| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Problem mit Internet Browser. (Malware, Virus?)Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
30.08.2013, 20:36
| #1 |
| |  Problem mit Internet Browser. (Malware, Virus?) Hallo, ich habe ein Problem und zwar glaube ich (und bin mir ziemlich sicher), dass der Laptop den ich verwende Malware besitzt. Ich fange einfach mal mit dem Problemen an. Wenn ich den Internet Explorer verwende (und Firefox auch, hat aber AdBlock drin, dazu komme ich dann aber gleich) kommt immer eine Meldung z.B. "Wichtige Nachricht, reparieren sie ihren PC". Logischer Weise habe ich es nicht angeklickt. Diese Nachricht erscheint jedoch nicht nur auf der Google Startseite sondern alle möglichen Seiten, außerdem erscheint es als immer wieder mal Popup und ich kann nicht mehr mit dem IE zurück, auf die vorherigen besuchten Seiten. Diese "Meldungen" erscheinen auch an den Stellen wo sich meist Werbung befindet und verschwinden auf anderen Internetseite immer wieder, zeigen dafür andere Werbung an. (Vielleicht täusche ich mich.) Auch ist der Laptop tatsächlich ein wenig langsamer (oder ich bilde es mir ein), was denke ich an der Malware liegt, falls es Malware ist. (Bin kein zu großer PC-Experte was Viren und Hardware angeht) Beim Firefox Browser passiert dies nicht, (Ich denke wegen dem AdBlocker Plugin) aber der Flashplayer stürzt immer wieder ab und manchmal öffnen sich leere Popups. (Was momentan nicht der Fall ist) Das Virenprogramm (Norton Internet Security) zeigt jedoch keine dieser möglichen Viren an. (lasse gerade ein weiteren Scan laufen) Ich brauche nun halt Hilfe, diese Viren oder Malware,zu finden und entfernen. Danke schon mal im Vorraus, ich hoffe das alle Probleme gelöst werden können.  (Ich entschuldige mich, falls dieses Thema schon existiert, aber Antworten wären trotzdem nicht schlecht. Ich habe mich heute erst hier angemeldet, deswegen weiß ich nicht wie das hier läuft mit den Themen.) |
|
30.08.2013, 20:43
| #2 |
| /// TB-Ausbilder   | Problem mit Internet Browser. (Malware, Virus?) Hallo,
__________________mach bitte einen FRST-Scan: Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
31.08.2013, 17:39
| #3 |
| | Problem mit Internet Browser. (Malware, Virus?) Hier die FRST.txt
__________________FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 31-08-2013 04
Ran by Romy (administrator) on ROMY-PC on 31-08-2013 18:30:47
Running from C:\Users\Romy\Downloads
Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Spigot, Inc.) C:\Program Files\Application Updater\ApplicationUpdater.exe
(Microsoft Corporation) C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
() C:\Program Files\ICQ6Toolbar\ICQ Service.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
() C:\Windows\system32\PnkBstrA.exe
() C:\Program Files\CyberLink\Shared Files\RichVideo.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Samsung Magic Doctor\MagicDoctorKbdHk.exe
(SAMSUNG Electronics co., LTD.) C:\Program Files\Samsung\EBM\EasyBatteryMgr3.exe
(SAMSUNG Electronics) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe
() C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Cyberlink Corp.) C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Spigot, Inc.) C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
(Google Inc.) C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [6111232 2008-04-17] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1029416 2007-10-26] (Synaptics, Inc.)
HKLM\...\Run: [RemoteControl] - C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [71216 2007-03-14] (Cyberlink Corp.)
HKLM\...\Run: [LanguageShortcut] - C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [52256 2007-01-08] ()
HKLM\...\Run: [HP Software Update] - C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)
HKLM\...\Run: [BabylonToolbar] - "C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe" /md I [x]
HKLM\...\Run: [facemoods] - C:\Program Files\facemoods.com\facemoods\1.4.17.6\facemoodssrv.exe [323584 2010-10-26] (facemoods.com)
HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [40368 2011-08-31] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [937920 2011-03-29] (Adobe Systems Incorporated)
HKLM\...\Run: [KiesHelper] - C:\Program Files\Samsung\Kies\KiesHelper.exe [928656 2011-11-02] (Samsung)
HKLM\...\Run: [KiesTrayAgent] - C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [3508624 2011-11-02] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [CanonQuickMenu] - C:\Program Files\Canon\Quick Menu\CNQMMAIN.EXE [1273448 2012-04-03] (CANON INC.)
HKLM\...\Run: [] - [x]
HKLM\...\Run: [SearchSettings] - C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe [1345856 2013-08-28] (Spigot, Inc.)
HKLM\...\Runonce: [AvgUninstallURL] - cmd.exe /c start hxxp://www.avg.com/ww.special-uninstallation-feedback-app?lic=OQBBAFYARgBSAEUARQAtAFYAMgBHADMASwAtADgANwBXAFUAVQAtADIAVABWAEgAQQAtAFgANgBEAEYAOAAtAEwANgBQAEEATgA"&"inst=NwA3AC0ANAA0ADcAMgA0ADQAMQA3ADUALQBCAEEAUgA5AEcAKwAxAC0ARgBMACsAOQAtAEYAOQBNADYAKwAxAC0AWABPADMANgArADEALQBGADkATQA3AEMAKwA1AC0AWABPADkAKwAxAC0ARgA5AE0AMwArADEALQBEAEQAVAArADIANQA3ADEANAAtAEQARAA5ADAARgArADEALQBTAFQAOQAwAEYAQQBQAFAAKwAxAC0ARgBVAEkAKwAyAC0AQwBJAEEAOQAwACsAMgAtAEYAOQAwAE0AMQAyAFIAKwAxADEALQBWAEkAUAAxADIAKwAxAA"&"prod=90"&"ver=9.0.894 [x]
HKLM\...\Policies\Explorer: [BindDirectlyToPropertySetStorage] 0
HKCU\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2289664 2008-03-17] (Hewlett-Packard Company)
HKCU\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-05-07] (Google Inc.)
HKCU\...\Run: [DAEMON Tools Lite] - "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun [x]
HKCU\...\Run: [windows_update.exe] - C:\Users\Romy\Desktop\Undetected Hack [x]
HKCU\...\Run: [KiesHelper] - C:\Program Files\Samsung\Kies\KiesHelper.exe [928656 2011-11-02] (Samsung)
HKCU\...\Run: [KiesPDLR] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [21392 2011-11-02] ()
HKCU\...\Run: [beom.exe] - C:\Users\Romy\AppData\Roaming\Onap\beom.exe [x]
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
MountPoints2: H - H:\LaunchU3.exe -a
MountPoints2: {7306b3cc-6ac2-11e1-b9f7-0013779f328d} - H:\LaunchU3.exe -a
HKU\Default\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation)
HKU\Default User\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\BTTray.lnk
ShortcutTarget: BTTray.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
URLSearchHook: IObit Toolbar - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - C:\Program Files\IObit Toolbar\IE\7.5\iobitToolbarIE.dll (Spigot, Inc.)
SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3031784
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://isearch.claro-search.com/?q={searchTerms}&affID=115131&tt=3712_8&babsrc=SP_iclro&mntrId=709690290000000000000016eab05600
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://www.icq.com/search/results.php?q={searchTerms}&ch_id=osd
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3031784
SearchScopes: HKCU - {C5826C0A-15E1-4C1F-84CC-A1C5F587C35F} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=382950&p={searchTerms}
SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://mystart.incredimail.com/mb44/?search={searchTerms}&loc=search_box&u=1036326888535166022
BHO: Claro LTD Helper Object - {000F18F2-09EB-4A59-82B2-5AE4184C39C3} - C:\Program Files\Claro LTD\claro\1.6.4.1\bh\claro.dll (Montera Technologeis LTD)
BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO: IObit Toolbar - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - C:\Program Files\IObit Toolbar\IE\7.5\iobitToolbarIE.dll (Spigot, Inc.)
BHO: Mein Gutscheincode - {11111111-1111-1111-1111-110211941181} - C:\Program Files\Mein Gutscheincode\Mein Gutscheincode-bho.dll (Mein Gutscheincode GmbH)
BHO: TubeSaver - {26bfad84-10ae-4722-857e-af2fbce52182} - C:\Program Files\TubeSaver\128.dll (TubeSaver)
BHO: CescrtHlpr Object - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll No File
BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
BHO: softonic-Germany_ Toolbar - {32361cec-8645-4eea-a02e-406794b05835} - C:\Program Files\softonic-Germany_\prxtbsoft.dll (Conduit Ltd.)
BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
BHO: CescrtHlpr Object - {64182481-4F71-486b-A045-B233BD0DA8FC} - C:\Program Files\facemoods.com\facemoods\1.4.17.6\bh\facemoods.dll (facemoods.com BHO)
BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll ()
BHO: IncrediMail MediaBar 2 Toolbar - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files\IncrediMail_MediaBar_2\tbIncr.dll (Conduit Ltd.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc)
Toolbar: HKLM - ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\20101005190526\ICQToolBar.dll (ICQ)
Toolbar: HKLM - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
Toolbar: HKLM - Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll No File
Toolbar: HKLM - facemoods Toolbar - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Program Files\facemoods.com\facemoods\1.4.17.6\facemoodsTlbr.dll (facemoods.com)
Toolbar: HKLM - IncrediMail MediaBar 2 Toolbar - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files\IncrediMail_MediaBar_2\tbIncr.dll (Conduit Ltd.)
Toolbar: HKLM - Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
Toolbar: HKLM - softonic-Germany_ Toolbar - {32361cec-8645-4eea-a02e-406794b05835} - C:\Program Files\softonic-Germany_\prxtbsoft.dll (Conduit Ltd.)
Toolbar: HKLM - loadtbs - {DFEFCDEE-CF1A-4FC8-88AD-129872198372} - C:\Users\Romy\AppData\Roaming\loadtbs\toolbar.dll (InfiniAd GmbH)
Toolbar: HKLM - Claro LTD Toolbar - {9E131A93-EED7-4BEB-B015-A0ADB30B5646} - C:\Program Files\Claro LTD\claro\1.6.4.1\claroTlbr.dll (Montera Technologeis LTD)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM - IObit Toolbar - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - C:\Program Files\IObit Toolbar\IE\7.5\iobitToolbarIE.dll (Spigot, Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU -Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab
DPF: {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} https://battlefield.play4free.com/static/updater/BP4FUpdater_1.0.80.2.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Romy\AppData\Roaming\Mozilla\Firefox\Profiles\7f97n5vx.default
FF user.js: detected! => C:\Users\Romy\AppData\Roaming\Mozilla\Firefox\Profiles\7f97n5vx.default\user.js
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin: @canon.com/EPPEX - C:\Program Files\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.)
FF Plugin: @esn.me/esnsonar,version=0.70.4 - C:\Program Files\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin: @esn/esnlaunch,version=2.1.7 - C:\Program Files\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.7.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.9.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.dpliveupdate.com/DealPlyLive Update;version=3 - C:\Program Files\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll (DealPly Technologies Ltd)
FF Plugin: @tools.dpliveupdate.com/DealPlyLive Update;version=9 - C:\Program Files\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll (DealPly Technologies Ltd)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Users\Romy\AppData\Roaming\Mozilla\Firefox\Profiles\7f97n5vx.default\Extensions\126c9ec1-e913-410f-94df-6262dd70e044@94392a4b-d7bd-4563-8bcd-ba96cf8055b2.com
FF Extension: ProxTube - Gesperrte YouTube Videos entsperren - C:\Users\Romy\AppData\Roaming\Mozilla\Firefox\Profiles\7f97n5vx.default\Extensions\ich@maltegoetz.de
FF Extension: No Name - C:\Users\Romy\AppData\Roaming\Mozilla\Firefox\Profiles\7f97n5vx.default\Extensions\trash
FF Extension: DealPly Shopping - C:\Users\Romy\AppData\Roaming\Mozilla\Firefox\Profiles\7f97n5vx.default\Extensions\{906000a4-88d9-4d52-b209-7a772970d91f}
FF Extension: Address Bar Search - C:\Users\Romy\AppData\Roaming\Mozilla\Firefox\Profiles\7f97n5vx.default\Extensions\{badea1ae-72ed-4f6a-8c37-4db9a4ac7bc9}
FF Extension: iobit - C:\Users\Romy\AppData\Roaming\Mozilla\Firefox\Profiles\7f97n5vx.default\Extensions\iobit@mybrowserbar.com
FF Extension: No Name - C:\Users\Romy\AppData\Roaming\Mozilla\Firefox\Profiles\7f97n5vx.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\coFFPlgn\
FF HKLM\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\IPSFFPlgn\
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\IPSFFPlgn\
FF HKCU\...\Firefox\Extensions: [Tubesaver@istqt.co] C:\Program Files\TubeSaver\128.xpi
FF Extension: No Name - C:\Program Files\TubeSaver\128.xpi
========================== Services (Whitelisted) =================
R2 Application Updater; C:\Program Files\Application Updater\ApplicationUpdater.exe [807800 2013-08-28] (Spigot, Inc.)
S2 dealplylive; C:\Program Files\DealPlyLive\Update\DealPlyLive.exe [148000 2013-08-20] (DealPly Technologies Ltd)
S3 dealplylivem; C:\Program Files\DealPlyLive\Update\DealPlyLive.exe [148000 2013-08-20] (DealPly Technologies Ltd)
R2 ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [246520 2010-01-03] ()
S4 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [44384 2010-12-10] (Microsoft Corporation)
R2 NIS; C:\Program Files\Norton Internet Security\Engine\20.4.0.40\diMaster.dll [556336 2013-05-30] (Symantec Corporation)
R2 nvUpdatusService; C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2253120 2011-10-15] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2012-09-21] ()
R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [272024 2006-12-19] ()
==================== Drivers (Whitelisted) ====================
R1 BHDrvx86; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\BASHDefs\20130715.001\BHDrvx86.sys [1002072 2013-05-31] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NIS\1404000.028\ccSetx86.sys [134744 2013-04-16] (Symantec Corporation)
R0 CLFS; C:\Windows\System32\CLFS.sys [245736 2009-04-11] (Microsoft Corporation)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [218688 2011-05-14] (DT Soft Ltd)
R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [376920 2013-08-30] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [108120 2013-08-30] (Symantec Corporation)
S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R1 IDSVix86; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\IPSDefs\20130829.001\IDSvix86.sys [392792 2013-08-21] (Symantec Corporation)
R2 KMDFMEMIO; C:\Windows\System32\DRIVERS\kmdfmemio.sys [13312 2007-05-23] (SAMSUNG ELECTRONICS CO., LTD.)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20130830.002\NAVENG.SYS [93272 2013-08-30] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20130830.002\NAVEX15.SYS [1612376 2013-08-30] (Symantec Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [691696 2011-05-06] ()
R3 SRTSP; C:\Windows\System32\Drivers\NIS\1404000.028\SRTSP.SYS [603224 2013-05-16] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NIS\1404000.028\SRTSPX.SYS [32344 2013-03-05] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NIS\1404000.028\SYMDS.SYS [367704 2013-05-21] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NIS\1404000.028\SYMEFA.SYS [934488 2013-05-23] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT.SYS [142496 2013-06-22] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NIS\1404000.028\Ironx86.SYS [175264 2013-03-05] (Symantec Corporation)
R1 SYMTDIv; C:\Windows\System32\Drivers\NIS\1404000.028\SYMTDIV.SYS [352344 2013-04-25] (Symantec Corporation)
R3 VMC302; C:\Windows\System32\Drivers\VMC302.sys [243840 2009-01-23] (Vimicro Corporation)
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-03-09] ()
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-31 18:28 - 2013-08-31 18:28 - 01085269 _____ (Farbar) C:\Users\Romy\Downloads\FRST.exe
2013-08-30 21:45 - 2013-08-30 21:45 - 00000858 _____ C:\Users\Romy\Desktop\Mozilla Firefox.lnk
2013-08-30 20:05 - 2013-08-30 20:05 - 00002160 _____ C:\{6F61EED8-42A7-46F6-9BD8-3B42339BB2CB}
2013-08-30 18:06 - 2013-08-30 18:06 - 00000000 ____D C:\Program Files\IObit Toolbar
2013-08-30 18:06 - 2013-08-30 18:06 - 00000000 ____D C:\Program Files\Common Files\Spigot
2013-08-30 18:06 - 2013-08-30 18:06 - 00000000 ____D C:\Program Files\Application Updater
2013-08-29 19:59 - 2013-08-02 06:09 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-22 17:25 - 2013-08-22 18:30 - 00000365 _____ C:\Users\Romy\Desktop\ISBN nummern.txt
2013-08-20 02:18 - 2013-08-20 02:18 - 00000000 ____D C:\Users\Romy\AppData\Local\Xenocode
2013-08-20 02:14 - 2013-08-20 02:16 - 00000000 ____D C:\Users\Romy\AppData\Roaming\systweak
2013-08-20 02:14 - 2013-08-20 02:16 - 00000000 ____D C:\Program Files\RegClean Pro
2013-08-20 02:14 - 2012-01-20 14:14 - 00017280 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot.exe
2013-08-20 02:13 - 2013-08-31 18:19 - 00000890 _____ C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job
2013-08-20 02:13 - 2013-08-31 18:17 - 00000886 _____ C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job
2013-08-20 02:13 - 2013-08-20 02:13 - 00000000 ____D C:\Users\Romy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly
2013-08-20 02:13 - 2013-08-20 02:13 - 00000000 ____D C:\Users\Romy\AppData\Local\DealPlyLive
2013-08-20 02:13 - 2013-08-20 02:13 - 00000000 ____D C:\ProgramData\DealPlyLive
2013-08-20 02:13 - 2013-08-20 02:13 - 00000000 ____D C:\Program Files\Mein Gutscheincode
2013-08-20 02:13 - 2013-08-20 02:13 - 00000000 ____D C:\Program Files\DealPlyLive
2013-08-20 02:13 - 2013-08-20 02:13 - 00000000 ____D C:\Program Files\DealPly
2013-08-20 02:12 - 2013-08-21 06:23 - 00000000 ____D C:\Program Files\TubeSaver
2013-08-17 20:09 - 2013-08-17 20:09 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-08-15 02:21 - 2013-08-15 02:26 - 00000000 ____D C:\Windows\system32\MRT
2013-08-15 01:58 - 2013-07-25 04:40 - 12334080 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-15 01:58 - 2013-07-25 04:32 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-15 01:58 - 2013-07-25 04:30 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-15 01:58 - 2013-07-25 04:26 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-15 01:58 - 2013-07-25 04:26 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-15 01:58 - 2013-07-25 04:25 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-08-15 01:58 - 2013-07-25 04:24 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-08-15 01:58 - 2013-07-25 04:24 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-15 01:58 - 2013-07-25 04:23 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-15 01:58 - 2013-07-25 04:23 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-15 01:58 - 2013-07-25 04:23 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-15 01:58 - 2013-07-25 04:23 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-08-15 01:58 - 2013-07-25 04:23 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-08-15 01:58 - 2013-07-25 04:22 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-15 01:58 - 2013-07-25 04:22 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-15 01:58 - 2013-07-25 04:22 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-08-14 21:06 - 2013-08-14 21:06 - 00000000 ____D C:\Users\Romy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck
2013-08-14 12:51 - 2013-07-17 21:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-14 12:51 - 2013-07-05 06:53 - 00905664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-14 12:51 - 2013-06-15 15:22 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll
2013-08-14 12:51 - 2013-06-15 13:23 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-14 12:50 - 2013-07-10 11:47 - 00783360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-14 12:50 - 2013-07-09 14:10 - 01205168 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-14 12:50 - 2013-07-08 06:55 - 03603904 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2013-08-14 12:50 - 2013-07-08 06:55 - 03551680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-14 12:50 - 2013-07-08 06:20 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-14 12:50 - 2013-07-08 06:16 - 00992768 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-14 12:50 - 2013-07-08 06:16 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-14 12:50 - 2013-07-08 06:16 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
==================== One Month Modified Files and Folders =======
2013-08-31 18:30 - 2013-08-31 18:30 - 00000000 ____D C:\FRST
2013-08-31 18:28 - 2013-08-31 18:28 - 01085269 _____ (Farbar) C:\Users\Romy\Downloads\FRST.exe
2013-08-31 18:26 - 2008-08-21 02:15 - 01055736 _____ C:\Windows\WindowsUpdate.log
2013-08-31 18:19 - 2013-08-20 02:13 - 00000890 _____ C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job
2013-08-31 18:19 - 2008-10-25 23:18 - 00000000 ____D C:\Users\Romy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
2013-08-31 18:17 - 2013-08-20 02:13 - 00000886 _____ C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job
2013-08-31 18:17 - 2010-08-07 21:00 - 00001090 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-31 18:17 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-31 18:17 - 2006-11-02 14:47 - 00004784 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-31 18:17 - 2006-11-02 14:47 - 00004784 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-30 22:44 - 2008-07-09 08:09 - 00000012 _____ C:\Windows\bthservsdp.dat
2013-08-30 22:44 - 2006-11-02 15:01 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-08-30 21:54 - 2013-07-17 17:13 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-30 21:47 - 2010-08-07 21:00 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-30 21:45 - 2013-08-30 21:45 - 00000858 _____ C:\Users\Romy\Desktop\Mozilla Firefox.lnk
2013-08-30 20:05 - 2013-08-30 20:05 - 00002160 _____ C:\{6F61EED8-42A7-46F6-9BD8-3B42339BB2CB}
2013-08-30 19:15 - 2010-08-07 21:00 - 00000000 ____D C:\Users\Romy\AppData\Local\Google
2013-08-30 18:26 - 2013-04-13 18:11 - 00000000 ____D C:\Users\Romy\AppData\Local\CrashDumps
2013-08-30 18:19 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\rescache
2013-08-30 18:06 - 2013-08-30 18:06 - 00000000 ____D C:\Program Files\IObit Toolbar
2013-08-30 18:06 - 2013-08-30 18:06 - 00000000 ____D C:\Program Files\Common Files\Spigot
2013-08-30 18:06 - 2013-08-30 18:06 - 00000000 ____D C:\Program Files\Application Updater
2013-08-25 14:55 - 2008-10-25 23:18 - 00000000 ____D C:\Users\Romy
2013-08-25 14:00 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-08-25 13:52 - 2006-11-02 12:33 - 01690118 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-23 20:53 - 2010-06-19 18:04 - 00000000 ____D C:\Users\Romy\AppData\Roaming\Skype
2013-08-23 20:50 - 2012-10-18 20:41 - 00000000 ____D C:\Users\Romy\Desktop\Bewerbungen und ähnliches
2013-08-22 18:30 - 2013-08-22 17:25 - 00000365 _____ C:\Users\Romy\Desktop\ISBN nummern.txt
2013-08-22 15:45 - 2011-06-26 17:49 - 00000000 ____D C:\Users\Romy\Desktop\Paul
2013-08-22 15:10 - 2012-12-12 18:46 - 00000000 ____D C:\Users\Romy\AppData\Roaming\Origin
2013-08-22 15:10 - 2012-12-12 18:45 - 00000000 ____D C:\Users\Romy\AppData\Local\Origin
2013-08-22 15:10 - 2012-12-12 18:43 - 00000000 ____D C:\ProgramData\Origin
2013-08-22 15:09 - 2012-12-12 18:43 - 00000000 ____D C:\Program Files\Origin
2013-08-21 06:54 - 2013-07-17 17:13 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-08-21 06:54 - 2011-06-16 19:17 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-08-21 06:23 - 2013-08-20 02:12 - 00000000 ____D C:\Program Files\TubeSaver
2013-08-20 02:27 - 2011-05-28 22:40 - 00000000 ____D C:\Users\Romy\AppData\Roaming\go
2013-08-20 02:18 - 2013-08-20 02:18 - 00000000 ____D C:\Users\Romy\AppData\Local\Xenocode
2013-08-20 02:16 - 2013-08-20 02:14 - 00000000 ____D C:\Users\Romy\AppData\Roaming\systweak
2013-08-20 02:16 - 2013-08-20 02:14 - 00000000 ____D C:\Program Files\RegClean Pro
2013-08-20 02:13 - 2013-08-20 02:13 - 00000000 ____D C:\Users\Romy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly
2013-08-20 02:13 - 2013-08-20 02:13 - 00000000 ____D C:\Users\Romy\AppData\Local\DealPlyLive
2013-08-20 02:13 - 2013-08-20 02:13 - 00000000 ____D C:\ProgramData\DealPlyLive
2013-08-20 02:13 - 2013-08-20 02:13 - 00000000 ____D C:\Program Files\Mein Gutscheincode
2013-08-20 02:13 - 2013-08-20 02:13 - 00000000 ____D C:\Program Files\DealPlyLive
2013-08-20 02:13 - 2013-08-20 02:13 - 00000000 ____D C:\Program Files\DealPly
2013-08-18 14:02 - 2013-07-17 17:08 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-08-17 20:09 - 2013-08-17 20:09 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-08-15 11:05 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\de-DE
2013-08-15 02:26 - 2013-08-15 02:21 - 00000000 ____D C:\Windows\system32\MRT
2013-08-15 02:21 - 2006-11-02 12:24 - 75778376 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-08-15 02:18 - 2008-07-08 16:40 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-14 21:06 - 2013-08-14 21:06 - 00000000 ____D C:\Users\Romy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck
2013-08-13 14:56 - 2011-04-12 20:52 - 00000000 ____D C:\Users\Romy\AppData\Roaming\MyPhoneExplorer
2013-08-07 12:25 - 2008-01-21 04:47 - 00839640 _____ C:\Windows\PFRO.log
2013-08-06 20:02 - 2011-10-11 16:44 - 00000000 ____D C:\Users\Romy\AppData\Roaming\.minecraft
2013-08-04 00:48 - 2010-08-07 21:00 - 00000000 ____D C:\Program Files\Google
2013-08-02 06:09 - 2013-08-29 19:59 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
Files to move or delete:
====================
C:\ProgramData\nvModes.dat
C:\Users\Romy\AppData\Local\Temp\AdobeUpdater12345.exe
C:\Users\Romy\AppData\Local\Temp\aiw43080487.EXE
C:\Users\Romy\AppData\Local\Temp\conduitinstaller.exe
C:\Users\Romy\AppData\Local\Temp\CT3031784.exe
C:\Users\Romy\AppData\Local\Temp\CT3031784_softonic-Germany_.exe
C:\Users\Romy\AppData\Local\Temp\dp.exe
C:\Users\Romy\AppData\Local\Temp\Execute2App.exe
C:\Users\Romy\AppData\Local\Temp\facemoods.exe
C:\Users\Romy\AppData\Local\Temp\FlashPlayerUpdate.exe
C:\Users\Romy\AppData\Local\Temp\FlashPlayerUpdate01.exe
C:\Users\Romy\AppData\Local\Temp\GLF1FF4.tmp.ConduitEngineSetup.exe
C:\Users\Romy\AppData\Local\Temp\GLFA4B0.tmp.tbBrot.dll
C:\Users\Romy\AppData\Local\Temp\gtapi.dll
C:\Users\Romy\AppData\Local\Temp\gtapi_signed.dll
C:\Users\Romy\AppData\Local\Temp\i4jdel0.exe
C:\Users\Romy\AppData\Local\Temp\i4jdel1.exe
C:\Users\Romy\AppData\Local\Temp\IncrediMail_MediaBar_2.exe
C:\Users\Romy\AppData\Local\Temp\InstallMonetizer..exe
C:\Users\Romy\AppData\Local\Temp\jline_git-Bukkit-0_0_0-1131-g86b7fa8-b1337jnks.dll
C:\Users\Romy\AppData\Local\Temp\jline_git-Bukkit-0_0_0-663-gee614b4-b689jnks.dll
C:\Users\Romy\AppData\Local\Temp\jline_git-Bukkit-0_0_0-706-gf53e007-b740jnks.dll
C:\Users\Romy\AppData\Local\Temp\jline_git-Bukkit-0_0_0-757-g9527def-b810jnks.dll
C:\Users\Romy\AppData\Local\Temp\jline_git-Bukkit-1_0_1-R1-b1597jnks.dll
C:\Users\Romy\AppData\Local\Temp\jline_git-Bukkit-1_1-R4-b1938jnks.dll
C:\Users\Romy\AppData\Local\Temp\jline_git-Bukkit-1_2_5-R1_0-b2149jnks.dll
C:\Users\Romy\AppData\Local\Temp\jline_git-Bukkit-1_8_1-R4-17-g04a14f7-b1493jnks.dll
C:\Users\Romy\AppData\Local\Temp\jline_git-Bukkit-1_8_1-R4-39-g4e7eb93-b1518jnks.dll
C:\Users\Romy\AppData\Local\Temp\jre-6u24-windows-i586-iftw-rv.exe
C:\Users\Romy\AppData\Local\Temp\jre-6u26-windows-i586-iftw-rv.exe
C:\Users\Romy\AppData\Local\Temp\jre-6u31-windows-i586-iftw-rv.exe
C:\Users\Romy\AppData\Local\Temp\jre-7u7-windows-i586-iftw.exe
C:\Users\Romy\AppData\Local\Temp\jre-7u9-windows-i586-iftw.exe
C:\Users\Romy\AppData\Local\Temp\Kies2RemoveAll.exe
C:\Users\Romy\AppData\Local\Temp\MgxVistaTools.dll
C:\Users\Romy\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Romy\AppData\Local\Temp\msvcp90.dll
C:\Users\Romy\AppData\Local\Temp\msvcr90.dll
C:\Users\Romy\AppData\Local\Temp\MyBabylonTB.exe
C:\Users\Romy\AppData\Local\Temp\p4npbqgg.dll
C:\Users\Romy\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Romy\AppData\Local\Temp\sonarinst.exe
C:\Users\Romy\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
C:\Users\Romy\AppData\Local\Temp\VistaInfo32.dll
C:\Users\Romy\AppData\Local\Temp\xmlUpdater.exe
C:\Users\Romy\AppData\Local\Temp\{94A54405-5F71-4C58-AE85-926A477A9875}-GoogleUpdateB6998767.exe
C:\Users\Romy\AppData\Local\Temp\{89FFB4F7-C124-4BBA-BD0A-6C7BC2936D2F}\ICQ7.exe
C:\Users\Romy\AppData\Local\Temp\{66F59D84-9476-4949-AD0B-E773EE29CA7A}\{88EB38EF-4D2C-436D-ABD3-56B232674062}\ICQTIK.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\GoogleCrashHandler.exe
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\GoogleCrashHandler64.exe
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\GoogleUpdate.exe
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\GoogleUpdateBroker.exe
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\GoogleUpdateOnDemand.exe
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\GoogleUpdateSetup.exe
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdate.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_am.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_ar.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_bg.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_bn.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_ca.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_cs.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_da.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_de.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_el.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_en-GB.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_en.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_es-419.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_es.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_et.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_fa.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_fi.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_fil.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_fr.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_gu.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_hi.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_hr.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_hu.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_id.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_is.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_it.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_iw.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_ja.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_kn.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_ko.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_lt.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_lv.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_ml.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_mr.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_ms.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_nl.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_no.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_pl.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_pt-BR.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_pt-PT.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_ro.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_ru.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_sk.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_sl.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_sr.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_sv.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_sw.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_ta.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_te.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_th.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_tr.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_uk.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_ur.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_vi.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_zh-CN.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_zh-TW.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\npGoogleUpdate3.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\psmachine.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\psuser.dll
C:\Users\Romy\AppData\Local\Temp\www.minecraft.net\Minecraft\natives\jinput-dx8.dll
C:\Users\Romy\AppData\Local\Temp\www.minecraft.net\Minecraft\natives\jinput-raw.dll
C:\Users\Romy\AppData\Local\Temp\www.minecraft.net\Minecraft\natives\lwjgl.dll
C:\Users\Romy\AppData\Local\Temp\www.minecraft.net\Minecraft\natives\lwjgl64.dll
C:\Users\Romy\AppData\Local\Temp\www.minecraft.net\Minecraft\natives\OpenAL32.dll
C:\Users\Romy\AppData\Local\Temp\www.minecraft.net\Minecraft\natives\OpenAL64.dll
C:\Users\Romy\AppData\Local\Temp\TeamViewer\Version5\TeamViewer_.exe
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\CustomText.1031.dll
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\DeleteTemp.exe
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\dlmgr.dll
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\ExpressRes.dll
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\ExpressUI.dll
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\gencomp.dll
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\HtmlLite.dll
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\pidgenx.dll
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\setup.exe
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\setupres.dll
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\SITSetup.dll
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\sqmapi.dll
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\vs70uimgr.dll
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\vsbasereqs.dll
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\vsscenario.dll
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\vs_setup.dll
C:\Users\Romy\AppData\Local\Temp\Origin\installerdll708338.dll
C:\Users\Romy\AppData\Local\Temp\OldAvgSetup\setup.exe
C:\Users\Romy\AppData\Local\Temp\NVIDIA-1487937387\GPU_Reader.dll
C:\Users\Romy\AppData\Local\Temp\nst3CD2.tmp\GetVersion.dll
C:\Users\Romy\AppData\Local\Temp\nst3CD2.tmp\System.dll
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\MaAgent.exe
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\MAAuthProc.dll
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\MACLICX13.dll
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\MACLicX15.dll
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\MACSMANAGER.dll
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\MaCSMgr.exe
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\MaCSProHook.dll
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\mapshapi.dll
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\mapwij10.dll
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\MaSyncP.dll
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\MaWAMP.dll
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\MAWebControl.exe
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\MaWMP.dll
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\MPXBox.exe
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\MtpAccess.dll
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\UserShare.dll
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\XSYNCClt.dll
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAFileUpdate.dll
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAUpdate.exe
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAUpdateBoot.exe
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MaUpdateClient.exe
C:\Users\Romy\AppData\Local\Temp\is-2661M.tmp\IObitToolbar-stub-1.exe
C:\Users\Romy\AppData\Local\Temp\CEF1.dir\InstallFlashPlayer.exe
C:\Users\Romy\AppData\Local\Temp\CD7C.dir\InstallFlashPlayer.exe
C:\Users\Romy\AppData\Local\Temp\C207.dir\InstallFlashPlayer.exe
C:\Users\Romy\AppData\Local\Temp\B9AE.dir\InstallFlashPlayer.exe
C:\Users\Romy\AppData\Local\Temp\B85.dir\InstallFlashPlayer.exe
C:\Users\Romy\AppData\Local\Temp\b3ac04aa-9413-4ecb-ac45-ed44495e62a6\CliSecureRT.dll
C:\Users\Romy\AppData\Local\Temp\ae201572-4813-4010-9ed2-ee29ddec066a\CliSecureRT.dll
C:\Users\Romy\AppData\Local\Temp\90AB.dir\InstallFlashPlayer.exe
C:\Users\Romy\AppData\Local\Temp\644E.dir\InstallFlashPlayer.exe
C:\Users\Romy\AppData\Local\Temp\2D47.dir\InstallFlashPlayer.exe
C:\Users\Romy\AppData\Local\Temp\1a3d9b37655eeb2f9bea641ce230178f\ffmpeg.exe
C:\Users\Romy\AppData\Local\Temp\1a3d9b37655eeb2f9bea641ce230178f\npm.dll
C:\Users\Romy\AppData\Local\Temp\1a3d9b37655eeb2f9bea641ce230178f\Setup.exe
C:\Users\Romy\AppData\Local\Temp\1a3d9b37655eeb2f9bea641ce230178f\toolbar.dll
C:\Users\Romy\AppData\Local\Temp\1a3d9b37655eeb2f9bea641ce230178f\ytdl.exe
C:\Users\Romy\AppData\Local\Temp\._msigeplugin52\GoogleEarth.exe
C:\Users\Romy\AppData\Local\Temp\._msigeplugin52\program files\Google\Google Earth\plugin\earthps.dll
C:\Users\Romy\AppData\Local\Temp\._msigeplugin52\program files\Google\Google Earth\plugin\geplugin.exe
C:\Users\Romy\AppData\Local\Temp\._msigeplugin52\program files\Google\Google Earth\plugin\ge_expat.dll
C:\Users\Romy\AppData\Local\Temp\._msigeplugin52\program files\Google\Google Earth\plugin\googleearth_free.dll
C:\Users\Romy\AppData\Local\Temp\._msigeplugin52\program files\Google\Google Earth\plugin\msvcp80.dll
C:\Users\Romy\AppData\Local\Temp\._msigeplugin52\program files\Google\Google Earth\plugin\msvcr80.dll
C:\Users\Romy\AppData\Local\Temp\._msigeplugin52\program files\Google\Google Earth\plugin\npgeplugin.dll
C:\Users\Romy\AppData\Local\Temp\._msigeplugin52\program files\Google\Google Earth\plugin\plugin_ax.dll
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-31 18:23
==================== End Of Log ============================
--- --- --- Hier die Addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 31-08-2013 04
Ran by Romy at 2013-08-31 18:32:17
Running from C:\Users\Romy\Downloads
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
Update for Microsoft Office 2007 (KB2508958)
2007 Microsoft Office system (Version: 12.0.6612.1000)
32 Bit HP CIO Components Installer (Version: 6.1.1)
7-Zip 9.20
Action Replay Code Manager
Activation Assistant for the 2007 Microsoft Office suites
Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0)
Adobe Flash Player 11 ActiveX (Version: 11.8.800.94)
Adobe Flash Player 11 Plugin (Version: 11.8.800.94)
Adobe Reader 8.3.1 - Deutsch (Version: 8.3.1)
Agere Systems HDA Modem
ArmA Demo Uninstall
Atheros WLAN Client (Version: 1.00.000)
Audacity 1.3.13 (Unicode)
Battlefield 1942™ (Version: 1.6.20.0)
Battlelog Web Plugins (Version: 2.1.7)
Business Contact Manager für Outlook 2007 SP2 (Version: 3.0.8619.1)
CamStudio
Canon Easy-WebPrint EX
Canon IJ Scan Utility
Canon MP230 series Benutzerregistrierung
Canon MP230 series MP Drivers (Version: 1.00)
Canon MP230 series On-screen Manual (Version: 7.5.0)
Canon My Image Garden (Version: 1.0.0)
Canon My Image Garden Design Files (Version: 1.0.0)
Canon My Printer (Version: 3.0.0)
Canon Quick Menu (Version: 2.0.0)
Cheat Engine 6.0
Claro LTD toolbar on IE
Conduit Engine (Version: )
CraftBukkit
CyberLink DVD Suite (Version: 5.0.2403)
CyberLink Power2Go (Version: 5.0.3825)
DAEMON Tools Lite (Version: 4.40.2.0131)
DealPly (remove only) (Version: 4.8.7.2)
DHTML Editing Component (Version: 6.02.0001)
Easy Battery Manager (Version: 3.2.1.7)
Easy Display Manager (Version: 2.0.0.0)
Easy Network Manager 3.0 (Version: 3.0.0.0)
Easy SpeedUp Manager (Version: 2.0.1.0)
EMCMI (HKCU Version: 0.4.0.15)
ESN Sonar (Version: 0.70.4)
Facemoods Toolbar
Free Download Manager 3.0
Free Screen To Video V 1.2 (Version: 1.2.0.0)
Free YouTube to MP3 Converter version 3.11.22.508 (Version: 3.11.22.508)
Game Booster 3 (Version: 3.1)
GCFScape 1.8.2
GIMP 2.6.11 (Version: 2.6.11)
Google Earth Plug-in (Version: 7.1.1.1888)
Google Toolbar for Internet Explorer (Version: 1.0.0)
Google Toolbar for Internet Explorer (Version: 7.5.4413.1752)
Google Update Helper (Version: 1.3.21.153)
Hex-Editor MX (Version: 6.0)
Hotfix für Microsoft Visual C++ 2010 Express - DEU (KB2565057) (Version: 1)
Hotfix für Microsoft Visual C++ 2010 Express - DEU (KB2635973) (Version: 1)
HP Update (Version: 4.000.011.006)
IClaroInstaller (Version: 1.0.0.1)
ICQ Toolbar (Version: 3.0.0)
imagine digital freedom - Samsung (Version: 1.0.2.0)
IncrediMail MediaBar 2 Toolbar (Version: 6.1.0.7)
Intel PROSet Wireless
Intel(R) PROSet/Wireless WiFi-Software (Version: 12.04.4000)
Intel® Matrix Storage Manager
IObit Toolbar v7.5 (Version: 7.5)
Java 7 Update 9 (Version: 7.0.90)
Java Auto Updater (Version: 2.1.9.0)
LabelPrint (Version: .2406)
LibreOffice 3.4 (Version: 3.4.502)
LightScribe System Software 1.12.37.1 (Version: 1.12.37.1)
loadtbs-2.1
MAGIX FunPix Maker 1.0.0.0 (D) (Version: 1.0.0.0)
Mah Jongg Master 3.0 SE (Version: 1.00.0000)
MAX DS Video Converter
Mein Gutscheincode (Version: 1.27.153.0)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320)
Microsoft .NET Framework 4 Extended (Version: 4.0.30320)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30320)
Microsoft .NET Framework 4 Multi-Targeting Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Choice Guard (Version: 2.0.48.0)
Microsoft Help Viewer 1.1 (Version: 1.1.40219)
Microsoft Help Viewer 1.1 Language Pack - DEU (Version: 1.1.40219)
Microsoft Office 2003 Web Components (Version: 11.0.8003.0)
Microsoft Office 2007 Primary Interop Assemblies (Version: 12.0.4518.1014)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Groove MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Professional Hybrid 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Small Business Connectivity Components (Version: 2.0.7024.0)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft SOAP Toolkit 2.0 SP2 (Version: 623.1)
Microsoft SQL Server 2005
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft SQL Server 2005 Express Edition (MSSMLBIZ) (Version: 9.4.5000.00)
Microsoft SQL Server Compact 3.5 SP2 DEU (Version: 3.5.8080.0)
Microsoft SQL Server Native Client (Version: 9.00.5000.00)
Microsoft SQL Server VSS Writer (Version: 9.00.5000.00)
Microsoft Visual C++ Compilers 2010 Standard - enu - x86 (Version: 10.0.40219)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (Version: 9.0.30729.4974)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 Express - DEU (Version: 10.0.40219)
Microsoft Visual Studio 2010 Service Pack 1 (Version: 10.0.40219)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (Version: 10.0.40303)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (Version: 10.0.40308)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - DEU (Version: 10.0.40303)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x86) Language Pack - DEU (Version: 10.0.40303)
Mozilla Firefox 23.0.1 (x86 de) (Version: 23.0.1)
Mozilla Maintenance Service (Version: 23.0.1)
MSVCRT (Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB927978) (Version: 4.20.9841.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MSXML 4.0 SP2 Parser and SDK (Version: 4.20.9818.0)
MyPhoneExplorer (Version: 1.8.1)
Need For Speed™ World (Version: 1.0.0.430)
Norton Internet Security (Version: 20.4.0.40)
Notepad++ (Version: 5.9)
NSIS Hisoutensoku English
NVIDIA Grafiktreiber 285.62 (Version: 285.62)
NVIDIA HD-Audiotreiber 1.3.18.0 (Version: 1.3.18.0)
NVIDIA Install Application (Version: 2.1002.109.718)
NVIDIA PhysX (Version: 9.11.0621)
NVIDIA PhysX-Systemsoftware 9.11.0621 (Version: 9.11.0621)
NVIDIA Systemsteuerung 285.62 (Version: 285.62)
NVIDIA Update 1.5.20 (Version: 1.5.20)
NVIDIA Update Components (Version: 1.5.20)
OpenAL
Origin (Version: 9.1.3.2637)
osu! (Version: 0.0.0.0)
PC Beschleunigen (Version: 1.3.10.20086)
Photo Viewer 2.3
Pivot Stickfigure Animator (Version: 2.2.5)
Play AVStation (Version: 4.1.20.50)
PlayCamera (Version: 1.0.1.7)
PowerDirector (Version: 5.0.3927)
PowerDVD (Version: 7.0.3118.0)
PowerProducer (Version: 085120(3.7)_Vista_SSPC)
PunkBuster Services (Version: 0.990)
Python 3.1.2 (Version: 3.1.2150)
Realtek High Definition Audio Driver (Version: 6.0.1.5605)
Samsung Kies (Version: 2.1.0.11095_121)
Samsung Magic Doctor (Version: 5.00)
Samsung Recovery Solution III (Version: 3.0.0.5)
Samsung Update Plus (Version: 2.0)
SAMSUNG USB Driver for Mobile Phones (Version: 1.4.8.0)
Skype Click to Call (Version: 5.9.9216)
Skype™ 6.3 (Version: 6.3.107)
softonic-Germany_ Toolbar (Version: 6.3.8.0)
Source Multiplayer Dedicated Server
Steam (Version: 1.0.0.0)
Synaptics Pointing Device Driver (Version: 10.1.2.0)
System Requirements Lab
System Requirements Lab CYRI (Version: 5.0.6.0)
TeamSpeak 3 Client
TubeSaver
TweetDeck (Version: 3.1.3)
Unlocker 1.8.9 (Version: 1.8.9)
Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch) (Version: 9.00.5000.00)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB2836940) (Version: 1)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (Version: 1)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition
Update for Microsoft Office Outlook 2007 (KB2768023) 32-Bit Edition
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2817642) 32-Bit Edition
Update für Microsoft Office Excel 2007 Help (KB963678)
Update für Microsoft Office Outlook 2007 Help (KB963677)
Update für Microsoft Office Powerpoint 2007 Help (KB963669)
Update für Microsoft Office Word 2007 Help (KB963665)
User Guide (Version: 1.0)
Valve Hammer Editor
Vimicro UVC Camera (Version: 1.00.0000)
WIDCOMM Bluetooth Software 6.0.1.6300 (Version: 6.0.1.6300)
Windows Live Anmelde-Assistent (Version: 5.000.818.5)
Windows Live Communications Platform (Version: 14.0.8117.416)
Windows Live Essentials (Version: 14.0.8117.0416)
Windows Live Essentials (Version: 14.0.8117.416)
Windows Live Fotogalerie (Version: 14.0.8117.416)
Windows Live Sync (Version: 14.0.8117.416)
Windows Live-Uploadtool (Version: 14.0.8014.1029)
Wisdom-soft Set up ASR 3.1 Free
World of Tanks
Yahoo! Toolbar
==================== Restore Points =========================
14-08-2013 19:04:48 Installed TweetDeck
14-08-2013 23:54:00 Windows Update
25-08-2013 11:43:58 Windows Update
25-08-2013 12:30:34 Windows Update
30-08-2013 16:01:47 Windows Update
==================== Hosts content: ==========================
2006-11-02 12:23 - 2011-05-31 19:57 - 00000241 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 activate.adobe.com
127.0.0.1 toyboxapi.garrysmod.com
127.0.0.1 toyboxapi.garrysmod.org
127.0.0.1 garrysmod.org
127.0.0.1 garrysmod.com
127.0.0.1 garrysmod.tv
127.0.0.1 facepunch.com
==================== Scheduled Tasks (whitelisted) =============
Task: {06BB5110-F775-42D4-8A2C-F8425ED234EB} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2008-01-21] (Microsoft Corporation)
Task: {0FFD59AC-38F8-4342-847D-FD48750A5D62} - System32\Tasks\DealPlyLiveUpdateTaskMachineUA => C:\Program Files\DealPlyLive\Update\DealPlyLive.exe [2013-08-20] (DealPly Technologies Ltd)
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {2D87C61C-63FB-44AA-A2E8-47CE76210BDE} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\schtasks.exe [2008-01-21] (Microsoft Corporation)
Task: {2F999F0B-4A22-4EF1-8029-3260B86CE134} - System32\Tasks\Norton WSC Integration => C:\Program Files\Norton Internet Security\Engine\20.4.0.40\WSCStub.exe [2013-06-04] (Symantec Corporation)
Task: {3048F55A-A266-40E3-8960-C82CC5E9F0A2} - System32\Tasks\SamsungMagicDoctor => C:\Program Files\Samsung\Samsung Magic Doctor\MagicDoctorKbdHk.exe [2007-07-05] (Samsung Electronics Co., Ltd.)
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {3E21E1AC-D61F-4D06-85AE-7BA3CE25479D} - System32\Tasks\EasyBatteryManager => C:\Program Files\Samsung\EBM\EasyBatteryMgr3.exe [2008-04-17] (SAMSUNG Electronics co., LTD.)
Task: {41C14CAD-8E32-4815-8D39-162CDA4054EB} - System32\Tasks\{3F5F066A-F395-4E7B-AB92-1F24C22A7378} => C:\Program Files\Internet Explorer\iexplore.exe [2013-07-25] (Microsoft Corporation)
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {4B0A4EA0-41A7-4C2D-AA54-AA84329A401C} - System32\Tasks\Microsoft\Windows\Defrag\ManualDefrag => C:\Windows\system32\defrag.exe [2008-01-21] (Microsoft Corp.)
Task: {56FC5C7B-173D-4CF6-8A5E-EACC301EBB6F} - System32\Tasks\EasyDisplayMgr => C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe [2008-05-22] (SAMSUNG Electronics)
Task: {68538208-A2F5-41F8-890A-A93A38DD977A} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation)
Task: {68D9584A-B6AA-4414-A37E-D519D4F36374} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-08-07] (Google Inc.)
Task: {6945CC2E-B284-44C7-91F1-8B30F4EC95A8} - System32\Tasks\{39DD6B72-E880-41A3-8F49-5B3DB7B78572} => C:\Program Files\Internet Explorer\iexplore.exe [2013-07-25] (Microsoft Corporation)
Task: {71A44DBB-2062-40FB-952D-D7DD85BE8507} - System32\Tasks\{CB5F325A-944C-4856-84DA-CE8A1196847C} => C:\Program Files\Internet Explorer\iexplore.exe [2013-07-25] (Microsoft Corporation)
Task: {7461BFD1-B691-446F-B76B-8B8BD9433B8B} - System32\Tasks\WPD\SqmUpload_S-1-5-21-2558285108-2310517472-400900193-1003 => C:\Windows\System32\portabledeviceapi.dll [2009-10-01] (Microsoft Corporation)
Task: {74EEEFF0-7697-4866-BB9B-5087E82C77F6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-21] (Adobe Systems Incorporated)
Task: {8B81419B-6076-4349-B37B-908910374C68} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation)
Task: {8F278B33-554A-4E76-A504-E292A64A7D8E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-08-07] (Google Inc.)
Task: {914A78ED-C0C3-406E-9CA2-9BC091704589} - System32\Tasks\{65438A9B-93EE-4E23-8DBE-F638BAA87EB1} => C:\Program Files\Internet Explorer\iexplore.exe [2013-07-25] (Microsoft Corporation)
Task: {A61555D3-7840-45C1-A5A9-0D49851DE37A} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\OptinNotification => C:\Windows\System32\wsqmcons.exe [2008-01-21] (Microsoft Corporation)
Task: {A728AE6B-5AB8-4223-AD3E-E6341441A01C} - System32\Tasks\Microsoft\Windows\PLA\System\ConvertLogEntries => C:\Windows\system32\pla.dll [2008-01-21] (Microsoft Corporation)
Task: {C583ACCA-CC33-4289-B547-78225C531A8F} - System32\Tasks\SUPBackground => C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe [2010-04-20] ()
Task: {CE3C7B64-1AB7-4FA9-83BD-864EC211E4D1} - System32\Tasks\EasySpeedUpManager => C:\Program Files\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe [2008-04-25] (Samsung Electronics Co., Ltd.)
Task: {D3880FDA-5B74-4BC7-8AEE-9AB3E02A8B98} - System32\Tasks\User_Feed_Synchronization-{C9A5D6CD-9A09-4766-ACFA-C7DD5EFDC39B} => C:\Windows\system32\msfeedssync.exe [2011-05-18] (Microsoft Corporation)
Task: {D9D0D0DA-6299-44F9-8886-B3D48023812D} - System32\Tasks\DealPlyLiveUpdateTaskMachineCore => C:\Program Files\DealPlyLive\Update\DealPlyLive.exe [2013-08-20] (DealPly Technologies Ltd)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: {EF04960B-8066-4D9A-BF7C-B3E2E7F4B5F4} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-12] (Microsoft Corporation)
Task: {F270FE41-49A4-4205-9563-688E3B6BDEBE} - System32\Tasks\{6787A220-8BA8-46B7-B8B4-5F124D37957C} => C:\Program Files\Skype\Phone\Skype.exe [2013-04-19] (Skype Technologies S.A.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job => C:\Program Files\DealPlyLive\Update\DealPlyLive.exe
Task: C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job => C:\Program Files\DealPlyLive\Update\DealPlyLive.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-06-08 07:21 - 2013-05-21 06:44 - 00705928 ____R (Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\20.4.0.40\ccL120U.dll
2013-06-08 07:21 - 2013-05-21 06:44 - 00089480 ____R (Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\20.4.0.40\ccVrTrst.dll
2013-06-08 07:20 - 2013-05-23 07:25 - 00086408 ____R (Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\20.4.0.40\EFACli.dll
2013-06-08 07:21 - 2013-05-21 06:44 - 00157576 ____R (Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\20.4.0.40\ccSvc.dll
2013-06-08 07:21 - 2013-05-21 06:40 - 00410576 ____R (Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\20.4.0.40\srtsp32.dll
2013-06-08 07:21 - 2013-05-21 06:44 - 00159624 ____R (Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\20.4.0.40\ccIPC.dll
2013-06-08 07:21 - 2013-06-04 06:42 - 00548688 ____R (Symantec Corporation) C:\PROGRAM FILES\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\NPCTRAY.DLL
2013-06-08 07:21 - 2013-05-21 06:44 - 00345480 ____R (Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\20.4.0.40\ccSet.dll
2013-06-08 07:20 - 2013-06-04 06:43 - 00962384 ____R (Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\20.4.0.40\uiMain.dll
2013-06-08 07:20 - 2013-05-28 09:42 - 02430800 ____R (Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\20.4.0.40\SYMHTMDX.DLL
2013-06-08 07:21 - 2013-05-30 03:22 - 00320816 ____R (Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\20.4.0.40\diStRptr.dll
2013-06-08 07:20 - 2013-05-30 04:13 - 01337136 ____R (Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\20.4.0.40\MClnTask.dll
2013-06-08 07:20 - 2013-06-28 07:17 - 01849168 _____ (Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\20.4.0.40\isDataPr.dll
2013-06-08 07:20 - 2013-06-04 06:42 - 00548176 ____R (Symantec Corporation) C:\PROGRAM FILES\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\ASHELPER.DLL
2013-06-08 07:20 - 2013-06-04 06:42 - 00579408 ____R (Symantec Corporation) C:\PROGRAM FILES\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\ASOEHOOK.DLL
2013-06-08 07:20 - 2013-06-04 06:42 - 00537424 ____R (Symantec Corporation) C:\PROGRAM FILES\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\AVPAPP32.DLL
2013-06-08 07:21 - 2013-05-21 06:44 - 00401288 ____R (Symantec Corporation) C:\PROGRAM FILES\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\CCJOBMGR.DLL
2013-06-08 07:21 - 2013-05-21 00:50 - 02651472 ____R (Symantec Corporation) C:\PROGRAM FILES\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\CLTALDIS.DLL
2013-06-08 07:20 - 2013-05-24 04:09 - 00502664 ____R (Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\20.4.0.40\AVIfc.dll
2013-06-21 17:39 - 2013-06-10 19:10 - 00629072 ____R (Symantec Corporation) C:\Program Files\Norton Internet Security\MUI\20.4.0.40\07\01\cltRes.loc
2013-06-08 07:21 - 2013-06-04 06:42 - 00528208 ____R (Symantec Corporation) C:\PROGRAM FILES\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\FWSESAL.DLL
2013-06-08 07:20 - 2013-05-21 00:50 - 00932176 ____R (Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\20.4.0.40\cltPE.dll
2013-06-08 07:20 - 2013-05-21 00:50 - 01035088 ____R (Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\20.4.0.40\cltLMS.dll
2013-06-08 07:20 - 2013-07-03 23:42 - 00821552 _____ (Symantec Corporation) C:\PROGRAM FILES\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\NAHELPER.DLL
2013-06-08 07:20 - 2013-05-31 03:46 - 00999760 ____R (Symantec Corporation) C:\PROGRAM FILES\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\CODATAPR.DLL
2013-06-08 07:21 - 2013-05-31 03:48 - 00551760 ____R (Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\20.4.0.40\coShdObj.dll
2013-06-08 07:20 - 2013-05-31 03:48 - 01397584 ____R (Symantec Corporation) C:\PROGRAM FILES\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\COACTMGR.DLL
2013-06-08 07:21 - 2012-05-30 08:51 - 00699280 ____R () C:\PROGRAM FILES\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\wincfi39.dll
2013-06-08 07:21 - 2013-05-21 06:44 - 00289160 ____R (Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\20.4.0.40\ccGEvt.dll
2013-06-08 07:20 - 2013-06-04 06:42 - 00502608 ____R (Symantec Corporation) C:\PROGRAM FILES\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\NUEX.DLL
2013-06-08 07:20 - 2013-05-30 04:13 - 01078576 ____R (Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\20.4.0.40\DataStor.dll
2013-06-08 07:20 - 2013-05-30 04:13 - 00965936 ____R (Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\20.4.0.40\Comm.dll
2013-06-08 07:21 - 2013-06-04 06:42 - 00145744 ____R (Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\20.4.0.40\isPwd.dll
2013-06-08 07:21 - 2013-06-04 06:43 - 00243024 ____R (Symantec Corporation) C:\PROGRAM FILES\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\QSPLUGIN.DLL
2013-06-08 07:21 - 2012-05-15 03:27 - 00588216 ____R (Symantec Corporation) C:\PROGRAM FILES\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\SDKCMN.DLL
2013-06-08 07:21 - 2013-06-04 06:43 - 00916304 ____R (Symantec Corporation) C:\PROGRAM FILES\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\UIALERT.DLL
2013-06-08 07:21 - 2013-05-30 04:13 - 00028464 ____R (Symantec Corporation) C:\PROGRAM FILES\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\USERCTXT.DLL
2013-07-12 13:00 - 2013-04-17 13:28 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-07-12 13:00 - 2013-04-17 13:28 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2010-03-18 19:44 - 2009-04-11 08:28 - 02012160 _____ (Microsoft Corporation) C:\Windows\system32\milcore.dll
2008-07-27 04:24 - 2011-10-15 10:53 - 13205312 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dum.dll
2013-08-28 17:20 - 2013-08-28 17:20 - 00117568 _____ (Spigot, Inc.) C:\Program Files\Common Files\Spigot\Search Settings\wth165.dll
2008-02-12 06:19 - 2008-02-12 06:19 - 00208896 _____ (Broadcom Corporation.) C:\Windows\system32\btmmhook.dll
2010-03-18 19:44 - 2009-04-11 08:28 - 00099328 _____ (Microsoft Corporation) C:\PROGRA~1\WI4EB4~1\wmpband.dll
2006-11-02 10:34 - 2006-11-02 11:46 - 00869376 _____ (Microsoft Corporation) C:\Windows\system32\WINBRAND.dll
2010-10-14 19:51 - 2010-05-04 21:13 - 00231424 _____ (Microsoft Corporation) C:\Windows\System32\msshsq.dll
2009-02-26 19:37 - 2009-02-26 19:37 - 00178040 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
2009-02-26 19:36 - 2009-02-26 19:36 - 01560912 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMisc.dll
2008-01-21 04:24 - 2008-01-21 04:24 - 00397312 _____ (Microsoft Corporation) C:\Windows\system32\audioeng.dll
2008-01-21 04:24 - 2008-01-21 04:24 - 00403968 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll
2010-03-18 19:44 - 2009-04-11 08:28 - 00153088 _____ (Microsoft Corporation) C:\Windows\system32\FunDisc.dll
2010-03-18 19:44 - 2009-04-11 08:28 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\fdproxy.dll
2010-06-23 14:55 - 2009-11-08 10:55 - 01130824 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2008-02-12 05:36 - 2008-02-12 05:36 - 00184320 _____ (Broadcom Corporation.) C:\Windows\system32\btncopy.dll
2010-03-18 19:44 - 2009-04-11 08:28 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\wscntfy.dll
2013-04-26 05:34 - 2013-04-26 05:34 - 06736520 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
2010-03-18 13:16 - 2010-03-18 13:16 - 00771424 _____ (Microsoft Corporation) C:\Windows\system32\MSVCR100_CLR0400.dll
2008-01-21 04:23 - 2008-01-21 04:23 - 02243072 _____ (Microsoft Corporation) C:\Windows\System32\NLSData0007.dll
2011-10-27 21:28 - 2011-10-20 20:00 - 00120664 _____ (IObit) C:\Program Files\IObit\Game Booster 3\GBV3ContextMenu.dll
2013-06-08 07:20 - 2013-06-04 06:42 - 00176976 ____R (Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\20.4.0.40\NavShExt.dll
2010-03-30 19:32 - 2010-03-30 19:32 - 00073728 _____ (F.J. Wechselberger) C:\Program Files\MyPhoneExplorer\DLL\ShellMgr.dll
2008-01-21 04:24 - 2008-01-21 04:24 - 01386496 _____ (Microsoft Corporation) C:\Windows\system32\MSVBVM60.DLL
2013-04-25 21:57 - 2013-04-25 21:57 - 00108144 _____ (Sony DADC Austria AG.) C:\Windows\system32\CmdLineExt.dll
2006-11-02 10:40 - 2006-11-02 11:46 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\tschannel.dll
2013-07-17 09:50 - 2013-05-31 18:58 - 00290232 _____ (Symantec Corporation) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\BASHDefs\20130715.001\UMEngx86.dll
2008-07-08 16:32 - 2006-08-12 05:48 - 00049152 _____ () C:\Program Files\Samsung\Samsung Magic Doctor\HookDllPS2.dll
2011-06-19 16:54 - 2011-06-19 16:54 - 00065536 _____ (Microsoft Corporation) C:\Windows\WinSxS\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_03ce2c72205943d3\MFC80DEU.DLL
2008-07-08 16:30 - 2007-06-01 14:12 - 00045056 _____ (SAMSUNG Electronics) C:\Program Files\Samsung\EBM\SABI2.dll
2006-11-02 10:45 - 2006-11-02 11:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\pautoenr.dll
2010-03-18 19:44 - 2009-04-11 08:28 - 01112064 _____ (Microsoft Corporation) C:\Windows\system32\certenroll.dll
2008-01-21 04:23 - 2008-01-21 04:23 - 01298432 _____ (Microsoft Corporation) C:\Windows\System32\TMM.dll
2008-07-27 04:24 - 2011-10-15 10:53 - 02458432 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi.dll
2008-07-08 16:31 - 2006-08-12 05:48 - 00049152 _____ () C:\Program Files\Samsung\Easy Display Manager\HookDllPS2.dll
2008-07-08 16:31 - 2007-07-06 11:21 - 00045056 _____ (SAMSUNG Electronics) C:\Program Files\Samsung\Easy Display Manager\SABI2.dll
2008-07-08 16:31 - 2006-08-12 05:48 - 00049152 _____ () C:\Program Files\SAMSUNG\EasySpeedUpManager\HookDllPS2.dll
2008-07-08 16:31 - 2007-06-01 14:12 - 00045056 _____ (SAMSUNG Electronics) C:\Program Files\SAMSUNG\EasySpeedUpManager\SABI2.dll
2010-03-18 19:43 - 2009-04-11 08:28 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\VDMDBG.DLL
2010-05-29 13:56 - 2010-02-03 14:19 - 00155648 _____ () C:\Program Files\Samsung\Samsung Update Plus\HMXML.dll
2010-03-18 19:44 - 2009-04-11 08:28 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
2010-03-18 19:44 - 2009-04-11 08:28 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll
2011-10-26 11:48 - 2011-10-15 10:53 - 04678976 _____ (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvUI.dll
2011-10-26 11:49 - 2011-10-15 10:53 - 03134272 _____ (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvUpdate\NvUpdt.dll
2011-10-26 11:49 - 2011-10-15 10:53 - 01169408 _____ (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvUpdate\NVUPDTR.DLL
2011-10-26 11:48 - 2011-10-15 10:53 - 00602432 _____ (NVIDIA Corporation) C:\Windows\system32\easyUpdatusAPIU.dll
2008-07-08 14:45 - 2007-10-26 07:01 - 00163840 _____ (Synaptics, Inc.) C:\Windows\system32\SynCOM.dll
2008-07-08 14:45 - 2007-10-26 07:09 - 00147456 _____ (Synaptics, Inc.) C:\Windows\system32\SynTPAPI.dll
2008-07-08 16:26 - 2007-03-14 14:01 - 00075312 _____ (CyberLink Corp.) C:\Program Files\CyberLink\PowerDVD\CLRCEngine3.dll
2008-07-08 16:26 - 2007-03-16 14:58 - 00353840 _____ (Microsoft Corporation) C:\Program Files\CyberLink\PowerDVD\MSVCR71.dll
2008-01-21 04:25 - 2008-01-21 04:25 - 00195072 _____ (Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnssci.dll
2011-11-02 17:50 - 2011-11-02 17:50 - 00162816 _____ (Windows (R) Codename Longhorn DDK provider) C:\Program Files\Samsung\Kies\External\DeviceModules\UPNPDevice_Kies.dll
2008-01-21 04:24 - 2008-01-21 04:24 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\upnphost.dll
2013-07-12 13:00 - 2013-04-17 12:34 - 01172480 _____ (Microsoft Corporation) C:\Windows\system32\D3D10Warp.dll
2013-08-15 01:58 - 2013-07-25 04:32 - 01800704 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-08-15 01:58 - 2013-07-25 04:23 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\VBScript.dll
2011-05-18 08:05 - 2011-05-18 08:05 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\Dxtrans.dll
2006-11-02 11:03 - 2006-11-02 11:46 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\ddrawex.dll
2011-05-18 08:05 - 2011-05-18 08:05 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\Dxtmsft.dll
2008-01-21 04:24 - 2008-01-21 04:24 - 00816128 _____ (Microsoft Corporation) C:\Windows\system32\D3DIM700.DLL
2007-07-12 06:55 - 2007-07-12 06:55 - 01581056 _____ () C:\Program Files\Common Files\LightScribe\QtCore4.dll
2007-08-14 06:59 - 2007-08-14 06:59 - 06365184 _____ () C:\Program Files\Common Files\LightScribe\QtGui4.dll
2007-07-12 06:55 - 2007-07-12 06:55 - 00131072 _____ () C:\Program Files\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll
2012-12-16 15:52 - 2012-12-16 15:52 - 00150040 _____ (Google Inc.) C:\Program Files\Google\GoogleToolbarNotifier\5.7.8313.1002\gtn.dll
2012-12-16 15:52 - 2012-12-16 15:52 - 01000984 _____ (Google Inc.) C:\Program Files\Google\GoogleToolbarNotifier\5.7.8313.1002\swg.dll
2006-11-02 14:35 - 2006-11-02 14:35 - 00116736 _____ (Microsoft Corporation) C:\Windows\eHome\ehProxy.dll
2008-02-12 05:31 - 2008-02-12 05:31 - 00602112 _____ (Broadcom Corporation.) C:\Windows\system32\btwapi.dll
2011-06-19 16:54 - 2011-06-19 16:54 - 01101824 _____ (Microsoft Corporation) C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8f\MFC80.DLL
2008-02-12 05:46 - 2008-02-12 05:46 - 00233472 _____ (Broadcom Corporation.) C:\Windows\system32\btosif.dll
2008-02-12 05:58 - 2008-02-12 05:58 - 00393216 _____ (Broadcom Corporation.) C:\Windows\system32\btwhidcs.DLL
2008-02-12 05:46 - 2008-02-12 05:46 - 00102400 _____ (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BtBalloon.dll
2008-02-12 05:26 - 2008-02-12 05:26 - 05271552 _____ (Broadcom Corporation.) C:\Windows\system32\btrez.dll
2010-03-18 19:44 - 2009-04-11 08:28 - 00034304 _____ (Microsoft Corporation) C:\Windows\System32\wshBth.dll
2013-08-17 20:09 - 2013-08-17 20:09 - 03551640 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2011-10-26 11:43 - 2011-10-15 10:53 - 07041856 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2um.dll
2013-07-17 17:13 - 2013-07-17 17:13 - 16166280 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll
==================== Alternate Data Streams (whitelisted) ==========
==================== Faulty Device Manager Devices =============
Name: Microsoft-6zu4-Adapter
Description: Microsoft-6zu4-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
==================== Event log errors: =========================
Application errors:
==================
Error: (08/31/2013 06:18:45 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/30/2013 07:04:04 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/30/2013 06:26:03 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung iexplore.exe, Version 9.0.8112.16502, Zeitstempel 0x51f08c68, fehlerhaftes Modul Mein Gutscheincode-bho.dll_unloaded, Version 0.0.0.0, Zeitstempel 0x5176aa26, Ausnahmecode 0xc0000005, Fehleroffset 0x0a0bec50,
Prozess-ID 0x1a10, Anwendungsstartzeit iexplore.exe0.
Error: (08/30/2013 06:26:03 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung iexplore.exe, Version 9.0.8112.16502, Zeitstempel 0x51f08c68, fehlerhaftes Modul ntdll.dll, Version 6.0.6002.18881, Zeitstempel 0x51da3e27, Ausnahmecode 0xc0000005, Fehleroffset 0x00039511,
Prozess-ID 0x19c4, Anwendungsstartzeit iexplore.exe0.
Error: (08/30/2013 06:00:21 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ROMY\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\CYBERLINK DVD SUITE\POWERDVD\POWERDVD DEINSTALLIEREN.LNK> in der Hash-Zuordnung kann nicht aktualisiert werden.
Kontext: Anwendung, SystemIndex Katalog
Details:
Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f)
Error: (08/30/2013 06:00:21 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ROMY\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\CYBERLINK DVD SUITE\POWERDVD\POWERDVD DEINSTALLIEREN.LNK> in der Hash-Zuordnung kann nicht aktualisiert werden.
Kontext: Anwendung, SystemIndex Katalog
Details:
Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f)
Error: (08/30/2013 06:00:15 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ROMY\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\CYBERLINK DVD SUITE\POWERDVD\POWERDVD DEINSTALLIEREN.LNK> in der Hash-Zuordnung kann nicht aktualisiert werden.
Kontext: Anwendung, SystemIndex Katalog
Details:
Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f)
Error: (08/30/2013 06:00:15 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ROMY\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\CYBERLINK DVD SUITE\POWERDVD\POWERDVD DEINSTALLIEREN.LNK> in der Hash-Zuordnung kann nicht aktualisiert werden.
Kontext: Anwendung, SystemIndex Katalog
Details:
Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f)
Error: (08/30/2013 06:00:15 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ROMY\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\CYBERLINK DVD SUITE\POWERDVD\README.LNK> in der Hash-Zuordnung kann nicht aktualisiert werden.
Kontext: Anwendung, SystemIndex Katalog
Details:
Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f)
Error: (08/30/2013 06:00:15 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ROMY\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\CYBERLINK DVD SUITE\POWERDVD\README.LNK> in der Hash-Zuordnung kann nicht aktualisiert werden.
Kontext: Anwendung, SystemIndex Katalog
Details:
Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f)
System errors:
=============
Error: (08/31/2013 06:20:59 PM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT)
Description: 0x80070032
Error: (08/31/2013 06:18:48 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058
Error: (08/31/2013 06:17:32 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: NT-AUTORITÄT)
Description: C:\Windows\System32\IWMSSvc.dll126
Error: (08/30/2013 07:07:38 PM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT)
Description: 0x80070032
Error: (08/30/2013 07:04:04 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058
Error: (08/30/2013 07:03:02 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: NT-AUTORITÄT)
Description: C:\Windows\System32\IWMSSvc.dll126
Error: (08/30/2013 06:26:10 PM) (Source: DCOM) (User: Romy-PC)
Description: ComputerstandardLokalAktivierung{9BA05972-F6A8-11CF-A442-00A0C90A8F39}Romy-PCRomyS-1-5-21-2558285108-2310517472-400900193-1003LocalHost (unter Verwendung von LRPC)
Error: (08/30/2013 06:01:02 PM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT)
Description: 0x80070032
Error: (08/30/2013 05:58:56 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058
Error: (08/30/2013 05:58:08 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: NT-AUTORITÄT)
Description: C:\Windows\System32\IWMSSvc.dll126
Microsoft Office Sessions:
=========================
CodeIntegrity Errors:
===================================
Date: 2013-08-25 21:32:08.361
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-25 21:32:08.143
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-25 21:32:07.940
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-25 21:32:07.722
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-25 21:32:07.488
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-25 21:32:07.269
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-25 21:32:07.004
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-25 21:32:06.755
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-25 21:31:59.079
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\BASHDefs\20130715.001\BHDrvx86.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-25 21:31:58.861
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\BASHDefs\20130715.001\BHDrvx86.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 50%
Total physical RAM: 3065.88 MB
Available physical RAM: 1517.08 MB
Total Pagefile: 6330.9 MB
Available Pagefile: 4876.89 MB
Total Virtual: 2047.88 MB
Available Virtual: 1875.63 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:144.09 GB) (Free:15.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: () (Fixed) (Total:144 GB) (Free:121.16 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 298 GB) (Disk ID: B6394A61)
Partition 1: (Not Active) - (Size=10 GB) - (Type=27)
Partition 2: (Active) - (Size=144 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=144 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Ich möchte noch erwähnen, dass ich möglicherweise etwas später antworte, ich hoffe dies ist nicht so schlimm. |
|
31.08.2013, 19:57
| #4 |
| /// TB-Ausbilder | Problem mit Internet Browser. (Malware, Virus?) Hi, kein Problem, wenn du erst später antwortest. Ich bin ja auch nicht permanent verfügbar. Schritt 1
Schritt 2 Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Schritt 3 Starte noch einmal FRST.
__________________ cheers, Leo |
|
01.09.2013, 12:26
| #5 |
| | Problem mit Internet Browser. (Malware, Virus?) Hier die AdwCleaner[S0].txt Code:
ATTFilter # AdwCleaner v3.001 - Report created 01/09/2013 at 13:06:12
# Updated 24/08/2013 by Xplode
# Operating System : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Username : Romy - ROMY-PC
# Running from : C:\Users\Romy\Desktop\adwcleaner.exe
# Option : Clean
***** [ Services ] *****
[#] Service Deleted : dealplylive
[#] Service Deleted : dealplylivem
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\ProgramData\DealPlyLive
Folder Deleted : C:\ProgramData\ICQ\ICQToolbar
Folder Deleted : C:\Program Files\Conduit
Folder Deleted : C:\Program Files\DealPly
Folder Deleted : C:\Program Files\DealPlyLive
Folder Deleted : C:\Program Files\ICQ6Toolbar
Folder Deleted : C:\Program Files\IncrediMail_MediaBar_2
Folder Deleted : C:\Program Files\RegClean Pro
Folder Deleted : C:\Program Files\Common Files\DVDVideoSoft\TB
Folder Deleted : C:\Program Files\Common Files\spigot
Folder Deleted : C:\Users\Romy\AppData\Local\Conduit
Folder Deleted : C:\Users\Romy\AppData\Local\DealPlyLive
Folder Deleted : C:\Users\Romy\AppData\Local\OpenCandy
Folder Deleted : C:\Users\Romy\AppData\LocalLow\BabylonToolbar
Folder Deleted : C:\Users\Romy\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Romy\AppData\LocalLow\facemoods.com
Folder Deleted : C:\Users\Romy\AppData\LocalLow\IncrediMail_MediaBar_2
Folder Deleted : C:\Users\Romy\AppData\Roaming\Babylon
Folder Deleted : C:\Users\Romy\AppData\Roaming\dvdvideosoftiehelpers
Folder Deleted : C:\Users\Romy\AppData\Roaming\loadtbs
Folder Deleted : C:\Users\Romy\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\Romy\AppData\Roaming\Systweak
File Deleted : C:\Windows\system32\roboot.exe
File Deleted : C:\Users\Romy\AppData\Roaming\Mozilla\Firefox\Profiles\7f97n5vx.default\foxydeal.sqlite
File Deleted : C:\Users\Romy\AppData\Roaming\Mozilla\Firefox\Profiles\7f97n5vx.default\user.js
File Deleted : C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job
File Deleted : C:\Windows\System32\Tasks\DealPlyLiveUpdateTaskMachineCore
File Deleted : C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job
File Deleted : C:\Windows\System32\Tasks\DealPlyLiveUpdateTaskMachineUA
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dednnpigldgdbpgcdpfppmlcnnbjciel
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\lpmkgpnbiojfaoklbkpfneikocaobfai
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DealPlyLiveUpdateTaskMachineCore
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D9D0D0DA-6299-44F9-8886-B3D48023812D}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D9D0D0DA-6299-44F9-8886-B3D48023812D}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DealPlyLiveUpdateTaskMachineUA
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0FFD59AC-38F8-4342-847D-FD48750A5D62}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0FFD59AC-38F8-4342-847D-FD48750A5D62}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\dealplylive.exe
Key Deleted : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Key Deleted : HKLM\SOFTWARE\Classes\Babylon.dskBnd
Key Deleted : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore
Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine
Key Deleted : HKLM\SOFTWARE\Classes\DealPlyLive.OneClickCtrl.9
Key Deleted : HKLM\SOFTWARE\Classes\DealPlyLive.OneClickProcessLauncherMachine
Key Deleted : HKLM\SOFTWARE\Classes\DealPlyLive.OneClickProcessLauncherMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\DealPlyLive.Update3WebControl.3
Key Deleted : HKLM\SOFTWARE\Classes\DealPlyLiveUpdate.CoCreateAsync
Key Deleted : HKLM\SOFTWARE\Classes\DealPlyLiveUpdate.CoCreateAsync.1.0
Key Deleted : HKLM\SOFTWARE\Classes\dealplyliveupdate.coreclass
Key Deleted : HKLM\SOFTWARE\Classes\DealPlyLiveUpdate.CoreClass.1
Key Deleted : HKLM\SOFTWARE\Classes\DealPlyLiveUpdate.CoreMachineClass
Key Deleted : HKLM\SOFTWARE\Classes\DealPlyLiveUpdate.CoreMachineClass.1
Key Deleted : HKLM\SOFTWARE\Classes\dealplyliveupdate.credentialdialogmachine
Key Deleted : HKLM\SOFTWARE\Classes\dealplyliveupdate.credentialdialogmachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\dealplyliveupdate.ondemandcomclassmachine
Key Deleted : HKLM\SOFTWARE\Classes\DealPlyLiveUpdate.OnDemandCOMClassMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\dealplyliveupdate.ondemandcomclassmachinefallback
Key Deleted : HKLM\SOFTWARE\Classes\dealplyliveupdate.ondemandcomclassmachinefallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\DealPlyLiveUpdate.OnDemandCOMClassSvc
Key Deleted : HKLM\SOFTWARE\Classes\dealplyliveupdate.ondemandcomclasssvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\DealPlyLiveUpdate.ProcessLauncher
Key Deleted : HKLM\SOFTWARE\Classes\DealPlyLiveUpdate.ProcessLauncher.1.0
Key Deleted : HKLM\SOFTWARE\Classes\DealPlyLiveUpdate.Update3COMClassService
Key Deleted : HKLM\SOFTWARE\Classes\DealPlyLiveUpdate.Update3COMClassService.1.0
Key Deleted : HKLM\SOFTWARE\Classes\dealplyliveupdate.update3webmachine
Key Deleted : HKLM\SOFTWARE\Classes\dealplyliveupdate.update3webmachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\dealplyliveupdate.update3webmachinefallback
Key Deleted : HKLM\SOFTWARE\Classes\dealplyliveupdate.update3webmachinefallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\dealplyliveupdate.update3websvc
Key Deleted : HKLM\SOFTWARE\Classes\dealplyliveupdate.update3websvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
Key Deleted : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
Key Deleted : HKLM\SOFTWARE\Classes\facemoods.facemoodsHlpr
Key Deleted : HKLM\SOFTWARE\Classes\facemoods.facemoodsHlpr.1
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\speedupmypc
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dealplylive.exe
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [BabylonToolbar]
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@tools.dpliveupdate.com/DealPlyLive Update;version=3
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@tools.dpliveupdate.com/DealPlyLive Update;version=9
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0029481.BHO
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0029481.BHO.1
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0029481.Sandbox
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0029481.Sandbox.1
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{80FABB17-63AF-4655-9F07-B6509EE37AF2}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C3110516-8EFC-49D6-8B72-69354F332062}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{F48FC5B2-094A-44C7-B48C-289738C9582D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0D89DE71-3D99-4288-84DC-F18F1047A7D8}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1E0C9B2A-6447-452C-B012-2314A0C29412}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{34A8CEB6-89BB-49F1-B5E4-0D0D6C21F3B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3A4DBD3A-98CC-41CE-AD21-352D42B6F754}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4F8A50F6-69DE-4BE3-A33A-A1079B9AC0DB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{501CB57A-D4E2-4855-96AD-EDB0A9083395}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{64182481-4F71-486B-A045-B233BD0DA8FC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6FF2C4DD-77A4-4BB5-BA4C-B42DEFBF9137}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7F1796B2-BEC6-427B-B734-F9C75ED94A80}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80FABB17-63AF-4655-9F07-B6509EE37AF2}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{83ABA270-8390-4CA6-AE48-FC089F55629E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8B218A5F-1A3D-4347-94EF-A79575EB8094}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8C338DDB-19FC-4C1F-B74D-6931EE55F7A1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9BDB5E09-4BBA-4422-8C2B-529B281C32B8}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C536F080-57B7-46D6-8894-C647553F2889}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CA5D945F-E738-4D0B-A0B5-25AC51C64659}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DDE2C74F-58CC-4D71-8CE1-09DEBB8CFB78}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F48FC5B2-094A-44C7-B48C-289738C9582D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F7698761-4ABA-45C2-A5BB-D2163922C725}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FFCC53E6-2655-47FC-A89B-54E8D7F305D1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A5EDCD0B-AC20-4CDE-907B-4E756CBBCDCA}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3F851556-7EE0-40D9-AD14-40161E586BF8}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110211941181}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E393F82-2644-4AB6-B994-1AD39D6C59EE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{116BA71C-8187-4F15-9A1F-C9D6289155D1}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2974C985-8151-4DE5-B23C-B875F0A8522F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64182481-4F71-486B-A045-B233BD0DA8FC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{116BA71C-8187-4F15-9A1F-C9D6289155D1}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2974C985-8151-4DE5-B23C-B875F0A8522F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{64182481-4F71-486B-A045-B233BD0DA8FC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F1796B2-BEC6-427B-B734-F9C75ED94A80}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8C338DDB-19FC-4C1F-B74D-6931EE55F7A1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3F851556-7EE0-40D9-AD14-40161E586BF8}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110211941181}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\Explorer Bars\
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F1796B2-BEC6-427B-B734-F9C75ED94A80}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8C338DDB-19FC-4C1F-B74D-6931EE55F7A1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C536F080-57B7-46D6-8894-C647553F2889}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{86F67F74-AAD6-4004-811D-CC951AF11F04}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{DFEFCDEE-CF1A-4FC8-88AD-129872198372}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks []
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks []
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0}]
Key Deleted : HKCU\Software\BabylonToolbar
Key Deleted : HKCU\Software\Cr_Installer
Key Deleted : HKCU\Software\dealplylive
Key Deleted : HKCU\Software\Headlight
Key Deleted : HKCU\Software\IM
Key Deleted : HKCU\Software\ImInstaller
Key Deleted : HKCU\Software\InstalledBrowserExtensions
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\systweak
Key Deleted : HKCU\Software\YahooPartnerToolbar
Key Deleted : HKCU\Software\AppDataLow\Toolbar
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKCU\Software\AppDataLow\Software\IncrediMail_MediaBar_2
Key Deleted : HKCU\Software\AppDataLow\Software\Search Settings
Key Deleted : HKCU\Software\AppDataLow\Software\TubeSaver
Key Deleted : HKLM\Software\Babylon
Key Deleted : HKLM\Software\BabylonToolbar
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\dealplylive
Key Deleted : HKLM\Software\ICQ\ICQToolbar
Key Deleted : HKLM\Software\ImInstaller
Key Deleted : HKLM\Software\IncrediMail_MediaBar_2
Key Deleted : HKLM\Software\Uniblue\DriverScanner
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IncrediMail_MediaBar_2 Toolbar
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{E55B3271-7CA8-4D0C-AE06-69A24856E996}_is1
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\IncrediMail_MediaBar_2 Toolbar
***** [ Browsers ] *****
-\\ Internet Explorer v9.0.8112.16502
-\\ Mozilla Firefox v23.0.1 (de)
[ File : C:\Users\Romy\AppData\Roaming\Mozilla\Firefox\Profiles\7f97n5vx.default\prefs.js ]
Line Deleted : user_pref("extensions.a126c9ec1e913410f94df6262dd70e04494392a4bd7bd45638bcdba96cf8055b2com29481.29481.internaldb.Resources_meta.value", "%7B%22css/icon_128.png%22%3A%7B%22id%22%3A155226%2C%22ver%22%3A[...]
Line Deleted : user_pref("extensions.a126c9ec1e913410f94df6262dd70e04494392a4bd7bd45638bcdba96cf8055b2com29481.29481.internaldb.Resources_resource_155230.value", "%22/**%20todo%3A%20clean%20this%20shit%20up%2C%20scs[...]
Line Deleted : user_pref("extensions.a126c9ec1e913410f94df6262dd70e04494392a4bd7bd45638bcdba96cf8055b2com29481.29481.internaldb.Resources_resource_155237.value", "%22/*%21%20jQuery%20v1.8.2%20jquery.com%20%7C%20jque[...]
Line Deleted : user_pref("extensions.a126c9ec1e913410f94df6262dd70e04494392a4bd7bd45638bcdba96cf8055b2com29481.29481.plugins.plugin_1.code", "appAPI._cr_config={appID:function(){var a=appAPI.appInfo;if(a){return app[...]
Line Deleted : user_pref("extensions.a126c9ec1e913410f94df6262dd70e04494392a4bd7bd45638bcdba96cf8055b2com29481.29481.plugins.plugin_13.name", "CrossriderAppUtils");
Line Deleted : user_pref("extensions.a126c9ec1e913410f94df6262dd70e04494392a4bd7bd45638bcdba96cf8055b2com29481.29481.plugins.plugin_14.name", "CrossriderUtils");
Line Deleted : user_pref("extensions.a126c9ec1e913410f94df6262dd70e04494392a4bd7bd45638bcdba96cf8055b2com29481.29481.plugins.plugin_16.code", "if((typeof isBackground===\"undefined\"||isBackground!==true)&&(typeof _[...]
Line Deleted : user_pref("extensions.a126c9ec1e913410f94df6262dd70e04494392a4bd7bd45638bcdba96cf8055b2com29481.29481.plugins.plugin_17.code", "if(typeof window!==\"undefined\"){\n/*!\n * jQuery JavaScript Library v1[...]
Line Deleted : user_pref("extensions.a126c9ec1e913410f94df6262dd70e04494392a4bd7bd45638bcdba96cf8055b2com29481.29481.plugins.plugin_21.code", "var CrossriderDebugManager=(function(h){var f={appId:appAPI._cr_config.a[...]
Line Deleted : user_pref("extensions.a126c9ec1e913410f94df6262dd70e04494392a4bd7bd45638bcdba96cf8055b2com29481.29481.plugins.plugin_22.code", "(function(a){appAPI.queueManager={queue:[],register:function(b){this.que[...]
Line Deleted : user_pref("extensions.a126c9ec1e913410f94df6262dd70e04494392a4bd7bd45638bcdba96cf8055b2com29481.29481.plugins.plugin_28.code", "var CrossriderInitializerPlugin=(function(e){var c={appId:appAPI._cr_con[...]
Line Deleted : user_pref("extensions.a126c9ec1e913410f94df6262dd70e04494392a4bd7bd45638bcdba96cf8055b2com29481.29481.plugins.plugin_47.code", "(function(){appAPI.ready=function(a){appAPI.resources.isReady(a);};}());[...]
Line Deleted : user_pref("extensions.a126c9ec1e913410f94df6262dd70e04494392a4bd7bd45638bcdba96cf8055b2com29481.29481.plugins.plugin_78.name", "CrossriderInfo");
Line Deleted : user_pref("extensions.crossrider.bic", "1409957acb6045cf9aaaad06893bc5d3");
*************************
AdwCleaner[R0].txt - [23182 octets] - [01/09/2013 13:04:45]
AdwCleaner[S0].txt - [22789 octets] - [01/09/2013 13:06:12]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [22850 octets] ##########
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 31-08-2013 04
Ran by Romy (administrator) on ROMY-PC on 01-09-2013 13:21:54
Running from C:\Users\Romy\Desktop
Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
() C:\Windows\system32\PnkBstrA.exe
() C:\Program Files\CyberLink\Shared Files\RichVideo.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Samsung Magic Doctor\MagicDoctorKbdHk.exe
(SAMSUNG Electronics co., LTD.) C:\Program Files\Samsung\EBM\EasyBatteryMgr3.exe
(SAMSUNG Electronics) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
() C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Cyberlink Corp.) C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
(Google Inc.) C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
() C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [6111232 2008-04-17] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1029416 2007-10-26] (Synaptics, Inc.)
HKLM\...\Run: [RemoteControl] - C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [71216 2007-03-14] (Cyberlink Corp.)
HKLM\...\Run: [LanguageShortcut] - C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [52256 2007-01-08] ()
HKLM\...\Run: [HP Software Update] - C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)
HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [40368 2011-08-31] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [937920 2011-03-29] (Adobe Systems Incorporated)
HKLM\...\Run: [KiesHelper] - C:\Program Files\Samsung\Kies\KiesHelper.exe [928656 2011-11-02] (Samsung)
HKLM\...\Run: [KiesTrayAgent] - C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [3508624 2011-11-02] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [CanonQuickMenu] - C:\Program Files\Canon\Quick Menu\CNQMMAIN.EXE [1273448 2012-04-03] (CANON INC.)
HKLM\...\Runonce: [AvgUninstallURL] - cmd.exe /c start hxxp://www.avg.com/ww.special-uninstallation-feedback-app?lic=OQBBAFYARgBSAEUARQAtAFYAMgBHADMASwAtADgANwBXAFUAVQAtADIAVABWAEgAQQAtAFgANgBEAEYAOAAtAEwANgBQAEEATgA"&"inst=NwA3AC0ANAA0ADcAMgA0ADQAMQA3ADUALQBCAEEAUgA5AEcAKwAxAC0ARgBMACsAOQAtAEYAOQBNADYAKwAxAC0AWABPADMANgArADEALQBGADkATQA3AEMAKwA1AC0AWABPADkAKwAxAC0ARgA5AE0AMwArADEALQBEAEQAVAArADIANQA3ADEANAAtAEQARAA5ADAARgArADEALQBTAFQAOQAwAEYAQQBQAFAAKwAxAC0ARgBVAEkAKwAyAC0AQwBJAEEAOQAwACsAMgAtAEYAOQAwAE0AMQAyAFIAKwAxADEALQBWAEkAUAAxADIAKwAxAA"&"prod=90"&"ver=9.0.894 [x]
HKLM\...\Policies\Explorer: [BindDirectlyToPropertySetStorage] 0
HKCU\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2289664 2008-03-17] (Hewlett-Packard Company)
HKCU\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-05-07] (Google Inc.)
HKCU\...\Run: [DAEMON Tools Lite] - "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun [x]
HKCU\...\Run: [windows_update.exe] - C:\Users\Romy\Desktop\Undetected Hack [x]
HKCU\...\Run: [KiesHelper] - C:\Program Files\Samsung\Kies\KiesHelper.exe [928656 2011-11-02] (Samsung)
HKCU\...\Run: [KiesPDLR] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [21392 2011-11-02] ()
HKCU\...\Run: [beom.exe] - C:\Users\Romy\AppData\Roaming\Onap\beom.exe [x]
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
MountPoints2: H - H:\LaunchU3.exe -a
MountPoints2: {7306b3cc-6ac2-11e1-b9f7-0013779f328d} - H:\LaunchU3.exe -a
HKU\Default\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation)
HKU\Default User\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\BTTray.lnk
ShortcutTarget: BTTray.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll ()
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU -Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab
DPF: {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} https://battlefield.play4free.com/static/updater/BP4FUpdater_1.0.80.2.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Romy\AppData\Roaming\Mozilla\Firefox\Profiles\7f97n5vx.default
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin: @canon.com/EPPEX - C:\Program Files\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.)
FF Plugin: @esn.me/esnsonar,version=0.70.4 - C:\Program Files\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin: @esn/esnlaunch,version=2.1.7 - C:\Program Files\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.7.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.9.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Users\Romy\AppData\Roaming\Mozilla\Firefox\Profiles\7f97n5vx.default\Extensions\126c9ec1-e913-410f-94df-6262dd70e044@94392a4b-d7bd-4563-8bcd-ba96cf8055b2.com
FF Extension: ProxTube - Gesperrte YouTube Videos entsperren - C:\Users\Romy\AppData\Roaming\Mozilla\Firefox\Profiles\7f97n5vx.default\Extensions\ich@maltegoetz.de
FF Extension: No Name - C:\Users\Romy\AppData\Roaming\Mozilla\Firefox\Profiles\7f97n5vx.default\Extensions\trash
FF Extension: Address Bar Search - C:\Users\Romy\AppData\Roaming\Mozilla\Firefox\Profiles\7f97n5vx.default\Extensions\{badea1ae-72ed-4f6a-8c37-4db9a4ac7bc9}
FF Extension: No Name - C:\Users\Romy\AppData\Roaming\Mozilla\Firefox\Profiles\7f97n5vx.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\coFFPlgn\
FF HKLM\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\IPSFFPlgn\
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\IPSFFPlgn\
========================== Services (Whitelisted) =================
S4 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [44384 2010-12-10] (Microsoft Corporation)
R2 NIS; C:\Program Files\Norton Internet Security\Engine\20.4.0.40\diMaster.dll [556336 2013-05-30] (Symantec Corporation)
R2 nvUpdatusService; C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2253120 2011-10-15] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2012-09-21] ()
R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [272024 2006-12-19] ()
==================== Drivers (Whitelisted) ====================
R1 BHDrvx86; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\BASHDefs\20130715.001\BHDrvx86.sys [1002072 2013-05-31] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NIS\1404000.028\ccSetx86.sys [134744 2013-04-16] (Symantec Corporation)
R0 CLFS; C:\Windows\System32\CLFS.sys [245736 2009-04-11] (Microsoft Corporation)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [218688 2011-05-14] (DT Soft Ltd)
R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [376920 2013-08-30] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [108120 2013-08-30] (Symantec Corporation)
S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R1 IDSVix86; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\IPSDefs\20130830.001\IDSvix86.sys [392792 2013-08-21] (Symantec Corporation)
R2 KMDFMEMIO; C:\Windows\System32\DRIVERS\kmdfmemio.sys [13312 2007-05-23] (SAMSUNG ELECTRONICS CO., LTD.)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20130831.007\NAVENG.SYS [93272 2013-08-30] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20130831.007\NAVEX15.SYS [1612376 2013-08-30] (Symantec Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [691696 2011-05-06] ()
R3 SRTSP; C:\Windows\System32\Drivers\NIS\1404000.028\SRTSP.SYS [603224 2013-05-16] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NIS\1404000.028\SRTSPX.SYS [32344 2013-03-05] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NIS\1404000.028\SYMDS.SYS [367704 2013-05-21] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NIS\1404000.028\SYMEFA.SYS [934488 2013-05-23] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT.SYS [142496 2013-06-22] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NIS\1404000.028\Ironx86.SYS [175264 2013-03-05] (Symantec Corporation)
R1 SYMTDIv; C:\Windows\System32\Drivers\NIS\1404000.028\SYMTDIV.SYS [352344 2013-04-25] (Symantec Corporation)
R3 VMC302; C:\Windows\System32\Drivers\VMC302.sys [243840 2009-01-23] (Vimicro Corporation)
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-03-09] ()
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-01 13:03 - 2013-09-01 13:03 - 00994642 _____ C:\Users\Romy\Desktop\adwcleaner.exe
2013-08-31 18:33 - 2013-09-01 13:20 - 00000000 ____D C:\Users\Romy\Desktop\FRST Scan
2013-08-31 18:30 - 2013-08-31 18:30 - 00000000 ____D C:\FRST
2013-08-31 18:28 - 2013-08-31 18:28 - 01085269 _____ (Farbar) C:\Users\Romy\Desktop\FRST.exe
2013-08-30 21:45 - 2013-08-30 21:45 - 00000858 _____ C:\Users\Romy\Desktop\Mozilla Firefox.lnk
2013-08-30 20:05 - 2013-08-30 20:05 - 00002160 _____ C:\{6F61EED8-42A7-46F6-9BD8-3B42339BB2CB}
2013-08-29 19:59 - 2013-08-02 06:09 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-20 02:18 - 2013-08-20 02:18 - 00000000 ____D C:\Users\Romy\AppData\Local\Xenocode
2013-08-20 02:13 - 2013-08-20 02:13 - 00000000 ____D C:\Program Files\Mein Gutscheincode
2013-08-17 20:09 - 2013-08-17 20:09 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-08-15 02:21 - 2013-08-15 02:26 - 00000000 ____D C:\Windows\system32\MRT
2013-08-15 01:58 - 2013-07-25 04:40 - 12334080 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-15 01:58 - 2013-07-25 04:32 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-15 01:58 - 2013-07-25 04:30 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-15 01:58 - 2013-07-25 04:26 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-15 01:58 - 2013-07-25 04:26 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-15 01:58 - 2013-07-25 04:25 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-08-15 01:58 - 2013-07-25 04:24 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-08-15 01:58 - 2013-07-25 04:24 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-15 01:58 - 2013-07-25 04:23 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-15 01:58 - 2013-07-25 04:23 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-15 01:58 - 2013-07-25 04:23 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-15 01:58 - 2013-07-25 04:23 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-08-15 01:58 - 2013-07-25 04:23 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-08-15 01:58 - 2013-07-25 04:22 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-15 01:58 - 2013-07-25 04:22 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-15 01:58 - 2013-07-25 04:22 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-08-14 21:06 - 2013-08-14 21:06 - 00000000 ____D C:\Users\Romy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck
2013-08-14 12:51 - 2013-07-17 21:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-14 12:51 - 2013-07-05 06:53 - 00905664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-14 12:51 - 2013-06-15 15:22 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll
2013-08-14 12:51 - 2013-06-15 13:23 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-14 12:50 - 2013-07-10 11:47 - 00783360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-14 12:50 - 2013-07-09 14:10 - 01205168 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-14 12:50 - 2013-07-08 06:55 - 03603904 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2013-08-14 12:50 - 2013-07-08 06:55 - 03551680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-14 12:50 - 2013-07-08 06:20 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-14 12:50 - 2013-07-08 06:16 - 00992768 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-14 12:50 - 2013-07-08 06:16 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-14 12:50 - 2013-07-08 06:16 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
==================== One Month Modified Files and Folders =======
2013-09-01 13:20 - 2013-08-31 18:33 - 00000000 ____D C:\Users\Romy\Desktop\FRST Scan
2013-09-01 13:17 - 2008-08-21 02:15 - 01075075 _____ C:\Windows\WindowsUpdate.log
2013-09-01 13:12 - 2008-10-25 23:18 - 00000000 ____D C:\Users\Romy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
2013-09-01 13:10 - 2010-08-07 21:00 - 00001090 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-01 13:10 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-01 13:10 - 2006-11-02 14:47 - 00004784 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-01 13:10 - 2006-11-02 14:47 - 00004784 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-01 13:09 - 2008-01-21 04:47 - 00842242 _____ C:\Windows\PFRO.log
2013-09-01 13:07 - 2006-11-02 15:01 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-09-01 13:06 - 2013-09-01 13:04 - 00000000 ____D C:\AdwCleaner
2013-09-01 13:06 - 2012-05-10 22:31 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft
2013-09-01 13:06 - 2010-03-21 14:46 - 00000000 ____D C:\ProgramData\ICQ
2013-09-01 13:06 - 2008-07-09 08:09 - 00000012 _____ C:\Windows\bthservsdp.dat
2013-09-01 13:03 - 2013-09-01 13:03 - 00994642 _____ C:\Users\Romy\Desktop\adwcleaner.exe
2013-09-01 12:54 - 2013-07-17 17:13 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-01 12:47 - 2010-08-07 21:00 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-31 18:30 - 2013-08-31 18:30 - 00000000 ____D C:\FRST
2013-08-31 18:28 - 2013-08-31 18:28 - 01085269 _____ (Farbar) C:\Users\Romy\Desktop\FRST.exe
2013-08-30 21:45 - 2013-08-30 21:45 - 00000858 _____ C:\Users\Romy\Desktop\Mozilla Firefox.lnk
2013-08-30 20:05 - 2013-08-30 20:05 - 00002160 _____ C:\{6F61EED8-42A7-46F6-9BD8-3B42339BB2CB}
2013-08-30 19:15 - 2010-08-07 21:00 - 00000000 ____D C:\Users\Romy\AppData\Local\Google
2013-08-30 18:26 - 2013-04-13 18:11 - 00000000 ____D C:\Users\Romy\AppData\Local\CrashDumps
2013-08-30 18:19 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\rescache
2013-08-25 14:55 - 2008-10-25 23:18 - 00000000 ____D C:\Users\Romy
2013-08-25 14:00 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-08-25 13:52 - 2006-11-02 12:33 - 01690118 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-23 20:53 - 2010-06-19 18:04 - 00000000 ____D C:\Users\Romy\AppData\Roaming\Skype
2013-08-23 20:50 - 2012-10-18 20:41 - 00000000 ____D C:\Users\Romy\Desktop\Bewerbungen und ähnliches
2013-08-22 15:45 - 2011-06-26 17:49 - 00000000 ____D C:\Users\Romy\Desktop\Paul
2013-08-22 15:10 - 2012-12-12 18:46 - 00000000 ____D C:\Users\Romy\AppData\Roaming\Origin
2013-08-22 15:10 - 2012-12-12 18:45 - 00000000 ____D C:\Users\Romy\AppData\Local\Origin
2013-08-22 15:10 - 2012-12-12 18:43 - 00000000 ____D C:\ProgramData\Origin
2013-08-22 15:09 - 2012-12-12 18:43 - 00000000 ____D C:\Program Files\Origin
2013-08-21 06:54 - 2013-07-17 17:13 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-08-21 06:54 - 2011-06-16 19:17 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-08-20 02:27 - 2011-05-28 22:40 - 00000000 ____D C:\Users\Romy\AppData\Roaming\go
2013-08-20 02:18 - 2013-08-20 02:18 - 00000000 ____D C:\Users\Romy\AppData\Local\Xenocode
2013-08-20 02:13 - 2013-08-20 02:13 - 00000000 ____D C:\Program Files\Mein Gutscheincode
2013-08-18 14:02 - 2013-07-17 17:08 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-08-17 20:09 - 2013-08-17 20:09 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-08-15 11:05 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\de-DE
2013-08-15 02:26 - 2013-08-15 02:21 - 00000000 ____D C:\Windows\system32\MRT
2013-08-15 02:21 - 2006-11-02 12:24 - 75778376 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-08-15 02:18 - 2008-07-08 16:40 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-14 21:06 - 2013-08-14 21:06 - 00000000 ____D C:\Users\Romy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck
2013-08-13 14:56 - 2011-04-12 20:52 - 00000000 ____D C:\Users\Romy\AppData\Roaming\MyPhoneExplorer
2013-08-06 20:02 - 2011-10-11 16:44 - 00000000 ____D C:\Users\Romy\AppData\Roaming\.minecraft
2013-08-04 00:48 - 2010-08-07 21:00 - 00000000 ____D C:\Program Files\Google
2013-08-02 06:09 - 2013-08-29 19:59 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
Files to move or delete:
====================
C:\ProgramData\nvModes.dat
C:\Users\Romy\AppData\Local\Temp\AdobeUpdater12345.exe
C:\Users\Romy\AppData\Local\Temp\aiw43080487.EXE
C:\Users\Romy\AppData\Local\Temp\ConduitEngine.dll
C:\Users\Romy\AppData\Local\Temp\conduitinstaller.exe
C:\Users\Romy\AppData\Local\Temp\CT3031784.exe
C:\Users\Romy\AppData\Local\Temp\CT3031784_softonic-Germany_.exe
C:\Users\Romy\AppData\Local\Temp\dp.exe
C:\Users\Romy\AppData\Local\Temp\Execute2App.exe
C:\Users\Romy\AppData\Local\Temp\facemoods.exe
C:\Users\Romy\AppData\Local\Temp\FlashPlayerUpdate.exe
C:\Users\Romy\AppData\Local\Temp\FlashPlayerUpdate01.exe
C:\Users\Romy\AppData\Local\Temp\GLF1FF4.tmp.ConduitEngineSetup.exe
C:\Users\Romy\AppData\Local\Temp\GLFA4B0.tmp.tbBrot.dll
C:\Users\Romy\AppData\Local\Temp\gtapi.dll
C:\Users\Romy\AppData\Local\Temp\gtapi_signed.dll
C:\Users\Romy\AppData\Local\Temp\i4jdel0.exe
C:\Users\Romy\AppData\Local\Temp\i4jdel1.exe
C:\Users\Romy\AppData\Local\Temp\IncrediMail_MediaBar_2.exe
C:\Users\Romy\AppData\Local\Temp\InstallMonetizer..exe
C:\Users\Romy\AppData\Local\Temp\jline_git-Bukkit-0_0_0-1131-g86b7fa8-b1337jnks.dll
C:\Users\Romy\AppData\Local\Temp\jline_git-Bukkit-0_0_0-663-gee614b4-b689jnks.dll
C:\Users\Romy\AppData\Local\Temp\jline_git-Bukkit-0_0_0-706-gf53e007-b740jnks.dll
C:\Users\Romy\AppData\Local\Temp\jline_git-Bukkit-0_0_0-757-g9527def-b810jnks.dll
C:\Users\Romy\AppData\Local\Temp\jline_git-Bukkit-1_0_1-R1-b1597jnks.dll
C:\Users\Romy\AppData\Local\Temp\jline_git-Bukkit-1_1-R4-b1938jnks.dll
C:\Users\Romy\AppData\Local\Temp\jline_git-Bukkit-1_2_5-R1_0-b2149jnks.dll
C:\Users\Romy\AppData\Local\Temp\jline_git-Bukkit-1_8_1-R4-17-g04a14f7-b1493jnks.dll
C:\Users\Romy\AppData\Local\Temp\jline_git-Bukkit-1_8_1-R4-39-g4e7eb93-b1518jnks.dll
C:\Users\Romy\AppData\Local\Temp\jre-6u24-windows-i586-iftw-rv.exe
C:\Users\Romy\AppData\Local\Temp\jre-6u26-windows-i586-iftw-rv.exe
C:\Users\Romy\AppData\Local\Temp\jre-6u31-windows-i586-iftw-rv.exe
C:\Users\Romy\AppData\Local\Temp\jre-7u7-windows-i586-iftw.exe
C:\Users\Romy\AppData\Local\Temp\jre-7u9-windows-i586-iftw.exe
C:\Users\Romy\AppData\Local\Temp\Kies2RemoveAll.exe
C:\Users\Romy\AppData\Local\Temp\MgxVistaTools.dll
C:\Users\Romy\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Romy\AppData\Local\Temp\msvcp90.dll
C:\Users\Romy\AppData\Local\Temp\msvcr90.dll
C:\Users\Romy\AppData\Local\Temp\MyBabylonTB.exe
C:\Users\Romy\AppData\Local\Temp\p4npbqgg.dll
C:\Users\Romy\AppData\Local\Temp\Quarantine.exe
C:\Users\Romy\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Romy\AppData\Local\Temp\sonarinst.exe
C:\Users\Romy\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
C:\Users\Romy\AppData\Local\Temp\tbsoft.dll
C:\Users\Romy\AppData\Local\Temp\VistaInfo32.dll
C:\Users\Romy\AppData\Local\Temp\xmlUpdater.exe
C:\Users\Romy\AppData\Local\Temp\{94A54405-5F71-4C58-AE85-926A477A9875}-GoogleUpdateB6998767.exe
C:\Users\Romy\AppData\Local\Temp\{89FFB4F7-C124-4BBA-BD0A-6C7BC2936D2F}\ICQ7.exe
C:\Users\Romy\AppData\Local\Temp\{66F59D84-9476-4949-AD0B-E773EE29CA7A}\{88EB38EF-4D2C-436D-ABD3-56B232674062}\ICQTIK.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\GoogleCrashHandler.exe
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\GoogleCrashHandler64.exe
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\GoogleUpdate.exe
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\GoogleUpdateBroker.exe
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\GoogleUpdateOnDemand.exe
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\GoogleUpdateSetup.exe
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdate.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_am.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_ar.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_bg.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_bn.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_ca.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_cs.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_da.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_de.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_el.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_en-GB.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_en.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_es-419.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_es.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_et.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_fa.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_fi.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_fil.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_fr.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_gu.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_hi.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_hr.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_hu.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_id.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_is.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_it.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_iw.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_ja.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_kn.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_ko.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_lt.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_lv.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_ml.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_mr.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_ms.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_nl.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_no.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_pl.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_pt-BR.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_pt-PT.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_ro.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_ru.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_sk.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_sl.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_sr.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_sv.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_sw.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_ta.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_te.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_th.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_tr.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_uk.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_ur.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_vi.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_zh-CN.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\goopdateres_zh-TW.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\npGoogleUpdate3.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\psmachine.dll
C:\Users\Romy\AppData\Local\Temp\{0F8384DD-CE8D-4E77-BBB2-D6E971111557}\psuser.dll
C:\Users\Romy\AppData\Local\Temp\www.minecraft.net\Minecraft\natives\jinput-dx8.dll
C:\Users\Romy\AppData\Local\Temp\www.minecraft.net\Minecraft\natives\jinput-raw.dll
C:\Users\Romy\AppData\Local\Temp\www.minecraft.net\Minecraft\natives\lwjgl.dll
C:\Users\Romy\AppData\Local\Temp\www.minecraft.net\Minecraft\natives\lwjgl64.dll
C:\Users\Romy\AppData\Local\Temp\www.minecraft.net\Minecraft\natives\OpenAL32.dll
C:\Users\Romy\AppData\Local\Temp\www.minecraft.net\Minecraft\natives\OpenAL64.dll
C:\Users\Romy\AppData\Local\Temp\TeamViewer\Version5\TeamViewer_.exe
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\CustomText.1031.dll
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\DeleteTemp.exe
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\dlmgr.dll
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\ExpressRes.dll
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\ExpressUI.dll
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\gencomp.dll
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\HtmlLite.dll
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\pidgenx.dll
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\setup.exe
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\setupres.dll
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\SITSetup.dll
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\sqmapi.dll
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\vs70uimgr.dll
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\vsbasereqs.dll
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\vsscenario.dll
C:\Users\Romy\AppData\Local\Temp\SIT14394.tmp\vs_setup.dll
C:\Users\Romy\AppData\Local\Temp\Origin\installerdll708338.dll
C:\Users\Romy\AppData\Local\Temp\OldAvgSetup\setup.exe
C:\Users\Romy\AppData\Local\Temp\NVIDIA-1487937387\GPU_Reader.dll
C:\Users\Romy\AppData\Local\Temp\nst3CD2.tmp\GetVersion.dll
C:\Users\Romy\AppData\Local\Temp\nst3CD2.tmp\System.dll
C:\Users\Romy\AppData\Local\Temp\mtcmn\sqlite3.dll
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\MaAgent.exe
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\MAAuthProc.dll
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\MACLICX13.dll
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\MACLicX15.dll
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\MACSMANAGER.dll
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\MaCSMgr.exe
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\MaCSProHook.dll
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\mapshapi.dll
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\mapwij10.dll
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\MaSyncP.dll
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\MaWAMP.dll
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\MAWebControl.exe
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\MaWMP.dll
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\MPXBox.exe
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\MtpAccess.dll
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\UserShare.dll
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\XSYNCClt.dll
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAFileUpdate.dll
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAUpdate.exe
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAUpdateBoot.exe
C:\Users\Romy\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MaUpdateClient.exe
C:\Users\Romy\AppData\Local\Temp\is-2661M.tmp\IObitToolbar-stub-1.exe
C:\Users\Romy\AppData\Local\Temp\CEF1.dir\InstallFlashPlayer.exe
C:\Users\Romy\AppData\Local\Temp\CD7C.dir\InstallFlashPlayer.exe
C:\Users\Romy\AppData\Local\Temp\C207.dir\InstallFlashPlayer.exe
C:\Users\Romy\AppData\Local\Temp\B9AE.dir\InstallFlashPlayer.exe
C:\Users\Romy\AppData\Local\Temp\B85.dir\InstallFlashPlayer.exe
C:\Users\Romy\AppData\Local\Temp\b3ac04aa-9413-4ecb-ac45-ed44495e62a6\CliSecureRT.dll
C:\Users\Romy\AppData\Local\Temp\ae201572-4813-4010-9ed2-ee29ddec066a\CliSecureRT.dll
C:\Users\Romy\AppData\Local\Temp\90AB.dir\InstallFlashPlayer.exe
C:\Users\Romy\AppData\Local\Temp\644E.dir\InstallFlashPlayer.exe
C:\Users\Romy\AppData\Local\Temp\2D47.dir\InstallFlashPlayer.exe
C:\Users\Romy\AppData\Local\Temp\1a3d9b37655eeb2f9bea641ce230178f\ffmpeg.exe
C:\Users\Romy\AppData\Local\Temp\1a3d9b37655eeb2f9bea641ce230178f\npm.dll
C:\Users\Romy\AppData\Local\Temp\1a3d9b37655eeb2f9bea641ce230178f\Setup.exe
C:\Users\Romy\AppData\Local\Temp\1a3d9b37655eeb2f9bea641ce230178f\toolbar.dll
C:\Users\Romy\AppData\Local\Temp\1a3d9b37655eeb2f9bea641ce230178f\ytdl.exe
C:\Users\Romy\AppData\Local\Temp\._msigeplugin52\GoogleEarth.exe
C:\Users\Romy\AppData\Local\Temp\._msigeplugin52\program files\Google\Google Earth\plugin\earthps.dll
C:\Users\Romy\AppData\Local\Temp\._msigeplugin52\program files\Google\Google Earth\plugin\geplugin.exe
C:\Users\Romy\AppData\Local\Temp\._msigeplugin52\program files\Google\Google Earth\plugin\ge_expat.dll
C:\Users\Romy\AppData\Local\Temp\._msigeplugin52\program files\Google\Google Earth\plugin\googleearth_free.dll
C:\Users\Romy\AppData\Local\Temp\._msigeplugin52\program files\Google\Google Earth\plugin\msvcp80.dll
C:\Users\Romy\AppData\Local\Temp\._msigeplugin52\program files\Google\Google Earth\plugin\msvcr80.dll
C:\Users\Romy\AppData\Local\Temp\._msigeplugin52\program files\Google\Google Earth\plugin\npgeplugin.dll
C:\Users\Romy\AppData\Local\Temp\._msigeplugin52\program files\Google\Google Earth\plugin\plugin_ax.dll
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-01 13:17
==================== End Of Log ============================
Ich weiß nicht ob es das schon war, aber momentan habe ich kein einziges Problem mehr nach den Neustart durch die adwcleaner.exe. Ich werde heute Abend noch ein Mal rein schauen und hoffe, dass es schon so gut wie erledigt ist. |
|
01.09.2013, 16:48
| #6 |
| /// TB-Ausbilder | Problem mit Internet Browser. (Malware, Virus?) Prima, dann machen wir noch eine abschliessende Kontrolle. Schritt 1 Lade dir  TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.
Schritt 2 ESET Online Scanner
__________________ --> Problem mit Internet Browser. (Malware, Virus?) |
|
02.09.2013, 13:59
| #7 |
| | Problem mit Internet Browser. (Malware, Virus?) Hier die log.txt Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=67af73088a1a6147a49f2383be1d0067
# engine=14974
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-09-01 04:12:01
# local_time=2013-09-01 06:12:01 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=3591 16777213 100 93 2180780 140648506 0 0
# compatibility_mode=5892 16776574 100 100 109019817 215584649 0 0
# scanned=10313
# found=0
# cleaned=0
# scan_time=543
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=67af73088a1a6147a49f2383be1d0067
# engine=14974
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-09-01 07:07:54
# local_time=2013-09-01 09:07:54 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=3591 16777213 100 93 2191333 140659059 0 0
# compatibility_mode=5892 16776574 100 100 109030370 215595202 0 0
# scanned=301496
# found=0
# cleaned=0
# scan_time=10346
 Sonst ist nun wie gesagt alles bestens. Da es so gut wie erledigt ist und warscheinlich nicht mehr so viel zu tun ist, wenn überhaupt noch was, schon mal ein großes  .Ach ich merke gerade, dass durch den 2. Scan, auch die 2 Scans in der Logfile sind bzw. gezeigt werden, ich hoffe, dass da keine Verwirrung aufkommt. :P |
|
02.09.2013, 14:26
| #8 |
| /// TB-Ausbilder | Problem mit Internet Browser. (Malware, Virus?) Hallo, das passt alles. Wir räumen noch auf. Schritt 1 Dein Java ist nicht mehr aktuell. Ältere Versionen enthalten Sicherheitslücken, die von Malware zur Infizierung per Drive-by Download missbraucht werden können. Die aktuelle Version ist Java 7 Update 25.
Überleg dir also, ob du eine Java-Installation wirklich brauchst. Falls du Java weiterhin verwenden möchtest, dann:
Schritt 2 Die Version deines Adobe PDF Readers ist veraltet, wir müssen ihn updaten:
Überprüfe dann mit diesem Plugin-Check (mit dem Firefox hier), ob nun alle deine verwendeten Versionen aktuell sind und update sie anderenfalls. Cleanup Zum Schluss werden wir jetzt noch unsere Tools (inklusive der Quarantäne-Ordner) wegräumen, die verseuchten Systemwiederherstellungspunkte löschen und alle Einstellungen wieder herrichten. Auch diese Schritte sind noch wichtig und sollten in der angegebenen Reihenfolge ausgeführt werden.
>> OK << Wir sind durch, deine Logs sehen für mich im Moment sauber aus.  Ich habe dir nachfolgend ein paar Hinweise und Tipps zusammengestellt, die dazu beitragen sollen, dass du in Zukunft unsere Hilfe nicht mehr brauchen wirst. Bitte gib mir danach noch eine kurze Rückmeldung, wenn auch von deiner Seite keine Probleme oder Fragen mehr offen sind, damit ich dieses Thema als erledigt betrachten kann. Epilog: Tipps, Dos & Don'ts  Aktualität von System und SoftwareDas Betriebsystem Windows muss zwingend immer auf dem neusten Stand sein. Stelle sicher, dass die automatischen Updates aktiviert sind:
Auch die installierte Software sollte immer in der aktuellsten Version vorliegen. Speziell gilt das für den Browser, Java, Flash-Player und PDF-Reader, denn bekannte Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim blossen Besuch einer präparierten Website per Drive-by Download Malware zu installieren. Das kann sogar auf normalerweise legitimen Websites geschehen, wenn es einem Angreifer gelungen ist, seinen Code in die Seite einzuschleusen, und ist deshalb relativ unberechenbar.
Sicherheits-SoftwareEine Bemerkung vorneweg: Jede Softwarelösung hat ihre Schwächen. Die gesamte Verantwortung für die Sicherheit auf Software zu übertragen und einen Rundum-Schutz zu erwarten, wäre eine gefährliche Illusion. Bei unbedachtem oder bewusst risikoreichem Verhalten wird auch das beste Programm früher oder später seinen Dienst versagen (z.B. ein Virenscanner, der eine verseuchte Datei nicht erkennt). Trotzdem ist entsprechende Software natürlich wichtig und hilft dir in Kombination mit einem gut gewarteten (up-to-date) System und durchdachtem Verhalten, deinen Rechner sauber zu halten.
Es liegt in der Natur der Sache, dass die am weitesten verbreitete Anwendungs-Software auch am häufigsten von Malware-Autoren attackiert wird. Es kann daher bereits einen kleinen Sicherheitsgewinn darstellen, wenn man alternative Software (z.B. einen alternativen PDF Reader) benutzt. Anstelle des Internet Explorers kann man beispielsweise den Mozilla Firefox einsetzen, für welchen es zwei nützliche Addons zur Empfehlung gibt:
(Un-)Sicheres Verhalten im InternetNebst unbemerkten Drive-by Installationen wird Malware aber auch oft mehr oder weniger aktiv vom Benutzer selbst installiert. Der Besuch zwielichtiger Websites kann bereits Risiken bergen. Und Downloads aus dubiosen Quellen sind immer russisches Roulette. Auch wenn der Virenscanner im Moment darin keine Bedrohung erkennt, muss das nichts bedeuten.
Oft wird auch versucht, den Benutzer mit mehr oder weniger trickreichen Methoden dazu zu bringen, eine für ihn verhängnisvolle Handlung selbst auszuführen (Überbegriff Social Engineering).
Nervige Adware (Werbung) und unnötige Toolbars werden auch meist durch den Benutzer selbst mitinstalliert.
Allgemeine HinweiseAbschliessend noch ein paar grundsätzliche Bemerkungen:
Wenn du möchtest, kannst du das Forum mit einer kleinen Spende unterstützen. Es bleibt mir nur noch, dir unbeschwertes und sicheres Surfen zu wünschen und dass wir uns hier so bald nicht wiedersehen. 
__________________ cheers, Leo |
|
02.09.2013, 15:37
| #9 |
| | Problem mit Internet Browser. (Malware, Virus?) Danke für die Hilfe! Es ist alles erledigt und werde, demnächst im Internet wohl mehr aufpassen. Dieses Forum/Board macht bei mir im Moment ein guten Eindruck, da könnte Spende nicht schaden, weiß aber nicht wann, aber weiterempfehlen werde ich es garantiert! Dann mal hoffen, dass so schnell nicht wieder was passiert.  Auf wiedersehen. :P |
|
02.09.2013, 15:41
| #10 |
| /// TB-Ausbilder | Problem mit Internet Browser. (Malware, Virus?) Danke für die Rückmeldung. Freut mich, dass wir helfen konnten.  Falls du dem Forum noch Verbesserungsvorschläge, Kritik oder ein Lob mitgeben möchtest, kannst du das hier tun. Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Ich bekomme somit keine Benachrichtigung mehr über neue Antworten. Solltest du das Thema erneut brauchen, schicke mir bitte eine PM und wir machen hier weiter. Jeder andere bitte diese Anleitung lesen und einen eigenen Thread erstellen.
__________________ cheers, Leo |
|
| Themen zu Problem mit Internet Browser. (Malware, Virus?) |
| adblock, browser, explorer, firefox, google, google startseite, internet, internet explorer, internetseite, laptop, malware, nicht mehr, norton internet security, popup, problem, probleme, programm, scan, security, seite, seiten, startseite, tan, viren, virus, virus?, werbung |
Linear-Darstellung
