.exe1 Pfad des fehlerhaften Moduls: bf3.exe2 Berichtskennung: bf3.exe3 Error: (08/21/2013 11:58:35 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/21/2013 11:54:50 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: DslMgrSvc.exe, Version: 6.91.8434.1, Zeitstempel: 0x4900aa18 Name des fehlerhaften Moduls: DslMgrSvc.exe, Version: 6.91.8434.1, Zeitstempel: 0x4900aa18 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000c41a ID des fehlerhaften Prozesses: 0x474 Startzeit der fehlerhaften Anwendung: 0xDslMgrSvc.exe0 Pfad der fehlerhaften Anwendung: DslMgrSvc.exe1 Pfad des fehlerhaften Moduls: DslMgrSvc.exe2 Berichtskennung: DslMgrSvc.exe3 Error: (08/21/2013 09:40:27 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/20/2013 10:37:16 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: DslMgrSvc.exe, Version: 6.91.8434.1, Zeitstempel: 0x4900aa18 Name des fehlerhaften Moduls: DslMgrSvc.exe, Version: 6.91.8434.1, Zeitstempel: 0x4900aa18 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000c41a ID des fehlerhaften Prozesses: 0x113c Startzeit der fehlerhaften Anwendung: 0xDslMgrSvc.exe0 Pfad der fehlerhaften Anwendung: DslMgrSvc.exe1 Pfad des fehlerhaften Moduls: DslMgrSvc.exe2 Berichtskennung: DslMgrSvc.exe3 Error: (08/20/2013 10:27:59 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich. Error: (08/20/2013 10:27:59 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich. Error: (08/20/2013 10:27:59 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich. Error: (08/20/2013 10:23:12 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich. System errors: ============= Error: (08/21/2013 00:07:32 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows-Firewall" wurde mit folgendem dienstspezifischem Fehler beendet: %%5. Error: (08/21/2013 00:07:00 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows-Firewall" wurde mit folgendem dienstspezifischem Fehler beendet: %%5. Error: (08/21/2013 00:05:40 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows-Firewall" wurde mit folgendem dienstspezifischem Fehler beendet: %%5. Error: (08/21/2013 00:03:30 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows-Firewall" wurde mit folgendem dienstspezifischem Fehler beendet: %%5. Error: (08/21/2013 00:03:11 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows-Firewall" wurde mit folgendem dienstspezifischem Fehler beendet: %%5. Error: (08/21/2013 00:02:41 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows-Firewall" wurde mit folgendem dienstspezifischem Fehler beendet: %%5. Error: (08/21/2013 00:00:25 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2147024891 Error: (08/21/2013 00:00:25 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Funktionssuche-Ressourcenveröffentlichung" wurde mit folgendem Fehler beendet: %%-2147024891 Error: (08/21/2013 11:58:43 AM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: mbmiodrvr SAVRKBootTasks Error: (08/21/2013 11:57:34 AM) (Source: DCOM) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Microsoft Office Sessions: ========================= Error: (08/21/2013 01:08:49 PM) (Source: Application Hang)(User: ) Description: FRST64.exe3.3.8.125f001ce9e5d932c49ad11C:\Users\Hanss-Rauch\Desktop\FRST64.exe Error: (08/21/2013 00:58:30 PM) (Source: Application Error)(User: ) Description: bf3.exe1.6.0.0511c9356bf3.exe1.6.0.0511c9356c0000005002413bb267c01ce9e5d3637e9ceC:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exeC:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe9cf50cf4-0a50-11e3-ab7f-c8600083894c Error: (08/21/2013 11:58:35 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/21/2013 11:54:50 AM) (Source: Application Error)(User: ) Description: DslMgrSvc.exe6.91.8434.14900aa18DslMgrSvc.exe6.91.8434.14900aa18c00000050000c41a47401ce9e4facea9f00C:\Program Files (x86)\DSL-Manager\DslMgrSvc.exeC:\Program Files (x86)\DSL-Manager\DslMgrSvc.exeb8291f50-0a47-11e3-871f-c8600083894c Error: (08/21/2013 09:40:27 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Hier ist die Addition.txt FRST.txt finde ich nicht |
|
21.08.2013, 12:46
| #4 |
| | Windows Firewall lässt sich nicht aktivieren fehlercode 0x80070424 Hab doch beide txt files gefeunden FRST.txt FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-08-2013
Ran by Hanss-Rauch (administrator) on 21-08-2013 13:19:31
Running from C:\Users\Hanss-Rauch\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Oberon Media ) C:\Program Files (x86)\GamesBar\update\SearchEngineProtection.exe
(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
(Koyote-Lab Inc.) C:\Users\Hanss-Rauch\AppData\Local\fTalk\ftalk.exe
(Spotify Ltd) C:\Users\Hanss-Rauch\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Google Inc.) C:\Users\Hanss-Rauch\AppData\Local\Programs\Google\MusicManager\MusicManager.exe
(Spotify Ltd) C:\Users\Hanss-Rauch\AppData\Roaming\Spotify\spotify.exe
(Somoto) C:\Users\Hanss-Rauch\AppData\Local\FilesFrog Update Checker\update_checker.exe
() C:\Users\Hanss-Rauch\AppData\Local\WebPlayer\Online Weather\WebPlayer.exe
(T-Systems Enterprise Services GmbH) C:\Program Files (x86)\DSL-Manager\DslMgr.exe
() C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
() C:\Program Files (x86)\AVG Secure Search\vprot.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Ask) C:\Program Files (x86)\Ask.com\Updater\Updater.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
() C:\Users\Hanss-Rauch\AppData\Roaming\BrowserCompanion\tbhcn.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
() C:\Program Files\Web Assistant\ExtensionUpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe
(T-Systems Enterprise Services GmbH) C:\Program Files (x86)\DSL-Manager\DslMgrSvc.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\klwtblfs.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-06-16] (Adobe Systems Incorporated)
HKCU\...\Run: [Media Finder] - "C:\Program Files (x86)\Media Finder\Media Finder.exe" /opentotray [x]
HKCU\...\Run: [Google Update] - C:\Users\Hanss-Rauch\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-10-12] (Google Inc.)
HKCU\...\Run: [SearchEngineProtection] - C:\Program Files (x86)\GamesBar\update\SearchEngineProtection.exe [620480 2012-10-25] (Oberon Media )
HKCU\...\Run: [EADM] - C:\Program Files (x86)\Origin\Origin.exe [3549528 2013-07-30] (Electronic Arts)
HKCU\...\Run: [fTalk] - C:\Users\Hanss-Rauch\AppData\Local\fTalk\ftalk.exe [9424944 2013-01-24] (Koyote-Lab Inc.)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Hanss-Rauch\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-07-07] (Spotify Ltd)
HKCU\...\Run: [Sony PC Companion] - C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [449248 2013-05-29] (Sony)
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1476104 2012-12-20] (Samsung)
HKCU\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup [x]
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844296 2012-12-20] (Samsung)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)
HKCU\...\Run: [MusicManager] - C:\Users\Hanss-Rauch\AppData\Local\Programs\Google\MusicManager\MusicManager.exe [7345664 2013-06-21] (Google Inc.)
HKCU\...\Run: [Spotify] - C:\Users\Hanss-Rauch\AppData\Roaming\Spotify\Spotify.exe [4640768 2013-07-07] (Spotify Ltd)
HKCU\...\Run: [SDP] - C:\Users\Hanss-Rauch\AppData\Local\FilesFrog Update Checker\update_checker.exe [201808 2013-01-31] (Somoto)
HKCU\...\Run: [Online Weather] - C:\Users\Hanss-Rauch\AppData\Local\WebPlayer\Online Weather\WebPlayer.exe [202752 2012-10-26] ()
HKCR\...0c966feabec1\InprocServer32: [Default-shell32] %SystemRoot%\system32\shdocvw.dll ATTENTION! ====> ZeroAccess?
MountPoints2: {ae072ae8-4dc7-11e2-be94-c8600083894c} - E:\Startme.exe
HKLM-x32\...\Run: [vProt] - C:\Program Files (x86)\AVG Secure Search\vprot.exe [2314416 2013-08-15] ()
HKLM-x32\...\Run: [BlueStacks Agent] - C:\Program Files (x86)\BlueStacks\HD-Agent.exe [581496 2012-09-24] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [310280 2012-12-20] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [ApnUpdater] - C:\Program Files (x86)\Ask.com\Updater\Updater.exe [1648264 2013-04-30] (Ask)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-15] (Apple Inc.)
HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356376 2013-05-16] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2255184 2013-06-28] (LogMeIn Inc.)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL-Manager.lnk
ShortcutTarget: DSL-Manager.lnk -> C:\Program Files (x86)\DSL-Manager\DslMgr.exe (T-Systems Enterprise Services GmbH)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL-Manager.lnk
ShortcutTarget: DSL-Manager.lnk -> C:\Program Files (x86)\DSL-Manager\DslMgr.exe (T-Systems Enterprise Services GmbH)
Startup: C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL-Manager.lnk
ShortcutTarget: DSL-Manager.lnk -> C:\Program Files (x86)\DSL-Manager\DslMgr.exe (T-Systems Enterprise Services GmbH)
Startup: C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MegaCloud Backup.lnk
ShortcutTarget: MegaCloud Backup.lnk -> C:\Users\Hanss-Rauch\AppData\Roaming\MegaCloudBackup\MegaCloudBackup.exe (No File)
Startup: C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MegaCloud.lnk
ShortcutTarget: MegaCloud.lnk -> C:\Users\Hanss-Rauch\AppData\Roaming\MegaCloud\MegaCloud.exe (No File)
Startup: C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tbhcn.lnk
ShortcutTarget: tbhcn.lnk -> C:\Users\Hanss-Rauch\AppData\Roaming\BrowserCompanion\tbhcn.exe ()
==================== Internet (Whitelisted) ====================
ProxyServer: :
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Backup.Old.Start Page = https://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://de.msn.com/?ocid=EIE9HP&PC=UP50
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www2.delta-search.com/?affID=119292&babsrc=HP_ss&mntrId=4802C8600083894C
URLSearchHook: (No Name) - {00000000-6E41-4FD3-8538-502F5495E5FC} - No File
URLSearchHook: (No Name) - {CA3EB689-8F09-4026-AA10-B9534C691CE0} - No File
URLSearchHook: (No Name) - {77f8c945-4b74-4bd6-a073-e0d1997edce8} - No File
SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2431} URL = hxxp://dts.search-results.com/web?src=ieb&gct=ds&appid=109&systemid=431&apn_dtid=BND431&apn_ptnrs=AGH&o=APN10656&apn_uid=1508500189704569&q={searchTerms}
SearchScopes: HKLM - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://start.funmoods.com/results.php?f=4&q={searchTerms}&a=bndlr&chnl=bndlr&cd=2XzuyEtN2Y1L1Qzu0CzzyCtDtDtDzztAzzzyyE0CtCyEzz0DtN0D0Tzu0CtByByBtN1L2XzutBtFtCtFtCtFtAtCtB&cr=1815744834
SearchScopes: HKLM - {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=161&systemid=406&sr=0&q={searchTerms}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2431} URL = hxxp://dts.search-results.com/web?src=ieb&gct=ds&appid=109&systemid=431&apn_dtid=BND431&apn_ptnrs=AGH&o=APN10656&apn_uid=1508500189704569&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2431} URL = hxxp://dts.search-results.com/web?src=ieb&gct=ds&appid=109&systemid=431&apn_dtid=BND431&apn_ptnrs=AGH&o=APN10656&apn_uid=1508500189704569&q={searchTerms}
SearchScopes: HKLM-x32 - Backup.Old.DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5}
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://start.funmoods.com/results.php?f=4&q={searchTerms}&a=bndlr&chnl=bndlr&cd=2XzuyEtN2Y1L1Qzu0CzzyCtDtDtDzztAzzzyyE0CtCyEzz0DtN0D0Tzu0CtByByBtN1L2XzutBtFtCtFtCtFtAtCtB&cr=1815744834
SearchScopes: HKLM-x32 - {7F8AFFC0-6745-ABC9-8120-06D74BB77DF5} URL = hxxp://search.chatzum.com/?q={searchTerms}
SearchScopes: HKLM-x32 - {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=161&systemid=406&sr=0&q={searchTerms}
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2431} URL = hxxp://dts.search-results.com/web?src=ieb&gct=ds&appid=109&systemid=431&apn_dtid=BND431&apn_ptnrs=AGH&o=APN10656&apn_uid=1508500189704569&q={searchTerms}
SearchScopes: HKLM-x32 - {a5b9c0f5-5616-47cd-a95f-e43b488faccf} URL = hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=XPxdm116YYde&ptnrS=XPxdm116YYde&si=COeDwq-xgrMCFYq7zAod8TQAGw&ptb=3AB94039-F9C6-4F67-8EFB-1429091EE4DB&psa=&ind=2012101502&st=sb&n=77ee3b7e&searchfor={searchTerms}
SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2737658
SearchScopes: HKLM-x32 - {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://websearch.good-results.info/?l=1&q={searchTerms}&pid=396&r=2013/02/12&hid=2611179423&lg=EN&cc=DE
SearchScopes: HKLM-x32 - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10026&barid={C7CB345A-AE47-11E1-8389-C8600083894C}
SearchScopes: HKCU - DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://isearch.avg.com/search?cid={B350E5C7-0E85-440F-92C3-0A61419D82F4}&mid=583b4250416c4d3fb002d75cbd111d92-0060b503487550c295730926c5a9addb4e549527&lang=de&ds=hk011&pr=&d=2012-11-01 17:17:08&v=15.3.0.11&pid=avg&sg=0&sap=dsp&q={searchTerms}
SearchScopes: HKCU - Backup.Old.DefaultScope {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://search.chatzum.com/?q={searchTerms}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://isearch.babylon.com/?q={searchTerms}&babsrc=SP_ss_btis&mntrId=4802C8600083894C&affID=123884&tt=290713_ctrl&tsp=4958
SearchScopes: HKCU - {36377DD7-B3EB-42f5-986F-680BAF59BA9D} URL = hxxp://start.gamesagogo.iplay.com/searchresultsredirect.aspx?o=chrome&q={searchTerms}
SearchScopes: HKCU - {5F8A256F-9ACE-40D0-A66B-A61925748894} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=feea3e34-b6b8-4c81-aea8-efce9718ab56&apn_sauid=5CB264A4-1CDC-4A37-BEB5-A294CED08EE5
SearchScopes: HKCU - {634B5AE2-8920-48F9-9FD1-3488DB3FD4EA} URL = hxxp://search.softonic.com/MON00015/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=673
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
SearchScopes: HKCU - {7F8AFFC0-6745-ABC9-8120-06D74BB77DF5} URL = hxxp://search.chatzum.com/?q={SearchTerms}
SearchScopes: HKCU - {80c554b9-c7f8-4a21-9471-06d606da78a2} URL =
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://isearch.avg.com/search?cid={B350E5C7-0E85-440F-92C3-0A61419D82F4}&mid=583b4250416c4d3fb002d75cbd111d92-0060b503487550c295730926c5a9addb4e549527&lang=de&ds=hk011&pr=&d=2012-11-01 17:17:08&v=15.3.0.11&pid=avg&sg=0&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {96bd48dd-741b-41ae-ac4a-aff96ba00f7e} URL = hxxp://start.funmoods.com/results.php?f=4&q={searchTerms}&a=bndlr&chnl=bndlr&cd=2XzuyEtN2Y1L1Qzu0CzzyCtDtDtDzztAzzzyyE0CtCyEzz0DtN0D0Tzu0CtByByBtN1L2XzutBtFtCtFtCtFtAtCtB&cr=1815744834
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2431} URL = hxxp://dts.search-results.com/web?src=ieb&gct=ds&appid=109&systemid=431&apn_dtid=BND431&apn_ptnrs=AGH&o=APN10656&apn_uid=1508500189704569&q={searchTerms}
SearchScopes: HKCU - {a5b9c0f5-5616-47cd-a95f-e43b488faccf} URL = hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=XPxdm116YYde&ptnrS=XPxdm116YYde&si=COeDwq-xgrMCFYq7zAod8TQAGw&ptb=3AB94039-F9C6-4F67-8EFB-1429091EE4DB&psa=&ind=2012101502&st=sb&n=77ee3b7e&searchfor={searchTerms}
SearchScopes: HKCU - {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://websearch.good-results.info/?l=1&q={searchTerms}&pid=396&r=2013/02/12&hid=2611179423&lg=EN&cc=DE
SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://mystart.incredibar.com/mb164/?search={searchTerms}&loc=IB_DS&a=6R8yATLsft&i=26
SearchScopes: HKCU - {D66BA4E4-7C62-4079-B88E-2CE651732E57} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=161&systemid=406&sr=0&q={searchTerms}
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10026&barid={C7CB345A-AE47-11E1-8389-C8600083894C}
BHO: Web Assistant - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\Web Assistant\Extension64.dll ()
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: DataMngr - {9D717F81-9148-4f12-8568-69135F087DB0} - C:\PROGRA~2\SEARCH~1\Datamngr\x64\BROWSE~1.DLL (Bandoo Media, inc)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: GamesBar (W) - {2e94b700-eafb-4c9e-a696-77200aa3f89b} - C:\Program Files (x86)\gamesagogo_w3i\encyclopediabritannicagamesbarX.dll ()
BHO-x32: Web Assistant - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\Web Assistant\Extension32.dll ()
BHO-x32: Search-Results Toolbar - {52170494-4d34-4f69-8dac-f726dc0da9ac} - C:\PROGRA~2\WIA6EB~1\Datamngr\SRTOOL~1\searchresultsDx.dll (APN LLC)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\15.5.0.2\AVG Secure Search_toolbar.dll (AVG Secure Search)
BHO-x32: DataMngr - {9D717F81-9148-4f12-8568-69135F087DB0} - C:\PROGRA~2\SEARCH~1\Datamngr\BROWSE~1.DLL (Bandoo Media, inc)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.22.0\bh\delta.dll (Delta-search.com)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Softonic Helper Object - {E87806B5-E908-45FD-AF5E-957D83E58E68} - C:\Program Files (x86)\Softonic\Softonic\1.6.4.3\bh\Softonic.dll (Softonic.com)
BHO-x32: TBSB09850 Class - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files (x86)\ChatZum Toolbar\tbunsv8859.tmp\tbcore3.dll ()
BHO-x32: Yontoo - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo\YontooIEClient_2.dll (Yontoo LLC)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKLM-x32 - Softonic Toolbar - {5018CFD2-804D-4C99-9F81-25EAEA2769DE} - C:\Program Files (x86)\Softonic\Softonic\1.6.4.3\SoftonicTlbr.dll (Softonic.com)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKLM-x32 - ChatZum Toolbar - {37D48D9C-3F7E-412F-B5BF-611BE7CCFCA1} - C:\Program Files (x86)\ChatZum Toolbar\tbunsv8859.tmp\tbcore3.dll ()
Toolbar: HKLM-x32 - GamesBar (W) - {2e94b700-eafb-4c9e-a696-77200aa3f89b} - C:\Program Files (x86)\gamesagogo_w3i\encyclopediabritannicagamesbarX.dll ()
Toolbar: HKLM-x32 - AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\15.5.0.2\AVG Secure Search_toolbar.dll (AVG Secure Search)
Toolbar: HKLM-x32 - Search-Results Toolbar - {52170494-4d34-4f69-8dac-f726dc0da9ac} - C:\PROGRA~2\WIA6EB~1\Datamngr\SRTOOL~1\searchresultsDx.dll (APN LLC)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
Toolbar: HKLM-x32 - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.22.0\deltaTlbr.dll (Delta-search.com)
Toolbar: HKCU - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} - No File
Toolbar: HKCU - No Name - {40C3CC16-7269-4B32-9531-17F2950FB06F} - No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Toolbar: HKCU - No Name - {37D48D9C-3F7E-412F-B5BF-611BE7CCFCA1} - No File
DPF: HKLM-x32 {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} https://battlefield.play4free.com/static/updater/BP4FUpdater_1.0.95.0.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\15.5.0\ViProtocol.dll (AVG Secure Search)
Winsock: Catalog5 01 mswsock.dll File Not found (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5 05 mswsock.dll File Not found (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\System32\mswsock.dll"
Winsock: Catalog5-x64 01 mswsock.dll File Not found (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5-x64 05 mswsock.dll File Not found (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\System32\mswsock.dll"
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\Firefox\Profiles\h8jupusy.default
FF user.js: detected! => C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\Firefox\Profiles\h8jupusy.default\user.js
FF Homepage: user_pref("browser.startup.homepage", );
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=10.11.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.11.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\15.5.0\\npsitesafety.dll (AVG Technologies)
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @ei.MyWebFace_5a.com/Plugin - C:\Program Files (x86)\MyWebFace_5aEI\Installr\1.bin\NP5aEISB.dll No File
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.4 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Hanss-Rauch\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Hanss-Rauch\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10174.dll (Amazon.com, Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF SearchPlugin: C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\Firefox\Profiles\h8jupusy.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\Firefox\Profiles\h8jupusy.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\Firefox\Profiles\h8jupusy.default\searchplugins\BrowserProtect.xml
FF SearchPlugin: C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\Firefox\Profiles\h8jupusy.default\searchplugins\delta.xml
FF SearchPlugin: C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\Firefox\Profiles\h8jupusy.default\searchplugins\holasearch.xml
FF Extension: No Name - C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: Delta Toolbar - C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\Firefox\Profiles\h8jupusy.default\Extensions\ffxtlbr@delta.com
FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\Firefox\Profiles\h8jupusy.default\Extensions\toolbar@ask.com
FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] C:\Program Files\Web Assistant\Firefox
FF Extension: Web Assistant - C:\Program Files\Web Assistant\Firefox
FF HKLM\...\Firefox\Extensions: [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}] C:\Program Files\Web Assistant\Firefox
FF Extension: Web Assistant - C:\Program Files\Web Assistant\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] C:\Program Files\Web Assistant\Firefox
FF Extension: Web Assistant - C:\Program Files\Web Assistant\Firefox
FF HKLM-x32\...\Firefox\Extensions: [avg@toolbar] C:\ProgramData\AVG Secure Search\FireFoxExt\15.5.0.2
FF Extension: AVG Security Toolbar - C:\ProgramData\AVG Secure Search\FireFoxExt\15.5.0.2
FF HKLM-x32\...\Firefox\Extensions: [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}] C:\Program Files\Web Assistant\Firefox
FF Extension: Web Assistant - C:\Program Files\Web Assistant\Firefox
FF HKLM-x32\...\Firefox\Extensions: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com
FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com
FF HKCU\...\Firefox\Extensions: [{8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}] C:\Program Files (x86)\PriceGong\2.6.8\FF
FF Extension: PriceGong - C:\Program Files (x86)\PriceGong\2.6.8\FF
Chrome:
=======
CHR HomePage: hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=4802C8600083894C&affID=123884&tt=290713_ctrl&tsp=4958
CHR RestoreOnStartup: "https://www.google.de/"
CHR DefaultSearchURL: (Delta Search) - hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=4802C8600083894C&affID=123884&tt=290713_ctrl&tsp=4958
CHR DefaultSuggestURL: (Delta Search) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\pdf.dll ()
CHR Plugin: (Google Talk Plugin) - C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
CHR Plugin: (Google Talk Plugin Video Accelerator) - C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
CHR Plugin: (Google Talk Plugin Video Renderer) - C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
CHR Plugin: (AmazonMP3DownloaderPlugin) - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10174.dll (Amazon.com, Inc.)
CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll No File
CHR Plugin: (ESN Sonar API) - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
CHR Plugin: (AVG SiteSafety plugin) - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\14.2.0\\npsitesafety.dll (AVG Technologies)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U17) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (MyWebFace Installer Plugin Stub) - C:\Program Files (x86)\MyWebFace_5aEI\Installr\1.bin\NP5aEISB.dll No File
CHR Plugin: (MindSpark Toolbar Platform Plugin Stub) - C:\Program Files (x86)\TelevisionFanatic\bar\1.bin\NP64Stub.dll No File
CHR Plugin: (Uplay PC) - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_171.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Extension: (Add to Amazon Wish List) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ciagpekplgpbepdgggflgmahnjgiaced\1.0.0.10_0
CHR Extension: (Kaspersky URL Advisor) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\13.0.1.4190_0
CHR Extension: (Safe Money) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh\13.0.1.4190_0
CHR Extension: (Content Blocker) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail\13.0.1.4190_0
CHR Extension: (Virtual Keyboard) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\13.0.1.4292_0
CHR Extension: (SmallringFX DarkBlue Theme) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfijmgohofmpjlcgmjplbpmkpchdhpk\1.7_1
CHR Extension: (Battlefield Play4Free) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiokahphinmbmakkehgelkmpolmnbkdh\1.0.96.0_0
CHR Extension: (Anti-Banner) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\13.0.1.4190_0
CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\Web Assistant\source.crx
CHR HKLM-x32\...\Chrome\Extension: [aaaaabfjnbeinlpljodiajipidiompfl] - C:\Users\Hanss-Rauch\AppData\Local\APN\GoogleCRXs\aaaaabfjnbeinlpljodiajipidiompfl_7.15.20.0.crx
CHR HKLM-x32\...\Chrome\Extension: [bkomkajifikmkfnjgphkjcfeepbnojok] - C:\Program Files (x86)\PriceGong\2.6.8\pricegong.crx
CHR HKLM-x32\...\Chrome\Extension: [bodddioamolcibagionmmobehnbhiakf] - C:\Program Files (x86)\BrowserCompanion\blabbers-ch.crx
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\urladvisor.crx
CHR HKLM-x32\...\Chrome\Extension: [dednnpigldgdbpgcdpfppmlcnnbjciel] - C:\Users\Hanss-Rauch\AppData\Roaming\Media Finder\Extensions\gencrawler_gc.crx
CHR HKLM-x32\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\Web Assistant\source.crx
CHR HKLM-x32\...\Chrome\Extension: [gaiilaahiahdejapggenmdmafpmbipje] - C:\Program Files (x86)\DealPly\DealPly.crx
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\online_banking_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\content_blocker_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\virtkbd.crx
CHR HKLM-x32\...\Chrome\Extension: [lpmkgpnbiojfaoklbkpfneikocaobfai] - C:\Users\Hanss-Rauch\AppData\Roaming\Media Finder\Extensions\mf_plugin_gc.crx
CHR HKLM-x32\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\ProgramData\AVG Secure Search\ChromeExt\15.5.0.2\avg.crx
CHR HKLM-x32\...\Chrome\Extension: [niapdbllcanepiiimjjndipklodoedlc] - C:\Program Files (x86)\Yontoo\YontooLayers.crx
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\ab.crx
==================== Services (Whitelisted) =================
R2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171600 2012-09-23] (Adobe Systems Incorporated)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-12-19] (Advanced Micro Devices, Inc.)
S2 AODService; C:\Program Files (x86)\AMD\OverDrive\AODAssist.exe [137256 2013-05-24] ()
R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356376 2013-05-16] (Kaspersky Lab ZAO)
R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393080 2012-09-24] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384888 2012-09-24] (BlueStack Systems, Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-07-17] ()
R3 TDslMgrService; C:\Program Files (x86)\DSL-Manager\DslMgrSvc.exe [307200 2008-10-23] (T-Systems Enterprise Services GmbH)
S2 vToolbarUpdater15.5.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe [1643184 2013-08-15] (AVG Secure Search)
R2 Web Assistant; C:\Program Files\Web Assistant\ExtensionUpdaterService.exe [188760 2013-01-29] ()
==================== Drivers (Whitelisted) ====================
R2 AODDriver4.2; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [57472 2012-04-09] (Advanced Micro Devices)
R2 AODDriver4.2.0; C:\Program Files (x86)\AMD\OverDrive\amd64\AODDriver2.sys [58088 2013-05-24] (Advanced Micro Devices)
R2 AODDriver4.2.0; C:\Program Files (x86)\AMD\OverDrive\amd64\AODDriver2.sys [58088 2013-05-24] (Advanced Micro Devices)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2012-08-06] ()
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2012-08-06] ()
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [45856 2013-08-15] (AVG Technologies)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [71032 2012-09-24] (BlueStack Systems)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [71032 2012-09-24] (BlueStack Systems)
R1 DslMNLwf; C:\Windows\System32\DRIVERS\dslmnlwf.sys [19008 2007-08-01] (T-Systems Enterprise Services GmbH)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-06-19] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620128 2013-05-16] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29016 2013-05-16] (Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29528 2013-05-16] (Kaspersky Lab)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-07-29] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-05-16] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S1 mbmiodrvr; C:\Windows\syswow64\mbmiodrvr.sys [4608 2004-04-10] (cansoft@livewiredev.com)
S1 mbmiodrvr; C:\Windows\syswow64\mbmiodrvr.sys [4608 2004-04-10] (cansoft@livewiredev.com)
S3 MEMSWEEP2; C:\Windows\system32\BF69.tmp [6144 2009-06-18] (Sophos Plc)
S3 MEMSWEEP2; C:\Windows\system32\BF69.tmp [6144 2009-06-18] (Sophos Plc)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-17] ()
S3 PciDumpr; C:\Program Files (x86)\Common Files\T-Com\DSLCheck\PciDumpr.sys [2144 2001-01-26] ()
S3 PciDumpr; C:\Program Files (x86)\Common Files\T-Com\DSLCheck\PciDumpr.sys [2144 2001-01-26] ()
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation)
S1 SAVRKBootTasks; C:\Windows\SysWow64\SAVRKBootTasks.sys [18816 2009-06-18] (Sophos Plc)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S4 nvlddmkm; system32\DRIVERS\nvlddmkm.sys [x]
S1 SAVRKBootTasks; \??\C:\Windows\system32\SAVRKBootTasks.sys [x]
S3 X6va008; \??\C:\Windows\SysWOW64\Drivers\X6va008 [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-21 13:00 - 2013-08-21 13:00 - 00000000 ____D C:\FRST
2013-08-21 12:59 - 2013-08-21 12:59 - 01576164 _____ (Farbar) C:\Users\Hanss-Rauch\Downloads\FRST64.exe
2013-08-21 12:59 - 2013-08-21 12:59 - 01576164 _____ (Farbar) C:\Users\Hanss-Rauch\Desktop\FRST64.exe
2013-08-21 12:05 - 2013-08-21 12:05 - 00347424 _____ (Microsoft Corporation) C:\Users\Hanss-Rauch\Downloads\MicrosoftFixit.wu.Run.exe
2013-08-21 11:51 - 2013-08-21 11:51 - 01010176 _____ C:\Users\Hanss-Rauch\Downloads\MicrosoftFixit50884.msi
2013-08-19 17:53 - 2013-08-19 17:52 - 03042115 _____ C:\Users\Hanss-Rauch\Desktop\industrialcraft-2_1.115.308-lf (1).rar
2013-08-19 17:52 - 2013-08-19 17:52 - 03042115 _____ C:\Users\Hanss-Rauch\Downloads\industrialcraft-2_1.115.308-lf (1).rar
2013-08-18 16:35 - 2013-08-18 16:35 - 05615032 _____ (New IT Solutions) C:\Users\Hanss-Rauch\Downloads\Web-Displays-Mod-Installer-1.6.2.exe
2013-08-18 16:19 - 2013-08-18 16:19 - 00029112 _____ C:\Users\Hanss-Rauch\Downloads\Printer-Block-Mod-1.5.2.zip
2013-08-18 16:15 - 2013-08-18 16:15 - 00300193 _____ C:\Users\Hanss-Rauch\Downloads\RoadWorks-Mod-1.5.2.rar
2013-08-18 16:13 - 2013-08-18 16:13 - 00230381 _____ C:\Users\Hanss-Rauch\Downloads\TwitchTV-IRC-Reborn-Mod-1.5.2.zip
2013-08-18 13:34 - 2013-08-18 13:34 - 00000000 ____D C:\Users\Hanss-Rauch\Desktop\resources
2013-08-18 13:33 - 2013-08-18 13:34 - 02999474 _____ C:\Users\Hanss-Rauch\Downloads\Project-Red-Mod-1.5.2.jar
2013-08-18 13:32 - 2013-08-18 13:33 - 02272553 _____ C:\Users\Hanss-Rauch\Downloads\Railcraft-Mod-1.5.2.jar
2013-08-17 19:15 - 2013-08-17 19:15 - 00124927 _____ C:\Users\Hanss-Rauch\Downloads\Instant-Blocks-Mod-1.5.2.zip
2013-08-17 19:13 - 2013-08-17 19:13 - 00117705 _____ C:\Users\Hanss-Rauch\Downloads\WR-CBE-Core-1.5.2.jar
2013-08-17 19:12 - 2013-08-17 19:12 - 00378337 _____ C:\Users\Hanss-Rauch\Downloads\Not-Enough-Items-1.5.2.jar
2013-08-17 19:08 - 2013-08-17 19:08 - 02225575 _____ C:\Users\Hanss-Rauch\Downloads\Chisel-Mod-1.5.2.jar
2013-08-17 18:56 - 2013-08-17 18:56 - 01229617 _____ C:\Users\Hanss-Rauch\Downloads\buildcraft-A-3.7.1.jar
2013-08-17 18:55 - 2013-08-17 18:55 - 00069465 _____ C:\Users\Hanss-Rauch\Downloads\Railcraft-Mod-1.5.2-API.zip
2013-08-17 18:48 - 2013-08-17 18:49 - 00167296 _____ C:\Users\Hanss-Rauch\Downloads\More-Pistons-Mod-1.5.2.zip
2013-08-17 18:45 - 2013-08-17 18:45 - 00037784 _____ C:\Users\Hanss-Rauch\Downloads\Light-Bridges-and-Doors-Mod-1.5.2.zip
2013-08-16 21:10 - 2013-08-16 21:10 - 00205945 _____ C:\Users\Hanss-Rauch\Downloads\More-Explosives-Mod-1.5.2.zip
2013-08-16 21:05 - 2013-08-16 21:05 - 00019040 _____ C:\Users\Hanss-Rauch\Downloads\[1.5.2] Useful Redstone Mod.zip
2013-08-16 19:18 - 2013-08-16 19:18 - 03042115 _____ C:\Users\Hanss-Rauch\Downloads\industrialcraft-2_1.115.308-lf.rar
2013-08-16 19:15 - 2013-08-16 19:15 - 00205948 _____ C:\Users\Hanss-Rauch\Downloads\MoreExplosivesModRelease3.5forMC1.5.1.zip
2013-08-16 19:14 - 2013-08-16 19:14 - 00199576 _____ C:\Users\Hanss-Rauch\Downloads\MoreExplosivesModRelease3.7forMinecraft1.6.2.zip
2013-08-16 19:10 - 2013-08-21 11:57 - 00000000 ____D C:\Users\HANSS-~1\AppData\Local\LogMeIn Hamachi
2013-08-16 19:10 - 2013-08-16 19:10 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-08-16 19:08 - 2013-08-16 19:08 - 04292608 _____ C:\Users\Hanss-Rauch\Downloads\hamachi_2.1.0.362.msi
2013-08-16 12:27 - 2013-08-16 12:27 - 01758824 _____ C:\Users\Hanss-Rauch\Downloads\winrar-x64-420d (2).exe
2013-08-16 12:27 - 2013-08-16 12:27 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-08-16 12:27 - 2013-08-16 12:27 - 00000000 ____D C:\Program Files\WinRAR
2013-08-16 12:25 - 2013-08-16 12:33 - 2463242240 _____ C:\Users\Hanss-Rauch\Downloads\X15-65740 (1).iso
2013-08-16 12:18 - 2013-08-16 12:25 - 2147484386 _____ C:\Users\Hanss-Rauch\Downloads\X15-65740.iso
2013-08-12 18:06 - 2013-08-12 18:06 - 00000000 ____D C:\Users\Hanss-Rauch\Desktop\spc
2013-08-12 15:53 - 2013-08-12 15:53 - 01082179 _____ C:\Users\Hanss-Rauch\Downloads\SinglePlayerCommands-MC1.5.2_V4.8.jar
2013-08-12 15:49 - 2013-08-12 15:49 - 02033732 _____ C:\Users\Hanss-Rauch\Downloads\minecraftforge-universal-1.5.2-7.8.1.738.zip
2013-08-12 15:47 - 2013-08-12 15:47 - 05564661 _____ C:\Users\Hanss-Rauch\Downloads\1.5.2.jar
2013-08-12 15:42 - 2013-08-12 15:42 - 01950783 _____ C:\Users\Hanss-Rauch\Downloads\minecraftforge_universal_1_5_2_7_8_0_696.zip.zip
2013-08-12 15:25 - 2013-08-12 15:25 - 00267043 _____ C:\Users\Hanss-Rauch\Downloads\WirelessRedstone.zip
2013-08-12 15:25 - 2013-08-12 15:25 - 00267043 _____ C:\Users\Hanss-Rauch\Desktop\WirelessRedstone.zip
2013-08-12 15:21 - 2013-08-12 15:19 - 00675988 _____ C:\Users\Hanss-Rauch\Desktop\Minecraft (2).exe
2013-08-12 15:19 - 2013-08-12 15:19 - 00675988 _____ C:\Users\Hanss-Rauch\Downloads\Minecraft.exe
2013-08-11 20:24 - 2013-08-11 20:24 - 09304408 _____ (Wargaming.net ) C:\Users\Hanss-Rauch\Downloads\WoT_internet_install_eu.exe
2013-08-11 12:48 - 2013-08-07 18:33 - 01036312 _____ C:\Users\Hanss-Rauch\Desktop\ComputerCraft Mod 1.5.2 (2).zip
2013-08-09 18:11 - 2013-08-09 18:11 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-08-09 18:11 - 2013-08-09 18:11 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-08-09 18:11 - 2013-08-09 18:11 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-08-09 18:11 - 2013-08-09 18:11 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-08-09 18:11 - 2013-08-09 18:11 - 00000000 ____D C:\Program Files (x86)\Java
2013-08-07 18:33 - 2013-08-07 18:33 - 01036312 _____ C:\Users\Hanss-Rauch\Downloads\ComputerCraft Mod 1.5.2.zip
2013-08-07 18:33 - 2013-08-07 18:33 - 01036312 _____ C:\Users\Hanss-Rauch\Desktop\ComputerCraft Mod 1.5.2.zip
2013-08-06 20:30 - 2013-08-06 20:30 - 00933417 _____ C:\Users\Hanss-Rauch\Downloads\WarGear V6.zip
2013-08-05 19:08 - 2013-08-05 20:15 - 53886249 _____ C:\Users\Hanss-Rauch\Downloads\Misa500 (1).zip
2013-08-05 17:38 - 2013-08-05 17:38 - 00109656 _____ C:\Users\Hanss-Rauch\Downloads\Nicht bestätigt 510151.crdownload
2013-08-04 22:34 - 2013-08-04 22:34 - 00000000 ____D C:\ProgramData\Package Cache
2013-08-04 22:31 - 2013-08-04 22:32 - 245472312 _____ (AMD Inc.) C:\Users\Hanss-Rauch\Downloads\amd_catalyst_13.8_beta.exe
2013-08-04 14:35 - 2013-08-04 14:35 - 00002212 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-08-01 20:49 - 2013-08-01 20:49 - 02143832 _____ C:\Users\Hanss-Rauch\Downloads\instsf449.exe
2013-08-01 20:34 - 2013-08-01 20:34 - 00002067 _____ C:\Users\Public\Desktop\AMD OverDrive.lnk
2013-08-01 20:32 - 2013-08-01 20:32 - 31829816 _____ (Advanced Micro Devices, Inc. ) C:\Users\Hanss-Rauch\Downloads\aod_setup_4.2.6.exe
2013-08-01 20:12 - 2013-08-01 20:12 - 00338140 _____ C:\Users\Hanss-Rauch\Downloads\CoreTemp32_rc5.zip
2013-08-01 20:12 - 2013-08-01 20:12 - 00000000 ____D C:\Users\Hanss-Rauch\Downloads\CoreTemp32_rc5
2013-08-01 19:48 - 2013-08-01 20:43 - 00000000 ____D C:\Users\Hanss-Rauch\Downloads\hwmonitor_123
2013-08-01 19:46 - 2013-08-01 19:46 - 01194216 _____ C:\Users\Hanss-Rauch\Downloads\hwmonitor_123.zip
2013-08-01 18:48 - 2013-08-01 18:48 - 00252446 _____ C:\Users\Hanss-Rauch\Downloads\1_5_2_reiminimap_v3_3_05.zip.zip
2013-08-01 18:41 - 2013-08-01 18:41 - 24831527 _____ C:\Users\Hanss-Rauch\Downloads\Master Pack 1.5.2.rar
2013-08-01 18:38 - 2013-08-01 18:38 - 00443952 _____ C:\Users\Hanss-Rauch\Downloads\Flans Mod 2.3.1 for Minecraft 1.5.2 Universal (1).zip
2013-08-01 18:38 - 2013-08-01 18:38 - 00443952 _____ C:\Users\Hanss-Rauch\Desktop\Flans Mod 2.3.1 for Minecraft 1.5.2 Universal (1).zip
2013-07-31 21:05 - 2013-07-31 21:06 - 22532237 _____ C:\Users\Hanss-Rauch\Downloads\JaninaCraft_1_5_1_Release_x64.zip
2013-07-31 17:52 - 2013-07-31 17:52 - 00443952 _____ C:\Users\Hanss-Rauch\Downloads\Flans Mod 2.3.1 for Minecraft 1.5.2 Universal.zip
2013-07-31 16:19 - 2013-07-31 16:19 - 00472198 _____ C:\Users\Hanss-Rauch\Downloads\Sonic Ether's Unbelievable Shaders 1.5.2.zip
2013-07-31 16:14 - 2013-07-31 16:15 - 01082179 _____ C:\Users\Hanss-Rauch\Downloads\Single-Player-Commands-1.5.2.jar
2013-07-31 16:11 - 2013-07-31 16:11 - 01975130 _____ C:\Users\Hanss-Rauch\Downloads\minecraftforge-universal-1.5.2-7.8.0.684.zip
2013-07-31 16:10 - 2013-07-31 16:10 - 01758824 _____ C:\Users\Hanss-Rauch\Downloads\winrar-x64-420d (1).exe
2013-07-31 15:05 - 2013-07-31 15:05 - 08483521 _____ C:\Users\Hanss-Rauch\Downloads\ProbeII_V10481_XpVistaWin7.zip
2013-07-31 15:05 - 2013-07-31 15:05 - 00000000 ____D C:\Users\Hanss-Rauch\Downloads\ProbeII_V10481_XpVistaWin7
2013-07-31 15:04 - 2013-07-31 15:04 - 04300194 _____ C:\Users\Hanss-Rauch\Downloads\PCProbe22502.zip
2013-07-31 15:00 - 2013-07-31 15:00 - 01282759 _____ (Alexander van Kaam ) C:\Users\Hanss-Rauch\Downloads\MBM5370.exe
2013-07-31 15:00 - 2013-07-31 15:00 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MBM 5
2013-07-31 15:00 - 2004-04-10 09:43 - 00004608 _____ (cansoft@livewiredev.com) C:\Windows\SysWOW64\mbmiodrvr.sys
2013-07-30 20:24 - 2013-07-30 20:24 - 12973435 _____ C:\Users\Hanss-Rauch\Downloads\craftbukkit-1.5.2-R1.0 (1).jar
2013-07-30 20:23 - 2013-07-30 20:23 - 04895118 _____ C:\Users\Hanss-Rauch\Downloads\bukkit-1.6.2-R0.1-20130724.060108-7.jar
2013-07-30 19:51 - 2013-07-30 19:51 - 01758824 _____ C:\Users\Hanss-Rauch\Downloads\winrar-x64-420d.exe
2013-07-30 19:49 - 2013-07-30 19:51 - 00001621 _____ C:\Users\Hanss-Rauch\Desktop\startbat.rar
2013-07-30 19:46 - 2013-07-30 19:46 - 00001145 _____ C:\Users\Hanss-Rauch\Downloads\startbat.rar
2013-07-30 19:45 - 2013-07-30 19:46 - 12973435 _____ C:\Users\Hanss-Rauch\Downloads\craftbukkit-1.5.2-R1.0.jar
2013-07-29 14:25 - 2013-07-29 14:25 - 00262144 _____ C:\Windows\system32\config\elam
2013-07-29 14:22 - 2013-07-29 14:22 - 00003404 _____ C:\Windows\System32\Tasks\EPUpdater
2013-07-29 14:22 - 2013-07-29 14:22 - 00002200 _____ C:\Users\Hanss-Rauch\Desktop\Online Weather.lnk
2013-07-29 14:22 - 2013-07-29 14:22 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Online Weather
2013-07-29 14:22 - 2013-07-29 14:22 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Delta
2013-07-29 14:22 - 2013-07-29 14:22 - 00000000 ____D C:\Users\HANSS-~1\AppData\Local\WebPlayer
2013-07-29 14:22 - 2013-07-29 14:22 - 00000000 ____D C:\Program Files (x86)\Delta
2013-07-29 14:03 - 2013-07-29 14:22 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\BabSolution
2013-07-29 14:02 - 2013-07-29 14:21 - 00000252 _____ C:\Windows\wininit.ini
2013-07-29 14:02 - 2013-07-29 14:02 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker
2013-07-29 14:02 - 2013-07-29 14:02 - 00000000 ____D C:\Users\HANSS-~1\AppData\Local\FilesFrog Update Checker
2013-07-29 13:58 - 2013-07-29 13:55 - 00121013 _____ C:\Users\Hanss-Rauch\Desktop\BFp4f Funds Hack v2.0.rar
2013-07-29 13:30 - 2013-07-29 13:30 - 00000000 ____D C:\Users\Hanss-Rauch\Desktop\kavkisfile.com-15-July-2013
2013-07-29 13:19 - 2013-07-29 13:19 - 00002340 _____ C:\Users\Hanss-Rauch\Desktop\Sicherer Zahlungsverkehr.lnk
2013-07-29 13:18 - 2013-07-29 13:01 - 00248634 _____ C:\Users\Hanss-Rauch\Desktop\kavkisfile.com-15-July-2013.zip
2013-07-29 13:17 - 2013-07-29 13:17 - 00001146 _____ C:\Users\Public\Desktop\Kaspersky Internet Security 2013.lnk
2013-07-29 13:17 - 2013-05-16 07:27 - 00064856 _____ (Kaspersky Lab) C:\Windows\system32\klfphc.dll
2013-07-29 13:16 - 2013-08-21 12:14 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-07-29 13:16 - 2013-07-29 13:16 - 00000000 ____D C:\Windows\ELAMBKUP
2013-07-29 13:16 - 2013-07-29 13:16 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-07-29 13:16 - 2013-05-16 07:27 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2013-07-29 13:16 - 2013-05-16 07:27 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2013-07-28 15:04 - 2013-07-29 15:02 - 00003432 _____ C:\Windows\System32\Tasks\BrowserProtect
==================== One Month Modified Files and Folders =======
2013-08-21 13:02 - 2012-10-12 11:32 - 00001144 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2922039653-137104462-887748758-1000UA.job
2013-08-21 13:00 - 2013-08-21 13:00 - 00000000 ____D C:\FRST
2013-08-21 12:59 - 2013-08-21 12:59 - 01576164 _____ (Farbar) C:\Users\Hanss-Rauch\Downloads\FRST64.exe
2013-08-21 12:59 - 2013-08-21 12:59 - 01576164 _____ (Farbar) C:\Users\Hanss-Rauch\Desktop\FRST64.exe
2013-08-21 12:59 - 2013-03-11 19:56 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-08-21 12:59 - 2013-03-11 19:56 - 00280904 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-08-21 12:59 - 2012-05-24 18:17 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2013-08-21 12:57 - 2012-12-11 11:04 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Spotify
2013-08-21 12:57 - 2012-09-02 19:22 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Skype
2013-08-21 12:47 - 2012-08-21 12:16 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-21 12:33 - 2012-10-28 22:29 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-21 12:14 - 2013-07-29 13:16 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-08-21 12:09 - 2009-07-14 06:45 - 00021856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-21 12:09 - 2009-07-14 06:45 - 00021856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-21 12:08 - 2012-03-16 10:49 - 02184446 _____ C:\Windows\WindowsUpdate.log
2013-08-21 12:05 - 2013-08-21 12:05 - 00347424 _____ (Microsoft Corporation) C:\Users\Hanss-Rauch\Downloads\MicrosoftFixit.wu.Run.exe
2013-08-21 12:02 - 2012-10-12 11:32 - 00001092 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2922039653-137104462-887748758-1000Core.job
2013-08-21 11:58 - 2002-01-01 20:46 - 00000000 ____D C:\Program Files (x86)\Origin
2013-08-21 11:57 - 2013-08-16 19:10 - 00000000 ____D C:\Users\HANSS-~1\AppData\Local\LogMeIn Hamachi
2013-08-21 11:57 - 2012-10-28 22:29 - 00001116 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-21 11:57 - 2012-07-10 21:38 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\BrowserCompanion
2013-08-21 11:56 - 2013-06-09 06:00 - 00000350 _____ C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job
2013-08-21 11:56 - 2013-06-03 17:13 - 00000350 _____ C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2013-08-21 11:56 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-21 11:56 - 2009-07-14 06:51 - 00113178 _____ C:\Windows\setupact.log
2013-08-21 11:51 - 2013-08-21 11:51 - 01010176 _____ C:\Users\Hanss-Rauch\Downloads\MicrosoftFixit50884.msi
2013-08-20 23:14 - 2013-03-16 13:55 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\.minecraft
2013-08-20 22:28 - 2011-04-12 09:43 - 04918398 _____ C:\Windows\system32\perfh007.dat
2013-08-20 22:28 - 2011-04-12 09:43 - 01453938 _____ C:\Windows\system32\perfc007.dat
2013-08-20 22:28 - 2009-07-14 07:13 - 00005020 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-20 16:35 - 2012-12-11 11:06 - 00000000 ____D C:\Users\HANSS-~1\AppData\Local\Spotify
2013-08-19 17:52 - 2013-08-19 17:53 - 03042115 _____ C:\Users\Hanss-Rauch\Desktop\industrialcraft-2_1.115.308-lf (1).rar
2013-08-19 17:52 - 2013-08-19 17:52 - 03042115 _____ C:\Users\Hanss-Rauch\Downloads\industrialcraft-2_1.115.308-lf (1).rar
2013-08-18 16:35 - 2013-08-18 16:35 - 05615032 _____ (New IT Solutions) C:\Users\Hanss-Rauch\Downloads\Web-Displays-Mod-Installer-1.6.2.exe
2013-08-18 16:19 - 2013-08-18 16:19 - 00029112 _____ C:\Users\Hanss-Rauch\Downloads\Printer-Block-Mod-1.5.2.zip
2013-08-18 16:15 - 2013-08-18 16:15 - 00300193 _____ C:\Users\Hanss-Rauch\Downloads\RoadWorks-Mod-1.5.2.rar
2013-08-18 16:13 - 2013-08-18 16:13 - 00230381 _____ C:\Users\Hanss-Rauch\Downloads\TwitchTV-IRC-Reborn-Mod-1.5.2.zip
2013-08-18 13:34 - 2013-08-18 13:34 - 00000000 ____D C:\Users\Hanss-Rauch\Desktop\resources
2013-08-18 13:34 - 2013-08-18 13:33 - 02999474 _____ C:\Users\Hanss-Rauch\Downloads\Project-Red-Mod-1.5.2.jar
2013-08-18 13:33 - 2013-08-18 13:32 - 02272553 _____ C:\Users\Hanss-Rauch\Downloads\Railcraft-Mod-1.5.2.jar
2013-08-17 19:15 - 2013-08-17 19:15 - 00124927 _____ C:\Users\Hanss-Rauch\Downloads\Instant-Blocks-Mod-1.5.2.zip
2013-08-17 19:13 - 2013-08-17 19:13 - 00117705 _____ C:\Users\Hanss-Rauch\Downloads\WR-CBE-Core-1.5.2.jar
2013-08-17 19:12 - 2013-08-17 19:12 - 00378337 _____ C:\Users\Hanss-Rauch\Downloads\Not-Enough-Items-1.5.2.jar
2013-08-17 19:08 - 2013-08-17 19:08 - 02225575 _____ C:\Users\Hanss-Rauch\Downloads\Chisel-Mod-1.5.2.jar
2013-08-17 18:56 - 2013-08-17 18:56 - 01229617 _____ C:\Users\Hanss-Rauch\Downloads\buildcraft-A-3.7.1.jar
2013-08-17 18:55 - 2013-08-17 18:55 - 00069465 _____ C:\Users\Hanss-Rauch\Downloads\Railcraft-Mod-1.5.2-API.zip
2013-08-17 18:49 - 2013-08-17 18:48 - 00167296 _____ C:\Users\Hanss-Rauch\Downloads\More-Pistons-Mod-1.5.2.zip
2013-08-17 18:45 - 2013-08-17 18:45 - 00037784 _____ C:\Users\Hanss-Rauch\Downloads\Light-Bridges-and-Doors-Mod-1.5.2.zip
2013-08-16 21:10 - 2013-08-16 21:10 - 00205945 _____ C:\Users\Hanss-Rauch\Downloads\More-Explosives-Mod-1.5.2.zip
2013-08-16 21:05 - 2013-08-16 21:05 - 00019040 _____ C:\Users\Hanss-Rauch\Downloads\[1.5.2] Useful Redstone Mod.zip
2013-08-16 19:18 - 2013-08-16 19:18 - 03042115 _____ C:\Users\Hanss-Rauch\Downloads\industrialcraft-2_1.115.308-lf.rar
2013-08-16 19:15 - 2013-08-16 19:15 - 00205948 _____ C:\Users\Hanss-Rauch\Downloads\MoreExplosivesModRelease3.5forMC1.5.1.zip
2013-08-16 19:14 - 2013-08-16 19:14 - 00199576 _____ C:\Users\Hanss-Rauch\Downloads\MoreExplosivesModRelease3.7forMinecraft1.6.2.zip
2013-08-16 19:10 - 2013-08-16 19:10 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-08-16 19:08 - 2013-08-16 19:08 - 04292608 _____ C:\Users\Hanss-Rauch\Downloads\hamachi_2.1.0.362.msi
2013-08-16 12:33 - 2013-08-16 12:25 - 2463242240 _____ C:\Users\Hanss-Rauch\Downloads\X15-65740 (1).iso
2013-08-16 12:27 - 2013-08-16 12:27 - 01758824 _____ C:\Users\Hanss-Rauch\Downloads\winrar-x64-420d (2).exe
2013-08-16 12:27 - 2013-08-16 12:27 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-08-16 12:27 - 2013-08-16 12:27 - 00000000 ____D C:\Program Files\WinRAR
2013-08-16 12:25 - 2013-08-16 12:18 - 2147484386 _____ C:\Users\Hanss-Rauch\Downloads\X15-65740.iso
2013-08-15 21:11 - 2012-11-01 18:17 - 00000000 ____D C:\Program Files (x86)\AVG Secure Search
2013-08-15 21:10 - 2012-11-01 18:17 - 00045856 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2013-08-12 18:06 - 2013-08-12 18:06 - 00000000 ____D C:\Users\Hanss-Rauch\Desktop\spc
2013-08-12 18:06 - 2013-06-09 16:02 - 00000046 _____ C:\Users\Hanss-Rauch\Desktop\teams.dat
2013-08-12 15:53 - 2013-08-12 15:53 - 01082179 _____ C:\Users\Hanss-Rauch\Downloads\SinglePlayerCommands-MC1.5.2_V4.8.jar
2013-08-12 15:49 - 2013-08-12 15:49 - 02033732 _____ C:\Users\Hanss-Rauch\Downloads\minecraftforge-universal-1.5.2-7.8.1.738.zip
2013-08-12 15:47 - 2013-08-12 15:47 - 05564661 _____ C:\Users\Hanss-Rauch\Downloads\1.5.2.jar
2013-08-12 15:42 - 2013-08-12 15:42 - 01950783 _____ C:\Users\Hanss-Rauch\Downloads\minecraftforge_universal_1_5_2_7_8_0_696.zip.zip
2013-08-12 15:25 - 2013-08-12 15:25 - 00267043 _____ C:\Users\Hanss-Rauch\Downloads\WirelessRedstone.zip
2013-08-12 15:25 - 2013-08-12 15:25 - 00267043 _____ C:\Users\Hanss-Rauch\Desktop\WirelessRedstone.zip
2013-08-12 15:19 - 2013-08-12 15:21 - 00675988 _____ C:\Users\Hanss-Rauch\Desktop\Minecraft (2).exe
2013-08-12 15:19 - 2013-08-12 15:19 - 00675988 _____ C:\Users\Hanss-Rauch\Downloads\Minecraft.exe
2013-08-11 20:25 - 2012-04-22 14:36 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-08-11 20:24 - 2013-08-11 20:24 - 09304408 _____ (Wargaming.net ) C:\Users\Hanss-Rauch\Downloads\WoT_internet_install_eu.exe
2013-08-11 20:24 - 2012-04-22 14:36 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-08-09 18:11 - 2013-08-09 18:11 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-08-09 18:11 - 2013-08-09 18:11 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-08-09 18:11 - 2013-08-09 18:11 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-08-09 18:11 - 2013-08-09 18:11 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-08-09 18:11 - 2013-08-09 18:11 - 00000000 ____D C:\Program Files (x86)\Java
2013-08-09 18:11 - 2012-06-12 16:21 - 00867240 _____ (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-08-09 18:11 - 2012-06-12 16:21 - 00789416 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-08-07 18:33 - 2013-08-11 12:48 - 01036312 _____ C:\Users\Hanss-Rauch\Desktop\ComputerCraft Mod 1.5.2 (2).zip
2013-08-07 18:33 - 2013-08-07 18:33 - 01036312 _____ C:\Users\Hanss-Rauch\Downloads\ComputerCraft Mod 1.5.2.zip
2013-08-07 18:33 - 2013-08-07 18:33 - 01036312 _____ C:\Users\Hanss-Rauch\Desktop\ComputerCraft Mod 1.5.2.zip
2013-08-06 21:39 - 2013-06-13 18:45 - 00000000 ____D C:\Program Files (x86)\MapCreator 2
2013-08-06 20:31 - 2012-03-24 19:33 - 00007614 _____ C:\Users\HANSS-~1\AppData\Local\Resmon.ResmonCfg
2013-08-06 20:30 - 2013-08-06 20:30 - 00933417 _____ C:\Users\Hanss-Rauch\Downloads\WarGear V6.zip
2013-08-06 16:44 - 2012-03-19 16:30 - 00000000 ____D C:\Users\Hanss-Rauch\Documents\Flight Simulator X-Dateien
2013-08-06 13:11 - 2012-10-28 22:29 - 00000000 ____D C:\Program Files (x86)\Google
2013-08-06 06:02 - 2012-06-04 15:18 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla
2013-08-05 20:15 - 2013-08-05 19:08 - 53886249 _____ C:\Users\Hanss-Rauch\Downloads\Misa500 (1).zip
2013-08-05 17:38 - 2013-08-05 17:38 - 00109656 _____ C:\Users\Hanss-Rauch\Downloads\Nicht bestätigt 510151.crdownload
2013-08-04 22:34 - 2013-08-04 22:34 - 00000000 ____D C:\ProgramData\Package Cache
2013-08-04 22:32 - 2013-08-04 22:31 - 245472312 _____ (AMD Inc.) C:\Users\Hanss-Rauch\Downloads\amd_catalyst_13.8_beta.exe
2013-08-04 22:32 - 2012-11-26 10:10 - 00000000 ____D C:\AMD
2013-08-04 14:35 - 2013-08-04 14:35 - 00002212 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-08-04 14:11 - 2012-03-19 19:44 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2013-08-01 20:49 - 2013-08-01 20:49 - 02143832 _____ C:\Users\Hanss-Rauch\Downloads\instsf449.exe
2013-08-01 20:49 - 2012-03-19 19:44 - 00000045 _____ C:\Windows\SysWOW64\initdebug.nfo
2013-08-01 20:43 - 2013-08-01 19:48 - 00000000 ____D C:\Users\Hanss-Rauch\Downloads\hwmonitor_123
2013-08-01 20:34 - 2013-08-01 20:34 - 00002067 _____ C:\Users\Public\Desktop\AMD OverDrive.lnk
2013-08-01 20:33 - 2012-11-27 22:09 - 00000000 ____D C:\Users\HANSS-~1\AppData\Local\Downloaded Installations
2013-08-01 20:32 - 2013-08-01 20:32 - 31829816 _____ (Advanced Micro Devices, Inc. ) C:\Users\Hanss-Rauch\Downloads\aod_setup_4.2.6.exe
2013-08-01 20:12 - 2013-08-01 20:12 - 00338140 _____ C:\Users\Hanss-Rauch\Downloads\CoreTemp32_rc5.zip
2013-08-01 20:12 - 2013-08-01 20:12 - 00000000 ____D C:\Users\Hanss-Rauch\Downloads\CoreTemp32_rc5
2013-08-01 19:46 - 2013-08-01 19:46 - 01194216 _____ C:\Users\Hanss-Rauch\Downloads\hwmonitor_123.zip
2013-08-01 18:48 - 2013-08-01 18:48 - 00252446 _____ C:\Users\Hanss-Rauch\Downloads\1_5_2_reiminimap_v3_3_05.zip.zip
2013-08-01 18:41 - 2013-08-01 18:41 - 24831527 _____ C:\Users\Hanss-Rauch\Downloads\Master Pack 1.5.2.rar
2013-08-01 18:38 - 2013-08-01 18:38 - 00443952 _____ C:\Users\Hanss-Rauch\Downloads\Flans Mod 2.3.1 for Minecraft 1.5.2 Universal (1).zip
2013-08-01 18:38 - 2013-08-01 18:38 - 00443952 _____ C:\Users\Hanss-Rauch\Desktop\Flans Mod 2.3.1 for Minecraft 1.5.2 Universal (1).zip
2013-08-01 08:07 - 2012-11-22 20:59 - 00001170 _____ C:\Users\Public\Desktop\Battlefield 3.lnk
2013-07-31 21:06 - 2013-07-31 21:05 - 22532237 _____ C:\Users\Hanss-Rauch\Downloads\JaninaCraft_1_5_1_Release_x64.zip
2013-07-31 18:36 - 2013-03-09 21:04 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-07-31 17:52 - 2013-07-31 17:52 - 00443952 _____ C:\Users\Hanss-Rauch\Downloads\Flans Mod 2.3.1 for Minecraft 1.5.2 Universal.zip
2013-07-31 16:19 - 2013-07-31 16:19 - 00472198 _____ C:\Users\Hanss-Rauch\Downloads\Sonic Ether's Unbelievable Shaders 1.5.2.zip
2013-07-31 16:15 - 2013-07-31 16:14 - 01082179 _____ C:\Users\Hanss-Rauch\Downloads\Single-Player-Commands-1.5.2.jar
2013-07-31 16:11 - 2013-07-31 16:11 - 01975130 _____ C:\Users\Hanss-Rauch\Downloads\minecraftforge-universal-1.5.2-7.8.0.684.zip
2013-07-31 16:10 - 2013-07-31 16:10 - 01758824 _____ C:\Users\Hanss-Rauch\Downloads\winrar-x64-420d (1).exe
2013-07-31 15:05 - 2013-07-31 15:05 - 08483521 _____ C:\Users\Hanss-Rauch\Downloads\ProbeII_V10481_XpVistaWin7.zip
2013-07-31 15:05 - 2013-07-31 15:05 - 00000000 ____D C:\Users\Hanss-Rauch\Downloads\ProbeII_V10481_XpVistaWin7
2013-07-31 15:05 - 2012-03-16 10:52 - 00001769 _____ C:\Windows\Language_trs.ini
2013-07-31 15:04 - 2013-07-31 15:04 - 04300194 _____ C:\Users\Hanss-Rauch\Downloads\PCProbe22502.zip
2013-07-31 15:00 - 2013-07-31 15:00 - 01282759 _____ (Alexander van Kaam ) C:\Users\Hanss-Rauch\Downloads\MBM5370.exe
2013-07-31 15:00 - 2013-07-31 15:00 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MBM 5
2013-07-31 15:00 - 2012-03-24 19:44 - 00000000 ____D C:\Program Files (x86)\Motherboard Monitor 5
2013-07-30 20:24 - 2013-07-30 20:24 - 12973435 _____ C:\Users\Hanss-Rauch\Downloads\craftbukkit-1.5.2-R1.0 (1).jar
2013-07-30 20:23 - 2013-07-30 20:23 - 04895118 _____ C:\Users\Hanss-Rauch\Downloads\bukkit-1.6.2-R0.1-20130724.060108-7.jar
2013-07-30 19:51 - 2013-07-30 19:51 - 01758824 _____ C:\Users\Hanss-Rauch\Downloads\winrar-x64-420d.exe
2013-07-30 19:51 - 2013-07-30 19:49 - 00001621 _____ C:\Users\Hanss-Rauch\Desktop\startbat.rar
2013-07-30 19:46 - 2013-07-30 19:46 - 00001145 _____ C:\Users\Hanss-Rauch\Downloads\startbat.rar
2013-07-30 19:46 - 2013-07-30 19:45 - 12973435 _____ C:\Users\Hanss-Rauch\Downloads\craftbukkit-1.5.2-R1.0.jar
2013-07-30 16:44 - 2012-09-24 13:43 - 00000000 ____D C:\Users\HANSS-~1\AppData\Local\Deployment
2013-07-30 15:05 - 2012-11-16 20:05 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Origin
2013-07-30 15:05 - 2002-01-01 20:56 - 00000000 ____D C:\Users\HANSS-~1\AppData\Local\Origin
2013-07-29 15:03 - 2013-04-27 12:53 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Yontoo
2013-07-29 15:03 - 2010-11-21 05:47 - 00163124 _____ C:\Windows\PFRO.log
2013-07-29 15:02 - 2013-07-28 15:04 - 00003432 _____ C:\Windows\System32\Tasks\BrowserProtect
2013-07-29 14:25 - 2013-07-29 14:25 - 00262144 _____ C:\Windows\system32\config\elam
2013-07-29 14:23 - 2012-03-16 10:49 - 00000000 ____D C:\Users\Hanss-Rauch
2013-07-29 14:22 - 2013-07-29 14:22 - 00003404 _____ C:\Windows\System32\Tasks\EPUpdater
2013-07-29 14:22 - 2013-07-29 14:22 - 00002200 _____ C:\Users\Hanss-Rauch\Desktop\Online Weather.lnk
2013-07-29 14:22 - 2013-07-29 14:22 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Online Weather
2013-07-29 14:22 - 2013-07-29 14:22 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Delta
2013-07-29 14:22 - 2013-07-29 14:22 - 00000000 ____D C:\Users\HANSS-~1\AppData\Local\WebPlayer
2013-07-29 14:22 - 2013-07-29 14:22 - 00000000 ____D C:\Program Files (x86)\Delta
2013-07-29 14:22 - 2013-07-29 14:03 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\BabSolution
2013-07-29 14:21 - 2013-07-29 14:02 - 00000252 _____ C:\Windows\wininit.ini
2013-07-29 14:02 - 2013-07-29 14:02 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker
2013-07-29 14:02 - 2013-07-29 14:02 - 00000000 ____D C:\Users\HANSS-~1\AppData\Local\FilesFrog Update Checker
2013-07-29 13:55 - 2013-07-29 13:58 - 00121013 _____ C:\Users\Hanss-Rauch\Desktop\BFp4f Funds Hack v2.0.rar
2013-07-29 13:41 - 2013-05-16 07:27 - 00054368 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kltdi.sys
2013-07-29 13:31 - 2012-09-02 19:22 - 00002517 _____ C:\Users\Public\Desktop\Skype.lnk
2013-07-29 13:31 - 2012-09-02 19:22 - 00000000 ____D C:\ProgramData\Skype
2013-07-29 13:30 - 2013-07-29 13:30 - 00000000 ____D C:\Users\Hanss-Rauch\Desktop\kavkisfile.com-15-July-2013
2013-07-29 13:19 - 2013-07-29 13:19 - 00002340 _____ C:\Users\Hanss-Rauch\Desktop\Sicherer Zahlungsverkehr.lnk
2013-07-29 13:17 - 2013-07-29 13:17 - 00001146 _____ C:\Users\Public\Desktop\Kaspersky Internet Security 2013.lnk
2013-07-29 13:16 - 2013-07-29 13:16 - 00000000 ____D C:\Windows\ELAMBKUP
2013-07-29 13:16 - 2013-07-29 13:16 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-07-29 13:06 - 2012-03-19 15:43 - 00001912 _____ C:\Windows\epplauncher.mif
2013-07-29 13:01 - 2013-07-29 13:18 - 00248634 _____ C:\Users\Hanss-Rauch\Desktop\kavkisfile.com-15-July-2013.zip
2013-07-28 18:47 - 2012-05-24 18:16 - 00000000 ____D C:\Users\HANSS-~1\AppData\Local\PunkBuster
ZeroAccess:
C:\Users\Hanss-Rauch\AppData\Local\{a4b8a65b-7c68-0548-2b35-dddac8e0ee63}
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-16 11:57
==================== End Of Log ============================
[CODEAdditional scan result of Farbar Recovery Scan Tool (x64) Version: 21-08-2013 Ran by Hanss-Rauch at 2013-08-21 13:29:20 Running from C:\Users\Hanss-Rauch\Desktop Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= Adobe AIR (x32 Version: 3.7.0.1530) Adobe Download Assistant (x32 Version: 1.2.5) Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94) Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224) Adobe Photoshop Elements 11 (x32 Version: 11.0) Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03) Alarm für Cobra 11 - Das Syndikat (x32) Alarm für Cobra 11 - Undercover Demo (x32) Amazon MP3-Downloader 1.0.17 (x32 Version: 1.0.17) AMD Accelerated Video Transcoding (Version: 12.5.100.21219) AMD APP SDK Runtime (Version: 10.0.1084.4) AMD Catalyst Install Manager (Version: 8.0.903.0) AMD Drag and Drop Transcoding (Version: 2.00.0000) AMD Fuel (Version: 2012.1219.1521.27485) AMD Media Foundation Decoders (Version: 1.0.71219.1540) AMD OverDrive Beta (x32 Version: 4.2.6.0659) AMD VISION Engine Control Center (x32 Version: 2012.1219.1521.27485) Apple Application Support (x32 Version: 2.3.4) Apple Mobile Device Support (Version: 6.1.0.13) Apple Software Update (x32 Version: 2.1.3.127) Ask Toolbar (x32 Version: 1.15.26.0) ASUS VGA Driver (x32 Version: 3.0.0.1) ATI AVIVO64 Codecs (Version: 11.6.0.50930) AVG Security Toolbar (x32 Version: 15.5.0.2) Avira SearchFree Toolbar plus Web Protection Updater (HKCU Version: 1.2.6.45268) AVS Screen Capture version 2.0.1 (x32) AVS Update Manager 1.0 (x32) AVS Video Editor 6 (x32) AVS4YOU Software Navigator 1.4 (x32) Bandicam (x32 Version: 1.8.9.371) Bandisoft MPEG-1 Decoder (x32) Battlefield 1942™ (x32 Version: 1.6.20.0) Battlefield 3™ (x32 Version: 1.4.0.0) Battlefield Play4Free (HKCU) Battlelog Web Plugins (x32 Version: 2.1.7) Bing Bar (x32 Version: 7.0.619.0) Bonjour (Version: 3.0.0.10) BrowserProtect (x32) Bundled software uninstaller (x32) Catalyst Control Center - Branding (x32 Version: 1.00.0000) Catalyst Control Center Graphics Previews Common (x32 Version: 2012.1219.1521.27485) Catalyst Control Center InstallProxy (x32 Version: 2012.1219.1521.27485) Catalyst Control Center Localization All (x32 Version: 2012.1219.1521.27485) CCC Help Chinese Standard (x32 Version: 2012.1219.1520.27485) CCC Help Chinese Traditional (x32 Version: 2012.1219.1520.27485) CCC Help Czech (x32 Version: 2012.1219.1520.27485) CCC Help Danish (x32 Version: 2012.1219.1520.27485) CCC Help Dutch (x32 Version: 2012.1219.1520.27485) CCC Help English (x32 Version: 2012.1219.1520.27485) CCC Help Finnish (x32 Version: 2012.1219.1520.27485) CCC Help French (x32 Version: 2012.1219.1520.27485) CCC Help German (x32 Version: 2012.1219.1520.27485) CCC Help Greek (x32 Version: 2012.1219.1520.27485) CCC Help Hungarian (x32 Version: 2012.1219.1520.27485) CCC Help Italian (x32 Version: 2012.1219.1520.27485) CCC Help Japanese (x32 Version: 2012.1219.1520.27485) CCC Help Korean (x32 Version: 2012.1219.1520.27485) CCC Help Norwegian (x32 Version: 2012.1219.1520.27485) CCC Help Polish (x32 Version: 2012.1219.1520.27485) CCC Help Portuguese (x32 Version: 2012.1219.1520.27485) CCC Help Russian (x32 Version: 2012.1219.1520.27485) CCC Help Spanish (x32 Version: 2012.1219.1520.27485) CCC Help Swedish (x32 Version: 2012.1219.1520.27485) CCC Help Thai (x32 Version: 2012.1219.1520.27485) CCC Help Turkish (x32 Version: 2012.1219.1520.27485) ccc-utility64 (Version: 2012.1219.1521.27485) ChatZum Toolbar (x32 Version: 1.0.14) Compatibility Pack für 2007 Office System (x32 Version: 12.0.6514.5001) D3DX10 (x32 Version: 15.4.2368.0902) Delta toolbar (x32 Version: 1.8.22.0) Die Sims™ 3-Teaser (x32 Version: 1.0.0.0) DSL-Manager (x32) Elements 11 Organizer (x32 Version: 11.0) ESN Sonar (x32 Version: 0.70.4) FilesFrog Update Checker (x32) Flight Simulator X (x32) Flight Simulator X Service Pack 1 (x32) Fraps (x32) fTalk (HKCU Version: 4.0.0.4087) GamesBar (W) (x32 Version: 3.2.0.36) Ghost Recon Online (HKCU Version: 1.30.8665.2) Google Chrome (x32 Version: 28.0.1500.95) Google Earth (x32 Version: 7.1.1.1888) Google Talk Plugin (x32 Version: 4.4.2.14502) Google Update Helper (x32 Version: 1.3.21.153) Heaven DX11 Benchmark version 3.0 (Version: 3.0) IB Updater Service (x32 Version: 3.0.3.3) iCloud (Version: 2.1.2.8) Internet-TV für Windows Media Center (x32 Version: 4.2.2.0) IrfanView (remove only) (x32 Version: 4.36) iTunes (Version: 11.0.3.42) Java 7 Update 11 (64-bit) (Version: 7.0.110) Java 7 Update 25 (x32 Version: 7.0.250) Java Auto Updater (x32 Version: 2.1.9.5) JavaFX 2.1.0 (x32 Version: 2.1.0) Junk Mail filter update (x32 Version: 15.4.3502.0922) Kaspersky Internet Security 2013 (x32 Version: 13.0.1.4190) LEGO Digital Designer (x32) LogMeIn Hamachi (x32 Version: 2.1.0.374) Lyrics-Pal (x32) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) MapCreator 2 (x32 Version: 2.0) Medal of Honor™ Warfighter (x32 Version: 1.0.0.3) Mesh Runtime (x32 Version: 15.4.5722.2) Messenger Companion (x32 Version: 15.4.3502.0922) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320) Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Flight Simulator X (x32 Version: 10.0.60905) Microsoft Flight Simulator X: Acceleration (x32 Version: 10.0.61637.0) Microsoft Games for Windows - LIVE (x32 Version: 3.3.24.0) Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.2.3.0) Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0) Microsoft Silverlight (x32 Version: 5.1.20125.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (x32 Version: 11.0.50727.1) Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727) Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727) Motherboard Monitor 5 (x32 Version: 5) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT_amd64 (x32 Version: 15.4.2862.0708) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) MSXML 4.0 SP2 Parser und SDK (x32 Version: 4.20.9818.0) Music Manager (HKCU) MyFreeCodec (HKCU) Need For Speed™ World (x32 Version: 1.0.0.857) NVIDIA Install Application (Version: 2.275.78.0) NVIDIA Update 1.3.5 (Version: 1.3.5) NVIDIA Update Components (Version: 1.3.5) Online Weather (HKCU Version: 1.0) OpenOffice.org 3.4.1 (x32 Version: 3.41.9593) Origin (x32 Version: 9.1.15.109) PDF-Viewer (Version: 2.5.211.0) PlayReady PC Runtime amd64 (Version: 1.3.0) Power Sound Editor Free (x32) ProtectDisc Driver, Version 11 (x32 Version: 11.0.0.14) PSE11 STI Installer (x32 Version: 11.0) PunkBuster Services (x32 Version: 0.993) Realtek Ethernet Controller Driver (x32 Version: 7.46.610.2011) rosoft .NET Framework 4 Client Profile (Version: 4.0.30320) Samsung Kies (x32 Version: 2.5.1.12123_2) SAMSUNG USB Driver for Mobile Phones (Version: 1.5.16.0) Search-Results Toolbar (x32 Version: 1.2.0.0) Skype Click to Call (x32 Version: 6.3.11079) Skype™ 6.6 (x32 Version: 6.6.106) Softonic toolbar on IE (x32) Sony Ericsson Update Engine (x32 Version: 2.13.7.201306141231) Sony PC Companion 2.10.165 (x32 Version: 2.10.165) Sophos Anti-Rootkit 1.5.0 (x32 Version: 1.5.0) Spotify (HKCU Version: 0.9.1.57.ge7405149) TeamSpeak 3 Client (Version: 3.0.10) Tom Clancy's Ghost Recon Future Soldier (x32 Version: 1.8) Tom Clancy's H.A.W.X. 2 (x32 Version: 1.0.1) Tom Clancy's Splinter Cell 3 - Chaos Theory (x32 Version: 1.00.0000) Top German Apps (x32 Version: 0.7.5.2700) Ubisoft Game Launcher (x32 Version: 1.0.0.0) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) VirtualDJ Home FREE (x32 Version: 7.0.5) Web Assistant 2.0.0.572 (Version: 2.0.0.572) Werksfeuerwehr-Simulator Version 1.0 (x32) Windows Live Communications Platform (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3555.0308) Windows Live Family Safety (Version: 15.4.3555.0308) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922) Windows Live ID Sign-in Assistant (Version: 7.250.4232.0) Windows Live Installer (x32 Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3555.0308) Windows Live Mail (x32 Version: 15.4.3502.0922) Windows Live Mesh (x32 Version: 15.4.3502.0922) Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2) Windows Live Messenger (x32 Version: 15.4.3538.0513) Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922) Windows Live MIME IFilter (Version: 15.4.3502.0922) Windows Live Movie Maker (x32 Version: 15.4.3502.0922) Windows Live Photo Common (x32 Version: 15.4.3502.0922) Windows Live Photo Gallery (x32 Version: 15.4.3502.0922) Windows Live PIMT Platform (x32 Version: 15.4.3508.1109) Windows Live Remote Client (Version: 15.4.5722.2) Windows Live Remote Client Resources (Version: 15.4.5722.2) Windows Live Remote Service (Version: 15.4.5722.2) Windows Live Remote Service Resources (Version: 15.4.5722.2) Windows Live SOXE (x32 Version: 15.4.3502.0922) Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922) Windows Live UX Platform (x32 Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109) Windows Live Writer (x32 Version: 15.4.3502.0922) Windows Live Writer Resources (x32 Version: 15.4.3502.0922) Windows Media Center Add-in for Silverlight (x32 Version: 4.7.3.0) Windows Searchqu Toolbar (x32 Version: 4.1.0.2912) WinRAR 4.20 (64-Bit) (Version: 4.20.0) Yontoo 2.052 (Version: 2.052) ==================== Restore Points ========================= 16-08-2013 17:08:46 Installed LogMeIn Hamachi 21-08-2013 09:51:57 Installed Microsoft Fix it 50884 ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {02B756A0-AAC5-42F7-9AC8-52BA07D0B7DA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-11] (Adobe Systems Incorporated) Task: {11DBA657-C701-4747-B115-7575FC0E91AB} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv => C:\Windows\TEMP\{5302F7AC-907C-4661-B1D6-20D696C5CE26}.exe No File Task: {1A599739-6ABF-4AB8-8140-46F1E24C3E86} - System32\Tasks\Your File Updater => C:\Program Files (x86)\YourFileDownloader\YourFileUpdater.exe No File Task: {206F76F2-6BF1-4DA4-874E-AC809BA647D3} - System32\Tasks\BrowserProtect => C:\Windows\system32\sc.exe [2009-07-14] (Microsoft Corporation) Task: {2B71A810-004C-4936-84C8-995E974B7059} - System32\Tasks\User_Feed_Synchronization-{E87E6DD8-1205-4645-869B-BEFAEB93D838} => C:\Windows\system32\msfeedssync.exe [2013-03-28] (Microsoft Corporation) Task: {410184AC-4A2A-4423-AFCD-8FBFFDEB794D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {51D59E47-1B36-4B95-A233-7F59806E501B} - System32\Tasks\ASUS\ASUS RegRun Loader => C:\Program Files (x86)\ASUS\AASP\1.01.02\AsLoader.exe [2012-08-06] (ASUSTeK Computer Inc.) Task: {64F94223-FED3-43FE-B535-4860F320A48D} - System32\Tasks\EPUpdater => C:\Users\HANSS-~1\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe [2013-06-06] () Task: {7E8280BB-EAD0-4647-A824-989EACCC0DAF} - System32\Tasks\YourFile DownloaderUpdate => C:\Program Files (x86)\YourFileDownloader\YourFileUpdater.exe No File Task: {8B579AC1-32C2-4E0A-BC99-163DC564D722} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe [2013-04-30] () Task: {AF6A1F73-6AA7-43F7-8ABD-F1E6C9E99346} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-28] (Google Inc.) Task: {B8AB8B31-A972-4E86-9C0F-303DE9AFA789} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2922039653-137104462-887748758-1000Core => C:\Users\Hanss-Rauch\AppData\Local\Google\Update\GoogleUpdate.exe [2012-10-12] (Google Inc.) Task: {BF03FB55-5028-4107-8FD2-D08870565D19} - System32\Tasks\AdobeAAMUpdater-1.0-LUCA-PC-Hanss-Rauch => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2011-06-16] (Adobe Systems Incorporated) Task: {C138F704-A91B-407F-9B68-35DEA178CAB9} - System32\Tasks\0 => c:\program files (x86)\internet explorer\iexplore.exe [2013-03-28] (Microsoft Corporation) Task: {C7578D67-E6A3-4893-BDBE-F4705E26F2DC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-28] (Google Inc.) Task: {D00A6FF3-28C7-4817-B931-8516CB24685E} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2922039653-137104462-887748758-1000UA => C:\Users\Hanss-Rauch\AppData\Local\Google\Update\GoogleUpdate.exe [2012-10-12] (Google Inc.) Task: {D1BA3B0D-D61B-4B57-B160-358FC6CC7A38} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Task: {D90E59C4-0CB4-48B4-BFA4-AD09894E4674} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation) Task: {E30B4EE5-232E-447B-A301-7DD1691B7DBC} - System32\Tasks\4782 => C:\Windows\System32\wscript.exe [2009-07-14] (Microsoft Corporation) Task: {E5016DD3-D57F-416E-943D-C5418A16F41B} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-21] (Microsoft Corporation) Task: {EA51EAFA-4798-4760-894B-6A069E62A30C} - System32\Tasks\GoforFilesUpdate => C:\Program Files (x86)\GoforFiles\GFFUpdater.exe No File Task: {FBB5D090-FDDF-409E-9395-A53236DC8FB7} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv => C:\Windows\TEMP\{D5AF0B74-FAFF-4712-8F64-08568AD009B6}.exe No File Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job => C:\Windows\TEMP\{D5AF0B74-FAFF-4712-8F64-08568AD009B6}.exe Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\Windows\TEMP\{5302F7AC-907C-4661-B1D6-20D696C5CE26}.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2922039653-137104462-887748758-1000Core.job => C:\Users\Hanss-Rauch\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2922039653-137104462-887748758-1000UA.job => C:\Users\Hanss-Rauch\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (08/21/2013 01:19:15 PM) (Source: Application Hang) (User: ) Description: Programm FRST64.exe, Version 3.3.8.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 23d4 Startzeit: 01ce9e5ee6da14d2 Endzeit: 4 Anwendungspfad: C:\Users\Hanss-Rauch\Desktop\FRST64.exe Berichts-ID: Error: (08/21/2013 01:08:49 PM) (Source: Application Hang) (User: ) Description: Programm FRST64.exe, Version 3.3.8.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 25f0 Startzeit: 01ce9e5d932c49ad Endzeit: 11 Anwendungspfad: C:\Users\Hanss-Rauch\Desktop\FRST64.exe Berichts-ID: Error: (08/21/2013 00:58:30 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: bf3.exe, Version: 1.6.0.0, Zeitstempel: 0x511c9356 Name des fehlerhaften Moduls: bf3.exe, Version: 1.6.0.0, Zeitstempel: 0x511c9356 Ausnahmecode: 0xc0000005 Fehleroffset: 0x002413bb ID des fehlerhaften Prozesses: 0x267c Startzeit der fehlerhaften Anwendung: 0xbf3.exe0 Pfad der fehlerhaften Anwendung: bf3.exe1 Pfad des fehlerhaften Moduls: bf3.exe2 Berichtskennung: bf3.exe3 Error: (08/21/2013 11:58:35 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/21/2013 11:54:50 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: DslMgrSvc.exe, Version: 6.91.8434.1, Zeitstempel: 0x4900aa18 Name des fehlerhaften Moduls: DslMgrSvc.exe, Version: 6.91.8434.1, Zeitstempel: 0x4900aa18 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000c41a ID des fehlerhaften Prozesses: 0x474 Startzeit der fehlerhaften Anwendung: 0xDslMgrSvc.exe0 Pfad der fehlerhaften Anwendung: DslMgrSvc.exe1 Pfad des fehlerhaften Moduls: DslMgrSvc.exe2 Berichtskennung: DslMgrSvc.exe3 Error: (08/21/2013 09:40:27 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/20/2013 10:37:16 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: DslMgrSvc.exe, Version: 6.91.8434.1, Zeitstempel: 0x4900aa18 Name des fehlerhaften Moduls: DslMgrSvc.exe, Version: 6.91.8434.1, Zeitstempel: 0x4900aa18 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000c41a ID des fehlerhaften Prozesses: 0x113c Startzeit der fehlerhaften Anwendung: 0xDslMgrSvc.exe0 Pfad der fehlerhaften Anwendung: DslMgrSvc.exe1 Pfad des fehlerhaften Moduls: DslMgrSvc.exe2 Berichtskennung: DslMgrSvc.exe3 Error: (08/20/2013 10:27:59 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich. Error: (08/20/2013 10:27:59 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich. Error: (08/20/2013 10:27:59 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich. System errors: ============= Error: (08/21/2013 00:07:32 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows-Firewall" wurde mit folgendem dienstspezifischem Fehler beendet: %%5. Error: (08/21/2013 00:07:00 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows-Firewall" wurde mit folgendem dienstspezifischem Fehler beendet: %%5. Error: (08/21/2013 00:05:40 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows-Firewall" wurde mit folgendem dienstspezifischem Fehler beendet: %%5. Error: (08/21/2013 00:03:30 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows-Firewall" wurde mit folgendem dienstspezifischem Fehler beendet: %%5. Error: (08/21/2013 00:03:11 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows-Firewall" wurde mit folgendem dienstspezifischem Fehler beendet: %%5. Error: (08/21/2013 00:02:41 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows-Firewall" wurde mit folgendem dienstspezifischem Fehler beendet: %%5. Error: (08/21/2013 00:00:25 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2147024891 Error: (08/21/2013 00:00:25 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Funktionssuche-Ressourcenveröffentlichung" wurde mit folgendem Fehler beendet: %%-2147024891 Error: (08/21/2013 11:58:43 AM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: mbmiodrvr SAVRKBootTasks Error: (08/21/2013 11:57:34 AM) (Source: DCOM) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Microsoft Office Sessions: ========================= Error: (08/21/2013 01:19:15 PM) (Source: Application Hang)(User: ) Description: FRST64.exe3.3.8.123d401ce9e5ee6da14d24C:\Users\Hanss-Rauch\Desktop\FRST64.exe Error: (08/21/2013 01:08:49 PM) (Source: Application Hang)(User: ) Description: FRST64.exe3.3.8.125f001ce9e5d932c49ad11C:\Users\Hanss-Rauch\Desktop\FRST64.exe Error: (08/21/2013 00:58:30 PM) (Source: Application Error)(User: ) Description: bf3.exe1.6.0.0511c9356bf3.exe1.6.0.0511c9356c0000005002413bb267c01ce9e5d3637e9ceC:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exeC:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe9cf50cf4-0a50-11e3-ab7f-c8600083894c Error: (08/21/2013 11:58:35 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/21/2013 11:54:50 AM) (Source: Application Error)(User: ) Description: DslMgrSvc.exe6.91.8434.14900aa18DslMgrSvc.exe6.91.8434.14900aa18c00000050000c41a47401ce9e4facea9f00C:\Program Files (x86)\DSL-Manager\DslMgrSvc.exeC:\Program Files (x86)\DSL-Manager\DslMgrSvc.exeb8291f50-0a47-11e3-871f-c8600083894c Error: (08/21/2013 09:40:27 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/20/2013 10:37:16 PM) (Source: Application Error)(User: ) Description: DslMgrSvc.exe6.91.8434.14900aa18DslMgrSvc.exe6.91.8434.14900aa18c00000050000c41a113c01ce9de20612a3ebC:\Program Files (x86)\DSL-Manager\DslMgrSvc.exeC:\Program Files (x86)\DSL-Manager\DslMgrSvc.exe4c946985-09d8-11e3-a5f3-c8600083894c Error: (08/20/2013 10:27:59 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT) Description: WmiApRplWmiApRpl8F20300004D070000 Error: (08/20/2013 10:27:59 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT) Description: Performance1637070000000000000000000009030000 Error: (08/20/2013 10:27:59 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT) Description: Performance1637070000000000000000000009030000 CodeIntegrity Errors: =================================== Date: 2013-08-21 11:56:04.319 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-08-21 11:56:04.288 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-08-21 10:10:57.953 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-08-21 10:10:57.938 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-08-21 10:10:57.938 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-08-21 10:10:57.907 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-08-21 10:10:57.907 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-08-21 10:10:57.907 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-08-21 09:38:44.942 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-08-21 09:38:44.911 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 57% Total physical RAM: 8174.12 MB Available physical RAM: 3486.04 MB Total Pagefile: 16346.43 MB Available Pagefile: 11019.77 MB Total Virtual: 8192 MB Available Virtual: 8191.84 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:465.66 GB) (Free:178.55 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 1F52CC16) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS) ==================== End Of Log ============================[/CODE] |
|
21.08.2013, 13:07
| #5 | |
| /// the machine /// TB-Ausbilder | Windows Firewall lässt sich nicht aktivieren fehlercode 0x80070424Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
21.08.2013, 14:12
| #6 |
| | Windows Firewall lässt sich nicht aktivieren fehlercode 0x80070424Code:
ATTFilter ComboFix 13-08-20.01 - Hanss-Rauch 21.08.2013 14:37:19.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.8174.3841 [GMT 2:00]
ausgeführt von:: c:\users\Hanss-Rauch\Downloads\ComboFix.exe
AV: Kaspersky Internet Security *Disabled/Updated* {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5}
FW: Kaspersky Internet Security *Disabled* {FB2ABE9A-01A4-4539-FCD2-C7EA1246D49E}
SP: Kaspersky Internet Security *Disabled/Updated* {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\DealPly
c:\program files (x86)\DealPly\DealPly.crx
c:\program files (x86)\DealPly\icon.ico
c:\program files (x86)\DealPly\uninst.exe
c:\program files (x86)\DSL-Manager\DslMgr.exe
c:\program files (x86)\MyWebFace_5aEI
c:\program files (x86)\MyWebFace_5aEI\Installr\1.bin\5aEIPlug.dll
c:\program files (x86)\MyWebFace_5aEI\Installr\1.bin\5aEZSETP.dll
c:\program files (x86)\Searchqu Toolbar\Datamngr
c:\program files (x86)\Searchqu Toolbar\Datamngr\BrowserConnection.dll
c:\program files (x86)\Searchqu Toolbar\Datamngr\DnsBHO.dll
c:\program files (x86)\Searchqu Toolbar\Datamngr\IEBHO.dll
c:\program files (x86)\Searchqu Toolbar\Datamngr\installhelper.dll
c:\program files (x86)\Searchqu Toolbar\Datamngr\x64\BrowserConnection.dll
c:\program files (x86)\Searchqu Toolbar\Datamngr\x64\DnsBHO.dll
c:\program files (x86)\Searchqu Toolbar\Datamngr\x64\IEBHO.dll
c:\program files (x86)\Windows Searchqu Toolbar
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\ChromeExtension\config\skin\css\new-tab.css
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\ChromeExtension\config\skin\images\fav_amazon.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\ChromeExtension\config\skin\images\fav_ebay.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\ChromeExtension\config\skin\images\fav_facebook.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\ChromeExtension\config\skin\images\fav_fantastigames.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\ChromeExtension\config\skin\images\fav_ftalk.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\ChromeExtension\config\skin\images\fav_youtube.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\ChromeExtension\config\skin\images\IDR_WEBSTORE_ICON.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\ChromeExtension\config\skin\images\imesh_logo_128.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\ChromeExtension\config\skin\new-tab.html
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\ChromeExtension\default-config.js
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\ChromeExtension\lib\analytics.js
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\ChromeExtension\lib\constant.js
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\ChromeExtension\lib\default-config.js
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\ChromeExtension\lib\jquery.js
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\ChromeExtension\lib\localStorage.js
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\ChromeExtension\lib\new-tab.js
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\ChromeExtension\lib\preferences.js
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\ChromeExtension\manifest.json
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\ChromeExtension\new-tab.js
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\ChromeExtension\OurLocalPage.html
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\datamngr.dll
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\datamngrUI.exe
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\as_guid.dat
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\custom.js
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\lib\about.xml
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\lib\custom.js
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\lib\dtxpanel.xul
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\lib\dtxpaneltransparent.xul
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\lib\dtxpanelwin.xul
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\lib\dtxprefwin.xul
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\lib\dtxtransparentwin.xul
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\lib\dtxwin.xul
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\lib\emailnotifierproviders.xml
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\lib\external.js
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\lib\neterror.xhtml
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\lib\rsspreview.html
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\lib\rsswin.xml
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\lib\rsswin.xsl
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\lib\wmpstreamer.html
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\modules\datastore.jsm
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\modules\nsDragAndDrop.js
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\neterror.xhtml
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\preferences.xml
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\template.xml
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\toolbar.htm
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\toolbar.xul
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\vmncode.js
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\vmnrsswin.xml
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\com.djboxservice.dj.DJBox\tb_icon.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\com.djboxservice.dj.DJBox\tb_iconFF.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\com.djboxservice.dj.DJBox\tb_iconPressed.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\com.djboxservice.dj.DJBox\tb_iconPressedFF.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\com.djboxservice.dj.DJBox\tb_pref_icon.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\com.djboxservice.dj.DJBox\thumbs\tb_thumb_icon.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\com.djboxservice.dj.DJBox\widget.jsw
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\com.djboxservice.dj.DJBox\widget.jsww
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\com.djboxservice.dj.DJBox\widget.xml
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta-buffering.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta-connecting.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta-ico.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta-playing.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta-stopped.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta.ico
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\net.vmn.www.RadioBeta\tb_icon.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\net.vmn.www.RadioBeta\widget.jsw
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\net.vmn.www.RadioBeta\widget.xml
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\data\search\engines.xml
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\data\search\search.xsl
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\data\weather\icons.xml
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\locale\lib\en.js
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\locale\locale.js
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\locale\toolbar\de.js
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\locale\toolbar\en.js
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\locale\toolbar\es.js
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\locale\toolbar\fr.js
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\locale\toolbar\it.js
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\blip.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\bluelite.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\bluesky.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\btn-search-over.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\btn-search.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\btn-settings-over.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\btn-settings.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\btn-widgets-over.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\btn-widgets.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\btn_settings.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\custom.css
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\dailymotion.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\divider.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\ebay.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\facebook.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\find-videos.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\grey.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\icon_games.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\images.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\add.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\alexabutton.css
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\aol.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\arrow-dn.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\arrow-right-disabled.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\arrow-right.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\arrow-up.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\bg-btn-divider.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\bg-btn-end.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\bg-btn-mdl.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\bg-btn-mdl_ff.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\bg-btn-start.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\bg-btnover-divider.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\bg-btnover-end.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\bg-btnover-mdl.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\bg-btnover-mdl_ff.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\bg-btnover-start.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\blank.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\btn-widgets-over.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\btn-widgets.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\btn_slider.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\btnback-down-vista.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\btnback-vista.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\btnleft-down-vista.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\btnleft-vista.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\btnright-down-vista.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\btnright-vista.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\button-splitter-down-vista.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\button-splitter-vista.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\button-splitter.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\checkmark.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\chevron.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\collapse.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\debugbar\debug.html
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\dtx-test.css
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\dtx.css
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\edit-back-hot.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\edit-back.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\expand.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\found.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\gmail.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\highlight.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\highlight_blue.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\highlight_cyan.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\highlight_lime.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\highlight_magenta.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\highlight_yellow.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\hotmail.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\imap.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\lastsearch-thumb-back.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\launchers.css
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\loadingMid.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\lock.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\logo-separator.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\mailcom.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\menu_bg-basic.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\menu_separator_bar.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\menu_separator_white.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\menuitem-splitter.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\menuitemback-down-vista.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\menuitemback-vista.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\menuitemleft-down-vista.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\menuitemleft-vista.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\menuitemleft.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\menuitemright-down-vista.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\menuitemright-vista.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\minus.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\modify.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\move.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\movetarget.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\css\ie-only.css
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\css\ie7-only.css
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\css\panels.css
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\css\popupAbout.css
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\css\popupGames.css
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\css\popupWidgets.css
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\css\dialog.css
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\bg.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\btn-close-over.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\btn-close.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\btn-search.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\btn-wide-close-over.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\btn-wide-close.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\default.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\footer-short-left.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\footer-short-middle.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\footer-short-right.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\tab-off-l.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\tab-off-r.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\tab-on-l.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\tab-on-r.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\titlebar-left.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\titlebar-middle.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\titlebar-right.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\transparent.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\ttlbar-left.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\ttlbar-mdl.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\ttlbar-right.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\win-btm-left.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\win-btm-mdl.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\win-btm-right-resize.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\win-btm-right.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\win-left.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\win-right.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\main.html
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\main.html.bak
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\scripts\defscript.js
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\scripts\defscript.js.bak
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\footer.htm
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\gamecategory.xsl
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\gameData.js
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\gameList.xsl
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\gametype.xsl
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\ajax-loader.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\apps-bg-gradient-grid.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\apps-hover.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\appsfeatured-bg-gradient-grid.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\arrow-dn.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\arrow-down-white.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\arrow-left.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\arrow-right.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\arrow-sml-drop.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\arrow-sml.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\arrow-up.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\arrowr-bluew5.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\bg-aboutbox.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\bg-btnover.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\bg-pnl520x390.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\bg-scrollbar-thumb-y.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\bg-scrollbar-track-y.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\bg-scrollbar-trackend-y.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-add-over.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-add.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-addtoolbar-left-over.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-addtoolbar-left.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-addtoolbar-right.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-back.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-close-grey-over.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-close-grey.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-close-greyover.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-close-over.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-close.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-dark-left22-over.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-dark-left22.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-dark-middle22-over.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-dark-middle22.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-dark-right22-over.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-dark-right22.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-drag.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-install.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-launch-over.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-launch.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-mdl-over.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-mdl.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-moredetails.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-next-over.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-next.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-play-left-over.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-play-left.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-previous-over.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-previous.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-right-over.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-search-pnlbtm.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-try-left-over.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-try-left.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\bullet-orange.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\categories-bg-gradient-grid.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\featured-bg-btm-gradient.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\footer-short-left.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\footer-short-middle.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\footer-short-right.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\gamethumb-on.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\gamethumb2-over.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\ico-box-next.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\ico-calendar.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\ico-dollar.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\ico-download.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\ico-info-over.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\ico-info.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\ico-joystick24.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\ico-news24.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\ico-play.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\ico-pref-over.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\ico-pref.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\ico-tags.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\ico-user-monitor.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\icon-Add.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\icon-download.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\icon-Info.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\icon-play.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\icon-shop.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\left-menu-hover.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\menul-bgon.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\menul-bgover.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\panel-botm-noscroll.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\scroll-bg-206.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\scroll-bg.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\scroll-topwin.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\scrollb-disable.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\scrollb-down.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\scrollb-over.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\scrollb.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\scrollt-disable.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\scrollt-down.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\scrollt-over.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\scrollt.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\searchbox-pnlbtm.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\searchbox.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\searchboxlite.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\searchboxlite_end.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\shadow-leftmenu.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\sprite-dropdown.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\star.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\star_blank.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\star_x_grey.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\star_x_orange.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\titlebar-left.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\titlebar-middle.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\titlebar-right.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\topbar-inside-gradient.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\TRUSTe_about.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\view-detailed-on.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\view-detailed-over.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\view-thumb-on.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\view-thumb-over.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\widgets-square-16px.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\widgets-square-24px.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\widgets.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\win-bottom-middleglow.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\win-left-bottomglow.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\win-left-middleglow.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\win-left-topglow.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\win-right-bottomglow.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\win-right-middleglow.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\win-right-topglow.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\win-top-middleglow.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\initHTML.html
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\js\default.js
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\js\jquery.js
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\js\jquery.tinyscrollbar.js
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\js\jquery.tinyscrollbar.min.js
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\js\jquery.uniform.min.js
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\js\jquery.url.js
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\popupGames.html
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\popupHTML.html
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\popupWidgets.html
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\scroll.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\plus.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\pop.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\radio.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\reload.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\remove.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\rename.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\resize-box.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\rss.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\rsschannelback.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\RSSLogo.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\rsstabdivider.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\scroll-left.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\scroll-right.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\search-go.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\search.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\separator.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\text-ellipsis.xml
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\throbber.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\toolbarsplitter.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\transparent_1px.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\border_02.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\border_03.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\border_04.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\border_06.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\border_07.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\border_08.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\border_09.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\border_10.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton.css
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\yahoo.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\lichen.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\logo-about.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\logo-over.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\logo-separator.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\logo.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\menuseparatorback.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\metacafe.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\modify-save.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\modify.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\modifyhot.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\namespacetoolbar.css
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\options-search.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\orange.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\search-over.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\search_icon.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\setting_stb_16x.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\settings.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\settings_stb_19x.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\settings_stb_19x_over.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\skin-bluelite.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\skin-bluesky.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\skin-grey.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\skin-lichen.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\skin-orange.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\skin-yellow.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\skin.xml
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\sv.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\throbber.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\toolbarsplitter.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\TRUSTe_about.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\tv.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\twitter.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\veoh.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\video.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\vimeo.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\vmn.css
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\web.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\websearch.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\yellow.gif
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\chrome\skin\youtube.png
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\dtUser.exe
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\install.ico
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\manifest.xml
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\searchresultsDx.dll
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\searchresultstb.dll
c:\program files (x86)\Windows Searchqu Toolbar\Datamngr\SRTOOL~1\uninstall.exe
c:\program files (x86)\Windows Searchqu Toolbar\del_b64DLL_nsh89D9.dll
c:\program files (x86)\Windows Searchqu Toolbar\sysid.ini
c:\program files (x86)\Windows Searchqu Toolbar\uninstall.exe
c:\programdata\Search-NewTab
c:\programdata\Search-NewTab\511a5cc10eece.dll
c:\programdata\Search-NewTab\511a5cc10eece.tlb
c:\programdata\Search-NewTab\data\Search-NewTab.dat
c:\programdata\Search-NewTab\settings.ini
c:\programdata\Wincert\WIN32C~1.DLL
c:\users\Hanss-Rauch\AppData\Local\Microsoft\Windows\Temporary Internet Files\Silverlight.exe
c:\windows\jestertb.dll
c:\windows\SysWow64\frapsvid.dll
c:\windows\wininit.ini
.
.
((((((((((((((((((((((( Dateien erstellt von 2013-07-21 bis 2013-08-21 ))))))))))))))))))))))))))))))
.
.
2013-08-21 12:56 . 2013-08-21 12:56 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2013-08-21 11:00 . 2013-08-21 11:00 -------- d-----w- C:\FRST
2013-08-16 17:10 . 2013-08-16 17:10 -------- d-----w- c:\program files (x86)\LogMeIn Hamachi
2013-08-16 17:10 . 2013-08-21 12:59 -------- d-----w- c:\users\Hanss-Rauch\AppData\Local\LogMeIn Hamachi
2013-08-16 10:27 . 2013-08-16 10:27 -------- d-----w- c:\program files\WinRAR
2013-08-09 16:11 . 2013-08-09 16:11 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-08-09 16:11 . 2013-08-09 16:11 -------- d-----w- c:\program files (x86)\Java
2013-08-04 20:34 . 2013-08-04 20:34 -------- d-----w- c:\programdata\Package Cache
2013-07-31 13:00 . 2004-04-10 07:43 4608 ----a-w- c:\windows\SysWow64\mbmiodrvr.sys
2013-07-29 12:22 . 2013-07-29 12:22 -------- d-----w- c:\users\Hanss-Rauch\AppData\Local\WebPlayer
2013-07-29 12:22 . 2013-07-29 12:22 -------- d-----w- c:\program files (x86)\Delta
2013-07-29 12:22 . 2013-07-29 12:22 -------- d-----w- c:\users\Hanss-Rauch\AppData\Roaming\Delta
2013-07-29 12:03 . 2013-07-29 12:22 -------- d-----w- c:\users\Hanss-Rauch\AppData\Roaming\BabSolution
2013-07-29 12:02 . 2013-07-29 12:02 -------- d-----w- c:\users\Hanss-Rauch\AppData\Local\FilesFrog Update Checker
2013-07-29 11:17 . 2013-05-16 05:27 64856 ----a-w- c:\windows\system32\klfphc.dll
2013-07-29 11:16 . 2013-07-29 11:16 -------- d-----w- c:\windows\ELAMBKUP
2013-07-29 11:16 . 2013-08-21 12:59 -------- d-----w- c:\programdata\Kaspersky Lab
2013-07-29 11:16 . 2013-07-29 11:16 -------- d-----w- c:\program files (x86)\Kaspersky Lab
2013-07-29 11:16 . 2013-05-16 05:27 90208 ----a-w- c:\windows\system32\drivers\klflt.sys
2013-07-29 11:16 . 2013-05-16 05:27 620128 ----a-w- c:\windows\system32\drivers\klif.sys
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-08-21 12:48 . 2013-03-11 17:56 282104 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2013-08-21 12:48 . 2012-05-24 16:17 282104 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2013-08-21 12:48 . 2013-03-11 17:56 234768 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2013-08-15 19:10 . 2012-11-01 16:17 45856 ----a-w- c:\windows\system32\drivers\avgtpx64.sys
2013-08-09 16:11 . 2012-06-12 14:21 867240 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2013-08-09 16:11 . 2012-06-12 14:21 789416 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-07-29 11:41 . 2013-05-16 05:27 54368 ----a-w- c:\windows\system32\drivers\kltdi.sys
2013-07-17 17:59 . 2013-03-11 17:55 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2013-07-11 12:13 . 2012-08-21 10:16 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-07-11 12:13 . 2012-03-19 17:47 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-06-13 16:50 . 2013-06-13 16:49 1841706 ----a-w- c:\windows\MapCreator 2 Uninstaller.exe
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{00000000-6E41-4FD3-8538-502F5495E5FC}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2013-04-30 1521800]
.
[HKEY_CLASSES_ROOT\clsid\{00000000-6e41-4fd3-8538-502f5495e5fc}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{2e94b700-eafb-4c9e-a696-77200aa3f89b}]
2012-10-17 19:10 88264 ----a-w- c:\program files (x86)\gamesagogo_w3i\encyclopediabritannicagamesbarX.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}]
2013-01-29 13:28 170840 ----a-w- c:\program files\Web Assistant\Extension32.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
2013-08-15 19:10 3122864 ----a-w- c:\program files (x86)\AVG Secure Search\15.5.0.2\AVG Secure Search_toolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}]
2013-07-23 02:50 311536 ----a-w- c:\program files (x86)\Delta\delta\1.8.22.0\bh\delta.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2013-04-30 10:02 1521800 ----a-w- c:\program files (x86)\Ask.com\GenericAskToolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{E87806B5-E908-45FD-AF5E-957D83E58E68}]
2012-07-10 09:23 248936 ----a-w- c:\program files (x86)\Softonic\Softonic\1.6.4.3\bh\Softonic.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]
2013-04-17 01:19 197920 ----a-w- c:\program files (x86)\Yontoo\YontooIEClient_2.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{5018CFD2-804D-4C99-9F81-25EAEA2769DE}"= "c:\program files (x86)\Softonic\Softonic\1.6.4.3\SoftonicTlbr.dll" [2012-07-10 274536]
"{37D48D9C-3F7E-412F-B5BF-611BE7CCFCA1}"= "c:\program files (x86)\ChatZum Toolbar\tbunsv8859.tmp\tbcore3.dll" [2012-08-29 2665984]
"{2e94b700-eafb-4c9e-a696-77200aa3f89b}"= "c:\program files (x86)\gamesagogo_w3i\encyclopediabritannicagamesbarX.dll" [2012-10-17 88264]
"{95B7759C-8C7F-4BF1-B163-73684A933233}"= "c:\program files (x86)\AVG Secure Search\15.5.0.2\AVG Secure Search_toolbar.dll" [2013-08-15 3122864]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2013-04-30 1521800]
"{82E1477C-B154-48D3-9891-33D83C26BCD3}"= "c:\program files (x86)\Delta\delta\1.8.22.0\deltaTlbr.dll" [2013-07-23 300952]
.
[HKEY_CLASSES_ROOT\clsid\{5018cfd2-804d-4c99-9f81-25eaea2769de}]
[HKEY_CLASSES_ROOT\Softonic.dskBnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}]
[HKEY_CLASSES_ROOT\Softonic.dskBnd]
.
[HKEY_CLASSES_ROOT\clsid\{37d48d9c-3f7e-412f-b5bf-611be7ccfca1}]
[HKEY_CLASSES_ROOT\TBSB09850.TBSB09850.3]
[HKEY_CLASSES_ROOT\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}]
[HKEY_CLASSES_ROOT\TBSB09850.TBSB09850]
.
[HKEY_CLASSES_ROOT\clsid\{2e94b700-eafb-4c9e-a696-77200aa3f89b}]
.
[HKEY_CLASSES_ROOT\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}]
[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj.1]
[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CLASSES_ROOT\clsid\{82e1477c-b154-48d3-9891-33d83c26bcd3}]
[HKEY_CLASSES_ROOT\delta.deltadskBnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}]
[HKEY_CLASSES_ROOT\delta.deltadskBnd]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
"SearchEngineProtection"="c:\program files (x86)\GamesBar\update\SearchEngineProtection.exe" [2012-10-25 620480]
"EADM"="c:\program files (x86)\Origin\Origin.exe" [2013-07-30 3549528]
"fTalk"="c:\users\Hanss-Rauch\AppData\Local\fTalk\ftalk.exe" [2013-01-24 9424944]
"Spotify Web Helper"="c:\users\Hanss-Rauch\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2013-07-07 1104384]
"Sony PC Companion"="c:\program files (x86)\Sony\Sony PC Companion\PCCompanion.exe" [2013-05-29 449248]
"KiesPreload"="c:\program files (x86)\Samsung\Kies\Kies.exe" [2012-12-20 1476104]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-06-21 19875432]
"MusicManager"="c:\users\Hanss-Rauch\AppData\Local\Programs\Google\MusicManager\MusicManager.exe" [2013-06-20 7345664]
"Spotify"="c:\users\Hanss-Rauch\AppData\Roaming\Spotify\Spotify.exe" [2013-07-07 4640768]
"SDP"="c:\users\Hanss-Rauch\AppData\Local\FilesFrog Update Checker\update_checker.exe" [2013-01-31 201808]
"Online Weather"="c:\users\Hanss-Rauch\AppData\Local\WebPlayer\Online Weather\WebPlayer.exe" [2012-10-26 202752]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"vProt"="c:\program files (x86)\AVG Secure Search\vprot.exe" [2013-08-15 2314416]
"BlueStacks Agent"="c:\program files (x86)\BlueStacks\HD-Agent.exe" [2012-09-24 581496]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
"KiesTrayAgent"="c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe" [2012-12-20 310280]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-12-19 642808]
"ApnUpdater"="c:\program files (x86)\Ask.com\Updater\Updater.exe" [2013-04-30 1648264]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-05-15 152392]
"AVP"="c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe" [2013-05-16 356376]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2013-06-28 2255184]
.
c:\users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.4.1.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2012-8-13 1199104]
tbhcn.lnk - c:\users\Hanss-Rauch\AppData\Roaming\BrowserCompanion\tbhcn.exe -interval=10 -IEhome=0 -IEsearch=0 -FFhome=0 -FFsearch=0 -CHhome=0 -CHsearch=0 -pubId=ginyas_421 -affId=g421_winport_de [2012-7-3 695448]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux5"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
.
R1 SAVRKBootTasks;Boot Tasks Driver;c:\windows\system32\SAVRKBootTasks.sys;c:\windows\SYSNATIVE\SAVRKBootTasks.sys [x]
R2 AODService;AODService;c:\program files (x86)\AMD\OverDrive\AODAssist.exe;c:\program files (x86)\AMD\OverDrive\AODAssist.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [x]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys;c:\windows\SYSNATIVE\DRIVERS\ggflt.sys [x]
R3 MEMSWEEP2;MEMSWEEP2;c:\windows\system32\BF69.tmp;c:\windows\SYSNATIVE\BF69.tmp [x]
R3 PciDumpr;PciDumpr;c:\program files (x86)\Common Files\T-Com\DSLCheck\PciDumpr.sys;c:\program files (x86)\Common Files\T-Com\DSLCheck\PciDumpr.sys [x]
R3 RTL2832U_IRHID;HID Infrared Remote Receiver;c:\windows\system32\DRIVERS\RTL2832U_IRHID.sys;c:\windows\SYSNATIVE\DRIVERS\RTL2832U_IRHID.sys [x]
R3 RTL2832UBDA;REALTEK 2832U BDA Driver;c:\windows\system32\drivers\RTL2832UBDA.sys;c:\windows\SYSNATIVE\drivers\RTL2832UBDA.sys [x]
R3 RTL2832UUSB;REALTEK 2832U USB Driver;c:\windows\system32\Drivers\RTL2832UUSB.sys;c:\windows\SYSNATIVE\Drivers\RTL2832UUSB.sys [x]
R3 Sony PC Companion;Sony PC Companion;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe [x]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssadbus.sys [x]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdfl.sys [x]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdm.sys [x]
R3 TDslMgrService;DSL-Manager;c:\program files (x86)\DSL-Manager\DslMgrSvc.exe;c:\program files (x86)\DSL-Manager\DslMgrSvc.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 X6va008;X6va008;c:\windows\SysWOW64\Drivers\X6va008;c:\windows\SysWOW64\Drivers\X6va008 [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx64.sys;c:\windows\SYSNATIVE\drivers\avgtpx64.sys [x]
S1 DslMNLwf;DSL-Manager NDIS LightWeight Filter;c:\windows\system32\DRIVERS\dslmnlwf.sys;c:\windows\SYSNATIVE\DRIVERS\dslmnlwf.sys [x]
S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys;c:\windows\SYSNATIVE\DRIVERS\klim6.sys [x]
S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys;c:\windows\SYSNATIVE\DRIVERS\kltdi.sys [x]
S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys;c:\windows\SYSNATIVE\DRIVERS\kneps.sys [x]
S2 acedrv11;acedrv11;c:\windows\system32\drivers\acedrv11.sys;c:\windows\SYSNATIVE\drivers\acedrv11.sys [x]
S2 AdobeActiveFileMonitor11.0;Adobe Active File Monitor V11;c:\program files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe;c:\program files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 AODDriver4.2.0;AODDriver4.2.0;c:\program files (x86)\AMD\OverDrive\amd64\AODDriver2.sys;c:\program files (x86)\AMD\OverDrive\amd64\AODDriver2.sys [x]
S2 AODDriver4.2;AODDriver4.2;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S2 BstHdAndroidSvc;BlueStacks Android Service;c:\program files (x86)\BlueStacks\HD-Service.exe BstHdAndroidSvc Android;c:\program files (x86)\BlueStacks\HD-Service.exe BstHdAndroidSvc Android [x]
S2 BstHdDrv;BlueStacks Hypervisor;c:\program files (x86)\BlueStacks\HD-Hypervisor-amd64.sys;c:\program files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [x]
S2 BstHdLogRotatorSvc;BlueStacks Log Rotator Service;c:\program files (x86)\BlueStacks\HD-LogRotatorService.exe;c:\program files (x86)\BlueStacks\HD-LogRotatorService.exe [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [x]
S2 vToolbarUpdater15.5.0;vToolbarUpdater15.5.0;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe [x]
S2 Web Assistant;Web Assistant;c:\program files\Web Assistant\ExtensionUpdaterService.exe;c:\program files\Web Assistant\ExtensionUpdaterService.exe [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys;c:\windows\SYSNATIVE\DRIVERS\klkbdflt.sys [x]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys;c:\windows\SYSNATIVE\DRIVERS\klmouflt.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-08-21 11:57 1177552 ----a-w- c:\program files (x86)\Google\Chrome\Application\29.0.1547.57\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2013-08-21 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-21 12:13]
.
2013-08-21 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-10-28 20:29]
.
2013-08-21 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-10-28 20:29]
.
2013-08-21 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2922039653-137104462-887748758-1000Core.job
- c:\users\Hanss-Rauch\AppData\Local\Google\Update\GoogleUpdate.exe [2012-10-12 09:32]
.
2013-08-21 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2922039653-137104462-887748758-1000UA.job
- c:\users\Hanss-Rauch\AppData\Local\Google\Update\GoogleUpdate.exe [2012-10-12 09:32]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2011-06-16 499608]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = https://www.google.de/
uDefault_Search_URL = hxxp://www.google.com/ie
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Download with &Media Finder - c:\program files (x86)\Media Finder\hook.html
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\15.5.0\ViProtocol.dll
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
URLSearchHooks-{77f8c945-4b74-4bd6-a073-e0d1997edce8} - (no file)
BHO-{52170494-4d34-4f69-8dac-f726dc0da9ac} - c:\progra~2\WIA6EB~1\Datamngr\SRTOOL~1\searchresultsDx.dll
BHO-{9D717F81-9148-4f12-8568-69135F087DB0} - c:\progra~2\SEARCH~1\Datamngr\BROWSE~1.DLL
Toolbar-10 - (no file)
Toolbar-{52170494-4d34-4f69-8dac-f726dc0da9ac} - c:\progra~2\WIA6EB~1\Datamngr\SRTOOL~1\searchresultsDx.dll
Wow6432Node-HKCU-Run-Media Finder - c:\program files (x86)\Media Finder\Media Finder.exe
Wow6432Node-HKCU-Run-KiesAirMessage - c:\program files (x86)\Samsung\Kies\KiesAirMessage.exe
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
c:\users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL-Manager.lnk - c:\program files (x86)\DSL-Manager\DslMgr.exe
c:\users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MegaCloud Backup.lnk - c:\users\Hanss-Rauch\AppData\Roaming\MegaCloudBackup\MegaCloudBackup.exe /startup
c:\users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MegaCloud.lnk - c:\users\Hanss-Rauch\AppData\Roaming\MegaCloud\MegaCloud.exe /startup
c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL-Manager.lnk - c:\program files (x86)\DSL-Manager\DslMgr.exe
Toolbar-10 - (no file)
WebBrowser-{40C3CC16-7269-4B32-9531-17F2950FB06F} - (no file)
WebBrowser-{37D48D9C-3F7E-412F-B5BF-611BE7CCFCA1} - (no file)
AddRemove-ftalktoolbargaw - c:\progra~2\WIA6EB~1\Datamngr\SRTOOL~1\uninstall.exe
AddRemove-lrcspal@lyricspal.co - c:\program files (x86)\LyricsPal\uninstall.exe
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
AddRemove-Searchqu Toolbar - c:\program files (x86)\Windows Searchqu Toolbar\uninstall.exe
AddRemove-{15D2D75C-9CB2-4efd-BAD7-B9B4CB4BC693} - c:\programdata\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\uninstall.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\MEMSWEEP2]
"ImagePath"="\??\c:\windows\system32\BF69.tmp"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\MpsSvc]
"ImagePath"="."
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\X6va008]
"ImagePath"="\??\c:\windows\SysWOW64\Drivers\X6va008"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-2922039653-137104462-887748758-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-2922039653-137104462-887748758-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_LOCAL_MACHINE\software\BlueStacks]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
c:\program files (x86)\BlueStacks\HD-Service.exe
c:\program files (x86)\BlueStacks\HD-Network.exe
c:\program files (x86)\BlueStacks\HD-BlockDevice.exe
c:\program files (x86)\BlueStacks\HD-SharedFolder.exe
c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\loggingserver.exe
c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2013-08-21 15:06:32 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2013-08-21 13:06
.
Vor Suchlauf: 20 Verzeichnis(se), 191.782.912.000 Bytes frei
Nach Suchlauf: 25 Verzeichnis(se), 200.934.809.600 Bytes frei
.
- - End Of File - - B8BB117975CAFEF8DE57D451880EBFDC
A36C5E4F47E84449FF07ED3517B43A31
|
|
21.08.2013, 16:18
| #7 |
| /// the machine /// TB-Ausbilder | Windows Firewall lässt sich nicht aktivieren fehlercode 0x80070424 Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
21.08.2013, 20:41
| #8 |
| | Windows Firewall lässt sich nicht aktivieren fehlercode 0x80070424Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.08.21.04 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16521 Hanss-Rauch :: LUCA-PC [Administrator] 21.08.2013 17:55:21 mbam-log-2013-08-21 (17-55-21).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 594006 Laufzeit: 1 Stunde(n), 6 Minute(n), 12 Sekunde(n) Infizierte Speicherprozesse: 1 C:\Program Files\Web Assistant\ExtensionUpdaterService.exe (PUP.Optional.SweetPacks.A) -> 2828 -> Löschen bei Neustart. Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 26 HKLM\SYSTEM\CurrentControlSet\Services\Web Assistant (PUP.Optional.SweetPacks.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE} (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\escort.escortIEPane.1 (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\escort.escortIEPane (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8} (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{99079a25-328f-4bd4-be04-00955acaa0a7} (PUP.Optional.SearchQu) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Typelib\{4599D05A-D545-4069-BB42-5895B4EAE05B} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Interface\{1231839B-064E-4788-B865-465A1B5266FD} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{977AE9CC-AF83-45E8-9E03-E2798216E2D5} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26} (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800} (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\delta.deltaappCore.1 (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\delta.deltaappCore (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B} (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FilesFrog Update Checker (PUP.Optional.Somoto.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\SearchQUIEHelper.DNSGuard (PUP.Optional.SearchQu) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\SearchQUIEHelper.DNSGuard.1 (PUP.Optional.SearchQu) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\DataMngr_Toolbar (PUP.Optional.DataMngr) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\DELTA\DELTA (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\delta (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 6 HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar|{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Delta.A) -> Daten: Delta Toolbar -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Delta.A) -> Daten: -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Delta\Delta|tlbrSrchUrl (PUP.Optional.Delta) -> Daten: -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|bProtector Start Page (PUP.BProtector) -> Daten: hxxp://www2.delta-search.com/?affID=119292&babsrc=HP_ss&mntrId=4802C8600083894C -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes|bProtectorDefaultScope (PUP.BProtector) -> Daten: {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 0E1S1F2W1J1I1RtF1MtHyB -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 14 C:\ProgramData\IBUpdaterService (PUP.InstallBrain) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanss-Rauch\AppData\Roaming\Babylon (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanss-Rauch\AppData\Roaming\Delta (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DealPly (PUP.OPtional.Dealply) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Tarma Installer (PUP.Optional.Tarma.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504} (PUP.Optional.Tarma.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Cache (PUP.Optional.Tarma.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B} (PUP.Optional.Tarma.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\Cache (PUP.Optional.Tarma.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanss-Rauch\AppData\Roaming\BabSolution (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanss-Rauch\AppData\Roaming\BabSolution\CR (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanss-Rauch\AppData\Roaming\BabSolution\Shared (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Delta\delta\1.8.22.0 (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Delta\delta\1.8.22.0\bh (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateien: 39 C:\Program Files\Web Assistant\ExtensionUpdaterService.exe (PUP.Optional.SweetPacks.A) -> Löschen bei Neustart. C:\Program Files (x86)\Delta\delta\1.8.22.0\bh\delta.dll (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Delta\delta\1.8.22.0\deltaTlbr.dll (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Delta\delta\1.8.22.0\deltaApp.dll (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Delta\delta\1.8.22.0\deltaEng.dll (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Delta\delta\1.8.22.0\deltasrv.exe (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Delta\delta\1.8.22.0\uninstall.exe (PUP.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\vGrabber-software\Uninstall.exe (PUP.BundleInstaller.VG) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Yontoo\OptChrome.exe (PUP.Optional.OptChrome.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Yontoo\Y2Desktop.Updater.exe (Trojan.MSIL.Disfa) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.exe (PUP.Optional.Tarma.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\Setup.exe (PUP.Optional.Tarma.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Qoobox\Quarantine\C\Program Files (x86)\DealPly\uninst.exe.vir (PUP.Optional.Dealply) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\System Volume Information\SystemRestore\FRStaging\Program Files (x86)\Funmoods\1.5.23.22\uninstall.exe (PUP.FunMoods) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanss-Rauch\AppData\Local\FilesFrog Update Checker\uninstall.exe (PUP.Optional.Somoto.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanss-Rauch\AppData\Roaming\BabSolution\Shared\BabMaint.exe (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanss-Rauch\AppData\Roaming\BabSolution\Shared\BUSolution.dll (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanss-Rauch\AppData\Roaming\File Scout\filescout.exe (Trojan.PUP.Optional.FileScout.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanss-Rauch\Downloads\Web-Displays-Mod-Installer-1.6.2.exe (PUP.Optional.4Squared) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\IBUpdaterService\repository.xml (PUP.InstallBrain) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanss-Rauch\AppData\Roaming\Babylon\log_file.txt (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanss-Rauch\AppData\Roaming\Delta\sqlite3.dll (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DealPly\Uninstall DealPly.lnk (PUP.OPtional.Dealply) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DealPly\DealPly Help.lnk (PUP.OPtional.Dealply) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DealPly\DealPly.lnk (PUP.OPtional.Dealply) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.dat (PUP.Optional.Tarma.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.ico (PUP.Optional.Tarma.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setup.dll (PUP.Optional.Tarma.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll (PUP.Optional.Tarma.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\Setup.dat (PUP.Optional.Tarma.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\Setup.ico (PUP.Optional.Tarma.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_Setup.dll (PUP.Optional.Tarma.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_Setupx.dll (PUP.Optional.Tarma.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanss-Rauch\AppData\Roaming\BabSolution\Shared\chu.js (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanss-Rauch\AppData\Roaming\BabSolution\Shared\Delta.ico (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanss-Rauch\AppData\Roaming\BabSolution\Shared\GUninstaller.exe (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanss-Rauch\AppData\Roaming\BabSolution\Shared\SetupParams.ini (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanss-Rauch\AppData\Roaming\BabSolution\Shared\sqlite3.dll (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Delta\delta\1.8.22.0\GUninstaller.exe (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) [CODE][AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v3.000 - Report created 21/08/2013 at 21:08:36
# Updated 20/08/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Hanss-Rauch - LUCA-PC
# Running from : C:\Users\Hanss-Rauch\Downloads\adwcleaner.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\Ask
Folder Deleted : C:\ProgramData\AVG Secure Search
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\ProgramData\boost_interprocess
Folder Deleted : C:\ProgramData\Browser Manager
Folder Deleted : C:\ProgramData\BrowserProtect
Folder Deleted : C:\ProgramData\FantastiGames
Folder Deleted : C:\ProgramData\InstallMate
Folder Deleted : C:\ProgramData\RightClick
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Finder
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong
Folder Deleted : C:\Program Files (x86)\Ask.com
Folder Deleted : C:\Program Files (x86)\AVG Secure Search
Folder Deleted : C:\Program Files (x86)\ChatZum Toolbar
Folder Deleted : C:\Program Files (x86)\delta
Folder Deleted : C:\Program Files (x86)\DownTangoFTToolbar
Folder Deleted : C:\Program Files (x86)\GamesBar
Folder Deleted : C:\Program Files (x86)\PriceGong
Folder Deleted : C:\Program Files (x86)\Protected Search
Folder Deleted : C:\Program Files (x86)\Red Sky
Folder Deleted : C:\Program Files (x86)\Searchqu Toolbar
Folder Deleted : C:\Program Files (x86)\Softonic
Folder Deleted : C:\Program Files (x86)\Yontoo
Folder Deleted : C:\Program Files (x86)\Common Files\AVG Secure Search
Folder Deleted : C:\Windows\SysWOW64\ARFC
Folder Deleted : C:\Windows\SysWOW64\jmdp
Folder Deleted : C:\Windows\SysWOW64\WNLT
Folder Deleted : C:\Program Files\Web Assistant
Folder Deleted : C:\Windows\System32\ARFC
Folder Deleted : C:\Users\Hanss-Rauch\AppData\Local\APN
Folder Deleted : C:\Users\Hanss-Rauch\AppData\Local\AskToolbar
Folder Deleted : C:\Users\Hanss-Rauch\AppData\Local\AVG Secure Search
Folder Deleted : C:\Users\Hanss-Rauch\AppData\Local\Conduit
Folder Deleted : C:\Users\Hanss-Rauch\AppData\Local\DownTango
Folder Deleted : C:\Users\Hanss-Rauch\AppData\Local\FilesFrog Update Checker
Folder Deleted : C:\Users\Hanss-Rauch\AppData\Local\Ilivid Player
Folder Deleted : C:\Users\Hanss-Rauch\AppData\LocalLow\AskToolbar
Folder Deleted : C:\Users\Hanss-Rauch\AppData\LocalLow\AVG Secure Search
Folder Deleted : C:\Users\Hanss-Rauch\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Hanss-Rauch\AppData\LocalLow\delta
Folder Deleted : C:\Users\Hanss-Rauch\AppData\LocalLow\incredibar.com
Folder Deleted : C:\Users\Hanss-Rauch\AppData\LocalLow\PriceGong
Folder Deleted : C:\Users\Hanss-Rauch\AppData\LocalLow\Search-NewTab
Folder Deleted : C:\Users\Hanss-Rauch\AppData\LocalLow\searchquband
Folder Deleted : C:\Users\Hanss-Rauch\AppData\LocalLow\Softonic
Folder Deleted : C:\Users\Hanss-Rauch\AppData\LocalLow\Toolbar4
Folder Deleted : C:\Users\Hanss-Rauch\AppData\Roaming\BrowserCompanion
Folder Deleted : C:\Users\Hanss-Rauch\AppData\Roaming\DesktopIconForAmazon
Folder Deleted : C:\Users\Hanss-Rauch\AppData\Roaming\DownTangoFTToolbar
Folder Deleted : C:\Users\Hanss-Rauch\AppData\Roaming\file scout
Folder Deleted : C:\Users\Hanss-Rauch\AppData\Roaming\Media Finder
Folder Deleted : C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\gencrawler@some.com
Folder Deleted : C:\Users\Hanss-Rauch\AppData\Roaming\OCS
Folder Deleted : C:\Users\Hanss-Rauch\AppData\Roaming\OneTab
Folder Deleted : C:\Users\Hanss-Rauch\AppData\Roaming\PerformerSoft
Folder Deleted : C:\Users\Hanss-Rauch\AppData\Roaming\Yontoo
Folder Deleted : C:\Users\Hanss-Rauch\AppData\Roaming\yourfiledownloader
Folder Deleted : C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker
Folder Deleted : C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Ride Games
Folder Deleted : C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\Firefox\Profiles\h8jupusy.default\Extensions\ffxtlbr@delta.com
Folder Deleted : C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\Firefox\Profiles\h8jupusy.default\Extensions\toolbar@ask.com
[!] Folder Deleted : C:\ProgramData\AVG Secure Search
File Deleted : C:\chatzum_nt.exe
File Deleted : C:\END
File Deleted : C:\Windows\System32\dmwu.exe
File Deleted : C:\Windows\System32\ImhxxpComm.dll
File Deleted : C:\Windows\System32\roboot64.exe
File Deleted : C:\Users\Hanss-Rauch\AppData\Local\funmoods-speeddial.crx
File Deleted : C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tbhcn.lnk
File Deleted : C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\Firefox\Profiles\h8jupusy.default\searchplugins\Askcom.xml
File Deleted : C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\Firefox\Profiles\h8jupusy.default\searchplugins\Babylon.xml
File Deleted : C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\Firefox\Profiles\h8jupusy.default\searchplugins\BrowserProtect.xml
File Deleted : C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\Firefox\Profiles\h8jupusy.default\searchplugins\delta.xml
File Deleted : C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\Firefox\Profiles\h8jupusy.default\searchplugins\holasearch.xml
File Deleted : C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\Firefox\Profiles\h8jupusy.default\bprotector_extensions.sqlite
File Deleted : C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\Firefox\Profiles\h8jupusy.default\bprotector_prefs.js
File Deleted : C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\Firefox\Profiles\h8jupusy.default\user.js
File Deleted : C:\Program Files (x86)\Mozilla Firefox\user.js
File Deleted : C:\Users\Hanss-Rauch\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data
File Deleted : C:\Users\Hanss-Rauch\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
File Deleted : C:\Windows\System32\Tasks\BrowserProtect
File Deleted : C:\Windows\System32\Tasks\EPUpdater
File Deleted : C:\Windows\System32\Tasks\Scheduled Update for Ask Toolbar
***** [ Shortcuts ] *****
***** [ Registry ] *****
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{336D0C35-8A85-403A-B9D2-65C292C39087}]
Value Deleted : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{336D0C35-8A85-403A-B9D2-65C292C39087}]
Value Deleted : HKCU\Software\Mozilla\Firefox\Extensions [{8A9386B4-E958-4C4C-ADF4-8F26DB3E4829}]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{FE1DEEEA-DB6D-44B8-83F0-34FC0F9D1052}]
Value Deleted : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{FE1DEEEA-DB6D-44B8-83F0-34FC0F9D1052}]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bodddioamolcibagionmmobehnbhiakf
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dednnpigldgdbpgcdpfppmlcnnbjciel
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Key Deleted : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Key Deleted : HKCU\Software\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\lpmkgpnbiojfaoklbkpfneikocaobfai
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc
Key Deleted : HKLM\SOFTWARE\Classes\AppID\BrowserConnection.dll
Key Deleted : HKLM\SOFTWARE\Classes\AppID\DNSBHO.dll
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\NCTAudioCDGrabber2.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\PriceGongIE.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\tdataprotocol.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\updatebho.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\wit4ie.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Key Deleted : HKLM\SOFTWARE\Classes\MF
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHost.Tool
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHost.Tool.1
Key Deleted : HKLM\SOFTWARE\Classes\SoftonicApp.appCore
Key Deleted : HKLM\SOFTWARE\Classes\SoftonicApp.appCore.1
Key Deleted : HKLM\SOFTWARE\Classes\srv.SoftonicSrvc
Key Deleted : HKLM\SOFTWARE\Classes\srv.SoftonicSrvc.1
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.SearchProviderManager
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.SearchProviderManager.1
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api
Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api.1
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [Backup.old.Start Page]
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Download with &Media Finder
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [SDP]
Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow [*.crossrider.com]
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\chatzum_nt_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\chatzum_nt_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\I Want This_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\I Want This_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\softonic_ggl_1_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\softonic_ggl_1_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Deleted : HKCU\Software\5fededbb538e415
Key Deleted : HKLM\SOFTWARE\5fededbb538e415
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_mcedit_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_mcedit_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_bandicam_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_bandicam_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_battlefield-2_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_battlefield-2_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_call-of-duty-4_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_call-of-duty-4_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_minecraft_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_minecraft_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_nvidia-gpu-temp_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_nvidia-gpu-temp_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_operation7_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_operation7_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_power-sound-editor_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_power-sound-editor_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_speedfan_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_speedfan_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_toon-boom-studio_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_toon-boom-studio_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_virtual-dj-free-home-edition_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_virtual-dj-free-home-edition_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{20EDC024-43C5-423E-B7F5-FD93523E0D9F}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{373ED12D-B306-43AC-9485-A7C5133DC34C}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{835315FC-1BF6-4CA9-80CD-F6C158D40692}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{960DF771-CFCB-4E53-A5B5-6EF2BBE6E706}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{AC662AF2-4601-4A68-84DF-A3FE83F1A5F9}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B15F118E-AF21-45E8-A809-29FDD7362565}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C17DC5CF-54FF-4E63-8AC7-94335D6DA231}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D14D0EE2-2DD1-4230-BE70-3F3AD6172C40}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D97A8234-F2A2-4AD4-91D5-FECDB2C553AF}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{ED6535E7-F778-48A5-A060-549D30024511}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{05366194-3126-4601-AC1A-DDE573E093DC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{061F450C-37B9-4330-9235-0F25D9F75B33}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{14F35FFC-522A-4DD1-A07E-6B8B65C6891E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{19D2F415-D58B-46BC-9390-C03DCBC21EB2}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22FEB0F5-0BA0-4D4B-8A66-55A21667BC31}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{26249267-15F4-4DA3-8247-C5A78E4FA918}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{336D0C35-8A85-403A-B9D2-65C292C39087}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{37D48D9C-3F7E-412F-B5BF-611BE7CCFCA1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{39B217B4-8C69-4E45-A8DC-8CC4DAD3CF0A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3CB4CE45-8849-4638-9226-D6B615A15827}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{43AB7B5D-4C40-4103-A549-7002A116A7D5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{44B50C01-4993-48E2-ADEE-D812BAE2E9A2}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5018CFD2-804D-4C99-9F81-25EAEA2769DE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5EB0259D-AB79-4AE6-A6E6-24FFE21C3DA4}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E45F3E8-2683-4824-A6BE-08108022FB36}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{99066096-8989-4612-841F-621A01D54AD7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{996ED20F-A740-47A2-A7EF-9620D422BB4E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9F0F16DD-4E76-4049-A9B1-7A91E48F0323}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A3E2F089-DDBB-4CBF-B06C-5D44DA316ED3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A5679AB0-C59E-49E7-83C4-5289F844A6E0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CA0167C2-6295-41B8-9BDA-704B2F5E4CD9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CADAF6BE-BF50-4669-8BFD-C27BD4E6181B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D2B79F7D-2D7D-4420-B2A9-ECE52C7C83A0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D433A9D0-8267-40CB-8AD5-24F22FA5373F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E87806B5-E908-45FD-AF5E-957D83E58E68}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F4288797-CB12-49CE-9DF8-7CDFA1143BEA}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FEFD3AF5-A346-4451-AA23-A3AD54915515}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{061F450C-37B9-4330-9235-0F25D9F75B33}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{087CDC12-0A11-4D1D-8DCF-44185D7C3496}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{088BF3A9-6AE8-47B9-A3FB-26262F236C79}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{22FEB0F5-0BA0-4D4B-8A66-55A21667BC31}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2AC7B9EB-3881-4EB9-8DEE-0A731A309FDE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{349C0469-ACDD-49DF-9B3E-0D82E7C7DC4D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{41226591-6F7A-4082-B63A-67FE4A0CF7A6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{44B619BC-3D2B-4990-AA4F-9AA366921792}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55D69CD1-6715-4C40-BF05-9519AC4DC6E6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66C8FD57-54C4-4D4F-BC95-DCCC763B410A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{717BAE33-7061-4279-8AE5-6C13BC8AF3F9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{84F06F7A-F811-48D7-8B34-3F4145183D8F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{88F6D55F-AA3F-4003-BE69-4AC1998D6492}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8DBCDED5-08AD-41A2-9BBC-235D84F4FE06}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A0F66203-1A86-4812-9603-A57E09A4D7A3}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BC39D1B3-4471-41C1-AACA-E097FAF4B7AA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D2B79F7D-2D7D-4420-B2A9-ECE52C7C83A0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DEB85542-1311-4EC6-8A32-5372EB27FC94}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{11D9E165-B8C1-4734-A56C-BC4FCACA966B}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{1D55DAA5-04AC-4036-B0BE-DA81EE9676CD}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{212C2C4F-C845-4FBC-9561-C833A13D8DCE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{3C5D1D57-16C8-473C-A552-37B8D88596FE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4A115D8A-6A7B-4C72-92B1-2E2D01F36979}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{58CBF821-A0C7-4AE8-9430-77DD1AF38E99}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{72BCBFF7-2837-4CA0-B3B5-3DAED7F54601}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{824125FD-7732-4DA2-9277-3A7D0A0A0813}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{99DF8440-814E-497F-BDDD-FB93E9E9DF96}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{AC329328-7EC4-4C34-B672-0A2B90CB9B00}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B15F118E-AF21-45E8-A809-29FDD7362565}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403A-B9D2-65C292C39087}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E87806B5-E908-45FD-AF5E-957D83E58E68}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{37D48D9C-3F7E-412F-B5BF-611BE7CCFCA1}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{37D48D9C-3F7E-412F-B5BF-611BE7CCFCA1}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{40C3CC16-7269-4B32-9531-17F2950FB06F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9CF034EA-7B46-48D3-8895-8A14B32AE445}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C17DC5CF-54FF-4E63-8AC7-94335D6DA231}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D14D0EE2-2DD1-4230-BE70-3F3AD6172C40}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F994E0D9-8335-48F1-99C2-A712C21F8D5F}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{96BD48DD-741B-41AE-AC4A-AFF96BA00F7E}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{37D48D9C-3F7E-412F-B5BF-611BE7CCFCA1}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{5018CFD2-804D-4C99-9F81-25EAEA2769DE}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{37D48D9C-3F7E-412F-B5BF-611BE7CCFCA1}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{40C3CC16-7269-4B32-9531-17F2950FB06F}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{00000000-6E41-4FD3-8538-502F5495E5FC}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Value Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\APN DTX
Key Deleted : HKCU\Software\APN
Key Deleted : HKCU\Software\Ask.com
Key Deleted : HKCU\Software\AskToolbar
Key Deleted : HKCU\Software\AVG Secure Search
Key Deleted : HKCU\Software\BabSolution
Key Deleted : HKCU\Software\BI
Key Deleted : HKCU\Software\Blabbers
Key Deleted : HKCU\Software\ChatZum Toolbar
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\Delta
Key Deleted : HKCU\Software\filescout
Key Deleted : HKCU\Software\IM
Key Deleted : HKCU\Software\ImInstaller
Key Deleted : HKCU\Software\MediaFinder
Key Deleted : HKCU\Software\OCS
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\Somoto
Key Deleted : HKCU\Software\WNLT
Key Deleted : HKCU\Software\YourFileDownloader
Key Deleted : HKCU\Software\AppDataLow\SProtector
Key Deleted : HKCU\Software\AppDataLow\Software\AskToolbar
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
Key Deleted : HKCU\Software\AppDataLow\Software\searchqutoolbar
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKLM\Software\APN
Key Deleted : HKLM\Software\AskToolbar
Key Deleted : HKLM\Software\AVG Secure Search
Key Deleted : HKLM\Software\AVG Security Toolbar
Key Deleted : HKLM\Software\Babylon
Key Deleted : HKLM\Software\BrowserCompanion
Key Deleted : HKLM\Software\ChatZum Toolbar
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\Software\DealPly
Key Deleted : HKLM\Software\Delta
Key Deleted : HKLM\Software\Freeze.com
Key Deleted : HKLM\Software\Iminent
Key Deleted : HKLM\Software\PerformerSoft
Key Deleted : HKLM\Software\SearchquSRTB
Key Deleted : HKLM\Software\Softonic
Key Deleted : HKLM\Software\SP Global
Key Deleted : HKLM\Software\SProtector
Key Deleted : HKLM\Software\Web Assistant
Key Deleted : HKLM\Software\YourFileDownloader
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ChatZum Toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\lrcspal@lyricspal.co
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Search Results Toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Searchqu Toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Softonic
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WNLT
Key Deleted : [x64] HKLM\SOFTWARE\Web Assistant
Key Deleted : [x64] HKLM\SOFTWARE\WNLT
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
***** [ Browsers ] *****
-\\ Internet Explorer v10.0.9200.16521
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]
-\\ Mozilla Firefox v
[ File : C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\Firefox\Profiles\h8jupusy.default\prefs.js ]
Line Deleted : user_pref("aol_toolbar.default.homepage.check", false);
Line Deleted : user_pref("aol_toolbar.default.search.check", false);
Line Deleted : user_pref("extensions.BabylonToolbar.prtkDS", 0);
Line Deleted : user_pref("extensions.BabylonToolbar.prtkHmpg", 0);
Line Deleted : user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"64ffxtbr@TelevisionFanatic.com\":{\"descriptor\":\"C:\\\\Program Files (x86)\\\\TelevisionFanatic\\\\bar\\\\1.bin\"[...]
Line Deleted : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "");
Line Deleted : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");
Line Deleted : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", "");
Line Deleted : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", "");
Line Deleted : user_pref("sweetim.toolbar.searchguard.enable", "");
Line Deleted : user_pref("browser.search.defaultengine", "Ask.com");
Line Deleted : user_pref("extensions.asktb.ff-original-keyword-url", "");
-\\ Google Chrome v29.0.1547.57
[ File : C:\Users\Hanss-Rauch\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Deleted : homepage
*************************
AdwCleaner[R0].txt - [45823 octets] - [21/08/2013 21:07:25]
AdwCleaner[R1].txt - [47996 octets] - [21/08/2013 21:07:59]
AdwCleaner[S0].txt - [45081 octets] - [21/08/2013 21:08:36]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [45142 octets] ##########
/CODE] Hier die txt von adware cleaner Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.5.2 (08.20.2013:1)
OS: Windows 7 Home Premium x64
Ran by Hanss-Rauch on 21.08.2013 at 21:20:09,73
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ftalk
Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\searchengineprotection
Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{52170494-4d34-4f69-8dac-f726dc0da9ac}
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Successfully deleted: [Registry Key] "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2922039653-137104462-887748758-1000\Software\web assistant"
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\features\a28b4d68debaa244eb686953b7074fef
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\products\a28b4d68debaa244eb686953b7074fef
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\upgradecodes\f928123a039649549966d4c29d35b1c9
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT2319825
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT2737658
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT2795622
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT3196716
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskSLib_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskSLib_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\TaskScheduler_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\TaskScheduler_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\PricePeepInstaller_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\PricePeepInstaller_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskSLib_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskSLib_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\TaskScheduler_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\TaskScheduler_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\PricePeepInstaller_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\PricePeepInstaller_RASMANCS
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{36377DD7-B3EB-42f5-986F-680BAF59BA9D}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{5F8A256F-9ACE-40D0-A66B-A61925748894}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{634B5AE2-8920-48F9-9FD1-3488DB3FD4EA}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{7F8AFFC0-6745-ABC9-8120-06D74BB77DF5}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2431}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{a5b9c0f5-5616-47cd-a95f-e43b488faccf}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{D66BA4E4-7C62-4079-B88E-2CE651732E57}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{7F8AFFC0-6745-ABC9-8120-06D74BB77DF5}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2431}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{a5b9c0f5-5616-47cd-a95f-e43b488faccf}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2E94B700-EAFB-4C9E-A696-77200AA3F89B}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{52170494-4d34-4f69-8dac-f726dc0da9ac}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{52170494-4d34-4f69-8dac-f726dc0da9ac}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{52170494-4d34-4f69-8dac-f726dc0da9ac}
Successfully deleted: [Registry Key] "hkey_current_user\software\classes\typelib\{006ad7b2-968a-11de-88c9-5bde55d89593}"
Successfully deleted: [Registry Key] "hkey_current_user\software\microsoft\internet explorer\low rights\elevationpolicy\{a5aa24ea-11b8-4113-95ae-9ed71deaf12a}"
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\ProgramData\wincert"
Successfully deleted: [Folder] "C:\Users\Hanss-Rauch\AppData\Roaming\goforfiles"
Successfully deleted: [Folder] "C:\Users\Hanss-Rauch\AppData\Roaming\software informer"
Successfully deleted: [Folder] "C:\Users\Hanss-Rauch\appdata\local\download beast"
Successfully deleted: [Folder] "C:\Users\Hanss-Rauch\appdata\local\ftalk"
Successfully deleted: [Folder] "C:\Users\Hanss-Rauch\appdata\locallow\datamngr"
Successfully deleted: [Folder] "C:\Users\Hanss-Rauch\appdata\locallow\gamesagogo_w3i"
Successfully deleted: [Folder] "C:\Users\Hanss-Rauch\appdata\locallow\wiseconvert"
Successfully deleted: [Folder] "C:\Program Files (x86)\download beast"
Successfully deleted: [Folder] "C:\Program Files (x86)\gamesagogo_w3i"
Successfully deleted: [Empty Folder] C:\Users\Hanss-Rauch\appdata\local\{047ACD16-05DC-4151-A1EF-92CC329CC878}
Successfully deleted: [Empty Folder] C:\Users\Hanss-Rauch\appdata\local\{07F57387-AE2E-4778-B134-F8F9B38157A3}
Successfully deleted: [Empty Folder] C:\Users\Hanss-Rauch\appdata\local\{234F910E-2396-4436-B7C9-3C4A9BD10FB5}
Successfully deleted: [Empty Folder] C:\Users\Hanss-Rauch\appdata\local\{27CC8414-A0FC-45FA-B164-9A1F9321CACD}
Successfully deleted: [Empty Folder] C:\Users\Hanss-Rauch\appdata\local\{283D63F4-72A1-4D3A-8208-18917810E3F1}
Successfully deleted: [Empty Folder] C:\Users\Hanss-Rauch\appdata\local\{2C14440F-1590-4610-9715-A0B516603DD3}
Successfully deleted: [Empty Folder] C:\Users\Hanss-Rauch\appdata\local\{3C65DFEE-9D50-4D10-8D7E-E663691A3DEA}
Successfully deleted: [Empty Folder] C:\Users\Hanss-Rauch\appdata\local\{3E56FBE1-915D-4897-8A76-B099A16BF14B}
Successfully deleted: [Empty Folder] C:\Users\Hanss-Rauch\appdata\local\{3EFF1556-26D7-4D6F-A3E1-40CDF2BCB02C}
Successfully deleted: [Empty Folder] C:\Users\Hanss-Rauch\appdata\local\{40A0CAB4-532D-4C88-93D8-44B7434F68D4}
Successfully deleted: [Empty Folder] C:\Users\Hanss-Rauch\appdata\local\{42820DD6-C375-489E-8AD9-91F6A504F6DB}
Successfully deleted: [Empty Folder] C:\Users\Hanss-Rauch\appdata\local\{45BB41D9-C2B9-48F9-BBF6-8DBACA5216D0}
Successfully deleted: [Empty Folder] C:\Users\Hanss-Rauch\appdata\local\{5A1374C7-5826-44A9-8BF6-F020527CBA26}
Successfully deleted: [Empty Folder] C:\Users\Hanss-Rauch\appdata\local\{765B2F3D-6A5B-4102-847A-2141DC36F526}
Successfully deleted: [Empty Folder] C:\Users\Hanss-Rauch\appdata\local\{774B0064-2DC5-473E-9E7B-75F4E03F9181}
Successfully deleted: [Empty Folder] C:\Users\Hanss-Rauch\appdata\local\{7EB99679-5254-4DC3-BA45-072B7790A385}
Successfully deleted: [Empty Folder] C:\Users\Hanss-Rauch\appdata\local\{8160B864-B9BB-46E9-9838-8ADA4324A11A}
Successfully deleted: [Empty Folder] C:\Users\Hanss-Rauch\appdata\local\{9E554708-7407-4804-B1B9-E5504D4A733D}
Successfully deleted: [Empty Folder] C:\Users\Hanss-Rauch\appdata\local\{9F399457-6A1F-441F-BF6C-DD5421F229B2}
Successfully deleted: [Empty Folder] C:\Users\Hanss-Rauch\appdata\local\{9FF2C801-1599-4330-BB6D-E5B8319B1A5C}
Successfully deleted: [Empty Folder] C:\Users\Hanss-Rauch\appdata\local\{a4b8a65b-7c68-0548-2b35-dddac8e0ee63}
Successfully deleted: [Empty Folder] C:\Users\Hanss-Rauch\appdata\local\{A804495E-EADC-4DAA-A46B-59D7AD5FDA01}
Successfully deleted: [Empty Folder] C:\Users\Hanss-Rauch\appdata\local\{AC7B8BAC-9856-48A2-A2D5-7D42C7668348}
Successfully deleted: [Empty Folder] C:\Users\Hanss-Rauch\appdata\local\{C6888A24-32B9-49B8-B189-6FD7C2315F98}
Successfully deleted: [Empty Folder] C:\Users\Hanss-Rauch\appdata\local\{C6D35F51-6778-41E8-A369-9D1F97095006}
Successfully deleted: [Empty Folder] C:\Users\Hanss-Rauch\appdata\local\{CC76D503-7534-4E04-8CFF-C5F35C14BF73}
Successfully deleted: [Empty Folder] C:\Users\Hanss-Rauch\appdata\local\{DA89ED59-C80A-4E59-9141-A8E746600222}
Successfully deleted: [Empty Folder] C:\Users\Hanss-Rauch\appdata\local\{DD7C675F-6B61-4A2A-AA20-2410396608F9}
Successfully deleted: [Empty Folder] C:\Users\Hanss-Rauch\appdata\local\{F59EC8EA-AF07-47BC-B243-E41486EBB10C}
Successfully deleted: [Empty Folder] C:\Users\Hanss-Rauch\appdata\local\{FD8ADD8C-B347-44CA-9EB2-037E54C76D9E}
Successfully deleted: [Folder] "C:\Windows\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}"
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 21.08.2013 at 21:32:54,53
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
22.08.2013, 08:16
| #9 |
| /// the machine /// TB-Ausbilder | Windows Firewall lässt sich nicht aktivieren fehlercode 0x80070424ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
22.08.2013, 11:56
| #10 |
| | Windows Firewall lässt sich nicht aktivieren fehlercode 0x80070424Code:
ATTFilter can result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-08-2013 02
Ran by Hanss-Rauch (administrator) on 21-08-2013 21:45:21
Running from C:\Users\Hanss-Rauch\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
(Spotify Ltd) C:\Users\Hanss-Rauch\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Google Inc.) C:\Users\Hanss-Rauch\AppData\Local\Programs\Google\MusicManager\MusicManager.exe
(Spotify Ltd) C:\Users\Hanss-Rauch\AppData\Roaming\Spotify\spotify.exe
() C:\Users\Hanss-Rauch\AppData\Local\WebPlayer\Online Weather\WebPlayer.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
() C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\klwtblfs.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\Hanss-Rauch\Desktop\FRST64 (1).exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-06-16] (Adobe Systems Incorporated)
HKCU\...\Run: [EADM] - C:\Program Files (x86)\Origin\Origin.exe [3549528 2013-07-30] (Electronic Arts)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Hanss-Rauch\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-07-07] (Spotify Ltd)
HKCU\...\Run: [Sony PC Companion] - C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [449248 2013-05-29] (Sony)
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1476104 2012-12-20] (Samsung)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)
HKCU\...\Run: [MusicManager] - C:\Users\Hanss-Rauch\AppData\Local\Programs\Google\MusicManager\MusicManager.exe [7345664 2013-06-21] (Google Inc.)
HKCU\...\Run: [Spotify] - C:\Users\Hanss-Rauch\AppData\Roaming\Spotify\Spotify.exe [4640768 2013-07-07] (Spotify Ltd)
HKCU\...\Run: [Online Weather] - C:\Users\Hanss-Rauch\AppData\Local\WebPlayer\Online Weather\WebPlayer.exe [202752 2012-10-26] ()
HKLM-x32\...\Run: [BlueStacks Agent] - C:\Program Files (x86)\BlueStacks\HD-Agent.exe [581496 2012-09-24] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [310280 2012-12-20] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-15] (Apple Inc.)
HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356376 2013-05-16] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2255184 2013-06-28] (LogMeIn Inc.)
Startup: C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
ProxyServer: :
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2431} URL = hxxp://dts.search-results.com/web?src=ieb&gct=ds&appid=109&systemid=431&apn_dtid=BND431&apn_ptnrs=AGH&o=APN10656&apn_uid=1508500189704569&q={searchTerms}
SearchScopes: HKLM - {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2431} URL = hxxp://dts.search-results.com/web?src=ieb&gct=ds&appid=109&systemid=431&apn_dtid=BND431&apn_ptnrs=AGH&o=APN10656&apn_uid=1508500189704569&q={searchTerms}
SearchScopes: HKLM-x32 - Backup.Old.DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5}
SearchScopes: HKLM-x32 - {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKCU - Backup.Old.DefaultScope {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
SearchScopes: HKCU - {80c554b9-c7f8-4a21-9471-06d606da78a2} URL =
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - GamesBar (W) - {2e94b700-eafb-4c9e-a696-77200aa3f89b} - C:\Program Files (x86)\gamesagogo_w3i\encyclopediabritannicagamesbarX.dll No File
DPF: HKLM-x32 {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} https://battlefield.play4free.com/static/updater/BP4FUpdater_1.0.95.0.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog5 01 %SystemRoot%\System32\mswsock.dll [232448] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5-x64 01 %SystemRoot%\System32\mswsock.dll [326144] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\Firefox\Profiles\h8jupusy.default
FF Homepage: user_pref("browser.startup.homepage", );
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=10.11.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.11.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @ei.MyWebFace_5a.com/Plugin - C:\Program Files (x86)\MyWebFace_5aEI\Installr\1.bin\NP5aEISB.dll No File
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.4 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Hanss-Rauch\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Hanss-Rauch\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10174.dll (Amazon.com, Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Extension: No Name - C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF HKLM-x32\...\Firefox\Extensions: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com
FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com
Chrome:
=======
CHR RestoreOnStartup: "https://www.google.de/", "hxxp://www.sat1.de/video"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.57\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.57\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.57\pdf.dll ()
CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\Hanss-Rauch\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh\13.0.1.4190_1\plugin/online_banking_npapi.dll (Kaspersky Lab ZAO)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (AmazonMP3DownloaderPlugin) - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10174.dll (Amazon.com, Inc.)
CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll (ESN Social Software AB)
CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
CHR Plugin: (ESN Sonar API) - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (PDF-XChange Viewer) - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
CHR Plugin: (Google Update) - C:\Users\Hanss-Rauch\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Google Talk Plugin) - C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
CHR Plugin: (Google Talk Plugin Video Accelerator) - C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
CHR Plugin: (Google Talk Plugin Video Renderer) - C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Extension: (Google Docs) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Add to Amazon Wish List) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ciagpekplgpbepdgggflgmahnjgiaced\1.0.0.10_0
CHR Extension: (Google Search) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Kaspersky URL Advisor) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\13.0.1.4190_1
CHR Extension: (Safe Money) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh\13.0.1.4190_1
CHR Extension: (Content Blocker) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail\13.0.1.4190_1
CHR Extension: (Virtual Keyboard) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\13.0.1.4292_1
CHR Extension: (SmallringFX DarkBlue Theme) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfijmgohofmpjlcgmjplbpmkpchdhpk\1.7_0
CHR Extension: (Google Wallet Service) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.9_1
CHR Extension: (Gmail) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR Extension: (Anti-Banner) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\13.0.1.4190_1
CHR HKLM-x32\...\Chrome\Extension: [aaaaabfjnbeinlpljodiajipidiompfl] - C:\Users\Hanss-Rauch\AppData\Local\APN\GoogleCRXs\aaaaabfjnbeinlpljodiajipidiompfl_7.15.20.0.crx
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\urladvisor.crx
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\online_banking_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\content_blocker_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\virtkbd.crx
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\ab.crx
==================== Services (Whitelisted) =================
R2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171600 2012-09-23] (Adobe Systems Incorporated)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-12-19] (Advanced Micro Devices, Inc.)
S2 AODService; C:\Program Files (x86)\AMD\OverDrive\AODAssist.exe [137256 2013-05-24] ()
R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356376 2013-05-16] (Kaspersky Lab ZAO)
R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393080 2012-09-24] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384888 2012-09-24] (BlueStack Systems, Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 MpsSvc; C:\Windows\SysWow64\. [0 2013-08-21] ()
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-07-17] ()
S3 TDslMgrService; C:\Program Files (x86)\DSL-Manager\DslMgrSvc.exe [307200 2008-10-23] (T-Systems Enterprise Services GmbH)
S2 vToolbarUpdater15.5.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe [x]
==================== Drivers (Whitelisted) ====================
R2 AODDriver4.2; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [57472 2012-04-09] (Advanced Micro Devices)
R2 AODDriver4.2.0; C:\Program Files (x86)\AMD\OverDrive\amd64\AODDriver2.sys [58088 2013-05-24] (Advanced Micro Devices)
R2 AODDriver4.2.0; C:\Program Files (x86)\AMD\OverDrive\amd64\AODDriver2.sys [58088 2013-05-24] (Advanced Micro Devices)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2012-08-06] ()
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2012-08-06] ()
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [45856 2013-08-15] (AVG Technologies)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [71032 2012-09-24] (BlueStack Systems)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [71032 2012-09-24] (BlueStack Systems)
R1 DslMNLwf; C:\Windows\System32\DRIVERS\dslmnlwf.sys [19008 2007-08-01] (T-Systems Enterprise Services GmbH)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-06-19] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620128 2013-05-16] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29016 2013-05-16] (Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29528 2013-05-16] (Kaspersky Lab)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-07-29] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-05-16] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S1 mbmiodrvr; C:\Windows\syswow64\mbmiodrvr.sys [4608 2004-04-10] (cansoft@livewiredev.com)
S1 mbmiodrvr; C:\Windows\syswow64\mbmiodrvr.sys [4608 2004-04-10] (cansoft@livewiredev.com)
S3 MEMSWEEP2; C:\Windows\system32\BF69.tmp [6144 2009-06-18] (Sophos Plc)
S3 MEMSWEEP2; C:\Windows\system32\BF69.tmp [6144 2009-06-18] (Sophos Plc)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-17] ()
S3 PciDumpr; C:\Program Files (x86)\Common Files\T-Com\DSLCheck\PciDumpr.sys [2144 2001-01-26] ()
S3 PciDumpr; C:\Program Files (x86)\Common Files\T-Com\DSLCheck\PciDumpr.sys [2144 2001-01-26] ()
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation)
S1 SAVRKBootTasks; C:\Windows\SysWow64\SAVRKBootTasks.sys [18816 2009-06-18] (Sophos Plc)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S4 nvlddmkm; system32\DRIVERS\nvlddmkm.sys [x]
S1 SAVRKBootTasks; \??\C:\Windows\system32\SAVRKBootTasks.sys [x]
S3 X6va008; \??\C:\Windows\SysWOW64\Drivers\X6va008 [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-21 21:44 - 2013-08-21 21:45 - 01576476 _____ (Farbar) C:\Users\Hanss-Rauch\Downloads\FRST64 (1).exe
2013-08-21 21:32 - 2013-08-21 21:32 - 00010604 _____ C:\Users\Hanss-Rauch\Desktop\JRT.txt
2013-08-21 21:20 - 2013-08-21 21:20 - 00000000 ____D C:\Windows\ERUNT
2013-08-21 21:19 - 2013-08-21 21:19 - 01018947 _____ (Thisisu) C:\Users\Hanss-Rauch\Downloads\JRT.exe
2013-08-21 21:19 - 2013-08-21 21:19 - 01018947 _____ (Thisisu) C:\Users\Hanss-Rauch\Desktop\JRT.exe
2013-08-21 21:06 - 2013-08-21 21:08 - 00000000 ____D C:\AdwCleaner
2013-08-21 21:04 - 2013-08-21 21:04 - 00975858 _____ C:\Users\Hanss-Rauch\Downloads\adwcleaner.exe
2013-08-21 17:53 - 2013-08-21 17:53 - 00001109 _____ C:\Users\Hanss-Rauch\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-21 17:52 - 2013-08-21 17:52 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Hanss-Rauch\Downloads\mbam-setup-1.75.0.1300.exe
2013-08-21 17:52 - 2013-08-21 17:52 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-21 17:52 - 2013-08-21 17:52 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-21 17:52 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-08-21 16:44 - 2013-08-21 16:44 - 00013393 _____ C:\Users\Hanss-Rauch\Desktop\ComboFix - Verknüpfung.lnk
2013-08-21 15:06 - 2013-08-21 15:06 - 00075102 _____ C:\ComboFix.txt
2013-08-21 14:33 - 2013-08-21 15:06 - 00000000 ____D C:\Qoobox
2013-08-21 14:33 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-08-21 14:33 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-08-21 14:33 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-08-21 14:33 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-08-21 14:33 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-08-21 14:33 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-08-21 14:33 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-08-21 14:33 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-08-21 14:32 - 2013-08-21 15:04 - 00000000 ____D C:\Windows\erdnt
2013-08-21 14:31 - 2013-08-21 14:32 - 05109244 ____R (Swearware) C:\Users\Hanss-Rauch\Downloads\ComboFix.exe
2013-08-21 13:19 - 2013-08-21 13:29 - 00029212 _____ C:\Users\Hanss-Rauch\Desktop\Addition.txt
2013-08-21 13:00 - 2013-08-21 13:00 - 00000000 ____D C:\FRST
2013-08-21 12:59 - 2013-08-21 12:59 - 01576164 _____ (Farbar) C:\Users\Hanss-Rauch\Downloads\FRST64.exe
2013-08-21 12:05 - 2013-08-21 12:05 - 00347424 _____ (Microsoft Corporation) C:\Users\Hanss-Rauch\Downloads\MicrosoftFixit.wu.Run.exe
2013-08-21 11:51 - 2013-08-21 11:51 - 01010176 _____ C:\Users\Hanss-Rauch\Downloads\MicrosoftFixit50884.msi
2013-08-19 17:53 - 2013-08-19 17:52 - 03042115 _____ C:\Users\Hanss-Rauch\Desktop\industrialcraft-2_1.115.308-lf (1).rar
2013-08-19 17:52 - 2013-08-19 17:52 - 03042115 _____ C:\Users\Hanss-Rauch\Downloads\industrialcraft-2_1.115.308-lf (1).rar
2013-08-18 16:19 - 2013-08-18 16:19 - 00029112 _____ C:\Users\Hanss-Rauch\Downloads\Printer-Block-Mod-1.5.2.zip
2013-08-18 16:15 - 2013-08-18 16:15 - 00300193 _____ C:\Users\Hanss-Rauch\Downloads\RoadWorks-Mod-1.5.2.rar
2013-08-18 16:13 - 2013-08-18 16:13 - 00230381 _____ C:\Users\Hanss-Rauch\Downloads\TwitchTV-IRC-Reborn-Mod-1.5.2.zip
2013-08-18 13:34 - 2013-08-18 13:34 - 00000000 ____D C:\Users\Hanss-Rauch\Desktop\resources
2013-08-18 13:33 - 2013-08-18 13:34 - 02999474 _____ C:\Users\Hanss-Rauch\Downloads\Project-Red-Mod-1.5.2.jar
2013-08-18 13:32 - 2013-08-18 13:33 - 02272553 _____ C:\Users\Hanss-Rauch\Downloads\Railcraft-Mod-1.5.2.jar
2013-08-17 19:15 - 2013-08-17 19:15 - 00124927 _____ C:\Users\Hanss-Rauch\Downloads\Instant-Blocks-Mod-1.5.2.zip
2013-08-17 19:13 - 2013-08-17 19:13 - 00117705 _____ C:\Users\Hanss-Rauch\Downloads\WR-CBE-Core-1.5.2.jar
2013-08-17 19:12 - 2013-08-17 19:12 - 00378337 _____ C:\Users\Hanss-Rauch\Downloads\Not-Enough-Items-1.5.2.jar
2013-08-17 19:08 - 2013-08-17 19:08 - 02225575 _____ C:\Users\Hanss-Rauch\Downloads\Chisel-Mod-1.5.2.jar
2013-08-17 18:56 - 2013-08-17 18:56 - 01229617 _____ C:\Users\Hanss-Rauch\Downloads\buildcraft-A-3.7.1.jar
2013-08-17 18:55 - 2013-08-17 18:55 - 00069465 _____ C:\Users\Hanss-Rauch\Downloads\Railcraft-Mod-1.5.2-API.zip
2013-08-17 18:48 - 2013-08-17 18:49 - 00167296 _____ C:\Users\Hanss-Rauch\Downloads\More-Pistons-Mod-1.5.2.zip
2013-08-17 18:45 - 2013-08-17 18:45 - 00037784 _____ C:\Users\Hanss-Rauch\Downloads\Light-Bridges-and-Doors-Mod-1.5.2.zip
2013-08-16 21:10 - 2013-08-16 21:10 - 00205945 _____ C:\Users\Hanss-Rauch\Downloads\More-Explosives-Mod-1.5.2.zip
2013-08-16 21:05 - 2013-08-16 21:05 - 00019040 _____ C:\Users\Hanss-Rauch\Downloads\[1.5.2] Useful Redstone Mod.zip
2013-08-16 19:18 - 2013-08-16 19:18 - 03042115 _____ C:\Users\Hanss-Rauch\Downloads\industrialcraft-2_1.115.308-lf.rar
2013-08-16 19:15 - 2013-08-16 19:15 - 00205948 _____ C:\Users\Hanss-Rauch\Downloads\MoreExplosivesModRelease3.5forMC1.5.1.zip
2013-08-16 19:14 - 2013-08-16 19:14 - 00199576 _____ C:\Users\Hanss-Rauch\Downloads\MoreExplosivesModRelease3.7forMinecraft1.6.2.zip
2013-08-16 19:10 - 2013-08-21 21:12 - 00000000 ____D C:\Users\HANSS-~1\AppData\Local\LogMeIn Hamachi
2013-08-16 19:10 - 2013-08-16 19:10 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-08-16 19:08 - 2013-08-16 19:08 - 04292608 _____ C:\Users\Hanss-Rauch\Downloads\hamachi_2.1.0.362.msi
2013-08-16 12:27 - 2013-08-16 12:27 - 01758824 _____ C:\Users\Hanss-Rauch\Downloads\winrar-x64-420d (2).exe
2013-08-16 12:27 - 2013-08-16 12:27 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-08-16 12:27 - 2013-08-16 12:27 - 00000000 ____D C:\Program Files\WinRAR
2013-08-16 12:25 - 2013-08-16 12:33 - 2463242240 _____ C:\Users\Hanss-Rauch\Downloads\X15-65740 (1).iso
2013-08-16 12:18 - 2013-08-16 12:25 - 2147484386 _____ C:\Users\Hanss-Rauch\Downloads\X15-65740.iso
2013-08-12 18:06 - 2013-08-12 18:06 - 00000000 ____D C:\Users\Hanss-Rauch\Desktop\spc
2013-08-12 15:53 - 2013-08-12 15:53 - 01082179 _____ C:\Users\Hanss-Rauch\Downloads\SinglePlayerCommands-MC1.5.2_V4.8.jar
2013-08-12 15:49 - 2013-08-12 15:49 - 02033732 _____ C:\Users\Hanss-Rauch\Downloads\minecraftforge-universal-1.5.2-7.8.1.738.zip
2013-08-12 15:47 - 2013-08-12 15:47 - 05564661 _____ C:\Users\Hanss-Rauch\Downloads\1.5.2.jar
2013-08-12 15:42 - 2013-08-12 15:42 - 01950783 _____ C:\Users\Hanss-Rauch\Downloads\minecraftforge_universal_1_5_2_7_8_0_696.zip.zip
2013-08-12 15:25 - 2013-08-12 15:25 - 00267043 _____ C:\Users\Hanss-Rauch\Downloads\WirelessRedstone.zip
2013-08-12 15:25 - 2013-08-12 15:25 - 00267043 _____ C:\Users\Hanss-Rauch\Desktop\WirelessRedstone.zip
2013-08-12 15:21 - 2013-08-12 15:19 - 00675988 _____ C:\Users\Hanss-Rauch\Desktop\Minecraft (2).exe
2013-08-12 15:19 - 2013-08-12 15:19 - 00675988 _____ C:\Users\Hanss-Rauch\Downloads\Minecraft.exe
2013-08-11 20:24 - 2013-08-11 20:24 - 09304408 _____ (Wargaming.net ) C:\Users\Hanss-Rauch\Downloads\WoT_internet_install_eu.exe
2013-08-11 12:48 - 2013-08-07 18:33 - 01036312 _____ C:\Users\Hanss-Rauch\Desktop\ComputerCraft Mod 1.5.2 (2).zip
2013-08-09 18:11 - 2013-08-09 18:11 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-08-09 18:11 - 2013-08-09 18:11 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-08-09 18:11 - 2013-08-09 18:11 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-08-09 18:11 - 2013-08-09 18:11 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-08-09 18:11 - 2013-08-09 18:11 - 00000000 ____D C:\Program Files (x86)\Java
2013-08-07 18:33 - 2013-08-07 18:33 - 01036312 _____ C:\Users\Hanss-Rauch\Downloads\ComputerCraft Mod 1.5.2.zip
2013-08-07 18:33 - 2013-08-07 18:33 - 01036312 _____ C:\Users\Hanss-Rauch\Desktop\ComputerCraft Mod 1.5.2.zip
2013-08-06 20:30 - 2013-08-06 20:30 - 00933417 _____ C:\Users\Hanss-Rauch\Downloads\WarGear V6.zip
2013-08-05 19:08 - 2013-08-05 20:15 - 53886249 _____ C:\Users\Hanss-Rauch\Downloads\Misa500 (1).zip
2013-08-05 17:38 - 2013-08-05 17:38 - 00109656 _____ C:\Users\Hanss-Rauch\Downloads\Nicht bestätigt 510151.crdownload
2013-08-04 22:34 - 2013-08-04 22:34 - 00000000 ____D C:\ProgramData\Package Cache
2013-08-04 22:31 - 2013-08-04 22:32 - 245472312 _____ (AMD Inc.) C:\Users\Hanss-Rauch\Downloads\amd_catalyst_13.8_beta.exe
2013-08-04 14:35 - 2013-08-04 14:35 - 00002212 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-08-01 20:49 - 2013-08-01 20:49 - 02143832 _____ C:\Users\Hanss-Rauch\Downloads\instsf449.exe
2013-08-01 20:34 - 2013-08-01 20:34 - 00002067 _____ C:\Users\Public\Desktop\AMD OverDrive.lnk
2013-08-01 20:32 - 2013-08-01 20:32 - 31829816 _____ (Advanced Micro Devices, Inc. ) C:\Users\Hanss-Rauch\Downloads\aod_setup_4.2.6.exe
2013-08-01 20:12 - 2013-08-01 20:12 - 00338140 _____ C:\Users\Hanss-Rauch\Downloads\CoreTemp32_rc5.zip
2013-08-01 20:12 - 2013-08-01 20:12 - 00000000 ____D C:\Users\Hanss-Rauch\Downloads\CoreTemp32_rc5
2013-08-01 19:48 - 2013-08-01 20:43 - 00000000 ____D C:\Users\Hanss-Rauch\Downloads\hwmonitor_123
2013-08-01 19:46 - 2013-08-01 19:46 - 01194216 _____ C:\Users\Hanss-Rauch\Downloads\hwmonitor_123.zip
2013-08-01 18:48 - 2013-08-01 18:48 - 00252446 _____ C:\Users\Hanss-Rauch\Downloads\1_5_2_reiminimap_v3_3_05.zip.zip
2013-08-01 18:41 - 2013-08-01 18:41 - 24831527 _____ C:\Users\Hanss-Rauch\Downloads\Master Pack 1.5.2.rar
2013-08-01 18:38 - 2013-08-01 18:38 - 00443952 _____ C:\Users\Hanss-Rauch\Downloads\Flans Mod 2.3.1 for Minecraft 1.5.2 Universal (1).zip
2013-08-01 18:38 - 2013-08-01 18:38 - 00443952 _____ C:\Users\Hanss-Rauch\Desktop\Flans Mod 2.3.1 for Minecraft 1.5.2 Universal (1).zip
2013-07-31 21:05 - 2013-07-31 21:06 - 22532237 _____ C:\Users\Hanss-Rauch\Downloads\JaninaCraft_1_5_1_Release_x64.zip
2013-07-31 17:52 - 2013-07-31 17:52 - 00443952 _____ C:\Users\Hanss-Rauch\Downloads\Flans Mod 2.3.1 for Minecraft 1.5.2 Universal.zip
2013-07-31 16:19 - 2013-07-31 16:19 - 00472198 _____ C:\Users\Hanss-Rauch\Downloads\Sonic Ether's Unbelievable Shaders 1.5.2.zip
2013-07-31 16:14 - 2013-07-31 16:15 - 01082179 _____ C:\Users\Hanss-Rauch\Downloads\Single-Player-Commands-1.5.2.jar
2013-07-31 16:11 - 2013-07-31 16:11 - 01975130 _____ C:\Users\Hanss-Rauch\Downloads\minecraftforge-universal-1.5.2-7.8.0.684.zip
2013-07-31 16:10 - 2013-07-31 16:10 - 01758824 _____ C:\Users\Hanss-Rauch\Downloads\winrar-x64-420d (1).exe
2013-07-31 15:05 - 2013-07-31 15:05 - 08483521 _____ C:\Users\Hanss-Rauch\Downloads\ProbeII_V10481_XpVistaWin7.zip
2013-07-31 15:05 - 2013-07-31 15:05 - 00000000 ____D C:\Users\Hanss-Rauch\Downloads\ProbeII_V10481_XpVistaWin7
2013-07-31 15:04 - 2013-07-31 15:04 - 04300194 _____ C:\Users\Hanss-Rauch\Downloads\PCProbe22502.zip
2013-07-31 15:00 - 2013-07-31 15:00 - 01282759 _____ (Alexander van Kaam ) C:\Users\Hanss-Rauch\Downloads\MBM5370.exe
2013-07-31 15:00 - 2013-07-31 15:00 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MBM 5
2013-07-31 15:00 - 2004-04-10 09:43 - 00004608 _____ (cansoft@livewiredev.com) C:\Windows\SysWOW64\mbmiodrvr.sys
2013-07-30 20:24 - 2013-07-30 20:24 - 12973435 _____ C:\Users\Hanss-Rauch\Downloads\craftbukkit-1.5.2-R1.0 (1).jar
2013-07-30 20:23 - 2013-07-30 20:23 - 04895118 _____ C:\Users\Hanss-Rauch\Downloads\bukkit-1.6.2-R0.1-20130724.060108-7.jar
2013-07-30 19:51 - 2013-07-30 19:51 - 01758824 _____ C:\Users\Hanss-Rauch\Downloads\winrar-x64-420d.exe
2013-07-30 19:49 - 2013-07-30 19:51 - 00001621 _____ C:\Users\Hanss-Rauch\Desktop\startbat.rar
2013-07-30 19:46 - 2013-07-30 19:46 - 00001145 _____ C:\Users\Hanss-Rauch\Downloads\startbat.rar
2013-07-30 19:45 - 2013-07-30 19:46 - 12973435 _____ C:\Users\Hanss-Rauch\Downloads\craftbukkit-1.5.2-R1.0.jar
2013-07-29 14:25 - 2013-07-29 14:25 - 00262144 _____ C:\Windows\system32\config\elam
2013-07-29 14:22 - 2013-07-29 14:22 - 00002200 _____ C:\Users\Hanss-Rauch\Desktop\Online Weather.lnk
2013-07-29 14:22 - 2013-07-29 14:22 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Online Weather
2013-07-29 14:22 - 2013-07-29 14:22 - 00000000 ____D C:\Users\HANSS-~1\AppData\Local\WebPlayer
2013-07-29 13:58 - 2013-07-29 13:55 - 00121013 _____ C:\Users\Hanss-Rauch\Desktop\BFp4f Funds Hack v2.0.rar
2013-07-29 13:30 - 2013-07-29 13:30 - 00000000 ____D C:\Users\Hanss-Rauch\Desktop\kavkisfile.com-15-July-2013
2013-07-29 13:19 - 2013-07-29 13:19 - 00002340 _____ C:\Users\Hanss-Rauch\Desktop\Sicherer Zahlungsverkehr.lnk
2013-07-29 13:18 - 2013-07-29 13:01 - 00248634 _____ C:\Users\Hanss-Rauch\Desktop\kavkisfile.com-15-July-2013.zip
2013-07-29 13:17 - 2013-07-29 13:17 - 00001146 _____ C:\Users\Public\Desktop\Kaspersky Internet Security 2013.lnk
2013-07-29 13:17 - 2013-05-16 07:27 - 00064856 _____ (Kaspersky Lab) C:\Windows\system32\klfphc.dll
2013-07-29 13:16 - 2013-08-21 21:26 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-07-29 13:16 - 2013-07-29 13:16 - 00000000 ____D C:\Windows\ELAMBKUP
2013-07-29 13:16 - 2013-07-29 13:16 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-07-29 13:16 - 2013-05-16 07:27 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2013-07-29 13:16 - 2013-05-16 07:27 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
==================== One Month Modified Files and Folders =======
2013-08-21 21:45 - 2013-08-21 21:44 - 01576476 _____ (Farbar) C:\Users\Hanss-Rauch\Downloads\FRST64 (1).exe
2013-08-21 21:42 - 2012-12-11 11:04 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Spotify
2013-08-21 21:33 - 2012-10-28 22:29 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-21 21:32 - 2013-08-21 21:32 - 00010604 _____ C:\Users\Hanss-Rauch\Desktop\JRT.txt
2013-08-21 21:29 - 2012-09-02 19:22 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Skype
2013-08-21 21:26 - 2013-07-29 13:16 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-08-21 21:22 - 2009-07-14 06:45 - 00021856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-21 21:22 - 2009-07-14 06:45 - 00021856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-21 21:20 - 2013-08-21 21:20 - 00000000 ____D C:\Windows\ERUNT
2013-08-21 21:19 - 2013-08-21 21:19 - 01018947 _____ (Thisisu) C:\Users\Hanss-Rauch\Downloads\JRT.exe
2013-08-21 21:19 - 2013-08-21 21:19 - 01018947 _____ (Thisisu) C:\Users\Hanss-Rauch\Desktop\JRT.exe
2013-08-21 21:18 - 2012-03-16 10:49 - 01963188 _____ C:\Windows\WindowsUpdate.log
2013-08-21 21:12 - 2013-08-16 19:10 - 00000000 ____D C:\Users\HANSS-~1\AppData\Local\LogMeIn Hamachi
2013-08-21 21:12 - 2012-10-28 22:29 - 00001116 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-21 21:11 - 2002-01-01 20:46 - 00000000 ____D C:\Program Files (x86)\Origin
2013-08-21 21:10 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-21 21:10 - 2009-07-14 06:51 - 00113402 _____ C:\Windows\setupact.log
2013-08-21 21:08 - 2013-08-21 21:06 - 00000000 ____D C:\AdwCleaner
2013-08-21 21:08 - 2012-05-01 20:15 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-21 21:08 - 2012-03-16 10:49 - 00000000 ___RD C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-08-21 21:04 - 2013-08-21 21:04 - 00975858 _____ C:\Users\Hanss-Rauch\Downloads\adwcleaner.exe
2013-08-21 21:02 - 2012-10-12 11:32 - 00001144 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2922039653-137104462-887748758-1000UA.job
2013-08-21 20:49 - 2010-11-21 05:47 - 00177944 _____ C:\Windows\PFRO.log
2013-08-21 20:47 - 2012-08-21 12:16 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-21 20:32 - 2013-03-11 19:56 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-08-21 20:32 - 2012-05-24 18:17 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2013-08-21 20:31 - 2013-03-11 19:56 - 00280904 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-08-21 19:07 - 2012-10-03 15:08 - 00000000 ____D C:\Program Files (x86)\vGrabber-software
2013-08-21 17:53 - 2013-08-21 17:53 - 00001109 _____ C:\Users\Hanss-Rauch\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-21 17:52 - 2013-08-21 17:52 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Hanss-Rauch\Downloads\mbam-setup-1.75.0.1300.exe
2013-08-21 17:52 - 2013-08-21 17:52 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-21 17:52 - 2013-08-21 17:52 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-21 16:44 - 2013-08-21 16:44 - 00013393 _____ C:\Users\Hanss-Rauch\Desktop\ComboFix - Verknüpfung.lnk
2013-08-21 15:47 - 2012-08-21 12:16 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-21 15:47 - 2012-08-21 12:16 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-21 15:47 - 2012-03-19 19:47 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-21 15:15 - 2012-11-01 19:42 - 00003234 _____ C:\Windows\System32\Tasks\SidebarExecute
2013-08-21 15:06 - 2013-08-21 15:06 - 00075102 _____ C:\ComboFix.txt
2013-08-21 15:06 - 2013-08-21 14:33 - 00000000 ____D C:\Qoobox
2013-08-21 15:06 - 2012-09-24 13:43 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Local\Apps\2.0
2013-08-21 15:06 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-08-21 15:04 - 2013-08-21 14:32 - 00000000 ____D C:\Windows\erdnt
2013-08-21 14:59 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-08-21 14:54 - 2013-03-08 22:50 - 00000000 ____D C:\Program Files (x86)\DSL-Manager
2013-08-21 14:32 - 2013-08-21 14:31 - 05109244 ____R (Swearware) C:\Users\Hanss-Rauch\Downloads\ComboFix.exe
2013-08-21 13:59 - 2013-03-09 21:04 - 00002255 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-08-21 13:29 - 2013-08-21 13:19 - 00029212 _____ C:\Users\Hanss-Rauch\Desktop\Addition.txt
2013-08-21 13:00 - 2013-08-21 13:00 - 00000000 ____D C:\FRST
2013-08-21 12:59 - 2013-08-21 12:59 - 01576164 _____ (Farbar) C:\Users\Hanss-Rauch\Downloads\FRST64.exe
2013-08-21 12:05 - 2013-08-21 12:05 - 00347424 _____ (Microsoft Corporation) C:\Users\Hanss-Rauch\Downloads\MicrosoftFixit.wu.Run.exe
2013-08-21 12:02 - 2012-10-12 11:32 - 00001092 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2922039653-137104462-887748758-1000Core.job
2013-08-21 11:51 - 2013-08-21 11:51 - 01010176 _____ C:\Users\Hanss-Rauch\Downloads\MicrosoftFixit50884.msi
2013-08-20 23:14 - 2013-03-16 13:55 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\.minecraft
2013-08-20 22:28 - 2011-04-12 09:43 - 04918398 _____ C:\Windows\system32\perfh007.dat
2013-08-20 22:28 - 2011-04-12 09:43 - 01453938 _____ C:\Windows\system32\perfc007.dat
2013-08-20 22:28 - 2009-07-14 07:13 - 00005020 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-20 16:35 - 2012-12-11 11:06 - 00000000 ____D C:\Users\HANSS-~1\AppData\Local\Spotify
2013-08-19 17:52 - 2013-08-19 17:53 - 03042115 _____ C:\Users\Hanss-Rauch\Desktop\industrialcraft-2_1.115.308-lf (1).rar
2013-08-19 17:52 - 2013-08-19 17:52 - 03042115 _____ C:\Users\Hanss-Rauch\Downloads\industrialcraft-2_1.115.308-lf (1).rar
2013-08-18 16:19 - 2013-08-18 16:19 - 00029112 _____ C:\Users\Hanss-Rauch\Downloads\Printer-Block-Mod-1.5.2.zip
2013-08-18 16:15 - 2013-08-18 16:15 - 00300193 _____ C:\Users\Hanss-Rauch\Downloads\RoadWorks-Mod-1.5.2.rar
2013-08-18 16:13 - 2013-08-18 16:13 - 00230381 _____ C:\Users\Hanss-Rauch\Downloads\TwitchTV-IRC-Reborn-Mod-1.5.2.zip
2013-08-18 13:34 - 2013-08-18 13:34 - 00000000 ____D C:\Users\Hanss-Rauch\Desktop\resources
2013-08-18 13:34 - 2013-08-18 13:33 - 02999474 _____ C:\Users\Hanss-Rauch\Downloads\Project-Red-Mod-1.5.2.jar
2013-08-18 13:33 - 2013-08-18 13:32 - 02272553 _____ C:\Users\Hanss-Rauch\Downloads\Railcraft-Mod-1.5.2.jar
2013-08-17 19:15 - 2013-08-17 19:15 - 00124927 _____ C:\Users\Hanss-Rauch\Downloads\Instant-Blocks-Mod-1.5.2.zip
2013-08-17 19:13 - 2013-08-17 19:13 - 00117705 _____ C:\Users\Hanss-Rauch\Downloads\WR-CBE-Core-1.5.2.jar
2013-08-17 19:12 - 2013-08-17 19:12 - 00378337 _____ C:\Users\Hanss-Rauch\Downloads\Not-Enough-Items-1.5.2.jar
2013-08-17 19:08 - 2013-08-17 19:08 - 02225575 _____ C:\Users\Hanss-Rauch\Downloads\Chisel-Mod-1.5.2.jar
2013-08-17 18:56 - 2013-08-17 18:56 - 01229617 _____ C:\Users\Hanss-Rauch\Downloads\buildcraft-A-3.7.1.jar
2013-08-17 18:55 - 2013-08-17 18:55 - 00069465 _____ C:\Users\Hanss-Rauch\Downloads\Railcraft-Mod-1.5.2-API.zip
2013-08-17 18:49 - 2013-08-17 18:48 - 00167296 _____ C:\Users\Hanss-Rauch\Downloads\More-Pistons-Mod-1.5.2.zip
2013-08-17 18:45 - 2013-08-17 18:45 - 00037784 _____ C:\Users\Hanss-Rauch\Downloads\Light-Bridges-and-Doors-Mod-1.5.2.zip
2013-08-16 21:10 - 2013-08-16 21:10 - 00205945 _____ C:\Users\Hanss-Rauch\Downloads\More-Explosives-Mod-1.5.2.zip
2013-08-16 21:05 - 2013-08-16 21:05 - 00019040 _____ C:\Users\Hanss-Rauch\Downloads\[1.5.2] Useful Redstone Mod.zip
2013-08-16 19:18 - 2013-08-16 19:18 - 03042115 _____ C:\Users\Hanss-Rauch\Downloads\industrialcraft-2_1.115.308-lf.rar
2013-08-16 19:15 - 2013-08-16 19:15 - 00205948 _____ C:\Users\Hanss-Rauch\Downloads\MoreExplosivesModRelease3.5forMC1.5.1.zip
2013-08-16 19:14 - 2013-08-16 19:14 - 00199576 _____ C:\Users\Hanss-Rauch\Downloads\MoreExplosivesModRelease3.7forMinecraft1.6.2.zip
2013-08-16 19:10 - 2013-08-16 19:10 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-08-16 19:08 - 2013-08-16 19:08 - 04292608 _____ C:\Users\Hanss-Rauch\Downloads\hamachi_2.1.0.362.msi
2013-08-16 12:33 - 2013-08-16 12:25 - 2463242240 _____ C:\Users\Hanss-Rauch\Downloads\X15-65740 (1).iso
2013-08-16 12:27 - 2013-08-16 12:27 - 01758824 _____ C:\Users\Hanss-Rauch\Downloads\winrar-x64-420d (2).exe
2013-08-16 12:27 - 2013-08-16 12:27 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-08-16 12:27 - 2013-08-16 12:27 - 00000000 ____D C:\Program Files\WinRAR
2013-08-16 12:25 - 2013-08-16 12:18 - 2147484386 _____ C:\Users\Hanss-Rauch\Downloads\X15-65740.iso
2013-08-15 21:10 - 2012-11-01 18:17 - 00045856 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2013-08-12 18:06 - 2013-08-12 18:06 - 00000000 ____D C:\Users\Hanss-Rauch\Desktop\spc
2013-08-12 18:06 - 2013-06-09 16:02 - 00000046 _____ C:\Users\Hanss-Rauch\Desktop\teams.dat
2013-08-12 15:53 - 2013-08-12 15:53 - 01082179 _____ C:\Users\Hanss-Rauch\Downloads\SinglePlayerCommands-MC1.5.2_V4.8.jar
2013-08-12 15:49 - 2013-08-12 15:49 - 02033732 _____ C:\Users\Hanss-Rauch\Downloads\minecraftforge-universal-1.5.2-7.8.1.738.zip
2013-08-12 15:47 - 2013-08-12 15:47 - 05564661 _____ C:\Users\Hanss-Rauch\Downloads\1.5.2.jar
2013-08-12 15:42 - 2013-08-12 15:42 - 01950783 _____ C:\Users\Hanss-Rauch\Downloads\minecraftforge_universal_1_5_2_7_8_0_696.zip.zip
2013-08-12 15:25 - 2013-08-12 15:25 - 00267043 _____ C:\Users\Hanss-Rauch\Downloads\WirelessRedstone.zip
2013-08-12 15:25 - 2013-08-12 15:25 - 00267043 _____ C:\Users\Hanss-Rauch\Desktop\WirelessRedstone.zip
2013-08-12 15:19 - 2013-08-12 15:21 - 00675988 _____ C:\Users\Hanss-Rauch\Desktop\Minecraft (2).exe
2013-08-12 15:19 - 2013-08-12 15:19 - 00675988 _____ C:\Users\Hanss-Rauch\Downloads\Minecraft.exe
2013-08-11 20:25 - 2012-04-22 14:36 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-08-11 20:24 - 2013-08-11 20:24 - 09304408 _____ (Wargaming.net ) C:\Users\Hanss-Rauch\Downloads\WoT_internet_install_eu.exe
2013-08-11 20:24 - 2012-04-22 14:36 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-08-09 18:11 - 2013-08-09 18:11 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-08-09 18:11 - 2013-08-09 18:11 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-08-09 18:11 - 2013-08-09 18:11 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-08-09 18:11 - 2013-08-09 18:11 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-08-09 18:11 - 2013-08-09 18:11 - 00000000 ____D C:\Program Files (x86)\Java
2013-08-09 18:11 - 2012-06-12 16:21 - 00867240 _____ (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-08-09 18:11 - 2012-06-12 16:21 - 00789416 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-08-07 18:33 - 2013-08-11 12:48 - 01036312 _____ C:\Users\Hanss-Rauch\Desktop\ComputerCraft Mod 1.5.2 (2).zip
2013-08-07 18:33 - 2013-08-07 18:33 - 01036312 _____ C:\Users\Hanss-Rauch\Downloads\ComputerCraft Mod 1.5.2.zip
2013-08-07 18:33 - 2013-08-07 18:33 - 01036312 _____ C:\Users\Hanss-Rauch\Desktop\ComputerCraft Mod 1.5.2.zip
2013-08-06 21:39 - 2013-06-13 18:45 - 00000000 ____D C:\Program Files (x86)\MapCreator 2
2013-08-06 20:31 - 2012-03-24 19:33 - 00007614 _____ C:\Users\HANSS-~1\AppData\Local\Resmon.ResmonCfg
2013-08-06 20:30 - 2013-08-06 20:30 - 00933417 _____ C:\Users\Hanss-Rauch\Downloads\WarGear V6.zip
2013-08-06 16:44 - 2012-03-19 16:30 - 00000000 ____D C:\Users\Hanss-Rauch\Documents\Flight Simulator X-Dateien
2013-08-06 13:11 - 2012-10-28 22:29 - 00000000 ____D C:\Program Files (x86)\Google
2013-08-06 06:02 - 2012-06-04 15:18 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla
2013-08-05 20:15 - 2013-08-05 19:08 - 53886249 _____ C:\Users\Hanss-Rauch\Downloads\Misa500 (1).zip
2013-08-05 17:38 - 2013-08-05 17:38 - 00109656 _____ C:\Users\Hanss-Rauch\Downloads\Nicht bestätigt 510151.crdownload
2013-08-04 22:34 - 2013-08-04 22:34 - 00000000 ____D C:\ProgramData\Package Cache
2013-08-04 22:32 - 2013-08-04 22:31 - 245472312 _____ (AMD Inc.) C:\Users\Hanss-Rauch\Downloads\amd_catalyst_13.8_beta.exe
2013-08-04 22:32 - 2012-11-26 10:10 - 00000000 ____D C:\AMD
2013-08-04 14:35 - 2013-08-04 14:35 - 00002212 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-08-04 14:11 - 2012-03-19 19:44 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2013-08-01 20:49 - 2013-08-01 20:49 - 02143832 _____ C:\Users\Hanss-Rauch\Downloads\instsf449.exe
2013-08-01 20:49 - 2012-03-19 19:44 - 00000045 _____ C:\Windows\SysWOW64\initdebug.nfo
2013-08-01 20:43 - 2013-08-01 19:48 - 00000000 ____D C:\Users\Hanss-Rauch\Downloads\hwmonitor_123
2013-08-01 20:34 - 2013-08-01 20:34 - 00002067 _____ C:\Users\Public\Desktop\AMD OverDrive.lnk
2013-08-01 20:33 - 2012-11-27 22:09 - 00000000 ____D C:\Users\HANSS-~1\AppData\Local\Downloaded Installations
2013-08-01 20:32 - 2013-08-01 20:32 - 31829816 _____ (Advanced Micro Devices, Inc. ) C:\Users\Hanss-Rauch\Downloads\aod_setup_4.2.6.exe
2013-08-01 20:12 - 2013-08-01 20:12 - 00338140 _____ C:\Users\Hanss-Rauch\Downloads\CoreTemp32_rc5.zip
2013-08-01 20:12 - 2013-08-01 20:12 - 00000000 ____D C:\Users\Hanss-Rauch\Downloads\CoreTemp32_rc5
2013-08-01 19:46 - 2013-08-01 19:46 - 01194216 _____ C:\Users\Hanss-Rauch\Downloads\hwmonitor_123.zip
2013-08-01 18:48 - 2013-08-01 18:48 - 00252446 _____ C:\Users\Hanss-Rauch\Downloads\1_5_2_reiminimap_v3_3_05.zip.zip
2013-08-01 18:41 - 2013-08-01 18:41 - 24831527 _____ C:\Users\Hanss-Rauch\Downloads\Master Pack 1.5.2.rar
2013-08-01 18:38 - 2013-08-01 18:38 - 00443952 _____ C:\Users\Hanss-Rauch\Downloads\Flans Mod 2.3.1 for Minecraft 1.5.2 Universal (1).zip
2013-08-01 18:38 - 2013-08-01 18:38 - 00443952 _____ C:\Users\Hanss-Rauch\Desktop\Flans Mod 2.3.1 for Minecraft 1.5.2 Universal (1).zip
2013-08-01 08:07 - 2012-11-22 20:59 - 00001170 _____ C:\Users\Public\Desktop\Battlefield 3.lnk
2013-07-31 21:06 - 2013-07-31 21:05 - 22532237 _____ C:\Users\Hanss-Rauch\Downloads\JaninaCraft_1_5_1_Release_x64.zip
2013-07-31 17:52 - 2013-07-31 17:52 - 00443952 _____ C:\Users\Hanss-Rauch\Downloads\Flans Mod 2.3.1 for Minecraft 1.5.2 Universal.zip
2013-07-31 16:19 - 2013-07-31 16:19 - 00472198 _____ C:\Users\Hanss-Rauch\Downloads\Sonic Ether's Unbelievable Shaders 1.5.2.zip
2013-07-31 16:15 - 2013-07-31 16:14 - 01082179 _____ C:\Users\Hanss-Rauch\Downloads\Single-Player-Commands-1.5.2.jar
2013-07-31 16:11 - 2013-07-31 16:11 - 01975130 _____ C:\Users\Hanss-Rauch\Downloads\minecraftforge-universal-1.5.2-7.8.0.684.zip
2013-07-31 16:10 - 2013-07-31 16:10 - 01758824 _____ C:\Users\Hanss-Rauch\Downloads\winrar-x64-420d (1).exe
2013-07-31 15:05 - 2013-07-31 15:05 - 08483521 _____ C:\Users\Hanss-Rauch\Downloads\ProbeII_V10481_XpVistaWin7.zip
2013-07-31 15:05 - 2013-07-31 15:05 - 00000000 ____D C:\Users\Hanss-Rauch\Downloads\ProbeII_V10481_XpVistaWin7
2013-07-31 15:05 - 2012-03-16 10:52 - 00001769 _____ C:\Windows\Language_trs.ini
2013-07-31 15:04 - 2013-07-31 15:04 - 04300194 _____ C:\Users\Hanss-Rauch\Downloads\PCProbe22502.zip
2013-07-31 15:00 - 2013-07-31 15:00 - 01282759 _____ (Alexander van Kaam ) C:\Users\Hanss-Rauch\Downloads\MBM5370.exe
2013-07-31 15:00 - 2013-07-31 15:00 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MBM 5
2013-07-31 15:00 - 2012-03-24 19:44 - 00000000 ____D C:\Program Files (x86)\Motherboard Monitor 5
2013-07-30 20:24 - 2013-07-30 20:24 - 12973435 _____ C:\Users\Hanss-Rauch\Downloads\craftbukkit-1.5.2-R1.0 (1).jar
2013-07-30 20:23 - 2013-07-30 20:23 - 04895118 _____ C:\Users\Hanss-Rauch\Downloads\bukkit-1.6.2-R0.1-20130724.060108-7.jar
2013-07-30 19:51 - 2013-07-30 19:51 - 01758824 _____ C:\Users\Hanss-Rauch\Downloads\winrar-x64-420d.exe
2013-07-30 19:51 - 2013-07-30 19:49 - 00001621 _____ C:\Users\Hanss-Rauch\Desktop\startbat.rar
2013-07-30 19:46 - 2013-07-30 19:46 - 00001145 _____ C:\Users\Hanss-Rauch\Downloads\startbat.rar
2013-07-30 19:46 - 2013-07-30 19:45 - 12973435 _____ C:\Users\Hanss-Rauch\Downloads\craftbukkit-1.5.2-R1.0.jar
2013-07-30 16:44 - 2012-09-24 13:43 - 00000000 ____D C:\Users\HANSS-~1\AppData\Local\Deployment
2013-07-30 15:05 - 2012-11-16 20:05 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Origin
2013-07-30 15:05 - 2002-01-01 20:56 - 00000000 ____D C:\Users\HANSS-~1\AppData\Local\Origin
2013-07-29 14:25 - 2013-07-29 14:25 - 00262144 _____ C:\Windows\system32\config\elam
2013-07-29 14:23 - 2012-03-16 10:49 - 00000000 ____D C:\Users\Hanss-Rauch
2013-07-29 14:22 - 2013-07-29 14:22 - 00002200 _____ C:\Users\Hanss-Rauch\Desktop\Online Weather.lnk
2013-07-29 14:22 - 2013-07-29 14:22 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Online Weather
2013-07-29 14:22 - 2013-07-29 14:22 - 00000000 ____D C:\Users\HANSS-~1\AppData\Local\WebPlayer
2013-07-29 13:55 - 2013-07-29 13:58 - 00121013 _____ C:\Users\Hanss-Rauch\Desktop\BFp4f Funds Hack v2.0.rar
2013-07-29 13:41 - 2013-05-16 07:27 - 00054368 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kltdi.sys
2013-07-29 13:31 - 2012-09-02 19:22 - 00002517 _____ C:\Users\Public\Desktop\Skype.lnk
2013-07-29 13:31 - 2012-09-02 19:22 - 00000000 ____D C:\ProgramData\Skype
2013-07-29 13:30 - 2013-07-29 13:30 - 00000000 ____D C:\Users\Hanss-Rauch\Desktop\kavkisfile.com-15-July-2013
2013-07-29 13:19 - 2013-07-29 13:19 - 00002340 _____ C:\Users\Hanss-Rauch\Desktop\Sicherer Zahlungsverkehr.lnk
2013-07-29 13:17 - 2013-07-29 13:17 - 00001146 _____ C:\Users\Public\Desktop\Kaspersky Internet Security 2013.lnk
2013-07-29 13:16 - 2013-07-29 13:16 - 00000000 ____D C:\Windows\ELAMBKUP
2013-07-29 13:16 - 2013-07-29 13:16 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-07-29 13:06 - 2012-03-19 15:43 - 00001912 _____ C:\Windows\epplauncher.mif
2013-07-29 13:01 - 2013-07-29 13:18 - 00248634 _____ C:\Users\Hanss-Rauch\Desktop\kavkisfile.com-15-July-2013.zip
2013-07-28 18:47 - 2012-05-24 18:16 - 00000000 ____D C:\Users\HANSS-~1\AppData\Local\PunkBuster
ZeroAccess:
C:\Users\Hanss-Rauch\AppData\Local\{a4b8a65b-7c68-0548-2b35-dddac8e0ee63}
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-16 11:57
==================== End Of Log ============================
|
|
22.08.2013, 12:19
| #11 |
| /// the machine /// TB-Ausbilder | Windows Firewall lässt sich nicht aktivieren fehlercode 0x80070424 obige Anleitung bitte
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
22.08.2013, 19:50
| #12 |
| | Windows Firewall lässt sich nicht aktivieren fehlercode 0x80070424Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=121e509dd484654ab69d2b844dc75a3d
# engine=14860
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-08-22 11:46:46
# local_time=2013-08-22 01:46:46 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1286 16777213 100 98 4841 31941928 0 0
# compatibility_mode=5893 16776573 100 94 52115 128801856 0 0
# scanned=4527
# found=3
# cleaned=0
# scan_time=3068
sh=4808307C704D29122CDB8EA28287E082E48AC0EF ft=1 fh=d700a127a454b68d vn="a variant of Win32/Adware.Yontoo.A application" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Yontoo\YontooIEClient.dll.vir"
sh=4808307C704D29122CDB8EA28287E082E48AC0EF ft=1 fh=d700a127a454b68d vn="a variant of Win32/Adware.Yontoo.A application" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Yontoo\YontooIEClient_2.dll.vir"
sh=C2EC936A1682853594B5077B29E72E67626BCE6D ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Yontoo\YontooLayers.crx.vir"
ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=121e509dd484654ab69d2b844dc75a3d
# engine=14866
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-08-22 06:43:41
# local_time=2013-08-22 08:43:41 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1286 16777213 100 98 21863 31966943 0 0
# compatibility_mode=5893 16776573 100 94 77130 128826871 0 0
# scanned=375574
# found=4
# cleaned=0
# scan_time=20944
sh=4808307C704D29122CDB8EA28287E082E48AC0EF ft=1 fh=d700a127a454b68d vn="a variant of Win32/Adware.Yontoo.A application" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Yontoo\YontooIEClient.dll.vir"
sh=4808307C704D29122CDB8EA28287E082E48AC0EF ft=1 fh=d700a127a454b68d vn="a variant of Win32/Adware.Yontoo.A application" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Yontoo\YontooIEClient_2.dll.vir"
sh=C2EC936A1682853594B5077B29E72E67626BCE6D ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Yontoo\YontooLayers.crx.vir"
sh=A696C5A0D50145AFDE3D3A71F70B1C3006AC2199 ft=1 fh=da0003b6601dbc17 vn="a variant of Win32/Adware.MultiPlug.I application" ac=I fn="C:\Qoobox\Quarantine\C\ProgramData\Search-NewTab\511a5cc10eece.dll.vir"
|
|
23.08.2013, 09:58
| #13 |
| /// the machine /// TB-Ausbilder | Windows Firewall lässt sich nicht aktivieren fehlercode 0x80070424 da fehlt noch was
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
23.08.2013, 11:34
| #14 |
| | Windows Firewall lässt sich nicht aktivieren fehlercode 0x80070424 Hier der inhalt von checkup.txt Code:
ATTFilter Results of screen317's Security Check version 0.99.72 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` Kaspersky Internet Security Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Sophos Anti-Rootkit 1.5.0 Malwarebytes Anti-Malware Version 1.75.0.1300 JavaFX 2.1.0 Java 7 Update 25 Adobe Flash Player 11.8.800.94 Adobe Reader XI Google Chrome 28.0.1500.95 Google Chrome 29.0.1547.57 ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbamgui.exe Malwarebytes' Anti-Malware mbamscheduler.exe Hanss-Rauch AppData Local WebPlayer\Online Weather\WebPlayer.exe Kaspersky Lab Kaspersky Internet Security 2013 avp.exe Kaspersky Lab Kaspersky Internet Security 2013 klwtblfs.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-08-2013 02
Ran by Hanss-Rauch (administrator) on 22-08-2013 22:24:25
Running from C:\Users\Hanss-Rauch\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
(Spotify Ltd) C:\Users\Hanss-Rauch\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Google Inc.) C:\Users\Hanss-Rauch\AppData\Local\Programs\Google\MusicManager\MusicManager.exe
(Spotify Ltd) C:\Users\Hanss-Rauch\AppData\Roaming\Spotify\spotify.exe
() C:\Users\Hanss-Rauch\AppData\Local\WebPlayer\Online Weather\WebPlayer.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
() C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BDExtHost.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BDAppHost.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BDRuntimeHost.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\klwtblfs.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\Hanss-Rauch\Desktop\FRST64 (1).exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-06-16] (Adobe Systems Incorporated)
HKCU\...\Run: [EADM] - C:\Program Files (x86)\Origin\Origin.exe [3549528 2013-07-30] (Electronic Arts)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Hanss-Rauch\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-07-07] (Spotify Ltd)
HKCU\...\Run: [Sony PC Companion] - C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [449248 2013-05-29] (Sony)
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1476104 2012-12-20] (Samsung)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)
HKCU\...\Run: [MusicManager] - C:\Users\Hanss-Rauch\AppData\Local\Programs\Google\MusicManager\MusicManager.exe [7345664 2013-06-21] (Google Inc.)
HKCU\...\Run: [Spotify] - C:\Users\Hanss-Rauch\AppData\Roaming\Spotify\Spotify.exe [4640768 2013-07-07] (Spotify Ltd)
HKCU\...\Run: [Online Weather] - C:\Users\Hanss-Rauch\AppData\Local\WebPlayer\Online Weather\WebPlayer.exe [202752 2012-10-26] ()
HKLM-x32\...\Run: [BlueStacks Agent] - C:\Program Files (x86)\BlueStacks\HD-Agent.exe [581496 2012-09-24] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [310280 2012-12-20] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-15] (Apple Inc.)
HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356376 2013-05-16] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2255184 2013-06-28] (LogMeIn Inc.)
HKLM-x32\...\Run: [BingDesktop] - C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2249352 2013-06-20] (Microsoft Corp.)
Startup: C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
ProxyServer: :
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2431} URL = hxxp://dts.search-results.com/web?src=ieb&gct=ds&appid=109&systemid=431&apn_dtid=BND431&apn_ptnrs=AGH&o=APN10656&apn_uid=1508500189704569&q={searchTerms}
SearchScopes: HKLM - {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2431} URL = hxxp://dts.search-results.com/web?src=ieb&gct=ds&appid=109&systemid=431&apn_dtid=BND431&apn_ptnrs=AGH&o=APN10656&apn_uid=1508500189704569&q={searchTerms}
SearchScopes: HKLM-x32 - Backup.Old.DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5}
SearchScopes: HKLM-x32 - {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKCU - Backup.Old.DefaultScope {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
SearchScopes: HKCU - {80c554b9-c7f8-4a21-9471-06d606da78a2} URL =
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - GamesBar (W) - {2e94b700-eafb-4c9e-a696-77200aa3f89b} - C:\Program Files (x86)\gamesagogo_w3i\encyclopediabritannicagamesbarX.dll No File
DPF: HKLM-x32 {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} https://battlefield.play4free.com/static/updater/BP4FUpdater_1.0.95.0.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog5 01 %SystemRoot%\System32\mswsock.dll [232448] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5-x64 01 %SystemRoot%\System32\mswsock.dll [326144] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
FireFox:
========
FF ProfilePath: C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\Firefox\Profiles\h8jupusy.default
FF Homepage: user_pref("browser.startup.homepage", );
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=10.11.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.11.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @ei.MyWebFace_5a.com/Plugin - C:\Program Files (x86)\MyWebFace_5aEI\Installr\1.bin\NP5aEISB.dll No File
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.4 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Hanss-Rauch\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Hanss-Rauch\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10174.dll (Amazon.com, Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Extension: No Name - C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF HKLM-x32\...\Firefox\Extensions: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com
FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com
Chrome:
=======
CHR RestoreOnStartup: "https://www.google.de/", "hxxp://www.sat1.de/video"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.57\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.57\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.57\pdf.dll ()
CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\Hanss-Rauch\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh\13.0.1.4190_1\plugin/online_banking_npapi.dll (Kaspersky Lab ZAO)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (AmazonMP3DownloaderPlugin) - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10174.dll (Amazon.com, Inc.)
CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll (ESN Social Software AB)
CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
CHR Plugin: (ESN Sonar API) - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (PDF-XChange Viewer) - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
CHR Plugin: (Google Update) - C:\Users\Hanss-Rauch\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Google Talk Plugin) - C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
CHR Plugin: (Google Talk Plugin Video Accelerator) - C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
CHR Plugin: (Google Talk Plugin Video Renderer) - C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Extension: (Google Docs) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Add to Amazon Wish List) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ciagpekplgpbepdgggflgmahnjgiaced\1.0.0.10_0
CHR Extension: (Google Search) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Kaspersky URL Advisor) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\13.0.1.4190_1
CHR Extension: (Safe Money) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh\13.0.1.4190_1
CHR Extension: (Content Blocker) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail\13.0.1.4190_1
CHR Extension: (Virtual Keyboard) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\13.0.1.4292_1
CHR Extension: (SmallringFX DarkBlue Theme) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfijmgohofmpjlcgmjplbpmkpchdhpk\1.7_0
CHR Extension: (Google Wallet Service) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.9_1
CHR Extension: (Battlefield Play4Free) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiokahphinmbmakkehgelkmpolmnbkdh\1.0.96.0_0
CHR Extension: (Gmail) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR Extension: (Anti-Banner) - C:\Users\HANSS-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\13.0.1.4190_1
CHR HKLM-x32\...\Chrome\Extension: [aaaaabfjnbeinlpljodiajipidiompfl] - C:\Users\Hanss-Rauch\AppData\Local\APN\GoogleCRXs\aaaaabfjnbeinlpljodiajipidiompfl_7.15.20.0.crx
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\urladvisor.crx
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\online_banking_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\content_blocker_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\virtkbd.crx
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\ab.crx
==================== Services (Whitelisted) =================
R2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171600 2012-09-23] (Adobe Systems Incorporated)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-12-19] (Advanced Micro Devices, Inc.)
S2 AODService; C:\Program Files (x86)\AMD\OverDrive\AODAssist.exe [137256 2013-05-24] ()
R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356376 2013-05-16] (Kaspersky Lab ZAO)
R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-06-20] (Microsoft Corp.)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393080 2012-09-24] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384888 2012-09-24] (BlueStack Systems, Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 MpsSvc; C:\Windows\SysWow64\. [0 2013-08-22] ()
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-07-17] ()
S3 TDslMgrService; C:\Program Files (x86)\DSL-Manager\DslMgrSvc.exe [307200 2008-10-23] (T-Systems Enterprise Services GmbH)
S2 vToolbarUpdater15.5.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe [x]
==================== Drivers (Whitelisted) ====================
R2 AODDriver4.2; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [57472 2012-04-09] (Advanced Micro Devices)
R2 AODDriver4.2.0; C:\Program Files (x86)\AMD\OverDrive\amd64\AODDriver2.sys [58088 2013-05-24] (Advanced Micro Devices)
R2 AODDriver4.2.0; C:\Program Files (x86)\AMD\OverDrive\amd64\AODDriver2.sys [58088 2013-05-24] (Advanced Micro Devices)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2012-08-06] ()
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2012-08-06] ()
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [45856 2013-08-15] (AVG Technologies)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [71032 2012-09-24] (BlueStack Systems)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [71032 2012-09-24] (BlueStack Systems)
R1 DslMNLwf; C:\Windows\System32\DRIVERS\dslmnlwf.sys [19008 2007-08-01] (T-Systems Enterprise Services GmbH)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-06-19] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620128 2013-05-16] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29016 2013-05-16] (Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29528 2013-05-16] (Kaspersky Lab)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-07-29] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-05-16] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S1 mbmiodrvr; C:\Windows\syswow64\mbmiodrvr.sys [4608 2004-04-10] (cansoft@livewiredev.com)
S1 mbmiodrvr; C:\Windows\syswow64\mbmiodrvr.sys [4608 2004-04-10] (cansoft@livewiredev.com)
S3 MEMSWEEP2; C:\Windows\system32\BF69.tmp [6144 2009-06-18] (Sophos Plc)
S3 MEMSWEEP2; C:\Windows\system32\BF69.tmp [6144 2009-06-18] (Sophos Plc)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-17] ()
S3 PciDumpr; C:\Program Files (x86)\Common Files\T-Com\DSLCheck\PciDumpr.sys [2144 2001-01-26] ()
S3 PciDumpr; C:\Program Files (x86)\Common Files\T-Com\DSLCheck\PciDumpr.sys [2144 2001-01-26] ()
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation)
S1 SAVRKBootTasks; C:\Windows\SysWow64\SAVRKBootTasks.sys [18816 2009-06-18] (Sophos Plc)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S4 nvlddmkm; system32\DRIVERS\nvlddmkm.sys [x]
S1 SAVRKBootTasks; \??\C:\Windows\system32\SAVRKBootTasks.sys [x]
S3 X6va008; \??\C:\Windows\SysWOW64\Drivers\X6va008 [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-22 20:54 - 2013-08-22 20:54 - 00891115 _____ C:\Users\Hanss-Rauch\Downloads\SecurityCheck.exe
2013-08-22 20:54 - 2013-08-22 20:54 - 00891115 _____ C:\Users\Hanss-Rauch\Desktop\SecurityCheck.exe
2013-08-22 12:54 - 2013-08-22 12:54 - 02347384 _____ (ESET) C:\Users\Hanss-Rauch\Downloads\esetsmartinstaller_enu.exe
2013-08-21 22:54 - 2013-08-21 22:54 - 00000000 ____D C:\Windows\SysWOW64\%Report%
2013-08-21 22:14 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-21 22:14 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-21 22:14 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-21 22:14 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-21 22:14 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-21 22:14 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-21 22:14 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-21 22:14 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-21 22:14 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-21 22:14 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-21 22:14 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-21 22:14 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-21 22:14 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-21 22:14 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-21 22:14 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-21 22:14 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-21 22:14 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-21 22:14 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-21 22:14 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-21 22:14 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-21 22:14 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-21 22:14 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-21 22:14 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-21 22:14 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-21 22:14 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-21 22:14 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-21 22:14 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-21 22:14 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-21 22:14 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-21 22:14 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-21 22:14 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-21 22:14 - 2012-07-26 06:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-08-21 22:14 - 2012-07-26 06:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2013-08-21 22:14 - 2012-07-26 04:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2013-08-21 22:14 - 2012-06-02 16:35 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2013-08-21 22:06 - 2013-08-21 22:06 - 00000000 ____D C:\Windows\system32\MRT
2013-08-21 21:58 - 2012-12-16 19:11 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-08-21 21:58 - 2012-12-16 16:45 - 00367616 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-08-21 21:58 - 2012-12-16 16:13 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-08-21 21:58 - 2012-12-16 16:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-08-21 21:57 - 2012-07-26 05:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2013-08-21 21:57 - 2012-07-26 05:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2013-08-21 21:57 - 2012-07-26 05:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2013-08-21 21:57 - 2012-07-26 05:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2013-08-21 21:57 - 2012-07-26 05:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2013-08-21 21:57 - 2012-07-26 04:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2013-08-21 21:57 - 2012-07-26 04:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2013-08-21 21:57 - 2012-06-02 16:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2013-08-21 21:51 - 2013-08-21 21:51 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-08-21 21:51 - 2013-08-21 21:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-08-21 21:45 - 2013-08-21 21:45 - 01576476 _____ (Farbar) C:\Users\Hanss-Rauch\Desktop\FRST64 (1).exe
2013-08-21 21:44 - 2013-08-21 21:45 - 01576476 _____ (Farbar) C:\Users\Hanss-Rauch\Downloads\FRST64 (1).exe
2013-08-21 21:32 - 2013-08-21 21:32 - 00010604 _____ C:\Users\Hanss-Rauch\Desktop\JRT.txt
2013-08-21 21:20 - 2013-08-21 21:20 - 00000000 ____D C:\Windows\ERUNT
2013-08-21 21:19 - 2013-08-21 21:19 - 01018947 _____ (Thisisu) C:\Users\Hanss-Rauch\Downloads\JRT.exe
2013-08-21 21:19 - 2013-08-21 21:19 - 01018947 _____ (Thisisu) C:\Users\Hanss-Rauch\Desktop\JRT.exe
2013-08-21 21:06 - 2013-08-21 21:08 - 00000000 ____D C:\AdwCleaner
2013-08-21 21:04 - 2013-08-21 21:04 - 00975858 _____ C:\Users\Hanss-Rauch\Downloads\adwcleaner.exe
2013-08-21 17:53 - 2013-08-21 17:53 - 00001109 _____ C:\Users\Hanss-Rauch\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-21 17:52 - 2013-08-21 17:52 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Hanss-Rauch\Downloads\mbam-setup-1.75.0.1300.exe
2013-08-21 17:52 - 2013-08-21 17:52 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-21 17:52 - 2013-08-21 17:52 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-21 17:52 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-08-21 16:44 - 2013-08-21 16:44 - 00013393 _____ C:\Users\Hanss-Rauch\Desktop\ComboFix - Verknüpfung.lnk
2013-08-21 15:38 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-21 15:38 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-21 15:38 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-21 15:38 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-21 15:38 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-21 15:38 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-21 15:38 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-21 15:38 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-21 15:38 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-21 15:38 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-21 15:38 - 2013-04-10 08:01 - 00983400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-08-21 15:38 - 2013-04-10 08:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2013-08-21 15:38 - 2013-02-15 08:08 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2013-08-21 15:38 - 2013-02-15 08:06 - 03717632 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2013-08-21 15:38 - 2013-02-15 08:02 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2013-08-21 15:38 - 2013-02-15 06:37 - 03217408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-08-21 15:38 - 2013-02-15 06:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2013-08-21 15:38 - 2013-02-15 05:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2013-08-21 15:38 - 2012-11-01 07:43 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2013-08-21 15:38 - 2012-11-01 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2013-08-21 15:38 - 2012-11-01 06:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2013-08-21 15:38 - 2012-11-01 06:47 - 01236992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2013-08-21 15:38 - 2011-02-03 13:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2013-08-21 15:37 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-21 15:37 - 2012-11-20 07:48 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-08-21 15:37 - 2012-11-20 06:51 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-08-21 15:37 - 2012-11-02 07:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2013-08-21 15:37 - 2012-11-02 07:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2013-08-21 15:37 - 2012-08-11 02:56 - 00715776 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2013-08-21 15:37 - 2012-08-11 01:56 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2013-08-21 15:36 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-08-21 15:36 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-08-21 15:36 - 2013-02-27 08:02 - 00111448 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2013-08-21 15:36 - 2013-02-27 07:52 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-08-21 15:36 - 2013-02-27 07:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-08-21 15:36 - 2013-02-27 07:48 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-08-21 15:36 - 2013-02-27 07:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2013-08-21 15:36 - 2013-02-27 06:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-08-21 15:36 - 2013-02-27 06:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-08-21 15:36 - 2013-02-27 06:49 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-08-21 15:36 - 2013-01-04 07:46 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-08-21 15:36 - 2013-01-04 06:51 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-08-21 15:36 - 2013-01-04 04:47 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-08-21 15:36 - 2013-01-04 04:47 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-08-21 15:36 - 2013-01-04 04:47 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-08-21 15:36 - 2013-01-04 04:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-08-21 15:36 - 2012-10-09 20:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2013-08-21 15:36 - 2012-10-09 20:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2013-08-21 15:36 - 2012-10-09 19:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2013-08-21 15:36 - 2012-10-09 19:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2013-08-21 15:36 - 2012-09-26 00:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2013-08-21 15:36 - 2012-09-26 00:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2013-08-21 15:35 - 2013-03-19 07:53 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2013-08-21 15:35 - 2013-03-19 07:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2013-08-21 15:35 - 2013-02-12 06:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023x.sys
2013-08-21 15:35 - 2013-02-12 06:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2013-08-21 15:35 - 2012-12-07 15:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2013-08-21 15:35 - 2012-12-07 15:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2013-08-21 15:35 - 2012-12-07 14:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2013-08-21 15:35 - 2012-12-07 14:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2013-08-21 15:35 - 2012-12-07 13:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2013-08-21 15:35 - 2012-12-07 13:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2013-08-21 15:35 - 2012-12-07 13:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2013-08-21 15:35 - 2012-12-07 13:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2013-08-21 15:35 - 2012-12-07 13:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2013-08-21 15:35 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2013-08-21 15:35 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2013-08-21 15:35 - 2012-12-07 13:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2013-08-21 15:35 - 2012-12-07 13:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2013-08-21 15:35 - 2012-12-07 13:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2013-08-21 15:35 - 2012-12-07 13:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2013-08-21 15:35 - 2012-12-07 13:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2013-08-21 15:35 - 2012-12-07 13:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2013-08-21 15:35 - 2012-12-07 13:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2013-08-21 15:35 - 2012-12-07 12:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2013-08-21 15:35 - 2012-12-07 12:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2013-08-21 15:35 - 2012-12-07 12:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2013-08-21 15:35 - 2012-12-07 12:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2013-08-21 15:35 - 2012-12-07 12:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2013-08-21 15:35 - 2012-12-07 12:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2013-08-21 15:35 - 2012-12-07 12:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2013-08-21 15:35 - 2012-12-07 12:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2013-08-21 15:35 - 2012-12-07 12:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2013-08-21 15:35 - 2012-12-07 12:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2013-08-21 15:35 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2013-08-21 15:35 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2013-08-21 15:35 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2013-08-21 15:35 - 2012-12-07 12:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2013-08-21 15:35 - 2012-11-30 07:41 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-08-21 15:35 - 2012-11-30 06:53 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-08-21 15:35 - 2012-11-30 01:17 - 00420064 _____ C:\Windows\SysWOW64\locale.nls
2013-08-21 15:35 - 2012-11-30 01:15 - 00420064 _____ C:\Windows\system32\locale.nls
2013-08-21 15:35 - 2012-10-03 19:44 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2013-08-21 15:35 - 2012-10-03 19:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2013-08-21 15:35 - 2012-10-03 19:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2013-08-21 15:35 - 2012-10-03 19:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2013-08-21 15:35 - 2012-10-03 19:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2013-08-21 15:35 - 2012-10-03 19:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2013-08-21 15:35 - 2012-10-03 18:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2013-08-21 15:35 - 2012-10-03 18:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2013-08-21 15:35 - 2012-10-03 18:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2013-08-21 15:35 - 2012-10-03 18:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2013-08-21 15:35 - 2012-07-04 22:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rndismpx.sys
2013-08-21 15:35 - 2012-01-13 09:12 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2013-08-21 15:34 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-21 15:34 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-21 15:34 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-21 15:34 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-21 15:34 - 2013-04-12 16:45 - 01656680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2013-08-21 15:34 - 2012-11-30 07:45 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-08-21 15:34 - 2012-11-30 07:45 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-08-21 15:34 - 2012-11-30 07:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-08-21 15:34 - 2012-11-30 07:43 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-08-21 15:34 - 2012-11-30 07:41 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-08-21 15:34 - 2012-11-30 07:38 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 07:38 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 07:38 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 07:38 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 07:38 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 07:38 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 07:38 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 07:38 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 07:38 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 07:38 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 07:38 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 07:38 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 07:38 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 07:38 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 07:38 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 07:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 06:53 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-08-21 15:34 - 2012-11-30 06:45 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 06:45 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 06:45 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 06:45 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 06:45 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 06:45 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 06:45 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 06:45 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 06:45 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 06:45 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 06:45 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 06:45 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 06:45 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 05:23 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-08-21 15:34 - 2012-11-30 04:38 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 04:38 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 04:38 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-08-21 15:34 - 2012-11-30 04:38 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-08-21 15:34 - 2012-08-21 23:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2013-08-21 15:33 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-08-21 15:33 - 2013-04-26 07:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2013-08-21 15:33 - 2013-04-26 06:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-08-21 15:33 - 2012-11-22 07:44 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2013-08-21 15:33 - 2012-11-22 06:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2013-08-21 15:33 - 2012-08-22 20:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2013-08-21 15:33 - 2012-07-04 22:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2013-08-21 15:32 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-21 15:32 - 2013-05-13 07:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2013-08-21 15:32 - 2013-05-13 05:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2013-08-21 15:32 - 2013-05-13 05:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-08-21 15:32 - 2013-05-13 05:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-08-21 15:32 - 2013-05-10 07:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2013-08-21 15:32 - 2013-05-10 05:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-08-21 15:32 - 2013-04-17 09:02 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-08-21 15:32 - 2013-04-17 08:24 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2013-08-21 15:32 - 2013-01-24 08:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2013-08-21 15:32 - 2013-01-03 08:00 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2013-08-21 15:32 - 2012-08-22 20:12 - 00376688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2013-08-21 15:31 - 2013-04-26 01:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-08-21 15:31 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-08-21 15:31 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-08-21 15:31 - 2013-04-01 00:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2013-08-21 15:31 - 2013-03-19 08:04 - 05550424 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-21 15:31 - 2013-03-19 07:46 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-08-21 15:31 - 2013-03-19 07:04 - 03968856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-08-21 15:31 - 2013-03-19 07:04 - 03913560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-08-21 15:31 - 2013-03-19 06:47 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-08-21 15:31 - 2013-03-19 05:06 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-08-21 15:06 - 2013-08-21 15:06 - 00075102 _____ C:\ComboFix.txt
2013-08-21 14:33 - 2013-08-21 15:06 - 00000000 ____D C:\Qoobox
2013-08-21 14:33 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-08-21 14:33 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-08-21 14:33 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-08-21 14:33 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-08-21 14:33 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-08-21 14:33 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-08-21 14:33 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-08-21 14:33 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-08-21 14:32 - 2013-08-21 15:04 - 00000000 ____D C:\Windows\erdnt
2013-08-21 14:31 - 2013-08-21 14:32 - 05109244 ____R (Swearware) C:\Users\Hanss-Rauch\Downloads\ComboFix.exe
2013-08-21 13:00 - 2013-08-21 13:00 - 00000000 ____D C:\FRST
2013-08-21 12:59 - 2013-08-21 12:59 - 01576164 _____ (Farbar) C:\Users\Hanss-Rauch\Downloads\FRST64.exe
2013-08-21 12:05 - 2013-08-21 12:05 - 00347424 _____ (Microsoft Corporation) C:\Users\Hanss-Rauch\Downloads\MicrosoftFixit.wu.Run.exe
2013-08-21 11:51 - 2013-08-21 11:51 - 01010176 _____ C:\Users\Hanss-Rauch\Downloads\MicrosoftFixit50884.msi
2013-08-19 17:53 - 2013-08-19 17:52 - 03042115 _____ C:\Users\Hanss-Rauch\Desktop\industrialcraft-2_1.115.308-lf (1).rar
2013-08-19 17:52 - 2013-08-19 17:52 - 03042115 _____ C:\Users\Hanss-Rauch\Downloads\industrialcraft-2_1.115.308-lf (1).rar
2013-08-18 16:19 - 2013-08-18 16:19 - 00029112 _____ C:\Users\Hanss-Rauch\Downloads\Printer-Block-Mod-1.5.2.zip
2013-08-18 16:15 - 2013-08-18 16:15 - 00300193 _____ C:\Users\Hanss-Rauch\Downloads\RoadWorks-Mod-1.5.2.rar
2013-08-18 16:13 - 2013-08-18 16:13 - 00230381 _____ C:\Users\Hanss-Rauch\Downloads\TwitchTV-IRC-Reborn-Mod-1.5.2.zip
2013-08-18 13:34 - 2013-08-18 13:34 - 00000000 ____D C:\Users\Hanss-Rauch\Desktop\resources
2013-08-18 13:33 - 2013-08-18 13:34 - 02999474 _____ C:\Users\Hanss-Rauch\Downloads\Project-Red-Mod-1.5.2.jar
2013-08-18 13:32 - 2013-08-18 13:33 - 02272553 _____ C:\Users\Hanss-Rauch\Downloads\Railcraft-Mod-1.5.2.jar
2013-08-17 19:15 - 2013-08-17 19:15 - 00124927 _____ C:\Users\Hanss-Rauch\Downloads\Instant-Blocks-Mod-1.5.2.zip
2013-08-17 19:13 - 2013-08-17 19:13 - 00117705 _____ C:\Users\Hanss-Rauch\Downloads\WR-CBE-Core-1.5.2.jar
2013-08-17 19:12 - 2013-08-17 19:12 - 00378337 _____ C:\Users\Hanss-Rauch\Downloads\Not-Enough-Items-1.5.2.jar
2013-08-17 19:08 - 2013-08-17 19:08 - 02225575 _____ C:\Users\Hanss-Rauch\Downloads\Chisel-Mod-1.5.2.jar
2013-08-17 18:56 - 2013-08-17 18:56 - 01229617 _____ C:\Users\Hanss-Rauch\Downloads\buildcraft-A-3.7.1.jar
2013-08-17 18:55 - 2013-08-17 18:55 - 00069465 _____ C:\Users\Hanss-Rauch\Downloads\Railcraft-Mod-1.5.2-API.zip
2013-08-17 18:48 - 2013-08-17 18:49 - 00167296 _____ C:\Users\Hanss-Rauch\Downloads\More-Pistons-Mod-1.5.2.zip
2013-08-17 18:45 - 2013-08-17 18:45 - 00037784 _____ C:\Users\Hanss-Rauch\Downloads\Light-Bridges-and-Doors-Mod-1.5.2.zip
2013-08-16 21:10 - 2013-08-16 21:10 - 00205945 _____ C:\Users\Hanss-Rauch\Downloads\More-Explosives-Mod-1.5.2.zip
2013-08-16 21:05 - 2013-08-16 21:05 - 00019040 _____ C:\Users\Hanss-Rauch\Downloads\[1.5.2] Useful Redstone Mod.zip
2013-08-16 19:18 - 2013-08-16 19:18 - 03042115 _____ C:\Users\Hanss-Rauch\Downloads\industrialcraft-2_1.115.308-lf.rar
2013-08-16 19:15 - 2013-08-16 19:15 - 00205948 _____ C:\Users\Hanss-Rauch\Downloads\MoreExplosivesModRelease3.5forMC1.5.1.zip
2013-08-16 19:14 - 2013-08-16 19:14 - 00199576 _____ C:\Users\Hanss-Rauch\Downloads\MoreExplosivesModRelease3.7forMinecraft1.6.2.zip
2013-08-16 19:10 - 2013-08-22 22:16 - 00000000 ____D C:\Users\HANSS-~1\AppData\Local\LogMeIn Hamachi
2013-08-16 19:10 - 2013-08-16 19:10 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-08-16 19:08 - 2013-08-16 19:08 - 04292608 _____ C:\Users\Hanss-Rauch\Downloads\hamachi_2.1.0.362.msi
2013-08-16 12:27 - 2013-08-16 12:27 - 01758824 _____ C:\Users\Hanss-Rauch\Downloads\winrar-x64-420d (2).exe
2013-08-16 12:27 - 2013-08-16 12:27 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-08-16 12:27 - 2013-08-16 12:27 - 00000000 ____D C:\Program Files\WinRAR
2013-08-16 12:25 - 2013-08-16 12:33 - 2463242240 _____ C:\Users\Hanss-Rauch\Downloads\X15-65740 (1).iso
2013-08-16 12:18 - 2013-08-16 12:25 - 2147484386 _____ C:\Users\Hanss-Rauch\Downloads\X15-65740.iso
2013-08-12 18:06 - 2013-08-12 18:06 - 00000000 ____D C:\Users\Hanss-Rauch\Desktop\spc
2013-08-12 15:53 - 2013-08-12 15:53 - 01082179 _____ C:\Users\Hanss-Rauch\Downloads\SinglePlayerCommands-MC1.5.2_V4.8.jar
2013-08-12 15:49 - 2013-08-12 15:49 - 02033732 _____ C:\Users\Hanss-Rauch\Downloads\minecraftforge-universal-1.5.2-7.8.1.738.zip
2013-08-12 15:47 - 2013-08-12 15:47 - 05564661 _____ C:\Users\Hanss-Rauch\Downloads\1.5.2.jar
2013-08-12 15:42 - 2013-08-12 15:42 - 01950783 _____ C:\Users\Hanss-Rauch\Downloads\minecraftforge_universal_1_5_2_7_8_0_696.zip.zip
2013-08-12 15:25 - 2013-08-12 15:25 - 00267043 _____ C:\Users\Hanss-Rauch\Downloads\WirelessRedstone.zip
2013-08-12 15:25 - 2013-08-12 15:25 - 00267043 _____ C:\Users\Hanss-Rauch\Desktop\WirelessRedstone.zip
2013-08-12 15:21 - 2013-08-12 15:19 - 00675988 _____ C:\Users\Hanss-Rauch\Desktop\Minecraft (2).exe
2013-08-12 15:19 - 2013-08-12 15:19 - 00675988 _____ C:\Users\Hanss-Rauch\Downloads\Minecraft.exe
2013-08-11 20:24 - 2013-08-11 20:24 - 09304408 _____ (Wargaming.net ) C:\Users\Hanss-Rauch\Downloads\WoT_internet_install_eu.exe
2013-08-11 12:48 - 2013-08-07 18:33 - 01036312 _____ C:\Users\Hanss-Rauch\Desktop\ComputerCraft Mod 1.5.2 (2).zip
2013-08-09 18:11 - 2013-08-09 18:11 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-08-09 18:11 - 2013-08-09 18:11 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-08-09 18:11 - 2013-08-09 18:11 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-08-09 18:11 - 2013-08-09 18:11 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-08-09 18:11 - 2013-08-09 18:11 - 00000000 ____D C:\Program Files (x86)\Java
2013-08-07 18:33 - 2013-08-07 18:33 - 01036312 _____ C:\Users\Hanss-Rauch\Downloads\ComputerCraft Mod 1.5.2.zip
2013-08-07 18:33 - 2013-08-07 18:33 - 01036312 _____ C:\Users\Hanss-Rauch\Desktop\ComputerCraft Mod 1.5.2.zip
2013-08-06 20:30 - 2013-08-06 20:30 - 00933417 _____ C:\Users\Hanss-Rauch\Downloads\WarGear V6.zip
2013-08-05 19:08 - 2013-08-05 20:15 - 53886249 _____ C:\Users\Hanss-Rauch\Downloads\Misa500 (1).zip
2013-08-05 17:38 - 2013-08-05 17:38 - 00109656 _____ C:\Users\Hanss-Rauch\Downloads\Nicht bestätigt 510151.crdownload
2013-08-04 22:34 - 2013-08-04 22:34 - 00000000 ____D C:\ProgramData\Package Cache
2013-08-04 22:31 - 2013-08-04 22:32 - 245472312 _____ (AMD Inc.) C:\Users\Hanss-Rauch\Downloads\amd_catalyst_13.8_beta.exe
2013-08-04 14:35 - 2013-08-04 14:35 - 00002212 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-08-01 20:49 - 2013-08-01 20:49 - 02143832 _____ C:\Users\Hanss-Rauch\Downloads\instsf449.exe
2013-08-01 20:34 - 2013-08-01 20:34 - 00002067 _____ C:\Users\Public\Desktop\AMD OverDrive.lnk
2013-08-01 20:32 - 2013-08-01 20:32 - 31829816 _____ (Advanced Micro Devices, Inc. ) C:\Users\Hanss-Rauch\Downloads\aod_setup_4.2.6.exe
2013-08-01 20:12 - 2013-08-01 20:12 - 00338140 _____ C:\Users\Hanss-Rauch\Downloads\CoreTemp32_rc5.zip
2013-08-01 20:12 - 2013-08-01 20:12 - 00000000 ____D C:\Users\Hanss-Rauch\Downloads\CoreTemp32_rc5
2013-08-01 19:48 - 2013-08-01 20:43 - 00000000 ____D C:\Users\Hanss-Rauch\Downloads\hwmonitor_123
2013-08-01 19:46 - 2013-08-01 19:46 - 01194216 _____ C:\Users\Hanss-Rauch\Downloads\hwmonitor_123.zip
2013-08-01 18:48 - 2013-08-01 18:48 - 00252446 _____ C:\Users\Hanss-Rauch\Downloads\1_5_2_reiminimap_v3_3_05.zip.zip
2013-08-01 18:41 - 2013-08-01 18:41 - 24831527 _____ C:\Users\Hanss-Rauch\Downloads\Master Pack 1.5.2.rar
2013-08-01 18:38 - 2013-08-01 18:38 - 00443952 _____ C:\Users\Hanss-Rauch\Downloads\Flans Mod 2.3.1 for Minecraft 1.5.2 Universal (1).zip
2013-08-01 18:38 - 2013-08-01 18:38 - 00443952 _____ C:\Users\Hanss-Rauch\Desktop\Flans Mod 2.3.1 for Minecraft 1.5.2 Universal (1).zip
2013-07-31 21:05 - 2013-07-31 21:06 - 22532237 _____ C:\Users\Hanss-Rauch\Downloads\JaninaCraft_1_5_1_Release_x64.zip
2013-07-31 17:52 - 2013-07-31 17:52 - 00443952 _____ C:\Users\Hanss-Rauch\Downloads\Flans Mod 2.3.1 for Minecraft 1.5.2 Universal.zip
2013-07-31 16:19 - 2013-07-31 16:19 - 00472198 _____ C:\Users\Hanss-Rauch\Downloads\Sonic Ether's Unbelievable Shaders 1.5.2.zip
2013-07-31 16:14 - 2013-07-31 16:15 - 01082179 _____ C:\Users\Hanss-Rauch\Downloads\Single-Player-Commands-1.5.2.jar
2013-07-31 16:11 - 2013-07-31 16:11 - 01975130 _____ C:\Users\Hanss-Rauch\Downloads\minecraftforge-universal-1.5.2-7.8.0.684.zip
2013-07-31 16:10 - 2013-07-31 16:10 - 01758824 _____ C:\Users\Hanss-Rauch\Downloads\winrar-x64-420d (1).exe
2013-07-31 15:05 - 2013-07-31 15:05 - 08483521 _____ C:\Users\Hanss-Rauch\Downloads\ProbeII_V10481_XpVistaWin7.zip
2013-07-31 15:05 - 2013-07-31 15:05 - 00000000 ____D C:\Users\Hanss-Rauch\Downloads\ProbeII_V10481_XpVistaWin7
2013-07-31 15:04 - 2013-07-31 15:04 - 04300194 _____ C:\Users\Hanss-Rauch\Downloads\PCProbe22502.zip
2013-07-31 15:00 - 2013-07-31 15:00 - 01282759 _____ (Alexander van Kaam ) C:\Users\Hanss-Rauch\Downloads\MBM5370.exe
2013-07-31 15:00 - 2013-07-31 15:00 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MBM 5
2013-07-31 15:00 - 2004-04-10 09:43 - 00004608 _____ (cansoft@livewiredev.com) C:\Windows\SysWOW64\mbmiodrvr.sys
2013-07-30 20:24 - 2013-07-30 20:24 - 12973435 _____ C:\Users\Hanss-Rauch\Downloads\craftbukkit-1.5.2-R1.0 (1).jar
2013-07-30 20:23 - 2013-07-30 20:23 - 04895118 _____ C:\Users\Hanss-Rauch\Downloads\bukkit-1.6.2-R0.1-20130724.060108-7.jar
2013-07-30 19:51 - 2013-07-30 19:51 - 01758824 _____ C:\Users\Hanss-Rauch\Downloads\winrar-x64-420d.exe
2013-07-30 19:49 - 2013-07-30 19:51 - 00001621 _____ C:\Users\Hanss-Rauch\Desktop\startbat.rar
2013-07-30 19:46 - 2013-07-30 19:46 - 00001145 _____ C:\Users\Hanss-Rauch\Downloads\startbat.rar
2013-07-30 19:45 - 2013-07-30 19:46 - 12973435 _____ C:\Users\Hanss-Rauch\Downloads\craftbukkit-1.5.2-R1.0.jar
2013-07-29 14:25 - 2013-07-29 14:25 - 00262144 _____ C:\Windows\system32\config\elam
2013-07-29 14:22 - 2013-07-29 14:22 - 00002200 _____ C:\Users\Hanss-Rauch\Desktop\Online Weather.lnk
2013-07-29 14:22 - 2013-07-29 14:22 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Online Weather
2013-07-29 14:22 - 2013-07-29 14:22 - 00000000 ____D C:\Users\HANSS-~1\AppData\Local\WebPlayer
2013-07-29 13:58 - 2013-07-29 13:55 - 00121013 _____ C:\Users\Hanss-Rauch\Desktop\BFp4f Funds Hack v2.0.rar
2013-07-29 13:30 - 2013-07-29 13:30 - 00000000 ____D C:\Users\Hanss-Rauch\Desktop\kavkisfile.com-15-July-2013
2013-07-29 13:19 - 2013-07-29 13:19 - 00002340 _____ C:\Users\Hanss-Rauch\Desktop\Sicherer Zahlungsverkehr.lnk
2013-07-29 13:18 - 2013-07-29 13:01 - 00248634 _____ C:\Users\Hanss-Rauch\Desktop\kavkisfile.com-15-July-2013.zip
2013-07-29 13:17 - 2013-07-29 13:17 - 00001146 _____ C:\Users\Public\Desktop\Kaspersky Internet Security 2013.lnk
2013-07-29 13:17 - 2013-05-16 07:27 - 00064856 _____ (Kaspersky Lab) C:\Windows\system32\klfphc.dll
2013-07-29 13:16 - 2013-08-22 21:02 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-07-29 13:16 - 2013-07-29 13:16 - 00000000 ____D C:\Windows\ELAMBKUP
2013-07-29 13:16 - 2013-07-29 13:16 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-07-29 13:16 - 2013-05-16 07:27 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2013-07-29 13:16 - 2013-05-16 07:27 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
==================== One Month Modified Files and Folders =======
2013-08-22 22:21 - 2013-08-22 22:21 - 00001145 _____ C:\Users\Hanss-Rauch\Desktop\checkup.txt
2013-08-22 22:17 - 2012-12-11 11:04 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Spotify
2013-08-22 22:16 - 2013-08-16 19:10 - 00000000 ____D C:\Users\HANSS-~1\AppData\Local\LogMeIn Hamachi
2013-08-22 22:14 - 2012-09-02 19:22 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Skype
2013-08-22 22:02 - 2012-10-12 11:32 - 00001144 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2922039653-137104462-887748758-1000UA.job
2013-08-22 21:53 - 2013-03-11 19:56 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-08-22 21:53 - 2013-03-11 19:56 - 00280904 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-08-22 21:53 - 2012-05-24 18:17 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2013-08-22 21:53 - 2012-03-16 10:49 - 01136171 _____ C:\Windows\WindowsUpdate.log
2013-08-22 21:47 - 2012-08-21 12:16 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-22 21:33 - 2012-10-28 22:29 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-22 21:02 - 2013-07-29 13:16 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-08-22 20:54 - 2013-08-22 20:54 - 00891115 _____ C:\Users\Hanss-Rauch\Downloads\SecurityCheck.exe
2013-08-22 20:54 - 2013-08-22 20:54 - 00891115 _____ C:\Users\Hanss-Rauch\Desktop\SecurityCheck.exe
2013-08-22 14:51 - 2012-10-28 22:29 - 00001116 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-22 14:51 - 2002-01-01 20:46 - 00000000 ____D C:\Program Files (x86)\Origin
2013-08-22 14:46 - 2009-07-14 06:45 - 00021856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-22 14:46 - 2009-07-14 06:45 - 00021856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-22 14:43 - 2011-04-12 09:43 - 04991108 _____ C:\Windows\system32\perfh007.dat
2013-08-22 14:43 - 2011-04-12 09:43 - 01476528 _____ C:\Windows\system32\perfc007.dat
2013-08-22 14:43 - 2009-07-14 07:13 - 00005020 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-22 14:39 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-22 14:39 - 2009-07-14 06:51 - 00113794 _____ C:\Windows\setupact.log
2013-08-22 12:54 - 2013-08-22 12:54 - 02347384 _____ (ESET) C:\Users\Hanss-Rauch\Downloads\esetsmartinstaller_enu.exe
2013-08-22 12:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-08-21 23:19 - 2012-09-24 13:43 - 00000000 ____D C:\Users\HANSS-~1\AppData\Local\Deployment
2013-08-21 23:06 - 2012-03-19 15:43 - 00068344 _____ C:\Users\HANSS-~1\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-21 23:05 - 2012-03-16 10:49 - 00000000 ___RD C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-08-21 23:05 - 2012-03-16 10:49 - 00000000 ___RD C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-08-21 22:55 - 2009-07-14 06:45 - 01942224 _____ C:\Windows\system32\FNTCACHE.DAT
2013-08-21 22:54 - 2013-08-21 22:54 - 00000000 ____D C:\Windows\SysWOW64\%Report%
2013-08-21 22:53 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-08-21 22:53 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-08-21 22:52 - 2011-04-12 09:55 - 00000000 ____D C:\Program Files\Windows Journal
2013-08-21 22:07 - 2013-08-21 22:06 - 00000000 ____D C:\Windows\system32\MRT
2013-08-21 21:51 - 2013-08-21 21:51 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-08-21 21:51 - 2013-08-21 21:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-08-21 21:45 - 2013-08-21 21:45 - 01576476 _____ (Farbar) C:\Users\Hanss-Rauch\Desktop\FRST64 (1).exe
2013-08-21 21:45 - 2013-08-21 21:44 - 01576476 _____ (Farbar) C:\Users\Hanss-Rauch\Downloads\FRST64 (1).exe
2013-08-21 21:32 - 2013-08-21 21:32 - 00010604 _____ C:\Users\Hanss-Rauch\Desktop\JRT.txt
2013-08-21 21:20 - 2013-08-21 21:20 - 00000000 ____D C:\Windows\ERUNT
2013-08-21 21:19 - 2013-08-21 21:19 - 01018947 _____ (Thisisu) C:\Users\Hanss-Rauch\Downloads\JRT.exe
2013-08-21 21:19 - 2013-08-21 21:19 - 01018947 _____ (Thisisu) C:\Users\Hanss-Rauch\Desktop\JRT.exe
2013-08-21 21:08 - 2013-08-21 21:06 - 00000000 ____D C:\AdwCleaner
2013-08-21 21:08 - 2012-05-01 20:15 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-21 21:04 - 2013-08-21 21:04 - 00975858 _____ C:\Users\Hanss-Rauch\Downloads\adwcleaner.exe
2013-08-21 20:49 - 2010-11-21 05:47 - 00177944 _____ C:\Windows\PFRO.log
2013-08-21 19:07 - 2012-10-03 15:08 - 00000000 ____D C:\Program Files (x86)\vGrabber-software
2013-08-21 17:53 - 2013-08-21 17:53 - 00001109 _____ C:\Users\Hanss-Rauch\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-21 17:52 - 2013-08-21 17:52 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Hanss-Rauch\Downloads\mbam-setup-1.75.0.1300.exe
2013-08-21 17:52 - 2013-08-21 17:52 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-21 17:52 - 2013-08-21 17:52 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-21 16:44 - 2013-08-21 16:44 - 00013393 _____ C:\Users\Hanss-Rauch\Desktop\ComboFix - Verknüpfung.lnk
2013-08-21 15:47 - 2012-08-21 12:16 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-21 15:47 - 2012-08-21 12:16 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-21 15:47 - 2012-03-19 19:47 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-21 15:15 - 2012-11-01 19:42 - 00003234 _____ C:\Windows\System32\Tasks\SidebarExecute
2013-08-21 15:06 - 2013-08-21 15:06 - 00075102 _____ C:\ComboFix.txt
2013-08-21 15:06 - 2013-08-21 14:33 - 00000000 ____D C:\Qoobox
2013-08-21 15:06 - 2012-09-24 13:43 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Local\Apps\2.0
2013-08-21 15:06 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-08-21 15:04 - 2013-08-21 14:32 - 00000000 ____D C:\Windows\erdnt
2013-08-21 14:59 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-08-21 14:54 - 2013-03-08 22:50 - 00000000 ____D C:\Program Files (x86)\DSL-Manager
2013-08-21 14:32 - 2013-08-21 14:31 - 05109244 ____R (Swearware) C:\Users\Hanss-Rauch\Downloads\ComboFix.exe
2013-08-21 13:59 - 2013-03-09 21:04 - 00002255 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-08-21 13:00 - 2013-08-21 13:00 - 00000000 ____D C:\FRST
2013-08-21 12:59 - 2013-08-21 12:59 - 01576164 _____ (Farbar) C:\Users\Hanss-Rauch\Downloads\FRST64.exe
2013-08-21 12:05 - 2013-08-21 12:05 - 00347424 _____ (Microsoft Corporation) C:\Users\Hanss-Rauch\Downloads\MicrosoftFixit.wu.Run.exe
2013-08-21 12:02 - 2012-10-12 11:32 - 00001092 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2922039653-137104462-887748758-1000Core.job
2013-08-21 11:51 - 2013-08-21 11:51 - 01010176 _____ C:\Users\Hanss-Rauch\Downloads\MicrosoftFixit50884.msi
2013-08-20 23:14 - 2013-03-16 13:55 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\.minecraft
2013-08-20 16:35 - 2012-12-11 11:06 - 00000000 ____D C:\Users\HANSS-~1\AppData\Local\Spotify
2013-08-19 17:52 - 2013-08-19 17:53 - 03042115 _____ C:\Users\Hanss-Rauch\Desktop\industrialcraft-2_1.115.308-lf (1).rar
2013-08-19 17:52 - 2013-08-19 17:52 - 03042115 _____ C:\Users\Hanss-Rauch\Downloads\industrialcraft-2_1.115.308-lf (1).rar
2013-08-18 16:19 - 2013-08-18 16:19 - 00029112 _____ C:\Users\Hanss-Rauch\Downloads\Printer-Block-Mod-1.5.2.zip
2013-08-18 16:15 - 2013-08-18 16:15 - 00300193 _____ C:\Users\Hanss-Rauch\Downloads\RoadWorks-Mod-1.5.2.rar
2013-08-18 16:13 - 2013-08-18 16:13 - 00230381 _____ C:\Users\Hanss-Rauch\Downloads\TwitchTV-IRC-Reborn-Mod-1.5.2.zip
2013-08-18 13:34 - 2013-08-18 13:34 - 00000000 ____D C:\Users\Hanss-Rauch\Desktop\resources
2013-08-18 13:34 - 2013-08-18 13:33 - 02999474 _____ C:\Users\Hanss-Rauch\Downloads\Project-Red-Mod-1.5.2.jar
2013-08-18 13:33 - 2013-08-18 13:32 - 02272553 _____ C:\Users\Hanss-Rauch\Downloads\Railcraft-Mod-1.5.2.jar
2013-08-17 19:15 - 2013-08-17 19:15 - 00124927 _____ C:\Users\Hanss-Rauch\Downloads\Instant-Blocks-Mod-1.5.2.zip
2013-08-17 19:13 - 2013-08-17 19:13 - 00117705 _____ C:\Users\Hanss-Rauch\Downloads\WR-CBE-Core-1.5.2.jar
2013-08-17 19:12 - 2013-08-17 19:12 - 00378337 _____ C:\Users\Hanss-Rauch\Downloads\Not-Enough-Items-1.5.2.jar
2013-08-17 19:08 - 2013-08-17 19:08 - 02225575 _____ C:\Users\Hanss-Rauch\Downloads\Chisel-Mod-1.5.2.jar
2013-08-17 18:56 - 2013-08-17 18:56 - 01229617 _____ C:\Users\Hanss-Rauch\Downloads\buildcraft-A-3.7.1.jar
2013-08-17 18:55 - 2013-08-17 18:55 - 00069465 _____ C:\Users\Hanss-Rauch\Downloads\Railcraft-Mod-1.5.2-API.zip
2013-08-17 18:49 - 2013-08-17 18:48 - 00167296 _____ C:\Users\Hanss-Rauch\Downloads\More-Pistons-Mod-1.5.2.zip
2013-08-17 18:45 - 2013-08-17 18:45 - 00037784 _____ C:\Users\Hanss-Rauch\Downloads\Light-Bridges-and-Doors-Mod-1.5.2.zip
2013-08-16 21:10 - 2013-08-16 21:10 - 00205945 _____ C:\Users\Hanss-Rauch\Downloads\More-Explosives-Mod-1.5.2.zip
2013-08-16 21:05 - 2013-08-16 21:05 - 00019040 _____ C:\Users\Hanss-Rauch\Downloads\[1.5.2] Useful Redstone Mod.zip
2013-08-16 19:18 - 2013-08-16 19:18 - 03042115 _____ C:\Users\Hanss-Rauch\Downloads\industrialcraft-2_1.115.308-lf.rar
2013-08-16 19:15 - 2013-08-16 19:15 - 00205948 _____ C:\Users\Hanss-Rauch\Downloads\MoreExplosivesModRelease3.5forMC1.5.1.zip
2013-08-16 19:14 - 2013-08-16 19:14 - 00199576 _____ C:\Users\Hanss-Rauch\Downloads\MoreExplosivesModRelease3.7forMinecraft1.6.2.zip
2013-08-16 19:10 - 2013-08-16 19:10 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-08-16 19:08 - 2013-08-16 19:08 - 04292608 _____ C:\Users\Hanss-Rauch\Downloads\hamachi_2.1.0.362.msi
2013-08-16 12:33 - 2013-08-16 12:25 - 2463242240 _____ C:\Users\Hanss-Rauch\Downloads\X15-65740 (1).iso
2013-08-16 12:27 - 2013-08-16 12:27 - 01758824 _____ C:\Users\Hanss-Rauch\Downloads\winrar-x64-420d (2).exe
2013-08-16 12:27 - 2013-08-16 12:27 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-08-16 12:27 - 2013-08-16 12:27 - 00000000 ____D C:\Program Files\WinRAR
2013-08-16 12:25 - 2013-08-16 12:18 - 2147484386 _____ C:\Users\Hanss-Rauch\Downloads\X15-65740.iso
2013-08-15 21:10 - 2012-11-01 18:17 - 00045856 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2013-08-12 18:06 - 2013-08-12 18:06 - 00000000 ____D C:\Users\Hanss-Rauch\Desktop\spc
2013-08-12 18:06 - 2013-06-09 16:02 - 00000046 _____ C:\Users\Hanss-Rauch\Desktop\teams.dat
2013-08-12 15:53 - 2013-08-12 15:53 - 01082179 _____ C:\Users\Hanss-Rauch\Downloads\SinglePlayerCommands-MC1.5.2_V4.8.jar
2013-08-12 15:49 - 2013-08-12 15:49 - 02033732 _____ C:\Users\Hanss-Rauch\Downloads\minecraftforge-universal-1.5.2-7.8.1.738.zip
2013-08-12 15:47 - 2013-08-12 15:47 - 05564661 _____ C:\Users\Hanss-Rauch\Downloads\1.5.2.jar
2013-08-12 15:42 - 2013-08-12 15:42 - 01950783 _____ C:\Users\Hanss-Rauch\Downloads\minecraftforge_universal_1_5_2_7_8_0_696.zip.zip
2013-08-12 15:25 - 2013-08-12 15:25 - 00267043 _____ C:\Users\Hanss-Rauch\Downloads\WirelessRedstone.zip
2013-08-12 15:25 - 2013-08-12 15:25 - 00267043 _____ C:\Users\Hanss-Rauch\Desktop\WirelessRedstone.zip
2013-08-12 15:19 - 2013-08-12 15:21 - 00675988 _____ C:\Users\Hanss-Rauch\Desktop\Minecraft (2).exe
2013-08-12 15:19 - 2013-08-12 15:19 - 00675988 _____ C:\Users\Hanss-Rauch\Downloads\Minecraft.exe
2013-08-11 20:25 - 2012-04-22 14:36 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-08-11 20:24 - 2013-08-11 20:24 - 09304408 _____ (Wargaming.net ) C:\Users\Hanss-Rauch\Downloads\WoT_internet_install_eu.exe
2013-08-11 20:24 - 2012-04-22 14:36 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-08-09 18:11 - 2013-08-09 18:11 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-08-09 18:11 - 2013-08-09 18:11 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-08-09 18:11 - 2013-08-09 18:11 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-08-09 18:11 - 2013-08-09 18:11 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-08-09 18:11 - 2013-08-09 18:11 - 00000000 ____D C:\Program Files (x86)\Java
2013-08-09 18:11 - 2012-06-12 16:21 - 00867240 _____ (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-08-09 18:11 - 2012-06-12 16:21 - 00789416 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-08-07 18:33 - 2013-08-11 12:48 - 01036312 _____ C:\Users\Hanss-Rauch\Desktop\ComputerCraft Mod 1.5.2 (2).zip
2013-08-07 18:33 - 2013-08-07 18:33 - 01036312 _____ C:\Users\Hanss-Rauch\Downloads\ComputerCraft Mod 1.5.2.zip
2013-08-07 18:33 - 2013-08-07 18:33 - 01036312 _____ C:\Users\Hanss-Rauch\Desktop\ComputerCraft Mod 1.5.2.zip
2013-08-06 21:39 - 2013-06-13 18:45 - 00000000 ____D C:\Program Files (x86)\MapCreator 2
2013-08-06 20:31 - 2012-03-24 19:33 - 00007614 _____ C:\Users\HANSS-~1\AppData\Local\Resmon.ResmonCfg
2013-08-06 20:30 - 2013-08-06 20:30 - 00933417 _____ C:\Users\Hanss-Rauch\Downloads\WarGear V6.zip
2013-08-06 16:44 - 2012-03-19 16:30 - 00000000 ____D C:\Users\Hanss-Rauch\Documents\Flight Simulator X-Dateien
2013-08-06 13:11 - 2012-10-28 22:29 - 00000000 ____D C:\Program Files (x86)\Google
2013-08-06 06:02 - 2012-06-04 15:18 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Mozilla
2013-08-05 20:15 - 2013-08-05 19:08 - 53886249 _____ C:\Users\Hanss-Rauch\Downloads\Misa500 (1).zip
2013-08-05 17:38 - 2013-08-05 17:38 - 00109656 _____ C:\Users\Hanss-Rauch\Downloads\Nicht bestätigt 510151.crdownload
2013-08-05 16:14 - 2012-03-16 11:13 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-04 22:34 - 2013-08-04 22:34 - 00000000 ____D C:\ProgramData\Package Cache
2013-08-04 22:32 - 2013-08-04 22:31 - 245472312 _____ (AMD Inc.) C:\Users\Hanss-Rauch\Downloads\amd_catalyst_13.8_beta.exe
2013-08-04 22:32 - 2012-11-26 10:10 - 00000000 ____D C:\AMD
2013-08-04 14:35 - 2013-08-04 14:35 - 00002212 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-08-04 14:11 - 2012-03-19 19:44 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2013-08-01 20:49 - 2013-08-01 20:49 - 02143832 _____ C:\Users\Hanss-Rauch\Downloads\instsf449.exe
2013-08-01 20:49 - 2012-03-19 19:44 - 00000045 _____ C:\Windows\SysWOW64\initdebug.nfo
2013-08-01 20:43 - 2013-08-01 19:48 - 00000000 ____D C:\Users\Hanss-Rauch\Downloads\hwmonitor_123
2013-08-01 20:34 - 2013-08-01 20:34 - 00002067 _____ C:\Users\Public\Desktop\AMD OverDrive.lnk
2013-08-01 20:33 - 2012-11-27 22:09 - 00000000 ____D C:\Users\HANSS-~1\AppData\Local\Downloaded Installations
2013-08-01 20:32 - 2013-08-01 20:32 - 31829816 _____ (Advanced Micro Devices, Inc. ) C:\Users\Hanss-Rauch\Downloads\aod_setup_4.2.6.exe
2013-08-01 20:12 - 2013-08-01 20:12 - 00338140 _____ C:\Users\Hanss-Rauch\Downloads\CoreTemp32_rc5.zip
2013-08-01 20:12 - 2013-08-01 20:12 - 00000000 ____D C:\Users\Hanss-Rauch\Downloads\CoreTemp32_rc5
2013-08-01 19:46 - 2013-08-01 19:46 - 01194216 _____ C:\Users\Hanss-Rauch\Downloads\hwmonitor_123.zip
2013-08-01 18:48 - 2013-08-01 18:48 - 00252446 _____ C:\Users\Hanss-Rauch\Downloads\1_5_2_reiminimap_v3_3_05.zip.zip
2013-08-01 18:41 - 2013-08-01 18:41 - 24831527 _____ C:\Users\Hanss-Rauch\Downloads\Master Pack 1.5.2.rar
2013-08-01 18:38 - 2013-08-01 18:38 - 00443952 _____ C:\Users\Hanss-Rauch\Downloads\Flans Mod 2.3.1 for Minecraft 1.5.2 Universal (1).zip
2013-08-01 18:38 - 2013-08-01 18:38 - 00443952 _____ C:\Users\Hanss-Rauch\Desktop\Flans Mod 2.3.1 for Minecraft 1.5.2 Universal (1).zip
2013-08-01 08:07 - 2012-11-22 20:59 - 00001170 _____ C:\Users\Public\Desktop\Battlefield 3.lnk
2013-07-31 21:06 - 2013-07-31 21:05 - 22532237 _____ C:\Users\Hanss-Rauch\Downloads\JaninaCraft_1_5_1_Release_x64.zip
2013-07-31 17:52 - 2013-07-31 17:52 - 00443952 _____ C:\Users\Hanss-Rauch\Downloads\Flans Mod 2.3.1 for Minecraft 1.5.2 Universal.zip
2013-07-31 16:19 - 2013-07-31 16:19 - 00472198 _____ C:\Users\Hanss-Rauch\Downloads\Sonic Ether's Unbelievable Shaders 1.5.2.zip
2013-07-31 16:15 - 2013-07-31 16:14 - 01082179 _____ C:\Users\Hanss-Rauch\Downloads\Single-Player-Commands-1.5.2.jar
2013-07-31 16:11 - 2013-07-31 16:11 - 01975130 _____ C:\Users\Hanss-Rauch\Downloads\minecraftforge-universal-1.5.2-7.8.0.684.zip
2013-07-31 16:10 - 2013-07-31 16:10 - 01758824 _____ C:\Users\Hanss-Rauch\Downloads\winrar-x64-420d (1).exe
2013-07-31 15:05 - 2013-07-31 15:05 - 08483521 _____ C:\Users\Hanss-Rauch\Downloads\ProbeII_V10481_XpVistaWin7.zip
2013-07-31 15:05 - 2013-07-31 15:05 - 00000000 ____D C:\Users\Hanss-Rauch\Downloads\ProbeII_V10481_XpVistaWin7
2013-07-31 15:05 - 2012-03-16 10:52 - 00001769 _____ C:\Windows\Language_trs.ini
2013-07-31 15:04 - 2013-07-31 15:04 - 04300194 _____ C:\Users\Hanss-Rauch\Downloads\PCProbe22502.zip
2013-07-31 15:00 - 2013-07-31 15:00 - 01282759 _____ (Alexander van Kaam ) C:\Users\Hanss-Rauch\Downloads\MBM5370.exe
2013-07-31 15:00 - 2013-07-31 15:00 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MBM 5
2013-07-31 15:00 - 2012-03-24 19:44 - 00000000 ____D C:\Program Files (x86)\Motherboard Monitor 5
2013-07-30 20:24 - 2013-07-30 20:24 - 12973435 _____ C:\Users\Hanss-Rauch\Downloads\craftbukkit-1.5.2-R1.0 (1).jar
2013-07-30 20:23 - 2013-07-30 20:23 - 04895118 _____ C:\Users\Hanss-Rauch\Downloads\bukkit-1.6.2-R0.1-20130724.060108-7.jar
2013-07-30 19:51 - 2013-07-30 19:51 - 01758824 _____ C:\Users\Hanss-Rauch\Downloads\winrar-x64-420d.exe
2013-07-30 19:51 - 2013-07-30 19:49 - 00001621 _____ C:\Users\Hanss-Rauch\Desktop\startbat.rar
2013-07-30 19:46 - 2013-07-30 19:46 - 00001145 _____ C:\Users\Hanss-Rauch\Downloads\startbat.rar
2013-07-30 19:46 - 2013-07-30 19:45 - 12973435 _____ C:\Users\Hanss-Rauch\Downloads\craftbukkit-1.5.2-R1.0.jar
2013-07-30 15:05 - 2012-11-16 20:05 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Origin
2013-07-30 15:05 - 2002-01-01 20:56 - 00000000 ____D C:\Users\HANSS-~1\AppData\Local\Origin
2013-07-29 14:25 - 2013-07-29 14:25 - 00262144 _____ C:\Windows\system32\config\elam
2013-07-29 14:23 - 2012-03-16 10:49 - 00000000 ____D C:\Users\Hanss-Rauch
2013-07-29 14:22 - 2013-07-29 14:22 - 00002200 _____ C:\Users\Hanss-Rauch\Desktop\Online Weather.lnk
2013-07-29 14:22 - 2013-07-29 14:22 - 00000000 ____D C:\Users\Hanss-Rauch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Online Weather
2013-07-29 14:22 - 2013-07-29 14:22 - 00000000 ____D C:\Users\HANSS-~1\AppData\Local\WebPlayer
2013-07-29 13:55 - 2013-07-29 13:58 - 00121013 _____ C:\Users\Hanss-Rauch\Desktop\BFp4f Funds Hack v2.0.rar
2013-07-29 13:41 - 2013-05-16 07:27 - 00054368 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kltdi.sys
2013-07-29 13:31 - 2012-09-02 19:22 - 00002517 _____ C:\Users\Public\Desktop\Skype.lnk
2013-07-29 13:31 - 2012-09-02 19:22 - 00000000 ____D C:\ProgramData\Skype
2013-07-29 13:30 - 2013-07-29 13:30 - 00000000 ____D C:\Users\Hanss-Rauch\Desktop\kavkisfile.com-15-July-2013
2013-07-29 13:19 - 2013-07-29 13:19 - 00002340 _____ C:\Users\Hanss-Rauch\Desktop\Sicherer Zahlungsverkehr.lnk
2013-07-29 13:17 - 2013-07-29 13:17 - 00001146 _____ C:\Users\Public\Desktop\Kaspersky Internet Security 2013.lnk
2013-07-29 13:16 - 2013-07-29 13:16 - 00000000 ____D C:\Windows\ELAMBKUP
2013-07-29 13:16 - 2013-07-29 13:16 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-07-29 13:06 - 2012-03-19 15:43 - 00001912 _____ C:\Windows\epplauncher.mif
2013-07-29 13:01 - 2013-07-29 13:18 - 00248634 _____ C:\Users\Hanss-Rauch\Desktop\kavkisfile.com-15-July-2013.zip
2013-07-28 18:47 - 2012-05-24 18:16 - 00000000 ____D C:\Users\HANSS-~1\AppData\Local\PunkBuster
2013-07-26 07:13 - 2013-08-21 22:14 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-26 07:13 - 2013-08-21 22:14 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-26 07:13 - 2013-08-21 22:14 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-26 07:12 - 2013-08-21 22:14 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-26 07:12 - 2013-08-21 22:14 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-26 07:12 - 2013-08-21 22:14 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-26 07:12 - 2013-08-21 22:14 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-26 07:12 - 2013-08-21 22:14 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-26 07:12 - 2013-08-21 22:14 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-26 07:12 - 2013-08-21 22:14 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-26 07:12 - 2013-08-21 22:14 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-26 07:12 - 2013-08-21 22:14 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-26 07:12 - 2013-08-21 22:14 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-26 07:12 - 2013-08-21 22:14 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-26 05:35 - 2013-08-21 22:14 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-26 05:13 - 2013-08-21 22:14 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-26 05:13 - 2013-08-21 22:14 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-26 05:12 - 2013-08-21 22:14 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-26 05:12 - 2013-08-21 22:14 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-26 05:12 - 2013-08-21 22:14 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-26 05:12 - 2013-08-21 22:14 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-26 05:12 - 2013-08-21 22:14 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-26 05:12 - 2013-08-21 22:14 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-26 05:12 - 2013-08-21 22:14 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-26 05:12 - 2013-08-21 22:14 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-26 05:12 - 2013-08-21 22:14 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-26 05:11 - 2013-08-21 22:14 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-26 05:11 - 2013-08-21 22:14 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-26 04:49 - 2013-08-21 22:14 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-26 04:39 - 2013-08-21 22:14 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-26 03:59 - 2013-08-21 22:14 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-25 11:25 - 2013-08-21 15:34 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-25 10:57 - 2013-08-21 15:34 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
ZeroAccess:
C:\Users\Hanss-Rauch\AppData\Local\{a4b8a65b-7c68-0548-2b35-dddac8e0ee63}
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-16 11:57
==================== End Of Log ============================
--- --- --- |
|
23.08.2013, 13:42
| #15 |
| /// the machine /// TB-Ausbilder | Windows Firewall lässt sich nicht aktivieren fehlercode 0x80070424 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter S3 X6va008; \??\C:\Windows\SysWOW64\Drivers\X6va008 [x]
ZeroAccess:
C:\Users\Hanss-Rauch\AppData\Local\{a4b8a65b-7c68-0548-2b35-dddac8e0ee63}
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
Linear-Darstellung
