Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
DuckDuckGo läßt sich nicht enfernen

DuckDuckGo läßt sich nicht enfernen


Plagegeister aller Art und deren Bekämpfung: DuckDuckGo läßt sich nicht enfernen

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Seite 1 von 2 1 2
Alt 31.08.2013, 12:09   #1
Pechvogel44
 
DuckDuckGo läßt sich nicht enfernen - Standard

DuckDuckGo läßt sich nicht enfernen


Hallo, liebe Trojaner-Jäger,

ich kann DuckDuckGo nicht aus dem Firefox entfernen. Nach jedem Neustart steht DuckDuckGo wieder an erster Stelle der Suchmaschinen und auch auf der Startseite ist das als Standard eingetragen.

Mir ist nicht so ganz klar, ob das nun gefährlich ist, aber auf jeden Fall nervt's und wirkt auf mich auch nicht gerade seriös!

Bitte um Hilfe.

Vielen Dank schon mal im vorraus!

Alt 31.08.2013, 12:41   #2
M-K-D-B
/// TB-Ausbilder
 
DuckDuckGo läßt sich nicht enfernen - Standard

DuckDuckGo läßt sich nicht enfernen





Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.


Bitte beachte folgende Hinweise:
  • Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
  • Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags.
  • Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
  • Solltest du mir nicht innerhalb von 4 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo.
    Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
  • Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort zu starten!
    Ich kann Dir niemals eine Garantie geben, dass auch ich alles finde. Eine Formatierung ist meist der schnellere und immer der sicherste Weg.
    Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis dir jemand vom Team sagt, dass Du clean bist.



Ich habe dein Thema in Arbeit und melde mich so schnell wie möglich mit weiteren Anweisungen.
__________________
Alt 31.08.2013, 12:41   #3
M-K-D-B
/// TB-Ausbilder
 
DuckDuckGo läßt sich nicht enfernen - Standard

DuckDuckGo läßt sich nicht enfernen


Servus,



so gehts los:




Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________
Alt 31.08.2013, 13:31   #4
Pechvogel44
 
DuckDuckGo läßt sich nicht enfernen - Standard

DuckDuckGo läßt sich nicht enfernen


Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-08-2013 03
Ran by XXXXX at 2013-08-31 14:21:33
Running from E:\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
Acer 3G Connection Manager (x32 Version: 2.00.3002)
Acer Arcade Deluxe (x32 Version: 4.0.7615)
Acer Arcade Movie (x32 Version: 9.0.6423)
Acer Backup Manager (x32 Version: 2.0.0.60)
Acer Crystal Eye Webcam (x32 Version: 5.2.11.2)
Acer eRecovery Management (x32 Version: 4.05.3011)
Acer GameZone Console (x32 Version: 6.1.0.2)
Acer PowerSmart Manager (x32 Version: 5.02.3003)
Acer Registration (x32 Version: 1.03.3003)
Acer ScreenSaver (x32 Version: 1.1.0119.2010)
Acer Updater (x32 Version: 1.02.3001)
Acer VCM (x32 Version: 4.05.3002)
Acrobat.com (x32 Version: 1.6.65)
Adobe AIR (x32 Version: 3.8.0.870)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Adobe Reader X (10.1.7) - Deutsch (x32 Version: 10.1.7)
Alcor Micro USB Card Reader (x32 Version: 1.2.17.05001)
Amazon MP3-Downloader 1.0.9 (x32)
Amazonia (x32)
AMD APP SDK Runtime (Version: 2.4.595.1)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
Ask Toolbar (x32 Version: 1.15.15.0)
Ask Toolbar Updater (HKCU Version: 1.2.1.23037)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.23)
ATI Catalyst Install Manager (Version: 3.0.820.0)
Audiograbber 1.83 SE  (x32 Version: 1.83 SE)
avast! Free Antivirus (x32 Version: 8.0.1489.0)
AVerMedia A850 USB DVBT 1.0.64.18 (x32 Version: 1.0.64.18)
AVerTV (x32 Version: 6.0.12)
Backup Manager Basic (x32 Version: 2.0.0.60)
Bonjour (Version: 3.0.0.10)
Cake Mania (x32)
Canon MP Navigator EX 3.0 (x32)
Canon MP550 series Benutzerregistrierung (x32)
Canon MP550 series MP Drivers
Canon Utilities Easy-PhotoPrint EX (x32)
Canon Utilities My Printer (x32)
Canon Utilities Solution Menu (x32)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center (x32 Version: 2011.0613.2238.38801)
Catalyst Control Center InstallProxy (x32 Version: 2010.0421.657.10561)
Catalyst Control Center InstallProxy (x32 Version: 2011.0613.2238.38801)
Catalyst Control Center Localization All (x32 Version: 2011.0613.2238.38801)
Catalyst Control Center Profiles Mobile (x32 Version: 2011.0613.2238.38801)
CCC Help Chinese Standard (x32 Version: 2011.0613.2237.38801)
CCC Help Chinese Traditional (x32 Version: 2011.0613.2237.38801)
CCC Help Czech (x32 Version: 2011.0613.2237.38801)
CCC Help Danish (x32 Version: 2011.0613.2237.38801)
CCC Help Dutch (x32 Version: 2011.0613.2237.38801)
CCC Help English (x32 Version: 2011.0613.2237.38801)
CCC Help Finnish (x32 Version: 2011.0613.2237.38801)
CCC Help French (x32 Version: 2011.0613.2237.38801)
CCC Help German (x32 Version: 2011.0613.2237.38801)
CCC Help Greek (x32 Version: 2011.0613.2237.38801)
CCC Help Hungarian (x32 Version: 2011.0613.2237.38801)
CCC Help Italian (x32 Version: 2011.0613.2237.38801)
CCC Help Japanese (x32 Version: 2011.0613.2237.38801)
CCC Help Korean (x32 Version: 2011.0613.2237.38801)
CCC Help Norwegian (x32 Version: 2011.0613.2237.38801)
CCC Help Polish (x32 Version: 2011.0613.2237.38801)
CCC Help Portuguese (x32 Version: 2011.0613.2237.38801)
CCC Help Russian (x32 Version: 2011.0613.2237.38801)
CCC Help Spanish (x32 Version: 2011.0613.2237.38801)
CCC Help Swedish (x32 Version: 2011.0613.2237.38801)
CCC Help Thai (x32 Version: 2011.0613.2237.38801)
CCC Help Turkish (x32 Version: 2011.0613.2237.38801)
ccc-utility64 (Version: 2011.0613.2238.38801)
CDBurnerXP (Version: 4.3.8.2474)
CDBurnerXP (x32 Version: 4.5.0.3661)
CDex - Open Source Digital Audio CD Extractor (x32 Version: 1.70.4.2009)
Chicken Invaders 2 (x32)
Dairy Dash (x32)
Dream Day First Home (x32)
Dropbox (HKCU Version: 1.4.17)
eaner (Version: 3.22)
eBay Worldwide (x32 Version: 2.1.0901)
Emsisoft Anti-Malware (x32 Version: 6.6)
Eraser 6.0.7.1893 (Version: 6.7.1893)
ESET Online Scanner v3 (x32)
eSobi v2 (x32 Version: 2.0.4.000274)
FairStars CD Ripper 1.50 (x32)
Farm Frenzy 2 (x32)
Free YouTube to MP3 Converter version 3.12.0.128 (x32 Version: 3.12.0.128)
Freecom Network Storage Assistant 1.66 (x32)
FreeOCR v4.2 (x32)
Galapago (x32)
Google Earth Plug-in (x32 Version: 7.1.1.1888)
Google Update Helper (x32 Version: 1.3.21.153)
Granny In Paradise (x32)
Heroes of Hellas (x32)
Hydrogen (x32)
Identity Card (x32 Version: 1.00.3003)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Management Engine Components (x32 Version: 6.0.0.1179)
Intel(R) Rapid Storage Technology (x32 Version: 9.6.0.1014)
Intel(R) Turbo Boost Technology Driver (x32 Version: 01.00.01.1002)
iTunes (Version: 11.0.4.4)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Junk Mail filter update (x32 Version: 14.0.8089.726)
Launch Manager (x32 Version: 4.0.7)
MediaShow Espresso (x32 Version: 5.5.1403_23691)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Choice Guard (x32 Version: 2.0.48.0)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Mozilla Firefox 18.0.1 (x86 de) (x32 Version: 18.0.1)
Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)
Mozilla Maintenance Service (x32 Version: 23.0.1)
Mozilla Thunderbird (3.1.6) (x32 Version: 3.1.6 (de))
Mp3tag v2.46a (x32 Version: v2.46a)
MSVCRT (x32 Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MyWinLocker (x32 Version: 3.1.210.0)
MyWinLocker Suite (x32 Version: 3.1.210.0)
Norton Online Backup (x32 Version: 1.2.0.36)
NTI Backup Now 5 (x32 Version: 5.1.2.628)
NTI Backup Now Standard (x32 Version: 5.1.2.628)
NTI Media Maker 8 (x32 Version: 8.0.12.6630)
OpenOffice.org 3.2 (x32 Version: 3.2.9502)
Optical Drive Power Management (x32 Version: 1.01.3007)
PDFCreator (x32 Version: 1.2.0)
Power Tab Editor 1.7 (x32 Version: 1.7.0)
PSPad editor (x32)
PX Profile Update (x32 Version: 1.00.1.)
QuickTime (x32 Version: 7.74.80.86)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6096)
Rome - Total War (x32 Version: 1.5)
Shredder (Version: 2.0.8.3)
Shredder (x32 Version: 2.0.8.3)
Sibelius Scorch (Firefox, Opera, Netscape only) (x32 Version: 6.2.0)
SimpleOCR 3.1 (x32)
Spin & Win (x32)
Synaptics Pointing Device Driver (Version: 14.0.6.0)
TrueCrypt (x32 Version: 7.0a)
UltraEdit (x32 Version: 17.10.1008)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
VC 9.0 Runtime (x32 Version: 1.0.0)
VLC media player 2.0.4 (Version: 2.0.4)
Welcome Center (x32 Version: 1.01.3002)
WIDCOMM Bluetooth Software (Version: 6.3.0.4300)
Winamp (x32 Version: 5.622 )
Windows Live Anmelde-Assistent (x32 Version: 5.000.818.5)
Windows Live Call (x32 Version: 14.0.8064.0206)
Windows Live Communications Platform (x32 Version: 14.0.8064.206)
Windows Live Essentials (x32 Version: 14.0.8089.0726)
Windows Live Essentials (x32 Version: 14.0.8089.726)
Windows Live Fotogalerie (x32 Version: 14.0.8081.709)
Windows Live Mail (x32 Version: 14.0.8089.0726)
Windows Live Messenger (x32 Version: 14.0.8089.0726)
Windows Live Movie Maker (x32 Version: 14.0.8091.0730)
Windows Live Sync (x32 Version: 14.0.8089.726)
Windows Live Writer (x32 Version: 14.0.8089.0726)
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029)
Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8)
ZoneAlarm LTD Toolbar

==================== Restore Points  =========================

Could not list Restore Points.


==================== Hosts content: ==========================

2009-07-14 04:34 - 2012-08-24 19:25 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => ?
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => ?
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => ?

==================== Loaded Modules (whitelisted) =============

2012-08-23 19:21 - 2012-08-23 22:39 - 00240304 _____ (Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2hooks64.dll
2010-07-22 13:57 - 2010-04-23 10:46 - 00271904 _____ (Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\SysHook.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00302224 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\snxhk64.dll
2010-05-06 14:48 - 2011-06-13 22:22 - 00040448 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll
2013-02-01 21:47 - 2011-06-13 23:04 - 00787968 _____ (ATI Technologies Inc. ) C:\Windows\system32\aticfx64.dll
2010-05-06 14:48 - 2011-06-13 22:46 - 05080576 _____ (ATI Technologies Inc. ) C:\Windows\system32\atidxx64.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00133840 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\ashShA64.dll
2010-04-17 07:58 - 2010-04-17 07:58 - 00137584 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x64\psdprotect.dll
2010-04-17 07:58 - 2010-04-17 07:58 - 00277360 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x64\sysenv.dll
2012-08-16 21:22 - 2012-07-05 00:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\NETAPI32.dll
2009-07-14 01:30 - 2009-07-14 03:41 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\WINBRAND.dll
2010-03-26 11:46 - 2010-03-26 11:46 - 00558368 _____ (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btncopy.dll
2010-04-02 23:06 - 2010-04-02 23:06 - 00062832 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec Shredder\x64\ShredderContextMenu.dll
2010-04-02 23:06 - 2010-04-02 23:06 - 00321904 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec Shredder\x64\FrameUtility.dll
2010-04-02 23:06 - 2010-04-02 23:06 - 01066864 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec Shredder\x64\LibFrame.dll
2010-05-06 14:37 - 2010-05-06 14:37 - 00179704 _____ (Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.21022.8_none_7644f34b9721eccf\ATL90.DLL
2012-08-23 19:21 - 2012-04-14 14:47 - 00314288 _____ (Emsiûoft GmbH) C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\A2CONTMENU64.DLL
2010-04-10 09:45 - 2010-04-10 09:45 - 00250256 _____ (The Eraser Project) C:\PROGRA~1\Eraser\ERASER~3.DLL
2011-11-06 20:11 - 2011-11-06 20:11 - 05102400 _____ (Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.4148_none_04480933ab2137b1\mfc90u.dll
2011-11-06 20:11 - 2011-11-06 20:11 - 00176456 _____ (Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.4148_none_0a1d2fcba76b3f00\ATL90.DLL
2010-04-17 07:58 - 2010-04-17 07:58 - 00376688 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x64\mwlshellext.dll
2012-06-30 06:19 - 2012-06-30 06:19 - 00097792 _____ (Dropbox, Inc.) C:\Users\XXXXX\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
2009-07-14 01:19 - 2009-07-14 03:41 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\msvcp60.dll
2009-07-14 02:17 - 2009-07-14 03:40 - 00024576 _____ (Microsoft Corporation) C:\Windows\System32\drprov.dll
2011-11-14 19:58 - 2010-11-20 06:27 - 00129536 _____ (Microsoft Corporation) C:\Windows\System32\ntlanman.dll
2011-11-14 19:58 - 2010-11-20 06:26 - 00100864 _____ (Microsoft Corporation) C:\Windows\System32\davclnt.dll
2009-07-14 02:31 - 2009-07-14 03:41 - 02137600 _____ (Microsoft Corporation) C:\Windows\System32\NLSData0007.dll
2009-07-14 02:07 - 2009-07-14 03:41 - 00238592 _____ (Microsoft Corporation) C:\Windows\system32\ndfapi.dll
2010-05-06 14:08 - 2010-04-22 19:56 - 00149536 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2010-05-06 14:08 - 2010-04-22 19:55 - 02607136 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2010-05-06 14:49 - 2009-09-17 14:09 - 00396072 _____ (Synaptics Incorporated) C:\Windows\system32\SynCOM.dll
2010-05-06 14:49 - 2009-09-17 14:09 - 00205608 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPAPI.dll
2013-07-11 18:24 - 2013-04-24 00:56 - 09991832 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll
2013-07-12 09:21 - 2013-07-12 09:21 - 15577088 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\mscorlib\88744044294787b99dd4a8704ab75a79\mscorlib.ni.dll
2009-07-13 22:37 - 2009-06-10 22:39 - 00085312 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsec.dll
2013-01-09 20:58 - 2012-10-05 12:52 - 01574496 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll
2010-04-10 09:45 - 2010-04-10 09:45 - 00108944 _____ (The Eraser Project) C:\Program Files\Eraser\Eraser.Manager.dll
2013-08-25 21:34 - 2013-08-25 21:34 - 10655744 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\System\af0a0b96a02f9925eb84392ee65a5cfa\System.ni.dll
2013-08-25 21:36 - 2013-08-25 21:36 - 02320384 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\868d117286ad259249f31d3fe813d39a\System.Drawing.ni.dll
2013-08-25 21:36 - 2013-08-25 21:36 - 17383424 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\95674cb72317e3a5380ea450b913786f\System.Windows.Forms.ni.dll
2013-08-26 19:40 - 2013-08-26 19:40 - 02131968 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualBas#\603248adb7974762df07835b282cc90f\Microsoft.VisualBasic.ni.dll
2010-04-10 09:45 - 2010-04-10 09:45 - 00058768 _____ (The Eraser Project) C:\Program Files\Eraser\Eraser.Util.dll
2012-08-16 21:22 - 2012-07-05 00:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\Netapi32.dll
2010-04-10 09:45 - 2010-04-10 09:45 - 00099216 _____ (The Eraser Project) C:\Program Files\Eraser\Plugins\Eraser.DefaultPlugins.dll
2013-08-26 19:39 - 2013-08-26 19:40 - 03315712 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Core\296ad113496c7e97a1689ffef9550b19\System.Core.ni.dll
2010-04-10 09:45 - 2010-04-10 09:45 - 00024976 _____ (The Eraser Project) C:\Program Files\Eraser\en\Eraser.resources.dll
2010-04-10 09:45 - 2010-04-10 09:45 - 00014224 _____ (DELMATIC) C:\Program Files\Eraser\BevelLine.dll
2013-08-25 21:35 - 2013-08-25 21:35 - 06964736 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Xml\3975acf49313ceea1280da91f0383480\System.Xml.ni.dll
2010-04-10 09:45 - 2010-04-10 09:45 - 00017296 _____ (The Eraser Project) C:\Program Files\Eraser\Plugins\en\Eraser.DefaultPlugins.resources.dll
2010-04-10 09:45 - 2010-04-10 09:45 - 00030096 _____ (The Eraser Project) C:\Program Files\Eraser\en\Eraser.Manager.resources.dll
2010-05-06 14:48 - 2010-08-25 13:04 - 00108032 _____ (Intel Corporation) C:\Windows\System32\hccutils.DLL
2010-05-06 14:48 - 2010-08-25 13:04 - 00061952 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.dll
2013-02-01 21:47 - 2010-08-25 13:05 - 00088064 _____ (Intel Corporation) C:\Windows\system32\igfxrDEU.lrc
2013-08-25 19:58 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00136936 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\aswJsFlt64.dll
2013-05-25 09:42 - 2013-05-09 11:02 - 00208536 _____ (AVAST Software) C:\PROGRA~1\AVASTS~1\Avast\AavmRpch64.dll
2009-07-14 02:00 - 2009-07-14 03:41 - 00283648 _____ (Microsoft Corporation) C:\Windows\System32\LocationApi.dll
2009-07-14 02:00 - 2009-07-14 03:41 - 00174592 _____ (Microsoft Corporation) C:\Windows\System32\SensorsApi.dll
2009-07-14 01:28 - 2009-07-14 03:41 - 00271360 _____ (Microsoft Corporation) C:\Windows\System32\WDSCORE.dll
2013-02-27 22:41 - 2013-01-13 21:51 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\D3D10Warp.dll
2013-05-31 09:52 - 2013-05-31 09:52 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2010-05-06 14:48 - 2011-06-13 22:22 - 00038912 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2010-05-06 14:48 - 2011-06-13 22:40 - 03420672 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2009-07-14 01:56 - 2009-07-14 03:41 - 00163328 _____ (Microsoft Corporation) C:\Program Files\Windows Sidebar\wlsrvc.dll
2011-08-31 00:05 - 2011-08-31 00:05 - 00132968 _____ (Apple Inc.) C:\Program Files\Bonjour\mdnsNSP.dll
2010-05-06 14:48 - 2010-03-08 13:07 - 00457296 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDUtl.dll
2010-07-22 13:57 - 2010-04-23 10:46 - 00218144 _____ (Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\PowerSettingControl.dll
2010-07-22 13:57 - 2010-04-23 10:46 - 00217120 _____ (Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\CommonControl.dll
2009-07-14 01:19 - 2009-07-14 03:41 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\pcwum.dll
2011-11-14 19:58 - 2010-11-20 06:26 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2009-07-14 02:17 - 2009-07-14 03:41 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\UTILDLL.dll
2011-11-14 19:58 - 2010-11-20 06:26 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\LOGONCLI.DLL
2012-08-16 21:22 - 2012-07-05 00:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\BROWCLI.DLL
2011-06-13 23:34 - 2011-06-13 23:34 - 00095744 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.Implementation.dll
2011-06-13 23:32 - 2011-06-13 23:32 - 00021504 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\LOG.Foundation.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00024576 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\LOG.Foundation.Private.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00055296 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\LOG.Foundation.Implementation.dll
2011-11-15 22:03 - 2010-11-13 02:08 - 00315392 _____ (Microsoft Corporation) C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00005632 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.Foundation.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\LOG.Foundation.Implementation.Private.dll
2013-08-25 21:38 - 2013-08-25 21:38 - 01022976 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Remo#\bda1d99ab089bb2f18a48ba06d5a4923\System.Runtime.Remoting.ni.dll
2013-08-25 21:38 - 2013-08-25 21:38 - 15270912 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web\c804ef4dba76d2aa3db8d22ec5fbf4e0\System.Web.ni.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00021504 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.Implementation.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00015360 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\NEWAEM.Foundation.dll
2010-07-22 23:32 - 2010-07-22 23:32 - 00032768 _____ (Microsoft Corporation) C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_de_b77a5c561934e089\System.Runtime.Remoting.resources.dll
2011-11-14 19:57 - 2010-11-04 18:56 - 00797016 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\diasymreader.dll
2011-11-14 20:08 - 2010-11-04 18:58 - 00212992 _____ (Microsoft Corporation) C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_de_b77a5c561934e089\System.resources.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00061440 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Foundation.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00018432 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Foundation.XManifest.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00057344 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Runtime.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00037376 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Runtime.Shared.Private.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00029184 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Foundation.Private.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00005632 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Runtime.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00032768 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\ATICCCom.dll
2011-03-01 05:24 - 2011-03-01 05:24 - 00081920 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\ADL.Foundation.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00034816 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Server.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00006144 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Server.Shared.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00042496 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.Source.Kit.Server.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00006656 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.DPPE.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00007168 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.Hotkeys.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00006656 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.WinMessages.Shared.dll
2009-04-22 13:13 - 2009-04-22 13:13 - 00045056 _____ (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0601.dll
2010-03-04 01:27 - 2010-03-04 01:27 - 00016384 _____ (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Foundation.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00006144 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.dll
2013-02-01 21:47 - 2011-06-13 23:01 - 00462848 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ATIDEMGX.dll
2010-10-07 14:07 - 2010-10-07 14:07 - 00020480 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I1010.dll
2013-08-25 21:35 - 2013-08-25 21:35 - 01320448 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Configuration\1031b311ee568364d4ca1c4db634eaf0\System.Configuration.ni.dll
2013-02-01 21:47 - 2011-06-13 22:59 - 00423424 _____ (ATI Technologies, Inc.) C:\Windows\system32\atipdl64.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00005632 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.REG.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00290816 _____ (Advanced Mirco Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Runtime.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00167936 _____ (Advanced Mirco Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Shared.dll
2009-06-17 06:27 - 2009-06-17 06:27 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0709.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00005632 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.GD.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00008704 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Actions.CCAA.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00008704 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\ResourceManagement.Foundation.Private.dll
2008-04-03 17:29 - 2008-04-03 17:29 - 00020480 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0804.dll
2013-08-25 21:35 - 2013-08-25 21:35 - 04962816 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\WindowsBase\748e7e6853a66fddc80848051c076801\WindowsBase.ni.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00025088 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00008704 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Runtime.Shared.Private.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00045056 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00065536 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00053248 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceDFP.Graphics.Shared.dll
2011-06-13 23:37 - 2011-06-13 23:37 - 00240128 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Combined.Graphics.Aspects2.Runtime.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CustomFormats.Graphics.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00032768 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceLCD.Graphics.Shared.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00077824 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.Radeon3D.Graphics.Runtime.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00035840 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00065536 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.Radeon3D.Graphics.Shared.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00018432 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.PowerPlayDPPE.Graphics.Shared.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00046592 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.PowerXpress.Graphics.Runtime.dll
2011-06-13 23:37 - 2011-06-13 23:37 - 00013312 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.AMDHome.Graphics.Runtime.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00026112 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.PowerXpress.Graphics.Shared.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00013824 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.TransCode.Graphics.Runtime.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00098304 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.MMVideo.Graphics.Runtime.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00065536 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.MMVideo.Graphics.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceCV.Graphics.Shared.dll
2011-06-13 23:37 - 2011-06-13 23:37 - 00032768 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.UpdateNotification.Graphics.Runtime.dll
2009-06-17 11:24 - 2009-06-17 11:24 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0906.dll
2011-06-13 23:37 - 2011-06-13 23:37 - 00012288 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.UpdateNotification.Graphics.Shared.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysOptions.Graphics.shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00053248 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceCRT.Graphics.shared.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00045056 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.TransCode.Graphics.shared.dll
2011-06-13 23:37 - 2011-06-13 23:37 - 00010240 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.AMDHome.Graphics.shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00065536 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceTV.Graphics.shared.dll
2009-12-08 07:49 - 2009-12-08 07:49 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0912.dll
2007-08-09 17:58 - 2007-08-09 17:58 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0706.dll
2009-06-17 11:24 - 2009-06-17 11:24 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0712.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceProperty.Graphics.Shared.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll
2008-12-30 12:04 - 2008-12-30 12:04 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0812.dll
2009-04-22 13:13 - 2009-04-22 13:13 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0805.dll
2010-11-05 15:18 - 2010-11-05 15:18 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I1011.dll
2009-04-22 13:13 - 2009-04-22 13:13 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0702.dll
2007-10-29 15:56 - 2007-10-29 15:56 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0710.dll
2009-01-20 15:36 - 2009-01-20 15:36 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0901.dll
2009-01-20 14:51 - 2009-01-20 14:51 - 00007168 _____ ( ) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atixclib.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00011776 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.HydraVision.Runtime.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00008704 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.HydraVision.Shared.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00019968 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Fuel.Runtime.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00010752 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Fuel.Shared.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00012800 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\Fuel.Foundation.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00065536 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\APM.Server.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00024576 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\APM.Foundation.dll
2011-11-15 22:03 - 2010-11-13 02:08 - 00434176 _____ (Microsoft Corporation) C:\Windows\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_de_b77a5c561934e089\System.Windows.Forms.resources.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00007168 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Runtime.Extension.EEU.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00389120 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Dashboard.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00036352 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Client.Shared.Private.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00007680 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Client.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00005632 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.EEU.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00032768 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Dashboard.Shared.dll
2013-08-25 21:36 - 2013-08-25 21:36 - 16543232 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\e6cc4a60a4cf6ac9bc6198ec2989c05b\PresentationCore.ni.dll
2013-08-25 21:37 - 2013-08-25 21:37 - 19197952 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\7a2f065f242923c2d898f451fa70986a\PresentationFramework.ni.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 01199616 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Dashboard.Shared.Private.dll
2012-05-19 10:40 - 2012-02-11 01:29 - 02256152 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\wpfgfx_v0300.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00131072 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Dashboard.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00966656 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Dashboard.Shared.dll
2011-06-13 23:37 - 2011-06-13 23:37 - 00026624 _____ (Advanced Mirco Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.AMDHome.Graphics.Dashboard.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00188416 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll
2011-06-13 23:36 - 2011-06-13 23:36 - 00252928 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysManager2.Graphics.Dashboard.dll
2011-06-13 23:36 - 2011-06-13 23:36 - 00372224 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysManager.Graphics.Dashboard.dll
2011-06-13 23:36 - 2011-06-13 23:36 - 00243712 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00032768 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll
2011-06-13 23:36 - 2011-06-13 23:36 - 00380928 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceCRT.Graphics.Dashboard.dll
2011-06-13 23:37 - 2011-06-13 23:37 - 02452992 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Combined.Graphics.Aspects2.Dashboard.dll
2011-06-13 23:36 - 2011-06-13 23:36 - 00389120 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceDFP.Graphics.Dashboard.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00372736 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll
2011-06-13 23:36 - 2011-06-13 23:36 - 00456192 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00831488 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.MMVideo.Graphics.Dashboard.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00159744 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.TransCode.Graphics.Dashboard.dll
2011-06-13 23:36 - 2011-06-13 23:36 - 00096768 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard.dll
2011-06-13 23:36 - 2011-06-13 23:36 - 00264704 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.PowerXpress.Graphics.Dashboard.dll
2011-06-13 23:36 - 2011-06-13 23:36 - 00035840 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossFireX.Graphics.Dashboard.dll
2011-06-13 23:37 - 2011-06-13 23:37 - 00019968 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.UpdateNotification.Graphics.Dashboard.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00008192 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.HydraVision.Dashboard.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00008704 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Fuel.Dashboard.dll
2011-06-13 23:32 - 2011-06-13 23:32 - 00236032 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\Localization.Foundation.Private.dll
2011-06-13 23:32 - 2011-06-13 23:32 - 00167936 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\Localization.Foundation.Implementation.de_Localization.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00258048 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Foundation.Client.dll
2013-07-12 09:24 - 2013-07-12 09:24 - 00463360 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\a36a8b8c22201786fb956a20db8b8b65\PresentationFramework.Aero.ni.dll
2010-07-22 23:33 - 2010-07-22 23:33 - 00249856 _____ (Microsoft Corporation) C:\Windows\assembly\GAC_MSIL\PresentationFramework.resources\3.0.0.0_de_31bf3856ad364e35\PresentationFramework.resources.dll
2011-03-14 15:21 - 2011-03-14 15:21 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00060416 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Dashboard.ProfileManager2.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00168960 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\ResourceManagement.Foundation.Implementation.dll
2013-08-26 19:42 - 2013-08-26 19:42 - 00329216 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\WindowsFormsIntegra#\956d0065f5ddaa3d150c5df023f14ef8\WindowsFormsIntegration.ni.dll
2009-07-14 03:01 - 2009-06-10 22:31 - 01165664 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll
2009-07-14 01:39 - 2009-07-14 03:41 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\msctfui.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00524288 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceProperty.Graphics.Dashboard.Shared.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard.Shared.Private.dll

==================== Alternate Data Streams (whitelisted) ==========



==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (08/31/2013 01:19:24 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: ePowerTray.exe, Version: 5.2.3003.0, Zeitstempel: 0x4bd10412
Name des fehlerhaften Moduls: ePowerTray.exe, Version: 5.2.3003.0, Zeitstempel: 0x4bd10412
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000163d5
ID des fehlerhaften Prozesses: 0x10bc
Startzeit der fehlerhaften Anwendung: 0xePowerTray.exe0
Pfad der fehlerhaften Anwendung: ePowerTray.exe1
Pfad des fehlerhaften Moduls: ePowerTray.exe2
Berichtskennung: ePowerTray.exe3

Error: (08/31/2013 00:33:05 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: ePowerTray.exe, Version: 5.2.3003.0, Zeitstempel: 0x4bd10412
Name des fehlerhaften Moduls: ePowerTray.exe, Version: 5.2.3003.0, Zeitstempel: 0x4bd10412
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000163d5
ID des fehlerhaften Prozesses: 0x1770
Startzeit der fehlerhaften Anwendung: 0xePowerTray.exe0
Pfad der fehlerhaften Anwendung: ePowerTray.exe1
Pfad des fehlerhaften Moduls: ePowerTray.exe2
Berichtskennung: ePowerTray.exe3

Error: (08/31/2013 00:24:36 PM) (Source: ATIeRecord) (User: )
Description: ATI EEU waiting for an event has failed

Error: (08/29/2013 09:45:31 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: ePowerTray.exe, Version: 5.2.3003.0, Zeitstempel: 0x4bd10412
Name des fehlerhaften Moduls: ePowerTray.exe, Version: 5.2.3003.0, Zeitstempel: 0x4bd10412
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000163d5
ID des fehlerhaften Prozesses: 0x13a4
Startzeit der fehlerhaften Anwendung: 0xePowerTray.exe0
Pfad der fehlerhaften Anwendung: ePowerTray.exe1
Pfad des fehlerhaften Moduls: ePowerTray.exe2
Berichtskennung: ePowerTray.exe3

Error: (08/29/2013 09:00:52 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: ePowerTray.exe, Version: 5.2.3003.0, Zeitstempel: 0x4bd10412
Name des fehlerhaften Moduls: ePowerTray.exe, Version: 5.2.3003.0, Zeitstempel: 0x4bd10412
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000163d5
ID des fehlerhaften Prozesses: 0xa4
Startzeit der fehlerhaften Anwendung: 0xePowerTray.exe0
Pfad der fehlerhaften Anwendung: ePowerTray.exe1
Pfad des fehlerhaften Moduls: ePowerTray.exe2
Berichtskennung: ePowerTray.exe3

Error: (08/28/2013 09:49:37 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: ePowerTray.exe, Version: 5.2.3003.0, Zeitstempel: 0x4bd10412
Name des fehlerhaften Moduls: ePowerTray.exe, Version: 5.2.3003.0, Zeitstempel: 0x4bd10412
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000163d5
ID des fehlerhaften Prozesses: 0xda4
Startzeit der fehlerhaften Anwendung: 0xePowerTray.exe0
Pfad der fehlerhaften Anwendung: ePowerTray.exe1
Pfad des fehlerhaften Moduls: ePowerTray.exe2
Berichtskennung: ePowerTray.exe3

Error: (08/28/2013 09:13:35 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: ePowerTray.exe, Version: 5.2.3003.0, Zeitstempel: 0x4bd10412
Name des fehlerhaften Moduls: ePowerTray.exe, Version: 5.2.3003.0, Zeitstempel: 0x4bd10412
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000163d5
ID des fehlerhaften Prozesses: 0x1634
Startzeit der fehlerhaften Anwendung: 0xePowerTray.exe0
Pfad der fehlerhaften Anwendung: ePowerTray.exe1
Pfad des fehlerhaften Moduls: ePowerTray.exe2
Berichtskennung: ePowerTray.exe3

Error: (08/26/2013 08:04:29 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (08/26/2013 08:03:29 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (08/26/2013 06:54:25 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 71935555


System errors:
=============
Error: (08/31/2013 02:09:08 PM) (Source: mbamchameleon) (User: )
Description: C0000022

Error: (08/31/2013 02:09:08 PM) (Source: mbamchameleon) (User: )
Description: C0000022

Error: (08/31/2013 02:08:42 PM) (Source: mbamchameleon) (User: )
Description: C0000043

Error: (08/31/2013 02:08:42 PM) (Source: mbamchameleon) (User: )
Description: C0000043

Error: (08/31/2013 02:08:39 PM) (Source: mbamchameleon) (User: )
Description: C0000022

Error: (08/31/2013 02:08:39 PM) (Source: mbamchameleon) (User: )
Description: C0000022

Error: (08/31/2013 02:08:39 PM) (Source: mbamchameleon) (User: )
Description: C0000022

Error: (08/31/2013 02:08:39 PM) (Source: mbamchameleon) (User: )
Description: C0000022

Error: (08/31/2013 02:08:39 PM) (Source: mbamchameleon) (User: )
Description: C0000022

Error: (08/31/2013 02:08:39 PM) (Source: mbamchameleon) (User: )
Description: C0000022


Microsoft Office Sessions:
=========================
Error: (08/31/2013 01:19:24 PM) (Source: Application Error)(User: )
Description: ePowerTray.exe5.2.3003.04bd10412ePowerTray.exe5.2.3003.04bd10412c000000500000000000163d510bc01cea63be5d86b40C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exeC:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe30879071-122f-11e3-a01b-001e101f63cf

Error: (08/31/2013 00:33:05 PM) (Source: Application Error)(User: )
Description: ePowerTray.exe5.2.3003.04bd10412ePowerTray.exe5.2.3003.04bd10412c000000500000000000163d5177001cea63579045d2aC:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exeC:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exeb8290176-1228-11e3-a842-001e101f9843

Error: (08/31/2013 00:24:36 PM) (Source: ATIeRecord)(User: )
Description: 

Error: (08/29/2013 09:45:31 PM) (Source: Application Error)(User: )
Description: ePowerTray.exe5.2.3003.04bd10412ePowerTray.exe5.2.3003.04bd10412c000000500000000000163d513a401cea4f05167f3adC:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exeC:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe8fce29e3-10e3-11e3-b590-001e101f4e71

Error: (08/29/2013 09:00:52 PM) (Source: Application Error)(User: )
Description: ePowerTray.exe5.2.3003.04bd10412ePowerTray.exe5.2.3003.04bd10412c000000500000000000163d5a401cea4ea1463c39bC:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exeC:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe530919a8-10dd-11e3-b590-001e101f4e71

Error: (08/28/2013 09:49:37 PM) (Source: Application Error)(User: )
Description: ePowerTray.exe5.2.3003.04bd10412ePowerTray.exe5.2.3003.04bd10412c000000500000000000163d5da401cea427b8c51ca9C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exeC:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exef7fc7baa-101a-11e3-b590-001e101f4e71

Error: (08/28/2013 09:13:35 PM) (Source: Application Error)(User: )
Description: ePowerTray.exe5.2.3003.04bd10412ePowerTray.exe5.2.3003.04bd10412c000000500000000000163d5163401cea422af9c1fd4C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exeC:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exeeefc4686-1015-11e3-b590-001e101f4e71

Error: (08/26/2013 08:04:29 PM) (Source: SideBySide)(User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"c:\program files (x86)\windows live\photo gallery\MovieMaker.Exec:\program files (x86)\windows live\photo gallery\WLMFDS.DLL8

Error: (08/26/2013 08:03:29 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe

Error: (08/26/2013 06:54:25 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 71935555


CodeIntegrity Errors:
===================================
  Date: 2013-02-09 16:42:12.838
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-09 16:42:12.678
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-09 16:42:12.458
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-09 16:42:12.245
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-09 16:39:15.520
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-09 16:39:04.897
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-09 16:39:04.737
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-09 16:39:04.527
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-09 16:39:04.356
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-09 16:34:55.637
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 51%
Total physical RAM: 3766.69 MB
Available physical RAM: 1808.88 MB
Total Pagefile: 7531.56 MB
Available Pagefile: 4995.32 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:292.1 GB) (Free:226.51 GB) NTFS
Drive e: (Daten) (Fixed) (Total:290.97 GB) (Free:77.81 GB) NTFS

==================== MBR & Partition Table ==================

==================== End Of Log ============================
... allerdings hat das Programm beim starten eine Fehlermeldung geworfen: Error saving file: C:/FRST/HIVES/BDC!

Und AVAST hat auch gemeckert...


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-08-2013 03
Ran by xxxxx (ATTENTION: The logged in user is not administrator) on ACE on 31-08-2013 14:21:05
Running from E:\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

() C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
(AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Acer Incorporated) C:\Program Files\Acer\Optical Drive Power Management\ODDPWR.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Windows\PLFSetI.exe
(Mozilla Messaging) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(The Eraser Project) C:\Program Files\Eraser\Eraser.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(AVerMedia TECHNOLOGIES, Inc.) C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
(Ask) C:\Program Files (x86)\Ask.com\Updater\Updater.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe
(Microsoft Corporation) C:\Windows\system32\taskmgr.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(PortableApps.com) E:\Portable\KeePassPortable\KeePassPortable.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Dominik Reichl) E:\Portable\KeePassPortable\App\keepass\keepass.exe
(Microsoft Corporation) C:\Windows\system32\prevhost.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [320000 2009-04-09] (AlcorMicro Co., Ltd.)
HKLM\...\Run: [ODDPwr] - C:\Program Files\Acer\Optical Drive Power Management\ODDPwr.exe [223264 2010-04-22] (Acer Incorporated)
HKLM\...\Run: [mwlDaemon] - C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [349552 2010-04-17] (Egis Technology Inc.)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10775072 2010-04-22] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2040352 2010-04-22] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1842472 2009-09-17] (Synaptics Incorporated)
HKLM\...\Run: [PLFSetI] - C:\Windows\PLFSetI.exe [206208 2010-01-13] ()
HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe [496160 2010-04-23] (Acer Incorporated)
HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-03-18] (CANON INC.)
HKLM\...\Run: [Eraser] - C:\PROGRA~1\Eraser\Eraser.exe [979344 2010-04-10] (The Eraser Project)
HKCU\...\Winlogon: [Shell] Explorer.exe <==== ATTENTION 
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1300560 2010-03-03] (Dritek System Inc.)
HKLM-x32\...\Run: [SuiteTray] - C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [337264 2010-04-17] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisUpdate] - C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201584 2010-03-11] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisTecPMMUpdate] - C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [407920 2010-03-11] (Egis Technology Inc.)
HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [260608 2010-03-09] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [MDS_Menu] - C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] -  [x]
HKLM-x32\...\Run: [ApnUpdater] - C:\Program Files (x86)\Ask.com\Updater\Updater.exe [1644680 2013-01-28] (Ask)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-06-13] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVer HID Receiver.lnk
ShortcutTarget: AVer HID Receiver.lnk -> C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVerQuick.lnk
ShortcutTarget: AVerQuick.lnk -> C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe (AVerMedia TECHNOLOGIES, Inc.)
Startup: C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Verbatim GREEN BUTTON.lnk
ShortcutTarget: Verbatim GREEN BUTTON.lnk -> C:\Program Files (x86)\Verbatim GREEN BUTTON\GREEN BUTTON.exe (No File)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_4820g&r=27361010r806l0413z175t46n1m315
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_4820g&r=27361010r806l0413z175t46n1m315
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - DefaultScope {7EF54776-F063-4D14-97A6-09FF4BF8935C} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=crm&q={searchTerms}&locale=de_DE&apn_ptnrs=U3&apn_dtid=OSJ000YYDE&apn_uid=1C4D2F40-200D-4D3C-B0BE-7EC20B329ED2&apn_sauid=3189768B-FED8-41C4-9B4B-4CFF582D94F5
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
SearchScopes: HKCU - {7EF54776-F063-4D14-97A6-09FF4BF8935C} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=crm&q={searchTerms}&locale=de_DE&apn_ptnrs=U3&apn_dtid=OSJ000YYDE&apn_uid=1C4D2F40-200D-4D3C-B0BE-7EC20B329ED2&apn_sauid=3189768B-FED8-41C4-9B4B-4CFF582D94F5
BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {FC2B76FC-2132-4D80-A9A3-1F5C6E49066B} -  No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Acer\Acer VCM\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 62.109.121.1 62.109.121.2

FireFox:
========
FF ProfilePath: C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\xke09otc.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\ffxtlbr@babylon.com
FF HKLM-x32\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: No Name - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\

==================== Services (Whitelisted) =================

R2 a2AntiMalware; C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [3082640 2012-09-19] (Emsisoft GmbH)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 AVerRemote; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe [352256 2008-06-06] (AVerMedia)
R2 AVerScheduleService; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe [409600 2008-07-14] ()
R2 ePowerSvc; C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [820768 2010-04-23] (Acer Incorporated)
R2 lmhosts; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 MWLService; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [305520 2010-04-17] (Egis Technology Inc.)
R2 NlaSvc; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 nsi; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 ODDPwrSvc; C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe [171040 2010-04-22] (Acer Incorporated)
R2 RichVideo; C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [244904 2010-02-03] ()
R2 RS_Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [260640 2010-01-30] (Acer Incorporated)

==================== Drivers (Whitelisted) ====================

S3 a2acc; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2accx64.sys [66320 2012-04-30] (Emsisoft GmbH)
S3 a2acc; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2accx64.sys [66320 2012-04-30] (Emsisoft GmbH)
R1 A2DDA; C:\Program Files (x86)\Emsisoft Anti-Malware\a2ddax64.sys [23208 2011-05-19] (Emsi Software GmbH)
R1 A2DDA; C:\Program Files (x86)\Emsisoft Anti-Malware\a2ddax64.sys [23208 2011-05-19] (Emsi Software GmbH)
R1 a2injectiondriver; C:\Program Files (x86)\Emsisoft Anti-Malware\a2dix64.sys [44688 2012-04-30] (Emsisoft GmbH)
R1 a2injectiondriver; C:\Program Files (x86)\Emsisoft Anti-Malware\a2dix64.sys [44688 2012-04-30] (Emsisoft GmbH)
R1 a2util; C:\Program Files (x86)\Emsisoft Anti-Malware\a2util64.sys [14720 2010-05-05] (Emsi Software GmbH)
R1 a2util; C:\Program Files (x86)\Emsisoft Anti-Malware\a2util64.sys [14720 2010-05-05] (Emsi Software GmbH)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-27] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-27] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-27] ()
R3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [245248 2010-01-26] (Huawei Technologies Co., Ltd.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-31 13:28 - 2013-08-31 14:09 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-08-31 13:27 - 2013-08-31 14:09 - 00000000 ____D C:\Users\ADMIN.Ace\Desktop\mbar
2013-08-31 13:27 - 2013-08-31 13:27 - 00000000 ____D C:\Users\ADMIN.Ace\Neuer Ordner
2013-08-25 19:59 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-25 19:59 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-25 19:59 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-25 19:59 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-25 19:59 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-25 19:59 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-25 19:59 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-25 19:59 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-25 19:59 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-25 19:59 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-25 19:59 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-25 19:59 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-25 19:59 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-25 19:59 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-25 19:59 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-25 19:59 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-25 19:59 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-25 19:59 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-25 19:59 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-25 19:58 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-25 19:58 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-25 19:58 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-25 19:58 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-25 19:58 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-25 19:58 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-25 19:58 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-25 19:58 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-25 19:58 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-25 19:58 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-25 19:58 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-25 19:58 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-25 17:26 - 2013-08-25 19:46 - 00000000 ____D C:\Windows\system32\MRT
2013-08-25 11:01 - 2013-08-25 11:02 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-25 10:56 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-25 10:56 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-25 10:56 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-25 10:56 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-25 10:56 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-25 10:56 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-25 10:56 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-25 10:56 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-25 10:55 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-25 10:55 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-25 10:55 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-25 10:55 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-25 10:55 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-25 10:55 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-25 10:55 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-25 10:55 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

==================== One Month Modified Files and Folders =======

2013-08-31 14:19 - 2013-08-31 14:19 - 00000000 ____D C:\FRST
2013-08-31 14:09 - 2013-08-31 13:28 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-08-31 14:09 - 2013-08-31 13:27 - 00000000 ____D C:\Users\ADMIN.Ace\Desktop\mbar
2013-08-31 13:46 - 2012-09-16 20:48 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-31 13:42 - 2012-09-21 09:49 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-31 13:27 - 2013-08-31 13:27 - 00000000 ____D C:\Users\ADMIN.Ace\Neuer Ordner
2013-08-31 13:27 - 2010-10-16 13:59 - 00000000 ____D C:\Users\ADMIN.Ace
2013-08-31 13:26 - 2009-07-14 06:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-31 13:26 - 2009-07-14 06:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-31 13:22 - 2011-01-24 22:26 - 01531461 _____ C:\Windows\WindowsUpdate.log
2013-08-31 13:17 - 2012-12-29 16:23 - 00009905 _____ C:\Windows\setupact.log
2013-08-31 13:17 - 2012-09-21 09:49 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-31 13:17 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-29 21:44 - 2010-10-16 20:24 - 00000000 ____D C:\Users\yyyyi\AppData\Roaming\Macromedia
2013-08-28 21:10 - 2012-09-16 21:06 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-27 22:30 - 2012-08-23 19:21 - 00000000 ____D C:\Program Files (x86)\Emsisoft Anti-Malware
2013-08-26 20:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-08-25 19:52 - 2010-07-22 23:34 - 00654852 _____ C:\Windows\system32\perfh007.dat
2013-08-25 19:52 - 2010-07-22 23:34 - 00130434 _____ C:\Windows\system32\perfc007.dat
2013-08-25 19:52 - 2009-07-14 07:13 - 01522286 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-25 19:46 - 2013-08-25 17:26 - 00000000 ____D C:\Windows\system32\MRT
2013-08-25 17:26 - 2010-10-17 14:16 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-25 11:02 - 2013-08-25 11:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-01 19:31 - 2011-01-24 20:37 - 00000000 ____D C:\Users\xxxxx\AppData\Roaming\gtk-2.0
2013-08-01 18:23 - 2010-05-06 14:36 - 00000000 ____D C:\Program Files (x86)\Google

Files to move or delete:
====================
C:\Users\xxxxx\AppData\Local\Temp\nsv92C7.tmp\FindProcDLL.dll
C:\Users\xxxxx\AppData\Local\Temp\nsv92C7.tmp\newadvsplash.dll
C:\Users\xxxxx\AppData\Local\Temp\nsv92C7.tmp\System.dll
C:\Users\xxxxx\AppData\Local\Temp\nsv62A5.tmp\FindProcDLL.dll
C:\Users\xxxxx\AppData\Local\Temp\nsv62A5.tmp\newadvsplash.dll
C:\Users\xxxxx\AppData\Local\Temp\nsv62A5.tmp\System.dll
C:\Users\xxxxx\AppData\Local\Temp\nsuE05A.tmp\FindProcDLL.dll
C:\Users\xxxxx\AppData\Local\Temp\nsuE05A.tmp\newadvsplash.dll
C:\Users\xxxxx\AppData\Local\Temp\nsuE05A.tmp\System.dll
C:\Users\xxxxx\AppData\Local\Temp\nss8C52.tmp\FindProcDLL.dll
C:\Users\xxxxx\AppData\Local\Temp\nss8C52.tmp\newadvsplash.dll
C:\Users\xxxxx\AppData\Local\Temp\nss8C52.tmp\System.dll
C:\Users\xxxxx\AppData\Local\Temp\nsoA156.tmp\FindProcDLL.dll
C:\Users\xxxxx\AppData\Local\Temp\nsoA156.tmp\newadvsplash.dll
C:\Users\xxxxx\AppData\Local\Temp\nsoA156.tmp\System.dll
C:\Users\xxxxx\AppData\Local\Temp\nsk4442.tmp\FindProcDLL.dll
C:\Users\xxxxx\AppData\Local\Temp\nsk4442.tmp\newadvsplash.dll
C:\Users\xxxxx\AppData\Local\Temp\nsk4442.tmp\System.dll
C:\Users\xxxxx\AppData\Local\Temp\nsf14D9.tmp\FindProcDLL.dll
C:\Users\xxxxx\AppData\Local\Temp\nsf14D9.tmp\newadvsplash.dll
C:\Users\xxxxx\AppData\Local\Temp\nsf14D9.tmp\System.dll
C:\Users\xxxxx\AppData\Local\Temp\nscE3AE.tmp\FindProcDLL.dll
C:\Users\xxxxx\AppData\Local\Temp\nscE3AE.tmp\newadvsplash.dll
C:\Users\xxxxx\AppData\Local\Temp\nscE3AE.tmp\System.dll
C:\Users\xxxxx\AppData\Local\Temp\nsbF5D.tmp\FindProcDLL.dll
C:\Users\xxxxx\AppData\Local\Temp\nsbF5D.tmp\newadvsplash.dll
C:\Users\xxxxx\AppData\Local\Temp\nsbF5D.tmp\System.dll
C:\Users\xxxxx\AppData\Local\Temp\nsa7E92.tmp\FindProcDLL.dll
C:\Users\xxxxx\AppData\Local\Temp\nsa7E92.tmp\newadvsplash.dll
C:\Users\xxxxx\AppData\Local\Temp\nsa7E92.tmp\System.dll
C:\Users\xxxxx\AppData\Local\Temp\MozUpdater\bgupdate-1\updater.exe
C:\Users\xxxxx\AppData\Local\Temp\MozUpdater\bgupdate\updater.exe
C:\Users\xxxxx\AppData\Local\Temp\7zOEACC.tmp\GTR_3.0.exe
C:\Users\xxxxx\AppData\Local\Temp\7zOEACC.tmp\Waves GTR 3\%AppData%\Waves\Caches\C\Program Files (x86)\Waves\Plug-Ins\StompWahWah.dll\XWP4\1000.dll
C:\Users\xxxxx\AppData\Local\Temp\7zOEACC.tmp\Waves GTR 3\%AppData%\Waves\Caches\C\Program Files (x86)\Waves\Plug-Ins\StompVolume.dll\XWP4\1000.dll
C:\Users\xxxxx\AppData\Local\Temp\7zOEACC.tmp\Waves GTR 3\%AppData%\Waves\Caches\C\Program Files (x86)\Waves\Plug-Ins\StompVibrolo.dll\XWP4\1000.dll
C:\Users\xxxxx\AppData\Local\Temp\7zOEACC.tmp\Waves GTR 3\%AppData%\Waves\Caches\C\Program Files (x86)\Waves\Plug-Ins\StompTone.dll\XWP4\1000.dll
C:\Users\xxxxx\AppData\Local\Temp\7zOEACC.tmp\Waves GTR 3\%AppData%\Waves\Caches\C\Program Files (x86)\Waves\Plug-Ins\StompSpring.dll\XWP4\1000.dll
C:\Users\xxxxx\AppData\Local\Temp\7zOEACC.tmp\Waves GTR 3\%AppData%\Waves\Caches\C\Program Files (x86)\Waves\Plug-Ins\StompReverb.dll\XWP4\1000.dll
C:\Users\xxxxx\AppData\Local\Temp\7zOEACC.tmp\Waves GTR 3\%AppData%\Waves\Caches\C\Program Files (x86)\Waves\Plug-Ins\StompPitcher.dll\XWP4\1000.dll
C:\Users\xxxxx\AppData\Local\Temp\7zOEACC.tmp\Waves GTR 3\%AppData%\Waves\Caches\C\Program Files (x86)\Waves\Plug-Ins\StompPhaser.dll\XWP4\1000.dll
C:\Users\xxxxx\AppData\Local\Temp\7zOEACC.tmp\Waves GTR 3\%AppData%\Waves\Caches\C\Program Files (x86)\Waves\Plug-Ins\StompPanner.dll\XWP4\1000.dll
C:\Users\xxxxx\AppData\Local\Temp\7zOEACC.tmp\Waves GTR 3\%AppData%\Waves\Caches\C\Program Files (x86)\Waves\Plug-Ins\StompOverDrive.dll\XWP4\1000.dll
C:\Users\xxxxx\AppData\Local\Temp\7zOEACC.tmp\Waves GTR 3\%AppData%\Waves\Caches\C\Program Files (x86)\Waves\Plug-Ins\StompOctaver.dll\XWP4\1000.dll
C:\Users\xxxxx\AppData\Local\Temp\7zOEACC.tmp\Waves GTR 3\%AppData%\Waves\Caches\C\Program Files (x86)\Waves\Plug-Ins\StompMetal.dll\XWP4\1000.dll
C:\Users\xxxxx\AppData\Local\Temp\7zOEACC.tmp\Waves GTR 3\%AppData%\Waves\Caches\C\Program Files (x86)\Waves\Plug-Ins\StompLayD.dll\XWP4\1000.dll
C:\Users\xxxxx\AppData\Local\Temp\7zOEACC.tmp\Waves GTR 3\%AppData%\Waves\Caches\C\Program Files (x86)\Waves\Plug-Ins\StompGateComp.dll\XWP4\1000.dll
C:\Users\xxxxx\AppData\Local\Temp\7zOEACC.tmp\Waves GTR 3\%AppData%\Waves\Caches\C\Program Files (x86)\Waves\Plug-Ins\StompGate.dll\XWP4\1000.dll
C:\Users\xxxxx\AppData\Local\Temp\7zOEACC.tmp\Waves GTR 3\%AppData%\Waves\Caches\C\Program Files (x86)\Waves\Plug-Ins\StompFuzz.dll\XWP4\1000.dll
C:\Users\xxxxx\AppData\Local\Temp\7zOEACC.tmp\Waves GTR 3\%AppData%\Waves\Caches\C\Program Files (x86)\Waves\Plug-Ins\StompFlanger.dll\XWP4\1000.dll
C:\Users\xxxxx\AppData\Local\Temp\7zOEACC.tmp\Waves GTR 3\%AppData%\Waves\Caches\C\Program Files (x86)\Waves\Plug-Ins\StompEq.dll\XWP4\1000.dll
C:\Users\xxxxx\AppData\Local\Temp\7zOEACC.tmp\Waves GTR 3\%AppData%\Waves\Caches\C\Program Files (x86)\Waves\Plug-Ins\StompDoubler.dll\XWP4\1000.dll
C:\Users\xxxxx\AppData\Local\Temp\7zOEACC.tmp\Waves GTR 3\%AppData%\Waves\Caches\C\Program Files (x86)\Waves\Plug-Ins\StompDistortion.dll\XWP4\1000.dll
C:\Users\xxxxx\AppData\Local\Temp\7zOEACC.tmp\Waves GTR 3\%AppData%\Waves\Caches\C\Program Files (x86)\Waves\Plug-Ins\StompDelay.dll\XWP4\1000.dll
C:\Users\xxxxx\AppData\Local\Temp\7zOEACC.tmp\Waves GTR 3\%AppData%\Waves\Caches\C\Program Files (x86)\Waves\Plug-Ins\StompComp.dll\XWP4\1000.dll
C:\Users\xxxxx\AppData\Local\Temp\7zOEACC.tmp\Waves GTR 3\%AppData%\Waves\Caches\C\Program Files (x86)\Waves\Plug-Ins\StompChorus.dll\XWP4\1000.dll
C:\Users\xxxxx\AppData\Local\Temp\7zOEACC.tmp\Waves GTR 3\%AppData%\Waves\Caches\C\Program Files (x86)\Waves\Plug-Ins\StompBuzz.dll\XWP4\1000.dll
C:\Users\xxxxx\AppData\Local\Temp\7zOEACC.tmp\Waves GTR 3\%AppData%\Waves\Caches\C\Program Files (x86)\Waves\Plug-Ins\StompAxxPress.dll\XWP4\1000.dll
C:\Users\xxxxx\AppData\Local\Temp\7zOEACC.tmp\Waves GTR 3\%AppData%\Waves\Caches\C\Program Files (x86)\Waves\Plug-Ins\GTRTuner.dll\XWP4\1000.dll
C:\Users\xxxxx\AppData\Local\Temp\7zOEACC.tmp\Waves GTR 3\%AppData%\Waves\Caches\C\Program Files (x86)\Waves\Plug-Ins\GTRToolRack.dll\XWP4\1000.dll
C:\Users\xxxxx\AppData\Local\Temp\7zOEACC.tmp\Waves GTR 3\%AppData%\Waves\Caches\C\Program Files (x86)\Waves\Plug-Ins\GTRAmp.dll\XWP4\1000.dll
C:\Users\xxxxx\AppData\Local\Temp\7zOEACC.tmp\Waves GTR 3\%AppData%\Waves\Caches\C\Program Files (x86)\Waves\Plug-Ins\GTRAirMixer.dll\XWP4\1000.dll

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== End Of Log ============================
--- --- ---

--- --- ---

Alt 31.08.2013, 15:25   #5
M-K-D-B
/// TB-Ausbilder
 
DuckDuckGo läßt sich nicht enfernen - Standard

DuckDuckGo läßt sich nicht enfernen


Servus,






Schritt 1
Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.






Schritt 2
Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).





Schritt 3

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.






Bitte poste mit deiner nächsten Antwort
  • die Logdatei von ComboFix,
  • die Logdatei von AdwCleaner,
  • die Logdatei von JRT.
Alt 01.09.2013, 11:41   #6
Pechvogel44
 
DuckDuckGo läßt sich nicht enfernen - Standard

DuckDuckGo läßt sich nicht enfernen


Zitat:
Bitte poste mit deiner nächsten Antwort
  • die Logdatei von ComboFix,
  • die Logdatei von AdwCleaner,
  • die Logdatei von JRT.
Hallo Mathias,

und hier kommen sie:

ComboFix

Code:
ATTFilter
ComboFix 13-08-31.01 - ADMIN 01.09.2013  11:07:14.3.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.3767.1826 [GMT 2:00]
ausgeführt von:: c:\users\xxxxxxx\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\wininit.ini
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-08-01 bis 2013-09-01  ))))))))))))))))))))))))))))))
.
.
2013-09-01 09:13 . 2013-09-01 09:13	--------	d-----w-	c:\users\Public\AppData\Local\temp
2013-09-01 09:13 . 2013-09-01 09:13	--------	d-----w-	c:\users\xxxxi\AppData\Local\temp
2013-09-01 09:13 . 2013-09-01 09:13	--------	d-----w-	c:\users\AppData\AppData\Local\temp
2013-09-01 09:13 . 2013-09-01 09:13	--------	d-----w-	c:\users\ADMIN.Ace\AppData\Local\temp
2013-09-01 08:33 . 2013-09-01 08:33	76232	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{2C66794D-38BB-48E8-8A83-E76DA07B858B}\offreg.dll
2013-08-31 12:19 . 2013-08-31 12:19	--------	d-----w-	C:\FRST
2013-08-31 11:28 . 2013-08-31 12:09	--------	d-----w-	c:\programdata\Malwarebytes' Anti-Malware (portable)
2013-08-31 11:27 . 2013-08-31 11:27	--------	d-----w-	c:\users\ADMIN.Ace\Neuer Ordner
2013-08-31 10:35 . 2013-08-06 08:58	9515512	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{2C66794D-38BB-48E8-8A83-E76DA07B858B}\mpengine.dll
2013-08-25 17:58 . 2013-07-26 05:12	3958784	----a-w-	c:\windows\system32\jscript9.dll
2013-08-25 15:26 . 2013-08-25 17:46	--------	d-----w-	c:\windows\system32\MRT
2013-08-25 08:56 . 2013-07-09 05:46	1472512	----a-w-	c:\windows\system32\crypt32.dll
2013-08-25 08:56 . 2013-07-09 04:46	1166848	----a-w-	c:\windows\SysWow64\crypt32.dll
2013-08-25 08:56 . 2013-07-09 05:52	224256	----a-w-	c:\windows\system32\wintrust.dll
2013-08-25 08:56 . 2013-07-09 04:52	175104	----a-w-	c:\windows\SysWow64\wintrust.dll
2013-08-25 08:56 . 2013-07-09 05:46	184320	----a-w-	c:\windows\system32\cryptsvc.dll
2013-08-25 08:56 . 2013-07-09 05:46	139776	----a-w-	c:\windows\system32\cryptnet.dll
2013-08-25 08:56 . 2013-07-09 04:46	140288	----a-w-	c:\windows\SysWow64\cryptsvc.dll
2013-08-25 08:56 . 2013-07-09 04:46	103936	----a-w-	c:\windows\SysWow64\cryptnet.dll
2013-08-25 08:55 . 2013-07-19 01:58	2048	----a-w-	c:\windows\system32\tzres.dll
2013-08-25 08:55 . 2013-07-19 01:41	2048	----a-w-	c:\windows\SysWow64\tzres.dll
2013-08-25 08:55 . 2013-07-25 09:25	1888768	----a-w-	c:\windows\system32\WMVDECOD.DLL
2013-08-25 08:55 . 2013-07-25 08:57	1620992	----a-w-	c:\windows\SysWow64\WMVDECOD.DLL
2013-08-25 08:55 . 2013-07-09 05:51	1217024	----a-w-	c:\windows\system32\rpcrt4.dll
2013-08-25 08:55 . 2013-07-09 04:52	663552	----a-w-	c:\windows\SysWow64\rpcrt4.dll
2013-08-25 08:55 . 2013-06-15 04:32	39936	----a-w-	c:\windows\system32\drivers\tssecsrv.sys
2013-08-25 08:55 . 2013-07-06 06:03	1910208	----a-w-	c:\windows\system32\drivers\tcpip.sys
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-08-25 15:26 . 2010-10-17 12:16	78161360	----a-w-	c:\windows\system32\MRT.exe
2013-07-28 14:11 . 2013-07-28 14:11	96168	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-07-28 14:11 . 2012-09-16 18:22	867240	----a-w-	c:\windows\SysWow64\npDeployJava1.dll
2013-07-28 14:11 . 2010-11-07 14:27	789416	----a-w-	c:\windows\SysWow64\deployJava1.dll
2013-07-28 14:08 . 2012-06-01 18:07	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-07-28 14:08 . 2012-06-01 18:07	692104	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-06-27 20:21 . 2013-03-03 08:47	189936	----a-w-	c:\windows\system32\drivers\aswVmm.sys
2013-06-27 20:21 . 2012-09-23 16:09	378944	----a-w-	c:\windows\system32\drivers\aswSP.sys
2013-06-27 20:21 . 2012-09-23 16:09	1030952	----a-w-	c:\windows\system32\drivers\aswSnx.sys
2013-06-05 03:34 . 2013-07-11 16:24	3153920	----a-w-	c:\windows\system32\win32k.sys
2013-06-04 06:00 . 2013-07-11 16:24	624128	----a-w-	c:\windows\system32\qedit.dll
2013-06-04 04:53 . 2013-07-11 16:24	509440	----a-w-	c:\windows\SysWow64\qedit.dll
2004-02-09 03:48 . 2005-07-04 15:35	899072	----a-w-	c:\program files\audiograbber.exe
2002-01-03 20:50 . 2005-07-04 15:35	155648	----a-w-	c:\program files\WMA8Connect.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{00000000-6E41-4FD3-8538-502F5495E5FC}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2013-01-28 1520776]
.
[HKEY_CLASSES_ROOT\clsid\{00000000-6e41-4fd3-8538-502f5495e5fc}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2013-01-28 17:16	1520776	----a-w-	c:\program files (x86)\Ask.com\GenericAskToolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]
2013-01-28 14:49	281760	----a-w-	c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2013-01-28 1520776]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2010-04-17 05:55	120176	----a-w-	c:\program files (x86)\EgisTec MyWinLocker\x86\PSDProtect.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-03-04 284696]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-03-03 1300560]
"SuiteTray"="c:\program files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [2010-04-17 337264]
"EgisUpdate"="c:\program files (x86)\EgisTec IPS\EgisUpdate.exe" [2010-03-11 201584]
"EgisTecPMMUpdate"="c:\program files (x86)\EgisTec IPS\PmmUpdate.exe" [2010-03-11 407920]
"BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2010-03-08 260608]
"MDS_Menu"="c:\program files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe" [2009-05-19 222504]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"ApnUpdater"="c:\program files (x86)\Ask.com\Updater\Updater.exe" [2013-01-28 1644680]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-06-13 336384]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2013-05-01 421888]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-05-31 152392]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
AVer HID Receiver.lnk - c:\program files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe [2012-12-25 159744]
AVerQuick.lnk - c:\program files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe [2012-12-25 679936]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
R2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]
R3 a2acc;a2acc;c:\program files (x86)\EMSISOFT ANTI-MALWARE\a2accx64.sys;c:\program files (x86)\EMSISOFT ANTI-MALWARE\a2accx64.sys [x]
R3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS;c:\windows\SYSNATIVE\drivers\AmUStor.SYS [x]
R3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
R3 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [x]
R3 NETw5s64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;c:\windows\system32\DRIVERS\NETw5s64.sys;c:\windows\SYSNATIVE\DRIVERS\NETw5s64.sys [x]
R3 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [x]
R3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S1 A2DDA;A2 Direct Disk Access Support Driver;c:\program files (x86)\Emsisoft Anti-Malware\a2ddax64.sys;c:\program files (x86)\Emsisoft Anti-Malware\a2ddax64.sys [x]
S1 a2injectiondriver;a2injectiondriver;c:\program files (x86)\Emsisoft Anti-Malware\a2dix64.sys;c:\program files (x86)\Emsisoft Anti-Malware\a2dix64.sys [x]
S1 a2util;a-squared Malware-IDS utility driver;c:\program files (x86)\Emsisoft Anti-Malware\a2util64.sys;c:\program files (x86)\Emsisoft Anti-Malware\a2util64.sys [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDFilter.sys [x]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDNServ.sys [x]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDVDisk.sys [x]
S2 a2AntiMalware;Emsisoft Anti-Malware 6.6 - Service;c:\program files (x86)\Emsisoft Anti-Malware\a2service.exe;c:\program files (x86)\Emsisoft Anti-Malware\a2service.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 AVerRemote;AVerRemote;c:\program files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe;c:\program files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe [x]
S2 AVerScheduleService;AVerScheduleService;c:\program files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe;c:\program files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe [x]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe;c:\program files (x86)\Launch Manager\dsiwmis.exe [x]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer PowerSmart Manager\ePowerSvc.exe;c:\program files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [x]
S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe;c:\program files (x86)\Acer\Registration\GREGsvc.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [x]
S2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [x]
S2 ODDPwrSvc;Acer ODD Power Service;c:\program files\Acer\Optical Drive Power Management\ODDPWRSvc.exe;c:\program files\Acer\Optical Drive Power Management\ODDPWRSvc.exe [x]
S2 RS_Service;Raw Socket Service;c:\program files (x86)\Acer\Acer VCM\RS_Service.exe;c:\program files (x86)\Acer\Acer VCM\RS_Service.exe [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\DRIVERS\ewusbnet.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbnet.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x]
S3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys;c:\windows\SYSNATIVE\DRIVERS\igdpmd64.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2013-09-01 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-01 14:08]
.
2013-08-31 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-04-17 11:53]
.
2013-09-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-04-17 11:53]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]
2013-01-28 14:49	342176	----a-w-	c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-05-09 08:58	133840	----a-w-	c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2010-04-17 05:58	137584	----a-w-	c:\program files (x86)\EgisTec MyWinLocker\x64\PSDProtect.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2009-04-09 320000]
"ODDPwr"="c:\program files\Acer\Optical Drive Power Management\ODDPwr.exe" [2010-04-22 223264]
"mwlDaemon"="c:\program files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe" [2010-04-17 349552]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-04-22 10775072]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2010-04-22 2040352]
"PLFSetI"="c:\windows\PLFSetI.exe" [2010-01-13 206208]
"Acer ePower Management"="c:\program files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe" [2010-04-23 496160]
"CanonSolutionMenu"="c:\program files (x86)\Canon\SolutionMenu\CNSLMAIN.exe" [2009-03-18 767312]
"Eraser"="c:\progra~1\Eraser\Eraser.exe" [2010-04-10 979344]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-08-25 161304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-08-25 386584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-08-25 415256]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = about:blank
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: &Winamp Search - c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
IE: Free YouTube Download - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm
IE: Free YouTube to MP3 Converter - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm
IE: {{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
TCP: DhcpNameServer = 62.109.121.1 62.109.121.2
FF - ProfilePath - c:\users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2613550&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - about:home
FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2613550&q=
FF - prefs.js: network.proxy.http - 127.0.0.1
FF - prefs.js: network.proxy.http_port - 62707
FF - prefs.js: network.proxy.type - 0
FF - user.js: extentions.y2layers.installId - 62b11f21-6686-412f-b2df-83ffc3117872
FF - user.js: extentions.y2layers.defaultEnableAppsList - PageRage,PageRageGlobal,Buzzdock,BuzzdockTease,SanitySwitch,PageRage,PageRageGlobal,
FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=110809&tt=3412_3
FF - user.js: extensions.BabylonToolbar_i.babExt - 
FF - user.js: extensions.BabylonToolbar_i.srcExt - ss
FF - user.js: extensions.BabylonToolbar.tlbrSrchUrl - hxxp://www.google.com/search?babsrc=TB_ggl&q=
FF - user.js: extensions.BabylonToolbar.id - 0c0ceb8e000000000000c446195f7d42
FF - user.js: extensions.BabylonToolbar.instlDay - 15575
FF - user.js: extensions.BabylonToolbar.vrsn - 1.6.4.6
FF - user.js: extensions.BabylonToolbar.vrsni - 1.6.4.6
FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.6.4.619:07
FF - user.js: extensions.BabylonToolbar.prtnrId - babylon
FF - user.js: extensions.BabylonToolbar.prdct - BabylonToolbar
FF - user.js: extensions.BabylonToolbar.aflt - babsst
FF - user.js: extensions.BabylonToolbar_i.smplGrp - none
FF - user.js: extensions.BabylonToolbar.tlbrId - tb9
FF - user.js: extensions.BabylonToolbar.instlRef - sst
FF - user.js: extensions.BabylonToolbar.dfltLng - en
FF - user.js: extensions.BabylonToolbar.excTlbr - false
FF - user.js: extensions.BabylonToolbar.admin - false
.
.
------- Dateityp-Verknüpfung -------
.
.reg=Regedit.Document
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
c:\users\xxxxxxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Verbatim GREEN BUTTON.lnk - c:\program files (x86)\Verbatim GREEN BUTTON\GREEN BUTTON.exe /s /a
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
WebBrowser-{FC2B76FC-2132-4D80-A9A3-1F5C6E49066B} - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (LocalSystem)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
   d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,a6,78,bb,fe,f8,e9,b5,4a,ae,82,95,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
   d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,a6,78,bb,fe,f8,e9,b5,4a,ae,82,95,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-09-01  11:16:48
ComboFix-quarantined-files.txt  2013-09-01 09:16
.
Vor Suchlauf: 15 Verzeichnis(se), 242.725.744.640 Bytes frei
Nach Suchlauf: 17 Verzeichnis(se), 245.085.437.952 Bytes frei
.
- - End Of File - - 5470E66A45EE62671EA61B4F2CC557D9
AdwCleaner - zwei Läufe:

Code:
ATTFilter
# AdwCleaner v3.001 - Report created 01/09/2013 at 11:42:26
# Updated 24/08/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : ADMIN - ACE
# Running from : C:\Users\xxxxxxx\Desktop\adwcleaner.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

File Found : C:\Windows\System32\Tasks\Scheduled Update for Ask Toolbar
Folder Found : C:\Program Files (x86)\Mozilla Firefox\Extensions\ffxtlbr@babylon.com
Folder Found C:\Program Files (x86)\Ask.com
Folder Found C:\ProgramData\Ask

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\APN
Key Found : HKCU\Software\AppDataLow\Software\AskToolbar
Key Found : HKCU\Software\AppDataLow\Software\Crossrider
Key Found : HKCU\Software\Ask.com
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\Microsoft\Babylon
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Found : HKCU\Software\OCS
Key Found : [x64] HKCU\Software\APN
Key Found : [x64] HKCU\Software\Ask.com
Key Found : [x64] HKCU\Software\Conduit
Key Found : [x64] HKCU\Software\Microsoft\Babylon
Key Found : [x64] HKCU\Software\OCS
Key Found : HKLM\Software\APN
Key Found : HKLM\Software\AskToolbar
Key Found : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Key Found : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Key Found : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Found : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Key Found : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Key Found : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Key Found : HKLM\SOFTWARE\Classes\Prod.cap
Key Found : HKLM\Software\Conduit
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_fairstars-cd-ripper_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_fairstars-cd-ripper_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_hydrogen_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_hydrogen_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_netmeter_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_netmeter_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZoneAlarm LTD Toolbar
Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{00000000-6E41-4FD3-8538-502F5495E5FC}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater]
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}]

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16660


-\\ Mozilla Firefox v23.0.1 (de)

*************************

AdwCleaner[R0].txt - [4598 octets] - [01/09/2013 11:42:26]

########## EOF - \AdwCleaner\AdwCleaner[R0].txt - [4658 octets] ##########
Code:
ATTFilter
# AdwCleaner v3.001 - Report created 01/09/2013 at 11:43:13
# Updated 24/08/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : ADMIN - ACE
# Running from : C:\Users\xxxxxxx\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Ask
Folder Deleted : C:\Program Files (x86)\Ask.com
Folder Deleted : C:\Program Files (x86)\Mozilla Firefox\Extensions\ffxtlbr@babylon.com
File Deleted : C:\Windows\System32\Tasks\Scheduled Update for Ask Toolbar

***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater]
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_fairstars-cd-ripper_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_fairstars-cd-ripper_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_hydrogen_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_hydrogen_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_netmeter_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_netmeter_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{00000000-6E41-4FD3-8538-502F5495E5FC}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : HKCU\Software\APN
Key Deleted : HKCU\Software\Ask.com
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\Microsoft\Babylon
Key Deleted : HKCU\Software\OCS
Key Deleted : HKCU\Software\AppDataLow\Software\AskToolbar
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKLM\Software\APN
Key Deleted : HKLM\Software\AskToolbar
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZoneAlarm LTD Toolbar

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16660


-\\ Mozilla Firefox v23.0.1 (de)

*************************

AdwCleaner[R0].txt - [4768 octets] - [01/09/2013 11:42:26]
AdwCleaner[S0].txt - [4576 octets] - [01/09/2013 11:43:13]

########## EOF - \AdwCleaner\AdwCleaner[S0].txt - [4636 octets] ##########
JRT.txt

Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.5.6 (08.30.2013:1)
OS: Windows 7 Home Premium x64
Ran by ADMIN on 01.09.2013 at 11:53:26,51
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\features\a28b4d68debaa244eb686953b7074fef
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\products\a28b4d68debaa244eb686953b7074fef
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\upgradecodes\f928123a039649549966d4c29d35b1c9
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{6A615911-9F87-4F0A-BAD1-4F0C9B4C8D0E}
Successfully deleted: [Registry Key] "hkey_current_user\software\microsoft\internet explorer\low rights\elevationpolicy\{a5aa24ea-11b8-4113-95ae-9ed71deaf12a}"



~~~ Files

Successfully deleted: [File] "C:\Users\ADMIN.Ace\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\user pinned\startmenu\startfenster.lnk"
Successfully deleted: [File] "C:\Users\ADMIN.Ace\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\user pinned\taskbar\startfenster.lnk"



~~~ Folders

Successfully deleted: [Folder] "C:\Users\ADMIN.Ace\AppData\Roaming\babylon"
Successfully deleted: [Folder] "C:\Users\ADMIN.Ace\AppData\Roaming\babylontoolbar"
Successfully deleted: [Folder] "C:\Users\ADMIN.Ace\AppData\Roaming\dvdvideosoftiehelpers"
Successfully deleted: [Folder] "C:\Users\ADMIN.Ace\appdata\local\apn"
Successfully deleted: [Folder] "C:\Users\ADMIN.Ace\appdata\local\winamp toolbar"
Successfully deleted: [Folder] "C:\Users\ADMIN.Ace\appdata\locallow\conduit"
Successfully deleted: [Folder] "C:\Users\ADMIN.Ace\appdata\locallow\asktoolbar"
Successfully deleted: [Folder] "C:\Windows\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}"



~~~ FireFox

Successfully deleted: [File] C:\Users\ADMIN.Ace\AppData\Roaming\mozilla\firefox\profiles\wvfcx3wu.default\user.js
Successfully deleted: [Folder] C:\Users\ADMIN.Ace\AppData\Roaming\mozilla\firefox\profiles\wvfcx3wu.default\conduitcommon
Successfully deleted: [Folder] C:\Users\ADMIN.Ace\AppData\Roaming\mozilla\firefox\profiles\wvfcx3wu.default\extensions\toolbar@ask.com
Successfully deleted the following from C:\Users\ADMIN.Ace\AppData\Roaming\mozilla\firefox\profiles\wvfcx3wu.default\prefs.js

user_pref("browser.newtab.url", "hxxp://search.babylon.com/?affID=110809&tt=3412_3&babsrc=NT_ss&mntrId=0c0ceb8e000000000000c446195f7d42");
user_pref("browser.search.defaultthis.engineName", "ZoneAlarm-Sicherheit Customized Web Search");
user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2613550&SearchSource=3&q={searchTerms}");
user_pref("extensions.BabylonToolbar.admin", false);
user_pref("extensions.BabylonToolbar.aflt", "babsst");
user_pref("extensions.BabylonToolbar.dfltLng", "en");
user_pref("extensions.BabylonToolbar.excTlbr", false);
user_pref("extensions.BabylonToolbar.id", "0c0ceb8e000000000000c446195f7d42");
user_pref("extensions.BabylonToolbar.instlDay", "15575");
user_pref("extensions.BabylonToolbar.instlRef", "sst");
user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
user_pref("extensions.BabylonToolbar.tlbrId", "tb9");
user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://www.google.com/search?babsrc=TB_ggl&q=");
user_pref("extensions.BabylonToolbar.vrsn", "1.6.4.6");
user_pref("extensions.BabylonToolbar.vrsni", "1.6.4.6");
user_pref("extensions.BabylonToolbar_i.babExt", "");
user_pref("extensions.BabylonToolbar_i.babTrack", "affID=110809&tt=3412_3");
user_pref("extensions.BabylonToolbar_i.newTab", true);
user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?affID=110809&tt=3412_3&babsrc=NT_ss&mntrId=0c0ceb8e000000000000c446195f7d42");
user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.6.4.619:07:43");
user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://search.babylon.com/?affID=110809&tt=3412_3&babsrc=KW_ss&mntrId=0c0ceb8e000000000000c446195f7d42&q=");
user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2613550&q=");
Emptied folder: C:\Users\ADMIN.Ace\AppData\Roaming\mozilla\firefox\profiles\wvfcx3wu.default\minidumps [6 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 01.09.2013 at 12:06:22,22
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Hallo Mathias,

was ist das mit dem DuckDuckGo eigentlich, bzw. was hat es mit meinem Problema auf sich?

Ich bin davon ausgegangen, dass das 'ne anonyme Suchmaschine ist. Was ja gut ist! Aber warum wird man die dann nicht mehr los? Hab ich mir da Schadsoftware eingefangen, die so tut, als ob sie DuckDuckGo ist, oder ist DuckDuckGo selber so penetrant?

Schon mal vielen Dank für deine Mühe und noch einen schönen Sonntag
Pechvogel44
Geändert von Pechvogel44 (01.09.2013 um 11:35 Uhr)

Alt 02.09.2013, 09:33   #7
M-K-D-B
/// TB-Ausbilder
 
DuckDuckGo läßt sich nicht enfernen - Standard

DuckDuckGo läßt sich nicht enfernen


Servus,



Zitat:
Zitat von Pechvogel44 Beitrag anzeigen
was ist das mit dem DuckDuckGo eigentlich, bzw. was hat es mit meinem Problema auf sich?

Ich bin davon ausgegangen, dass das 'ne anonyme Suchmaschine ist. Was ja gut ist! Aber warum wird man die dann nicht mehr los? Hab ich mir da Schadsoftware eingefangen, die so tut, als ob sie DuckDuckGo ist, oder ist DuckDuckGo selber so penetrant?
DuckDuckGo ist eine Toolbar in Firefox, die man nicht benötigt. Zudem, wie du festgestellt hast, ist sie teilweise wieder schwer zu entfernen.





Wir spüren die letzten Reste auf, damit wir sie später entfernen können:





Schritt 1
Kontrollscan mit FRST
Führe wie zuvor beschrieben einen Scan mit FRST aus.
Setze dazu eine Haken bei Addition.txt rechts unten und klicke auf Scan.
Es werden wieder zwei Logdateien erzeugt. Poste mir diese.





Schritt 2
Lade dir die passende Version von SystemLook vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop:
SystemLook (32 bit) | SystemLook (64 bit)
  • Doppelklicke auf die SystemLook.exe, um das Tool zu starten.
  • Kopiere den Inhalt der folgenden Codebox in das Textfeld des Tools:

    Code:
    ATTFilter
    :filefind
*Ask.com*
*Ask Toolbar*
*Ask Search*
*SoftonicDownloader*
*Conduit*
*Babylon*
*Crossrider*
*ZoneAlarm LTD Toolbar*
*DuckDuckGo*

:folderfind
*Ask.com*
*Ask Toolbar*
*Ask Search*
*SoftonicDownloader*
*Conduit*
*Babylon*
*Crossrider*
*ZoneAlarm LTD Toolbar*
*DuckDuckGo*

:regfind
Ask.com
Ask Toolbar
Ask Search
SoftonicDownloader
Conduit
Babylon
Crossrider
ZoneAlarm LTD Toolbar
DuckDuckGo
  • Klicke nun auf den Button Look, um den Scan zu starten.
  • Der Suchlauf kann einige Zeit dauern.
  • Wenn der Suchlauf beendet ist, wird sich dein Editor mit den Ergebnissen öffnen, poste diese in deinen Thread.
  • Die Ergebnisse werden auch auf dem Desktop als SystemLook.txt gespeichert.








Gibt es noch Probleme mit Malware? Wenn ja, welche?
Wie läuft der Rechner derzeit?





Bitte poste mit deiner nächsten Antwort
  • die beiden Logdateien von FRST,
  • die Logdatei von SystemLook,
  • die Beantwortung der gestellten Fragen.
Alt 02.09.2013, 19:28   #8
Pechvogel44
 
DuckDuckGo läßt sich nicht enfernen - Standard

DuckDuckGo läßt sich nicht enfernen


Zitat:
Zitat von M-K-D-B Beitrag anzeigen
Gibt es noch Probleme mit Malware? Wenn ja, welche?
Wie läuft der Rechner derzeit?
Bis jetzt hat sich nix geändert: DuckDuckGo ist immer noch im FF aktiv (an erster Stelle der Suchmaschinen).

Allerdings kommt mir der Rechner inzwischen bei manchen Aktionen extrem langsam vor...

Zitat:
Zitat von M-K-D-B Beitrag anzeigen
Bitte poste mit deiner nächsten Antwort
  • die beiden Logdateien von FRST,
  • die Logdatei von SystemLook,
  • die Beantwortung der gestellten Fragen.
FRST:


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-09-2013 05
Ran by ADMIN (administrator) on ACE on 02-09-2013 20:06:42
Running from C:\Users\xxxxxxx\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVerMedia) C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe
() C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe
() C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Acer Incorporated) C:\Program Files\Acer\Optical Drive Power Management\ODDPWR.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Windows\PLFSetI.exe
(The Eraser Project) C:\Program Files\Eraser\Eraser.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
() C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
(AVerMedia TECHNOLOGIES, Inc.) C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe
(Mozilla Messaging) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerEvent.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(PortableApps.com) E:\Portable\KeePassPortable\KeePassPortable.exe
(Dominik Reichl) E:\Portable\KeePassPortable\App\keepass\keepass.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\system32\taskmgr.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [320000 2009-04-09] (AlcorMicro Co., Ltd.)
HKLM\...\Run: [ODDPwr] - C:\Program Files\Acer\Optical Drive Power Management\ODDPwr.exe [223264 2010-04-22] (Acer Incorporated)
HKLM\...\Run: [mwlDaemon] - C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [349552 2010-04-17] (Egis Technology Inc.)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10775072 2010-04-22] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2040352 2010-04-22] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1842472 2009-09-17] (Synaptics Incorporated)
HKLM\...\Run: [PLFSetI] - C:\Windows\PLFSetI.exe [206208 2010-01-13] ()
HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe [496160 2010-04-23] (Acer Incorporated)
HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-03-18] (CANON INC.)
HKLM\...\Run: [Eraser] - C:\PROGRA~1\Eraser\Eraser.exe [979344 2010-04-10] (The Eraser Project)
HKLM\...\Policies\Explorer: [NoDrives] 0
HKCU\...\Policies\Explorer: [NoDrives] 0
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1300560 2010-03-03] (Dritek System Inc.)
HKLM-x32\...\Run: [SuiteTray] - C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [337264 2010-04-17] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisUpdate] - C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201584 2010-03-11] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisTecPMMUpdate] - C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [407920 2010-03-11] (Egis Technology Inc.)
HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [260608 2010-03-09] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [MDS_Menu] - C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] -  [x]
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-06-13] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKU\Admin\...\Run: [CONNMGRTRAY] - C:\Program Files\Acer\Acer 3G Connection Manager \ConnMgrLauncher.exe Silent [x]
HKU\Admin\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-01-15] ()
HKU\Default\...\Run: [CONNMGRTRAY] - C:\Program Files\Acer\Acer 3G Connection Manager \ConnMgrLauncher.exe Silent [x]
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-01-15] ()
HKU\Default User\...\Run: [CONNMGRTRAY] - C:\Program Files\Acer\Acer 3G Connection Manager \ConnMgrLauncher.exe Silent [x]
HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-01-15] ()
HKU\xxxxi\...\Run: [CONNMGRTRAY] - C:\Program Files\Acer\Acer 3G Connection Manager \ConnMgrLauncher.exe Silent [x]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVer HID Receiver.lnk
ShortcutTarget: AVer HID Receiver.lnk -> C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVerQuick.lnk
ShortcutTarget: AVerQuick.lnk -> C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe (AVerMedia TECHNOLOGIES, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {FC2B76FC-2132-4D80-A9A3-1F5C6E49066B} -  No File
Toolbar: HKCU - No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} -  No File
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Acer\Acer VCM\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 62.109.121.2 62.109.121.1

FireFox:
========
FF ProfilePath: C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: Google
FF Homepage: about:home
FF NetworkProxy: "http", "127.0.0.1"
FF NetworkProxy: "http_port", 62707
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\searchplugins\youtube.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

==================== Services (Whitelisted) =================

R2 a2AntiMalware; C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [3082640 2012-09-19] (Emsisoft GmbH)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 AVerRemote; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe [352256 2008-06-06] (AVerMedia)
R2 AVerScheduleService; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe [409600 2008-07-14] ()
R2 ePowerSvc; C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [820768 2010-04-23] (Acer Incorporated)
S3 MWLService; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [305520 2010-04-17] (Egis Technology Inc.)
R2 ODDPwrSvc; C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe [171040 2010-04-22] (Acer Incorporated)
R2 RichVideo; C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [244904 2010-02-03] ()
R2 RS_Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [260640 2010-01-30] (Acer Incorporated)

==================== Drivers (Whitelisted) ====================

S3 a2acc; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2accx64.sys [66320 2012-04-30] (Emsisoft GmbH)
S3 a2acc; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2accx64.sys [66320 2012-04-30] (Emsisoft GmbH)
R1 A2DDA; C:\Program Files (x86)\Emsisoft Anti-Malware\a2ddax64.sys [23208 2011-05-19] (Emsi Software GmbH)
R1 A2DDA; C:\Program Files (x86)\Emsisoft Anti-Malware\a2ddax64.sys [23208 2011-05-19] (Emsi Software GmbH)
R1 a2injectiondriver; C:\Program Files (x86)\Emsisoft Anti-Malware\a2dix64.sys [44688 2012-04-30] (Emsisoft GmbH)
R1 a2injectiondriver; C:\Program Files (x86)\Emsisoft Anti-Malware\a2dix64.sys [44688 2012-04-30] (Emsisoft GmbH)
R1 a2util; C:\Program Files (x86)\Emsisoft Anti-Malware\a2util64.sys [14720 2010-05-05] (Emsi Software GmbH)
R1 a2util; C:\Program Files (x86)\Emsisoft Anti-Malware\a2util64.sys [14720 2010-05-05] (Emsi Software GmbH)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-27] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-27] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-27] ()
R3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [245248 2010-01-26] (Huawei Technologies Co., Ltd.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-01 12:06 - 2013-09-01 12:06 - 00004983 _____ C:\Users\ADMIN.Ace\Desktop\JRT.txt
2013-09-01 11:53 - 2013-09-01 11:53 - 00000000 ____D C:\Windows\ERUNT
2013-09-01 11:41 - 2013-09-01 11:43 - 00000000 ____D C:\AdwCleaner
2013-09-01 11:37 - 2013-09-01 11:37 - 00026915 _____ C:\Users\ADMIN.Ace\Desktop\ComboFix.txt
2013-09-01 11:16 - 2013-09-01 11:16 - 00026914 _____ C:\ComboFix.txt
2013-09-01 10:26 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-09-01 10:26 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-09-01 10:26 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-09-01 10:26 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-09-01 10:26 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-09-01 10:26 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-09-01 10:26 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-09-01 10:26 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-09-01 10:24 - 2013-09-01 11:16 - 00000000 ____D C:\Qoobox
2013-09-01 10:21 - 2013-09-01 10:20 - 01027511 _____ (Thisisu) C:\Users\xxxxxxx\Desktop\JRT.exe
2013-09-01 10:21 - 2013-09-01 10:20 - 00994642 _____ C:\Users\xxxxxxx\Desktop\adwcleaner.exe
2013-09-01 10:14 - 2013-09-01 10:12 - 05115930 ____R (Swearware) C:\Users\xxxxxxx\Desktop\ComboFix.exe
2013-08-31 14:19 - 2013-08-31 14:19 - 00000000 ____D C:\FRST
2013-08-31 13:28 - 2013-08-31 14:09 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-08-31 13:27 - 2013-08-31 14:09 - 00000000 ____D C:\Users\ADMIN.Ace\Desktop\mbar
2013-08-31 13:27 - 2013-08-31 13:27 - 00000000 ____D C:\Users\ADMIN.Ace\Neuer Ordner
2013-08-25 19:59 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-25 19:59 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-25 19:59 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-25 19:59 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-25 19:59 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-25 19:59 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-25 19:59 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-25 19:59 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-25 19:59 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-25 19:59 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-25 19:59 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-25 19:59 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-25 19:59 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-25 19:59 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-25 19:59 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-25 19:59 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-25 19:59 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-25 19:59 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-25 19:59 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-25 19:58 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-25 19:58 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-25 19:58 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-25 19:58 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-25 19:58 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-25 19:58 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-25 19:58 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-25 19:58 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-25 19:58 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-25 19:58 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-25 19:58 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-25 19:58 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-25 17:26 - 2013-08-25 19:46 - 00000000 ____D C:\Windows\system32\MRT
2013-08-25 11:01 - 2013-08-25 11:02 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-25 10:56 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-25 10:56 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-25 10:56 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-25 10:56 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-25 10:56 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-25 10:56 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-25 10:56 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-25 10:56 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-25 10:55 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-25 10:55 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-25 10:55 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-25 10:55 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-25 10:55 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-25 10:55 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-25 10:55 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-25 10:55 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

==================== One Month Modified Files and Folders =======

2013-09-02 20:06 - 2013-09-02 20:05 - 01951954 _____ (Farbar) C:\Users\xxxxxxx\Desktop\FRST64.exe
2013-09-02 20:02 - 2011-01-24 22:26 - 01652979 _____ C:\Windows\WindowsUpdate.log
2013-09-02 19:49 - 2012-09-23 18:09 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-09-02 19:49 - 2012-09-21 09:49 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-02 19:49 - 2012-09-16 20:48 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-01 14:58 - 2010-07-22 23:34 - 00654852 _____ C:\Windows\system32\perfh007.dat
2013-09-01 14:58 - 2010-07-22 23:34 - 00130434 _____ C:\Windows\system32\perfc007.dat
2013-09-01 14:58 - 2009-07-14 07:13 - 01500294 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-01 14:14 - 2012-12-29 16:23 - 00010129 _____ C:\Windows\setupact.log
2013-09-01 12:58 - 2009-07-14 06:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-01 12:58 - 2009-07-14 06:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-01 12:50 - 2012-09-21 09:49 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-01 12:50 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-01 12:49 - 2012-08-23 19:21 - 00000000 ____D C:\Program Files (x86)\Emsisoft Anti-Malware
2013-09-01 12:06 - 2013-09-01 12:06 - 00004983 _____ C:\Users\ADMIN.Ace\Desktop\JRT.txt
2013-09-01 11:53 - 2013-09-01 11:53 - 00000000 ____D C:\Windows\ERUNT
2013-09-01 11:44 - 2013-01-06 01:37 - 00011470 _____ C:\Windows\PFRO.log
2013-09-01 11:43 - 2013-09-01 11:41 - 00000000 ____D C:\AdwCleaner
2013-09-01 11:37 - 2013-09-01 11:37 - 00026915 _____ C:\Users\ADMIN.Ace\Desktop\ComboFix.txt
2013-09-01 11:16 - 2013-09-01 11:16 - 00026914 _____ C:\ComboFix.txt
2013-09-01 11:16 - 2013-09-01 10:24 - 00000000 ____D C:\Qoobox
2013-09-01 11:13 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-09-01 10:20 - 2013-09-01 10:21 - 01027511 _____ (Thisisu) C:\Users\xxxxxxx\Desktop\JRT.exe
2013-09-01 10:20 - 2013-09-01 10:21 - 00994642 _____ C:\Users\xxxxxxx\Desktop\adwcleaner.exe
2013-09-01 10:12 - 2013-09-01 10:14 - 05115930 ____R (Swearware) C:\Users\xxxxxxx\Desktop\ComboFix.exe
2013-08-31 14:19 - 2013-08-31 14:19 - 00000000 ____D C:\FRST
2013-08-31 14:09 - 2013-08-31 13:28 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-08-31 14:09 - 2013-08-31 13:27 - 00000000 ____D C:\Users\ADMIN.Ace\Desktop\mbar
2013-08-31 13:27 - 2013-08-31 13:27 - 00000000 ____D C:\Users\ADMIN.Ace\Neuer Ordner
2013-08-31 13:27 - 2010-10-16 13:59 - 00000000 ____D C:\Users\ADMIN.Ace
2013-08-29 21:44 - 2010-10-16 20:24 - 00000000 ____D C:\Users\xxxxi\AppData\Roaming\Macromedia
2013-08-28 21:10 - 2012-09-16 21:06 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-26 20:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-08-25 19:46 - 2013-08-25 17:26 - 00000000 ____D C:\Windows\system32\MRT
2013-08-25 17:26 - 2010-10-17 14:16 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-25 11:02 - 2013-08-25 11:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

Files to move or delete:
====================
C:\Users\ADMIN.Ace\AppData\Local\Temp\Quarantine.exe
C:\Users\ADMIN.Ace\AppData\Local\Temp\jrt\erunt\ERUNT.EXE
C:\Users\xxxxxxx\AppData\Local\Temp\nst51AF.tmp\FindProcDLL.dll
C:\Users\xxxxxxx\AppData\Local\Temp\nst51AF.tmp\newadvsplash.dll
C:\Users\xxxxxxx\AppData\Local\Temp\nst51AF.tmp\System.dll
C:\Users\xxxxxxx\AppData\Local\Temp\nslA8ED.tmp\FindProcDLL.dll
C:\Users\xxxxxxx\AppData\Local\Temp\nslA8ED.tmp\newadvsplash.dll
C:\Users\xxxxxxx\AppData\Local\Temp\nslA8ED.tmp\System.dll
C:\Users\xxxxxxx\AppData\Local\Temp\jrt\erunt\ERUNT.EXE

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-01 11:35

==================== End Of Log ============================
--- --- ---

--- --- ---


Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-09-2013 05
Ran by ADMIN at 2013-09-02 20:12:50
Running from C:\Users\xxxxxxx\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
Acer 3G Connection Manager (x32 Version: 2.00.3002)
Acer Arcade Deluxe (x32 Version: 4.0.7615)
Acer Arcade Movie (x32 Version: 9.0.6423)
Acer Backup Manager (x32 Version: 2.0.0.60)
Acer Crystal Eye Webcam (x32 Version: 5.2.11.2)
Acer eRecovery Management (x32 Version: 4.05.3011)
Acer GameZone Console (x32 Version: 6.1.0.2)
Acer PowerSmart Manager (x32 Version: 5.02.3003)
Acer Registration (x32 Version: 1.03.3003)
Acer ScreenSaver (x32 Version: 1.1.0119.2010)
Acer Updater (x32 Version: 1.02.3001)
Acer VCM (x32 Version: 4.05.3002)
Acrobat.com (x32 Version: 1.6.65)
Adobe AIR (x32 Version: 3.8.0.870)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Adobe Reader X (10.1.7) - Deutsch (x32 Version: 10.1.7)
Alcor Micro USB Card Reader (x32 Version: 1.2.17.05001)
Amazon MP3-Downloader 1.0.9 (x32)
Amazonia (x32)
AMD APP SDK Runtime (Version: 2.4.595.1)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.23)
ATI Catalyst Install Manager (Version: 3.0.820.0)
Audiograbber 1.83 SE  (x32 Version: 1.83 SE)
avast! Free Antivirus (x32 Version: 8.0.1489.0)
AVerMedia A850 USB DVBT 1.0.64.18 (x32 Version: 1.0.64.18)
AVerTV (x32 Version: 6.0.12)
Backup Manager Basic (x32 Version: 2.0.0.60)
Bonjour (Version: 3.0.0.10)
Cake Mania (x32)
Canon MP Navigator EX 3.0 (x32)
Canon MP550 series Benutzerregistrierung (x32)
Canon MP550 series MP Drivers
Canon Utilities Easy-PhotoPrint EX (x32)
Canon Utilities My Printer (x32)
Canon Utilities Solution Menu (x32)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center (x32 Version: 2011.0613.2238.38801)
Catalyst Control Center InstallProxy (x32 Version: 2010.0421.657.10561)
Catalyst Control Center InstallProxy (x32 Version: 2011.0613.2238.38801)
Catalyst Control Center Localization All (x32 Version: 2011.0613.2238.38801)
Catalyst Control Center Profiles Mobile (x32 Version: 2011.0613.2238.38801)
CCC Help Chinese Standard (x32 Version: 2011.0613.2237.38801)
CCC Help Chinese Traditional (x32 Version: 2011.0613.2237.38801)
CCC Help Czech (x32 Version: 2011.0613.2237.38801)
CCC Help Danish (x32 Version: 2011.0613.2237.38801)
CCC Help Dutch (x32 Version: 2011.0613.2237.38801)
CCC Help English (x32 Version: 2011.0613.2237.38801)
CCC Help Finnish (x32 Version: 2011.0613.2237.38801)
CCC Help French (x32 Version: 2011.0613.2237.38801)
CCC Help German (x32 Version: 2011.0613.2237.38801)
CCC Help Greek (x32 Version: 2011.0613.2237.38801)
CCC Help Hungarian (x32 Version: 2011.0613.2237.38801)
CCC Help Italian (x32 Version: 2011.0613.2237.38801)
CCC Help Japanese (x32 Version: 2011.0613.2237.38801)
CCC Help Korean (x32 Version: 2011.0613.2237.38801)
CCC Help Norwegian (x32 Version: 2011.0613.2237.38801)
CCC Help Polish (x32 Version: 2011.0613.2237.38801)
CCC Help Portuguese (x32 Version: 2011.0613.2237.38801)
CCC Help Russian (x32 Version: 2011.0613.2237.38801)
CCC Help Spanish (x32 Version: 2011.0613.2237.38801)
CCC Help Swedish (x32 Version: 2011.0613.2237.38801)
CCC Help Thai (x32 Version: 2011.0613.2237.38801)
CCC Help Turkish (x32 Version: 2011.0613.2237.38801)
ccc-utility64 (Version: 2011.0613.2238.38801)
CDBurnerXP (Version: 4.3.8.2474)
CDBurnerXP (x32 Version: 4.5.0.3661)
CDex - Open Source Digital Audio CD Extractor (x32 Version: 1.70.4.2009)
Chicken Invaders 2 (x32)
Dairy Dash (x32)
Dream Day First Home (x32)
eaner (Version: 3.22)
eBay Worldwide (x32 Version: 2.1.0901)
Emsisoft Anti-Malware (x32 Version: 6.6)
Eraser 6.0.7.1893 (Version: 6.7.1893)
ESET Online Scanner v3 (x32)
eSobi v2 (x32 Version: 2.0.4.000274)
FairStars CD Ripper 1.50 (x32)
Farm Frenzy 2 (x32)
Free YouTube to MP3 Converter version 3.12.0.128 (x32 Version: 3.12.0.128)
Freecom Network Storage Assistant 1.66 (x32)
FreeOCR v4.2 (x32)
Galapago (x32)
Google Earth Plug-in (x32 Version: 7.1.1.1888)
Google Update Helper (x32 Version: 1.3.21.153)
Granny In Paradise (x32)
Heroes of Hellas (x32)
Hydrogen (x32)
Identity Card (x32 Version: 1.00.3003)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Management Engine Components (x32 Version: 6.0.0.1179)
Intel(R) Rapid Storage Technology (x32 Version: 9.6.0.1014)
Intel(R) Turbo Boost Technology Driver (x32 Version: 01.00.01.1002)
iTunes (Version: 11.0.4.4)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Junk Mail filter update (x32 Version: 14.0.8089.726)
Launch Manager (x32 Version: 4.0.7)
MediaShow Espresso (x32 Version: 5.5.1403_23691)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Choice Guard (x32 Version: 2.0.48.0)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Mozilla Firefox 18.0.1 (x86 de) (x32 Version: 18.0.1)
Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)
Mozilla Maintenance Service (x32 Version: 23.0.1)
Mozilla Thunderbird (3.1.6) (x32 Version: 3.1.6 (de))
Mp3tag v2.46a (x32 Version: v2.46a)
MSVCRT (x32 Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MyWinLocker (x32 Version: 3.1.210.0)
MyWinLocker Suite (x32 Version: 3.1.210.0)
Norton Online Backup (x32 Version: 1.2.0.36)
NTI Backup Now 5 (x32 Version: 5.1.2.628)
NTI Backup Now Standard (x32 Version: 5.1.2.628)
NTI Media Maker 8 (x32 Version: 8.0.12.6630)
OpenOffice.org 3.2 (x32 Version: 3.2.9502)
Optical Drive Power Management (x32 Version: 1.01.3007)
PDFCreator (x32 Version: 1.2.0)
Power Tab Editor 1.7 (x32 Version: 1.7.0)
PSPad editor (x32)
PX Profile Update (x32 Version: 1.00.1.)
QuickTime (x32 Version: 7.74.80.86)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6096)
Rome - Total War (x32 Version: 1.5)
Shredder (Version: 2.0.8.3)
Shredder (x32 Version: 2.0.8.3)
Sibelius Scorch (Firefox, Opera, Netscape only) (x32 Version: 6.2.0)
SimpleOCR 3.1 (x32)
Spin & Win (x32)
Synaptics Pointing Device Driver (Version: 14.0.6.0)
TrueCrypt (x32 Version: 7.0a)
UltraEdit (x32 Version: 17.10.1008)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
VC 9.0 Runtime (x32 Version: 1.0.0)
VLC media player 2.0.4 (Version: 2.0.4)
Welcome Center (x32 Version: 1.01.3002)
WIDCOMM Bluetooth Software (Version: 6.3.0.4300)
Winamp (x32 Version: 5.622 )
Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1)
Windows Live Anmelde-Assistent (x32 Version: 5.000.818.5)
Windows Live Call (x32 Version: 14.0.8064.0206)
Windows Live Communications Platform (x32 Version: 14.0.8064.206)
Windows Live Essentials (x32 Version: 14.0.8089.0726)
Windows Live Essentials (x32 Version: 14.0.8089.726)
Windows Live Fotogalerie (x32 Version: 14.0.8081.709)
Windows Live Mail (x32 Version: 14.0.8089.0726)
Windows Live Messenger (x32 Version: 14.0.8089.0726)
Windows Live Movie Maker (x32 Version: 14.0.8091.0730)
Windows Live Sync (x32 Version: 14.0.8089.726)
Windows Live Writer (x32 Version: 14.0.8089.0726)
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029)
Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8)

==================== Restore Points  =========================

28-07-2013 14:14:02 Removed 7-Zip 4.65 (x64 edition)
29-07-2013 16:44:02 Windows-Sicherung
31-07-2013 17:00:47 Windows Update
25-08-2013 08:52:02 Windows Update
25-08-2013 15:25:57 Windows Update
25-08-2013 17:40:31 Windows-Sicherung
28-08-2013 19:15:44 Windows Update
01-09-2013 08:26:49 ComboFix created restore point
02-09-2013 17:50:49 Windows-Sicherung

==================== Hosts content: ==========================

2009-07-14 04:34 - 2013-09-01 11:13 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => start w32time task_started
Task: {3AB90948-6B64-411C-8F6C-76E925935472} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-09] (AVAST Software)
Task: {5FED9F23-473D-4B82-8A33-66E8E397A2BF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-08-22] (Piriform Ltd)
Task: {7F42897A-DBEE-4478-B31E-CB27C4A24B4E} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => start osppsvc
Task: {85A5E0DB-7165-4387-B7B6-254CCFC3C8A5} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation)
Task: {AEBFC5A1-20D6-4E32-A321-CEFAD77B6C4A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-04-17] (Google Inc.)
Task: {C80AB018-D7B7-4956-82CC-6B6768B334B5} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\System32\sdengin2.dll [2010-11-20] (Microsoft Corporation)
Task: {DEA89DA7-6517-4020-B706-AAEF72A0160C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-04-17] (Google Inc.)
Task: {E705A20D-D574-4ED2-8A79-DBC1ACEC3A86} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-28] (Adobe Systems Incorporated)
Task: {EEE57F91-46AE-4F46-B09D-97D11ED65F6E} - \Scheduled Update for Ask Toolbar No Task File
Task: {EF6CB39C-1906-4618-983B-DDCB130BCF2A} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {F9FD6FA0-38C3-4A3F-927C-5973D56ECB05} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-20] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-05-25 09:42 - 2013-05-09 10:58 - 00302224 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\snxhk64.dll
2012-08-23 19:21 - 2012-08-23 22:39 - 00240304 _____ (Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2hooks64.dll
2010-07-22 13:57 - 2010-04-23 10:46 - 00271904 _____ (Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\SysHook.dll
2010-05-06 14:48 - 2011-06-13 22:22 - 00040448 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll
2013-02-01 21:47 - 2011-06-13 23:04 - 00787968 _____ (ATI Technologies Inc. ) C:\Windows\system32\aticfx64.dll
2010-05-06 14:48 - 2011-06-13 22:46 - 05080576 _____ (ATI Technologies Inc. ) C:\Windows\system32\atidxx64.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00133840 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\ashShA64.dll
2010-04-17 07:58 - 2010-04-17 07:58 - 00137584 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x64\psdprotect.dll
2010-04-17 07:58 - 2010-04-17 07:58 - 00277360 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x64\sysenv.dll
2009-07-14 01:30 - 2009-07-14 03:41 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\WINBRAND.dll
2010-03-26 11:46 - 2010-03-26 11:46 - 00558368 _____ (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btncopy.dll
2009-07-14 02:40 - 2009-07-14 03:41 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll
2009-07-14 02:40 - 2009-07-14 03:41 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll
2011-11-14 19:59 - 2010-11-20 06:27 - 01050624 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll
2011-11-14 19:57 - 2010-11-20 06:27 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2009-07-14 02:31 - 2009-07-14 03:41 - 02137600 _____ (Microsoft Corporation) C:\Windows\System32\NLSData0007.dll
2010-04-02 23:06 - 2010-04-02 23:06 - 00062832 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec Shredder\x64\ShredderContextMenu.dll
2010-04-02 23:06 - 2010-04-02 23:06 - 00321904 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec Shredder\x64\FrameUtility.dll
2010-04-02 23:06 - 2010-04-02 23:06 - 01066864 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec Shredder\x64\LibFrame.dll
2010-05-06 14:37 - 2010-05-06 14:37 - 00179704 _____ (Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.21022.8_none_7644f34b9721eccf\ATL90.DLL
2012-08-23 19:21 - 2012-04-14 14:47 - 00314288 _____ (Emsiûoft GmbH) C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\A2CONTMENU64.DLL
2010-04-10 09:45 - 2010-04-10 09:45 - 00250256 _____ (The Eraser Project) C:\PROGRA~1\Eraser\ERASER~3.DLL
2011-11-06 20:11 - 2011-11-06 20:11 - 05102400 _____ (Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.4148_none_04480933ab2137b1\mfc90u.dll
2011-11-06 20:11 - 2011-11-06 20:11 - 00176456 _____ (Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.4148_none_0a1d2fcba76b3f00\ATL90.DLL
2010-04-17 07:58 - 2010-04-17 07:58 - 00376688 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x64\mwlshellext.dll
2012-06-30 06:19 - 2012-06-30 06:19 - 00097792 _____ (Dropbox, Inc.) C:\Users\xxxxxxx\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
2009-07-14 01:19 - 2009-07-14 03:41 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\msvcp60.dll
2010-05-06 14:48 - 2010-08-25 13:04 - 00243200 _____ (Intel Corporation) C:\Windows\system32\igfxpph.dll
2010-05-06 14:48 - 2010-08-25 13:04 - 00108032 _____ (Intel Corporation) C:\Windows\system32\hccutils.DLL
2013-02-01 21:47 - 2010-08-25 13:05 - 00088064 _____ (Intel Corporation) C:\Windows\system32\igfxrDEU.lrc
2010-05-06 14:48 - 2010-08-25 13:04 - 00061952 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.dll
2011-06-13 23:32 - 2011-06-13 23:32 - 00838144 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll
2011-06-13 23:31 - 2011-06-13 23:31 - 00004608 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiamdeu.dll
2010-05-06 14:08 - 2010-04-22 19:56 - 00149536 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2010-05-06 14:08 - 2010-04-22 19:55 - 02607136 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2010-05-06 14:49 - 2009-09-17 14:09 - 00396072 _____ (Synaptics Incorporated) C:\Windows\system32\SynCOM.dll
2010-05-06 14:49 - 2009-09-17 14:09 - 00205608 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPAPI.dll
2013-07-11 18:24 - 2013-04-24 00:56 - 09991832 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll
2013-07-12 09:21 - 2013-07-12 09:21 - 15577088 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\mscorlib\88744044294787b99dd4a8704ab75a79\mscorlib.ni.dll
2009-07-13 22:37 - 2009-06-10 22:39 - 00085312 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsec.dll
2013-01-09 20:58 - 2012-10-05 12:52 - 01574496 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll
2010-04-10 09:45 - 2010-04-10 09:45 - 00108944 _____ (The Eraser Project) C:\Program Files\Eraser\Eraser.Manager.dll
2013-08-25 21:34 - 2013-08-25 21:34 - 10655744 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\System\af0a0b96a02f9925eb84392ee65a5cfa\System.ni.dll
2013-08-25 21:36 - 2013-08-25 21:36 - 02320384 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\868d117286ad259249f31d3fe813d39a\System.Drawing.ni.dll
2013-08-25 21:36 - 2013-08-25 21:36 - 17383424 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\95674cb72317e3a5380ea450b913786f\System.Windows.Forms.ni.dll
2013-08-26 19:40 - 2013-08-26 19:40 - 02131968 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualBas#\603248adb7974762df07835b282cc90f\Microsoft.VisualBasic.ni.dll
2010-04-10 09:45 - 2010-04-10 09:45 - 00058768 _____ (The Eraser Project) C:\Program Files\Eraser\Eraser.Util.dll
2010-04-10 09:45 - 2010-04-10 09:45 - 00099216 _____ (The Eraser Project) C:\Program Files\Eraser\Plugins\Eraser.DefaultPlugins.dll
2013-08-26 19:39 - 2013-08-26 19:40 - 03315712 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Core\296ad113496c7e97a1689ffef9550b19\System.Core.ni.dll
2010-04-10 09:45 - 2010-04-10 09:45 - 00024976 _____ (The Eraser Project) C:\Program Files\Eraser\en\Eraser.resources.dll
2010-04-10 09:45 - 2010-04-10 09:45 - 00014224 _____ (DELMATIC) C:\Program Files\Eraser\BevelLine.dll
2013-08-25 21:35 - 2013-08-25 21:35 - 06964736 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Xml\3975acf49313ceea1280da91f0383480\System.Xml.ni.dll
2010-04-10 09:45 - 2010-04-10 09:45 - 00017296 _____ (The Eraser Project) C:\Program Files\Eraser\Plugins\en\Eraser.DefaultPlugins.resources.dll
2010-04-10 09:45 - 2010-04-10 09:45 - 00030096 _____ (The Eraser Project) C:\Program Files\Eraser\en\Eraser.Manager.resources.dll
2010-05-06 14:48 - 2010-08-25 13:04 - 00108032 _____ (Intel Corporation) C:\Windows\System32\hccutils.DLL
2013-08-25 19:58 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00136936 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\aswJsFlt64.dll
2013-05-25 09:42 - 2013-05-09 11:02 - 00208536 _____ (AVAST Software) C:\PROGRA~1\AVASTS~1\Avast\AavmRpch64.dll
2013-02-27 22:41 - 2013-01-13 21:51 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\D3D10Warp.dll
2009-07-14 02:00 - 2009-07-14 03:41 - 00283648 _____ (Microsoft Corporation) C:\Windows\System32\LocationApi.dll
2009-07-14 02:00 - 2009-07-14 03:41 - 00174592 _____ (Microsoft Corporation) C:\Windows\System32\SensorsApi.dll
2009-07-14 01:28 - 2009-07-14 03:41 - 00271360 _____ (Microsoft Corporation) C:\Windows\System32\WDSCORE.dll
2013-05-31 09:52 - 2013-05-31 09:52 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2010-05-06 14:48 - 2011-06-13 22:22 - 00038912 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2010-05-06 14:48 - 2011-06-13 22:40 - 03420672 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2009-07-14 01:56 - 2009-07-14 03:41 - 00163328 _____ (Microsoft Corporation) C:\Program Files\Windows Sidebar\wlsrvc.dll
2011-08-31 00:05 - 2011-08-31 00:05 - 00132968 _____ (Apple Inc.) C:\Program Files\Bonjour\mdnsNSP.dll
2010-05-06 14:48 - 2010-03-08 13:07 - 00457296 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDUtl.dll
2010-07-22 13:57 - 2010-04-23 10:46 - 00218144 _____ (Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\PowerSettingControl.dll
2010-07-22 13:57 - 2010-04-23 10:46 - 00217120 _____ (Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\CommonControl.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00095744 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.Implementation.dll
2011-06-13 23:32 - 2011-06-13 23:32 - 00021504 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\LOG.Foundation.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00024576 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\LOG.Foundation.Private.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00055296 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\LOG.Foundation.Implementation.dll
2011-11-15 22:03 - 2010-11-13 02:08 - 00315392 _____ (Microsoft Corporation) C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00005632 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.Foundation.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\LOG.Foundation.Implementation.Private.dll
2013-08-25 21:38 - 2013-08-25 21:38 - 01022976 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Remo#\bda1d99ab089bb2f18a48ba06d5a4923\System.Runtime.Remoting.ni.dll
2013-08-25 21:38 - 2013-08-25 21:38 - 15270912 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web\c804ef4dba76d2aa3db8d22ec5fbf4e0\System.Web.ni.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00021504 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.Implementation.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00015360 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\NEWAEM.Foundation.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00061440 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Foundation.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00018432 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Foundation.XManifest.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00057344 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Runtime.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00037376 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Runtime.Shared.Private.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00029184 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Foundation.Private.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00005632 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Runtime.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00032768 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\ATICCCom.dll
2011-03-01 05:24 - 2011-03-01 05:24 - 00081920 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\ADL.Foundation.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00034816 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Server.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00006144 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Server.Shared.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00042496 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.Source.Kit.Server.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00006656 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.DPPE.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00007168 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.Hotkeys.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00006656 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.WinMessages.Shared.dll
2009-04-22 13:13 - 2009-04-22 13:13 - 00045056 _____ (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0601.dll
2010-03-04 01:27 - 2010-03-04 01:27 - 00016384 _____ (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Foundation.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00006144 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.dll
2013-02-01 21:47 - 2011-06-13 23:01 - 00462848 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ATIDEMGX.dll
2010-10-07 14:07 - 2010-10-07 14:07 - 00020480 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I1010.dll
2013-08-25 21:35 - 2013-08-25 21:35 - 01320448 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Configuration\1031b311ee568364d4ca1c4db634eaf0\System.Configuration.ni.dll
2013-02-01 21:47 - 2011-06-13 22:59 - 00423424 _____ (ATI Technologies, Inc.) C:\Windows\system32\atipdl64.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00005632 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.REG.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00290816 _____ (Advanced Mirco Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Runtime.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00167936 _____ (Advanced Mirco Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Shared.dll
2009-06-17 06:27 - 2009-06-17 06:27 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0709.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00005632 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.GD.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00008704 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Actions.CCAA.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00008704 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\ResourceManagement.Foundation.Private.dll
2008-04-03 17:29 - 2008-04-03 17:29 - 00020480 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0804.dll
2013-08-25 21:35 - 2013-08-25 21:35 - 04962816 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\WindowsBase\748e7e6853a66fddc80848051c076801\WindowsBase.ni.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00025088 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00045056 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00065536 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll
2011-06-13 23:37 - 2011-06-13 23:37 - 00240128 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Combined.Graphics.Aspects2.Runtime.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00008704 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Runtime.Shared.Private.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00032768 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceLCD.Graphics.Shared.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00035840 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00077824 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.Radeon3D.Graphics.Runtime.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00053248 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceDFP.Graphics.Shared.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00013824 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.TransCode.Graphics.Runtime.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00098304 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.MMVideo.Graphics.Runtime.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00018432 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.PowerPlayDPPE.Graphics.Shared.dll
2011-06-13 23:37 - 2011-06-13 23:37 - 00013312 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.AMDHome.Graphics.Runtime.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00046592 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.PowerXpress.Graphics.Runtime.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CustomFormats.Graphics.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceCV.Graphics.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00053248 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceCRT.Graphics.shared.dll
2011-06-13 23:37 - 2011-06-13 23:37 - 00032768 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.UpdateNotification.Graphics.Runtime.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysOptions.Graphics.shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00045056 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.TransCode.Graphics.shared.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00065536 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.Radeon3D.Graphics.Shared.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00026112 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.PowerXpress.Graphics.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00065536 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceTV.Graphics.shared.dll
2011-06-13 23:37 - 2011-06-13 23:37 - 00010240 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.AMDHome.Graphics.shared.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00065536 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.MMVideo.Graphics.Shared.dll
2011-06-13 23:37 - 2011-06-13 23:37 - 00012288 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.UpdateNotification.Graphics.Shared.dll
2009-06-17 11:24 - 2009-06-17 11:24 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0906.dll
2009-12-08 07:49 - 2009-12-08 07:49 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0912.dll
2007-08-09 17:58 - 2007-08-09 17:58 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0706.dll
2009-06-17 11:24 - 2009-06-17 11:24 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0712.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceProperty.Graphics.Shared.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll
2008-12-30 12:04 - 2008-12-30 12:04 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0812.dll
2009-04-22 13:13 - 2009-04-22 13:13 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0805.dll
2010-11-05 15:18 - 2010-11-05 15:18 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I1011.dll
2009-04-22 13:13 - 2009-04-22 13:13 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0702.dll
2007-10-29 15:56 - 2007-10-29 15:56 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0710.dll
2009-01-20 15:36 - 2009-01-20 15:36 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0901.dll
2009-01-20 14:51 - 2009-01-20 14:51 - 00007168 _____ ( ) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atixclib.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00011776 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.HydraVision.Runtime.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00008704 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.HydraVision.Shared.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00019968 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Fuel.Runtime.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00010752 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Fuel.Shared.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00012800 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\Fuel.Foundation.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00065536 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\APM.Server.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00024576 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\APM.Foundation.dll
2011-11-15 22:03 - 2010-11-13 02:08 - 00434176 _____ (Microsoft Corporation) C:\Windows\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_de_b77a5c561934e089\System.Windows.Forms.resources.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00007168 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Runtime.Extension.EEU.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00389120 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Dashboard.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00005632 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.EEU.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00036352 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Client.Shared.Private.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00007680 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Client.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00032768 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Dashboard.Shared.dll
2013-08-25 21:36 - 2013-08-25 21:36 - 16543232 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\e6cc4a60a4cf6ac9bc6198ec2989c05b\PresentationCore.ni.dll
2013-08-25 21:37 - 2013-08-25 21:37 - 19197952 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\7a2f065f242923c2d898f451fa70986a\PresentationFramework.ni.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 01199616 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Dashboard.Shared.Private.dll
2012-05-19 10:40 - 2012-02-11 01:29 - 02256152 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\wpfgfx_v0300.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00131072 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Dashboard.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00966656 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Dashboard.Shared.dll
2011-06-13 23:37 - 2011-06-13 23:37 - 00026624 _____ (Advanced Mirco Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.AMDHome.Graphics.Dashboard.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00188416 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll
2011-06-13 23:36 - 2011-06-13 23:36 - 00252928 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysManager2.Graphics.Dashboard.dll
2011-06-13 23:36 - 2011-06-13 23:36 - 00372224 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysManager.Graphics.Dashboard.dll
2011-06-13 23:36 - 2011-06-13 23:36 - 00243712 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00032768 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll
2011-06-13 23:36 - 2011-06-13 23:36 - 00380928 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceCRT.Graphics.Dashboard.dll
2011-06-13 23:37 - 2011-06-13 23:37 - 02452992 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Combined.Graphics.Aspects2.Dashboard.dll
2011-06-13 23:36 - 2011-06-13 23:36 - 00389120 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceDFP.Graphics.Dashboard.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00372736 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll
2011-06-13 23:36 - 2011-06-13 23:36 - 00456192 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00831488 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.MMVideo.Graphics.Dashboard.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00159744 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.TransCode.Graphics.Dashboard.dll
2011-06-13 23:36 - 2011-06-13 23:36 - 00096768 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard.dll
2011-06-13 23:36 - 2011-06-13 23:36 - 00264704 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.PowerXpress.Graphics.Dashboard.dll
2011-06-13 23:36 - 2011-06-13 23:36 - 00035840 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossFireX.Graphics.Dashboard.dll
2011-06-13 23:37 - 2011-06-13 23:37 - 00019968 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.UpdateNotification.Graphics.Dashboard.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00008192 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.HydraVision.Dashboard.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00008704 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Fuel.Dashboard.dll
2011-06-13 23:32 - 2011-06-13 23:32 - 00236032 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\Localization.Foundation.Private.dll
2011-06-13 23:32 - 2011-06-13 23:32 - 00167936 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\Localization.Foundation.Implementation.de_Localization.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00258048 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Foundation.Client.dll
2013-07-12 09:24 - 2013-07-12 09:24 - 00463360 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\a36a8b8c22201786fb956a20db8b8b65\PresentationFramework.Aero.ni.dll
2010-07-22 23:33 - 2010-07-22 23:33 - 00249856 _____ (Microsoft Corporation) C:\Windows\assembly\GAC_MSIL\PresentationFramework.resources\3.0.0.0_de_31bf3856ad364e35\PresentationFramework.resources.dll
2011-11-14 20:08 - 2010-11-04 18:58 - 00212992 _____ (Microsoft Corporation) C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_de_b77a5c561934e089\System.resources.dll
2011-03-14 15:21 - 2011-03-14 15:21 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00060416 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Dashboard.ProfileManager2.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00168960 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\ResourceManagement.Foundation.Implementation.dll
2013-08-26 19:42 - 2013-08-26 19:42 - 00329216 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\WindowsFormsIntegra#\956d0065f5ddaa3d150c5df023f14ef8\WindowsFormsIntegration.ni.dll
2009-07-14 03:01 - 2009-06-10 22:31 - 01165664 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll
2009-07-14 01:39 - 2009-07-14 03:41 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\msctfui.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00524288 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceProperty.Graphics.Dashboard.Shared.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard.Shared.Private.dll
2009-07-14 01:19 - 2009-07-14 03:41 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\pcwum.dll
2011-11-14 19:58 - 2010-11-20 06:26 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2009-07-14 02:17 - 2009-07-14 03:41 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\UTILDLL.dll
2011-11-14 19:58 - 2010-11-20 06:26 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\LOGONCLI.DLL
2012-08-16 21:22 - 2012-07-05 00:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\BROWCLI.DLL
2013-05-25 09:42 - 2013-05-09 10:58 - 00246592 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\snxhk.dll
2010-04-17 07:56 - 2010-04-17 07:56 - 00267632 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\sysenv.dll
2008-11-12 03:16 - 2008-11-12 03:16 - 00133680 _____ (Microsoft Corporation) C:\Program Files (x86)\EgisTec MyWinLocker\x86\XmlLite.dll
2010-04-17 07:55 - 2010-04-17 07:55 - 00254320 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\ADMIN_CLASS_LIB.dll
2008-11-12 03:16 - 2008-11-12 03:16 - 00268848 _____ (EgisTec Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\keyManager.dll
2010-04-17 07:55 - 2010-04-17 07:55 - 00529776 _____ (EgisTec Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\CryptoAPI.dll
2010-04-17 07:55 - 2010-04-17 07:55 - 00177008 _____ (Egis Technology Inc.  ) C:\Program Files (x86)\EgisTec MyWinLocker\x86\PSDUtil.dll
2010-04-17 07:55 - 2010-04-17 07:55 - 00091504 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlOP.dll
2010-04-17 07:55 - 2010-04-17 07:55 - 00120176 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\ShowErrMsg.dll
2010-04-17 07:55 - 2010-04-17 07:55 - 00034160 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlRecordUI.dll
2011-08-30 13:55 - 2011-08-30 13:55 - 00065536 _____ (Microsoft Corporation) C:\Windows\WinSxS\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_03ce2c72205943d3\MFC80DEU.DLL
2012-08-23 19:21 - 2012-08-23 22:39 - 00196544 _____ (Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2hooks32.dll
2010-04-17 07:55 - 2010-04-17 07:55 - 00144752 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlUI.DLL
2010-04-17 07:55 - 2010-04-17 07:55 - 00529776 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\GDIExtendCtrl.dll
2010-04-17 07:56 - 2010-04-17 07:56 - 00029040 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\SYSTrayUI.dll
2011-11-14 19:57 - 2010-11-20 05:16 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax
2009-07-14 01:51 - 2009-07-14 03:14 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vidcap.ax
2011-11-14 19:59 - 2010-11-20 05:16 - 00107008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kswdmcap.ax
2011-04-23 09:50 - 2011-03-11 07:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFC42.dll
2011-11-14 19:58 - 2010-11-20 05:20 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ODBC32.dll
2009-07-14 02:11 - 2009-07-14 03:09 - 00229376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcint.dll
2013-07-11 18:24 - 2013-04-24 00:57 - 05932696 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
2013-07-12 09:19 - 2013-07-12 09:19 - 11499520 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\9a6c1b7af18b4d5a91dc7f8d6617522f\mscorlib.ni.dll
2013-01-09 20:58 - 2012-10-05 12:53 - 00364656 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
2013-08-25 21:39 - 2013-08-25 21:39 - 07989760 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\System\5d22a30e587e2cac106b81fb351e7c08\System.ni.dll
2013-08-25 22:51 - 2013-08-25 22:51 - 00452608 _____ (Intel Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\25c2aff138f60662bd3c4827c0a13a73\IAStorUtil.ni.dll
2013-08-25 21:39 - 2013-08-25 21:39 - 01593344 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5aa44bce7933e4de09d935848f868a4b\System.Drawing.ni.dll
2013-08-25 21:39 - 2013-08-25 21:39 - 12436480 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\28ea347a952d20959ac6ae02d7457d39\System.Windows.Forms.ni.dll
2013-08-25 21:39 - 2013-08-25 21:39 - 00978432 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\8f7d83126a3cf283e5ac97f2d6d99f12\System.Configuration.ni.dll
2013-08-25 21:39 - 2013-08-25 21:39 - 05464064 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\09db78d6068543df01862a023aca785a\System.Xml.ni.dll
2010-05-06 14:05 - 2010-03-04 05:09 - 00032768 _____ (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\de-DE\IAStorIcon.resources.dll
2010-05-06 14:05 - 2010-03-04 05:08 - 01046528 _____ (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IntelVisualDesign.dll
2010-05-06 14:05 - 2010-03-04 05:09 - 00004608 _____ (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\de-DE\IntelVisualDesign.resources.dll
2013-08-25 21:40 - 2013-08-25 21:40 - 00771584 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\dd8f4efb7e81c75fe444a180f6f1aacf\System.Runtime.Remoting.ni.dll
2010-07-22 23:32 - 2010-07-22 23:32 - 00032768 _____ (Microsoft Corporation) C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_de_b77a5c561934e089\System.Runtime.Remoting.resources.dll
2011-11-14 19:58 - 2010-11-04 18:57 - 00572760 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
2013-08-25 21:39 - 2013-08-25 21:39 - 03348480 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\7a14ef318277377516a89c89fc4d9a05\WindowsBase.ni.dll
2010-05-06 14:05 - 2010-03-04 05:08 - 00163328 _____ (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorUIHelper.dll
2010-05-06 14:48 - 2009-07-20 09:12 - 00137736 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\ComFnUtl.dll
2010-05-06 14:48 - 2009-07-14 08:53 - 00128008 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\CDRomUtl.dll
2010-05-06 14:48 - 2009-07-27 06:42 - 00062472 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MixerUtl.dll
2010-05-06 14:48 - 2009-07-27 06:47 - 00068104 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\Wnd2File.dll
2010-05-06 14:48 - 2009-07-27 12:43 - 00068104 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\PowerUtl.dll
2010-05-06 14:48 - 2009-12-30 11:13 - 00326736 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\OSDUtl2.dll
2010-05-06 14:48 - 2009-07-27 06:38 - 00088584 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\SzUPFUtl.dll
2010-05-06 14:48 - 2010-03-01 10:43 - 00351312 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\RadioWndUtl.dll
2010-05-06 14:48 - 2009-07-03 10:29 - 00147464 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\VistaVol.DLL
2010-05-06 14:48 - 2009-05-20 08:02 - 00072200 _____ () C:\Program Files (x86)\Launch Manager\CdDirIo.dll
2010-05-06 14:48 - 2010-02-10 03:49 - 00082000 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LmSmbKel.dll
2010-05-06 14:48 - 2010-03-03 15:21 - 00280656 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\aipflib.dll
2011-08-30 14:18 - 2011-08-30 14:18 - 03766600 _____ (Microsoft Corporation) C:\Windows\WinSxS\x86_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_4bf7e3e2bf9ada4c\mfc90.dll
2011-08-30 14:18 - 2011-08-30 14:18 - 00063312 _____ (Microsoft Corporation) C:\Windows\WinSxS\x86_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_49768ef57548175e\MFC90DEU.DLL
2011-08-31 00:05 - 2011-08-31 00:05 - 00121704 _____ (Apple Inc.) C:\Program Files (x86)\Bonjour\mdnsNSP.dll
2011-08-30 14:18 - 2011-08-30 14:18 - 03781960 _____ (Microsoft Corporation) C:\Windows\WinSxS\x86_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_4bf7e3e2bf9ada4c\mfc90u.dll
2010-03-09 02:18 - 2010-03-09 02:18 - 00465576 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll
2010-03-09 02:14 - 2010-03-09 02:14 - 00018688 _____ (NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\MUI\0407\lang.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00038032 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\aswUtil.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00943408 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\ashBase.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00051952 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\aswEngLdr.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00116848 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\aswCmnOS.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00206440 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\aswCmnIS.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00380528 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\aswCmnBS.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00156512 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\ashTask.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00682824 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\aswAux.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00073064 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\avastIP.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00260536 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\aswProperty.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00149272 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\AavmRpch.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00226552 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\aswLog.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00476800 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\aswSqLt.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00065848 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\1031\Base.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 02105248 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\aswAra.dll
2013-05-25 09:42 - 2013-04-02 15:14 - 00265216 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Program Files\AVAST Software\Avast\SSLEAY32.dll
2013-05-25 09:42 - 2013-04-02 15:14 - 01169408 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Program Files\AVAST Software\Avast\LIBEAY32.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00206976 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\aswData.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00062752 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\ashTaskEx.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00902720 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\Aavm4h.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00277528 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\1031\UILangRes.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 06449776 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\CommonRes.dll
2013-09-02 19:51 - 2013-08-19 15:26 - 00042688 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\defs\13090200\uiExt.dll
2009-07-14 02:07 - 2009-07-14 03:14 - 00064000 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\SysWOW64\l3codeca.acm
2010-03-11 07:11 - 2010-03-11 07:11 - 00068976 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\KernelController.dll
2010-03-11 07:11 - 2010-03-11 07:11 - 00788848 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\LiveUpdateUI.dll
2010-03-11 07:11 - 2010-03-11 07:11 - 00068976 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\LicenseCenter.dll
2010-03-11 07:12 - 2010-03-11 07:12 - 00072560 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\UpdateModel.dll
2013-05-31 11:56 - 2013-05-31 11:56 - 00148808 _____ (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.dll
2012-11-28 15:13 - 2012-11-28 15:13 - 01079184 _____ (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\CoreFoundation.dll
2011-11-02 00:26 - 2011-11-02 00:26 - 00053608 _____ (Open Source Software community project) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\pthreadVC2.dll
2012-11-28 15:13 - 2012-11-28 15:13 - 00124816 _____ (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\objc.dll
2012-11-28 15:13 - 2012-11-28 15:13 - 00043408 _____ (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libdispatch.dll
2011-11-02 00:26 - 2011-11-02 00:26 - 01292136 _____ (The ICU Project) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libicuin.dll
2011-11-02 00:26 - 2011-11-02 00:26 - 00923496 _____ (The ICU Project) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libicuuc.dll
2011-11-02 00:26 - 2011-11-02 00:26 - 16303976 _____ (The ICU Project) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\icudt46.dll
2012-11-28 15:13 - 2012-11-28 15:13 - 00075664 _____ (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\ASL.dll
2013-05-31 12:39 - 2013-05-31 12:39 - 00041800 _____ (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.Resources\de.lproj\iTunesHelperLocalized.DLL
2013-05-31 11:56 - 2013-05-31 11:56 - 00040264 _____ (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.Resources\iTunesHelper.DLL
2012-12-21 16:27 - 2012-12-21 16:27 - 01449648 _____ (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\iTunesMobileDevice.dll
2011-11-02 00:26 - 2011-11-02 00:26 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2013-04-21 21:43 - 2013-04-21 21:43 - 02464072 _____ (Apple, Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\CFNetwork.dll
2011-11-02 00:26 - 2011-11-02 00:26 - 00456552 _____ (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\SQLite3.dll
2011-11-02 00:26 - 2011-11-02 00:26 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2011-08-31 00:05 - 2011-08-31 00:05 - 00085864 _____ (Apple Inc.) C:\Windows\system32\dnssd.dll
2010-05-06 14:48 - 2010-02-03 06:31 - 00071248 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\NTKCUtl.dll
2010-10-16 15:06 - 2010-11-14 17:57 - 00848048 _____ () C:\Program Files (x86)\Mozilla Thunderbird\js3250.dll
2010-10-16 15:06 - 2010-11-14 17:57 - 00174256 _____ (Mozilla Foundation) C:\Program Files (x86)\Mozilla Thunderbird\nspr4.dll
2010-10-16 15:06 - 2010-11-14 17:57 - 00719024 _____ (Mozilla Foundation) C:\Program Files (x86)\Mozilla Thunderbird\MOZCRT19.dll
2010-10-16 15:06 - 2010-11-14 17:57 - 00409776 _____ (Mozilla Foundation) C:\Program Files (x86)\Mozilla Thunderbird\xpcom_core.dll
2010-10-16 15:06 - 2010-11-14 17:57 - 00021168 _____ (Mozilla Foundation) C:\Program Files (x86)\Mozilla Thunderbird\plc4.dll
2010-10-16 15:06 - 2010-11-14 17:57 - 00018096 _____ (Mozilla Foundation) C:\Program Files (x86)\Mozilla Thunderbird\plds4.dll
2010-10-16 15:06 - 2010-11-14 17:57 - 00104624 _____ (Mozilla Foundation) C:\Program Files (x86)\Mozilla Thunderbird\smime3.dll
2010-10-16 15:06 - 2010-11-14 17:57 - 00088240 _____ (Mozilla Foundation) C:\Program Files (x86)\Mozilla Thunderbird\nssutil3.dll
2010-10-16 15:06 - 2010-11-14 17:57 - 00141488 _____ (Mozilla Foundation) C:\Program Files (x86)\Mozilla Thunderbird\ssl3.dll
2010-10-16 15:06 - 2010-11-14 17:57 - 00161968 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2010-10-16 15:06 - 2010-11-14 17:57 - 00021680 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll
2010-10-16 15:06 - 2010-11-14 17:57 - 00491696 _____ (sqlite.org) C:\Program Files (x86)\Mozilla Thunderbird\sqlite3.dll
2010-10-16 15:06 - 2010-11-14 17:57 - 00719024 _____ (Mozilla Foundation) C:\Program Files (x86)\Mozilla Thunderbird\MOZCPP19.dll
2011-11-14 19:57 - 2010-11-20 06:27 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll
2011-11-14 19:59 - 2010-11-20 06:27 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2010-04-17 07:55 - 2010-04-17 07:55 - 00120176 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\psdprotect.dll
2013-09-01 17:43 - 2013-09-01 17:43 - 00008704 _____ () C:\Users\xxxxxxx\AppData\Local\Temp\nst51AF.tmp\newadvsplash.dll
2011-11-14 19:59 - 2010-11-20 06:25 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2013-08-25 11:01 - 2013-08-25 11:02 - 03551640 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00134888 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\aswJsFlt.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00380528 _____ (AVAST Software) C:\PROGRA~1\AVASTS~1\Avast\aswCmnBS.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00116848 _____ (AVAST Software) C:\PROGRA~1\AVASTS~1\Avast\aswCmnOS.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00206440 _____ (AVAST Software) C:\PROGRA~1\AVASTS~1\Avast\aswCmnIS.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00902720 _____ (AVAST Software) C:\PROGRA~1\AVASTS~1\Avast\Aavm4h.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00149272 _____ (AVAST Software) C:\PROGRA~1\AVASTS~1\Avast\AavmRpch.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00943408 _____ (AVAST Software) C:\PROGRA~1\AVASTS~1\Avast\ashBase.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00051952 _____ (AVAST Software) C:\PROGRA~1\AVASTS~1\Avast\aswEngLdr.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00156512 _____ (AVAST Software) C:\PROGRA~1\AVASTS~1\Avast\ashTask.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00682824 _____ (AVAST Software) C:\PROGRA~1\AVASTS~1\Avast\aswAux.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00260536 _____ (AVAST Software) C:\PROGRA~1\AVASTS~1\Avast\aswProperty.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00073064 _____ (AVAST Software) C:\PROGRA~1\AVASTS~1\Avast\avastIP.dll

==================== Alternate Data Streams (whitelisted) ==========



==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (09/01/2013 00:51:56 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: ePowerTray.exe, Version: 5.2.3003.0, Zeitstempel: 0x4bd10412
Name des fehlerhaften Moduls: ePowerTray.exe, Version: 5.2.3003.0, Zeitstempel: 0x4bd10412
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000163d5
ID des fehlerhaften Prozesses: 0x1594
Startzeit der fehlerhaften Anwendung: 0xePowerTray.exe0
Pfad der fehlerhaften Anwendung: ePowerTray.exe1
Pfad des fehlerhaften Moduls: ePowerTray.exe2
Berichtskennung: ePowerTray.exe3

Error: (09/01/2013 00:33:40 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: ePowerTray.exe, Version: 5.2.3003.0, Zeitstempel: 0x4bd10412
Name des fehlerhaften Moduls: ePowerTray.exe, Version: 5.2.3003.0, Zeitstempel: 0x4bd10412
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000163d5
ID des fehlerhaften Prozesses: 0x1b90
Startzeit der fehlerhaften Anwendung: 0xePowerTray.exe0
Pfad der fehlerhaften Anwendung: ePowerTray.exe1
Pfad des fehlerhaften Moduls: ePowerTray.exe2
Berichtskennung: ePowerTray.exe3

Error: (09/01/2013 00:22:46 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: ePowerTray.exe, Version: 5.2.3003.0, Zeitstempel: 0x4bd10412
Name des fehlerhaften Moduls: ePowerTray.exe, Version: 5.2.3003.0, Zeitstempel: 0x4bd10412
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000163d5
ID des fehlerhaften Prozesses: 0x1424
Startzeit der fehlerhaften Anwendung: 0xePowerTray.exe0
Pfad der fehlerhaften Anwendung: ePowerTray.exe1
Pfad des fehlerhaften Moduls: ePowerTray.exe2
Berichtskennung: ePowerTray.exe3


System errors:
=============
Error: (09/01/2013 02:56:17 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR7 gefunden.

Error: (09/01/2013 02:56:16 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR7 gefunden.

Error: (09/01/2013 02:56:13 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR7 gefunden.

Error: (09/01/2013 02:55:36 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR6 gefunden.

Error: (09/01/2013 02:55:33 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR6 gefunden.

Error: (09/01/2013 00:49:11 PM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (09/01/2013 00:19:34 PM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}


Microsoft Office Sessions:
=========================
Error: (09/01/2013 00:51:56 PM) (Source: Application Error)(User: )
Description: ePowerTray.exe5.2.3003.04bd10412ePowerTray.exe5.2.3003.04bd10412c000000500000000000163d5159401cea70141a427d6C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exeC:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe84ba3aa7-12f4-11e3-8cff-001e101f9843

Error: (09/01/2013 00:33:40 PM) (Source: Application Error)(User: )
Description: ePowerTray.exe5.2.3003.04bd10412ePowerTray.exe5.2.3003.04bd10412c000000500000000000163d51b9001cea6feaaee1dd5C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exeC:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exef6fa8947-12f1-11e3-ac75-001e101fabdd

Error: (09/01/2013 00:22:46 PM) (Source: Application Error)(User: )
Description: ePowerTray.exe5.2.3003.04bd10412ePowerTray.exe5.2.3003.04bd10412c000000500000000000163d5142401cea6fd3146cb01C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exeC:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe7124516c-12f0-11e3-ac75-001e101fabdd


CodeIntegrity Errors:
===================================
  Date: 2013-09-01 11:12:58.818
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-01 11:12:58.537
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-09 16:42:12.838
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-09 16:42:12.678
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-09 16:42:12.458
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-09 16:42:12.245
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-09 16:39:15.520
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-09 16:39:04.897
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-09 16:39:04.737
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-09 16:39:04.527
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 44%
Total physical RAM: 3766.69 MB
Available physical RAM: 2081.32 MB
Total Pagefile: 7531.56 MB
Available Pagefile: 5152.66 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:292.1 GB) (Free:227.09 GB) NTFS
Drive e: (Daten) (Fixed) (Total:290.97 GB) (Free:80.52 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596 GB) (Disk ID: 2C0EAF26)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=292 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=291 GB) - (Type=OF Extended)

==================== End Of Log ============================
Rest ist in Arbeit....
Geändert von Pechvogel44 (02.09.2013 um 19:35 Uhr)

Alt 02.09.2013, 19:48   #9
M-K-D-B
/// TB-Ausbilder
 
DuckDuckGo läßt sich nicht enfernen - Standard

DuckDuckGo läßt sich nicht enfernen


Servus,


Zitat:
Zitat von Pechvogel44 Beitrag anzeigen
Rest ist in Arbeit....
Ok.

Alt 02.09.2013, 20:10   #10
Pechvogel44
 
DuckDuckGo läßt sich nicht enfernen - Standard

DuckDuckGo läßt sich nicht enfernen


Zitat:
Zitat von M-K-D-B Beitrag anzeigen
Servus,



Ok.
Hallo Mathias,

und weiter geht's:

Code:
ATTFilter
SystemLook 30.07.11 by jpshortstuff
Log created at 21:14 on 02/09/2013 by ADMIN
Administrator - Elevation successful

========== filefind ==========

Searching for "*Ask.com*"
No files found.

Searching for "*Ask Toolbar*"
C:\AdwCleaner\Quarantine\C\Windows\System32\Tasks\Scheduled Update for Ask Toolbar.vir	--a---- 3808 bytes	[18:53 16/09/2012]	[21:56 07/02/2013] CBFD53DFDC6AE7B4F90AD0CC6F353BF8

Searching for "*Ask Search*"
No files found.

Searching for "*SoftonicDownloader*"
No files found.

Searching for "*Conduit*"
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\iSyncConduit.dll	--a---- 1207392 bytes	[10:43 06/12/2012]	[10:43 06/12/2012] C963B2DECF0872C4A79D4E5E97062E8C
C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wuxxxxx.defaultx\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\components\ConduitAutoCompleteSearch.xpt	--a---- 166 bytes	[20:38 20/12/2010]	[20:38 20/12/2010] 806EA6CC4DCBF88A20AA3331BCDC9918
C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wuxxxxx.defaultx\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\components\ConduitToolbar.idl	--a---- 148 bytes	[20:38 20/12/2010]	[20:38 20/12/2010] 0A9AAEB4839D78CB03740D8A8EF0D863
C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wuxxxxx.defaultx\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\components\ConduitToolbar.xpt	--a---- 136 bytes	[20:38 20/12/2010]	[20:38 20/12/2010] 4822F1CBA7EE2F77496FDCE234D32C20
C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wuxxxxx.defaultx\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\searchplugin\conduit.gif	--a---- 173 bytes	[20:38 20/12/2010]	[20:38 20/12/2010] 225B6898AE7D6E0CE88B3FE57BD750F2
C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wuxxxxx.defaultx\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\searchplugin\conduit.PNG	--a---- 255 bytes	[20:38 20/12/2010]	[20:38 20/12/2010] AF3A51D0B8D6F04EE33307A654560DBE
C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wuxxxxx.defaultx\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\searchplugin\conduit.xml	--a---- 931 bytes	[20:38 20/12/2010]	[20:38 20/12/2010] 27321E5730943A3A73EA8699E9EBB540
C:\Users\AppData\LocalLow\Conduit\Community Alerts\Feeds\http___alerts_conduit-services_com_root_666138_661999_DE.xml	--a---- 182 bytes	[20:38 20/12/2010]	[20:38 20/12/2010] 09537830AF4F5ED99783297FA09DC218
C:\Users\xxxxxxx\AppData\LocalLow\Conduit\Community Alerts\Feeds\http___alerts_conduit-services_com_root_1006347_1002062_DE.xml	--a---- 184 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 97113968FFCE93788CE025CD390A27C1
C:\Users\xxxxxxx\AppData\LocalLow\Conduit\Community Alerts\Feeds\http___alerts_conduit-services_com_root_666138_661999_DE.xml	--a---- 182 bytes	[14:15 26/12/2010]	[14:15 26/12/2010] 09537830AF4F5ED99783297FA09DC218
C:\Users\xxxxxxx\AppData\LocalLow\Conduit\Toolbar\Facebook\http___facebook_conduit-services_com_Settings_ashx_locale=de-de&browserType=IE&toolbarVersion=5_5_3_2.xml	--a---- 11092 bytes	[12:14 14/01/2011]	[18:12 02/04/2011] DFE1156D289BCE111E7C1EEA48E3EC78
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634062498888125000_png.png	--a---- 509 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 40ECBDFF6DF6593ACDEAD0021DCC7336
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634062499232812500_png.png	--a---- 670 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] D9CE725CB6F7C294C96BDF01D653A8D5
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634072035335451250_png.png	--a---- 623 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 0A4D5304331171BE0EBAA12DB0706726
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634084042422158750_png.png	--a---- 1255 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 9E8DF6405FF11276857592FE66436A9E
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634084971246361250_png.png	--a---- 1526 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 7BA55E9BB92E4627EA667C7E8787B35C
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_b7889fd7-df2c-48c3-bd9e-8456e2016654Rss-rss01x16blue_gif-rss16Images-633988161463742500_gif.gif	--a---- 427 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] DE38BD848E7E916050B57C8FF00C9D80
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_b7889fd7-df2c-48c3-bd9e-8456e2016654Rss-rss01x16blue_gif-rss16Images-633988162125930000_gif.gif	--a---- 427 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] DE38BD848E7E916050B57C8FF00C9D80
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_b7889fd7-df2c-48c3-bd9e-8456e2016654Rss-rss01x16green_gif-rss16Images-633988159593125000_gif.gif	--a---- 428 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] FC707EC713D600572DE988236BDD3A84
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_b7889fd7-df2c-48c3-bd9e-8456e2016654Rss-rss01x16green_gif-rss16Images-633988160488906250_gif.gif	--a---- 428 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] FC707EC713D600572DE988236BDD3A84
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_b7889fd7-df2c-48c3-bd9e-8456e2016654Rss-rss01x16grey_gif-rss16Images-633988160722031250_gif.gif	--a---- 434 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 0BADAB39E32A083649569D477A58E5EC
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_b7889fd7-df2c-48c3-bd9e-8456e2016654Rss-rss01x16_gif-rss16Images-633988153360618750_gif.gif	--a---- 433 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 310391CF3C98762DE1251AC2FED42D16
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_Menu-silkset_accept_gif-Silk_1-634051179887806250_gif.gif	--a---- 403 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 87B062CE740BE13817F46B8F381E8A2B
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Events_png.png	--a---- 705 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 70B83DCDF7A6FA34240E1AA1D23EE535
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Friends_png.png	--a---- 746 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 2AE805114215925E00858FD2FEFF1439
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Groups_png.png	--a---- 669 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 6CFEA2D0DB786FDB4D72C1C1DE036822
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Home_png.png	--a---- 338 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] DB45ACA16C515F2FD8CB3B6F5E4FC386
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Inbox_png.png	--a---- 545 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 6EB69BFCBFD422247C103705B532BFE1
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Logout_png.png	--a---- 514 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 7F396C3A400239B9B66DEC2D503D86BB
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Photos_png.png	--a---- 3355 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] EC261A170D34BE434129E71B9C2C0408
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Profile_png.png	--a---- 594 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 62C86296694EF7F41D380804A58EF5CA
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Settings_png.png	--a---- 415 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] E42D284CC0436B66C1DB4AAFFCCC1957
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Share_png.png	--a---- 461 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] B4AEAC6600360BC4148538F716453AAC
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Status_png.png	--a---- 699 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 640E17444F44717CA5039BCB7FD3551E
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_about_gif.gif	--a---- 403 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] EC3C2B4E0DEC4D880BAFF88ABBF94188
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_clear_history_gif.gif	--a---- 414 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] A9E001CBC00B06B121DFBC80707F5298
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_contact_gif.gif	--a---- 278 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 15DEF39E438E807E2F0E22D44FDC7FB7
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_help_gif.gif	--a---- 405 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 995595D4C685D659E8F03CD0A287EDDF
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_home_page_gif.gif	--a---- 405 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] AA39D8A6B65E208901EBA9F3D4728D3E
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_options_gif.gif	--a---- 361 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 464E244E7E2F27FB85E0C3AB69D72104
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_privacy_gif.gif	--a---- 425 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 6427565C7105DC497287866100F260BB
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_refresh_gif.gif	--a---- 381 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] AE7C9F67594A84B096D225601ACB0B2A
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_shrink_gif.gif	--a---- 351 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] C3EBA0237D68F665AF6D663906221092
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_tell_a_friend_gif.gif	--a---- 392 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 5E7217A3357550F9749A095631F51015
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_upgrade_gif.gif	--a---- 399 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 8BE02D510B4B2E05AD2611B1E9A0BD56
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_SearchEngines_images_search_gif.gif	--a---- 405 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 66018EAE0906C9831A821CAE5D1089BB
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_SearchEngines_news_icon_gif.gif	--a---- 371 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 84896837EDB1A78C14DB6A2F3A0AEE3A
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_searchengines_search_icon_gif.gif	--a---- 322 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 948781E4B6478290050ECA4423B89B1E
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_SearchEngines_site_search_gif.gif	--a---- 625 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] C23D4DB18B6BB4F38ECBA57AD414A5CF
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_searchengines_softonic_gif.gif	--a---- 606 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 2A1D4FB45F62D3D260F2134228FAB05E
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_SearchEngines_tfd_gif.gif	--a---- 240 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] AE5A39669C623937C0839E079E1088D5
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_SearchEngines_videosurf_gif.gif	--a---- 1035 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 7BF61D475BF289E4900EBA788DED51C3
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_SearchEngines_video_gif.gif	--a---- 335 bytes	[18:12 02/04/2011]	[18:12 02/04/2011] 766433EF38BDA83C4FD4932027A4B9D5
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_MarketPlace_b7_54_b7889fd7-df2c-48c3-bd9e-8456e2016654_Images_Rss-rss01x16blue_gif-rss16Images-633988161463742500_gif.gif	--a---- 427 bytes	[18:12 02/04/2011]	[18:12 02/04/2011] DE38BD848E7E916050B57C8FF00C9D80
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_MarketPlace_b7_54_b7889fd7-df2c-48c3-bd9e-8456e2016654_Images_Rss-rss01x16blue_gif-rss16Images-633988162125930000_gif.gif	--a---- 427 bytes	[18:12 02/04/2011]	[18:12 02/04/2011] DE38BD848E7E916050B57C8FF00C9D80
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_MarketPlace_b7_54_b7889fd7-df2c-48c3-bd9e-8456e2016654_Images_Rss-rss01x16green_gif-rss16Images-633988159593125000_gif.gif	--a---- 428 bytes	[11:38 02/04/2011]	[11:38 02/04/2011] FC707EC713D600572DE988236BDD3A84
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_MarketPlace_b7_54_b7889fd7-df2c-48c3-bd9e-8456e2016654_Images_Rss-rss01x16green_gif-rss16Images-633988160488906250_gif.gif	--a---- 428 bytes	[11:38 02/04/2011]	[11:38 02/04/2011] FC707EC713D600572DE988236BDD3A84
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_MarketPlace_b7_54_b7889fd7-df2c-48c3-bd9e-8456e2016654_Images_Rss-rss01x16grey_gif-rss16Images-633988160722031250_gif.gif	--a---- 434 bytes	[18:12 02/04/2011]	[18:12 02/04/2011] 0BADAB39E32A083649569D477A58E5EC
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_MarketPlace_b7_54_b7889fd7-df2c-48c3-bd9e-8456e2016654_Images_Rss-rss01x16_gif-rss16Images-633988153360618750_gif.gif	--a---- 433 bytes	[11:38 02/04/2011]	[11:38 02/04/2011] 310391CF3C98762DE1251AC2FED42D16
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_MarketPlace_b7_654_b7889fd7-df2c-48c3-bd9e-8456e2016654_Appearance_634140226209507502_png.png	--a---- 1278 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] FAE6AA1F72FCBCD4D1082D4D06265B7A
C:\Users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\3udiwpab.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\components\ConduitAutoCompleteSearch.xpt	--a---- 166 bytes	[21:49 20/12/2010]	[21:49 20/12/2010] 806EA6CC4DCBF88A20AA3331BCDC9918
C:\Users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\3udiwpab.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\components\ConduitToolbar.idl	--a---- 148 bytes	[21:49 20/12/2010]	[21:49 20/12/2010] 0A9AAEB4839D78CB03740D8A8EF0D863
C:\Users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\3udiwpab.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\components\ConduitToolbar.xpt	--a---- 136 bytes	[21:49 20/12/2010]	[21:49 20/12/2010] 4822F1CBA7EE2F77496FDCE234D32C20
C:\Users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\3udiwpab.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\searchplugin\conduit.gif	--a---- 173 bytes	[21:49 20/12/2010]	[21:49 20/12/2010] 225B6898AE7D6E0CE88B3FE57BD750F2
C:\Users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\3udiwpab.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\searchplugin\conduit.PNG	--a---- 255 bytes	[21:49 20/12/2010]	[21:49 20/12/2010] AF3A51D0B8D6F04EE33307A654560DBE
C:\Users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\3udiwpab.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\searchplugin\conduit.xml	--a---- 931 bytes	[21:49 20/12/2010]	[21:49 20/12/2010] 27321E5730943A3A73EA8699E9EBB540
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\DOMStore\XCZY1X32\storage.conduit[1].xml	--a---- 13 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M\contextmenu_toolbar_conduit-services_com[1].txt	--a---- 5624 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 008A9ED67B706E1C56569441ADD9BB72
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M\settings_toolbar_conduit-services_com[1].txt	--a---- 30583 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 2CC546F241698F48F9C760EAFBADDBDD
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M\translation_toolbar_conduit-services_com[1].txt	--a---- 101383 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 334D941427950794DB906645975AFF25
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5\appsmetadata_toolbar_conduit-services_com[1].txt	--a---- 81 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] EB6EEE69B578EF10A521BFF0F98DA037
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5\contextmenu_toolbar_conduit-services_com[1].txt	--a---- 5625 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 9270590F46BFBAF0C0247EDF65291797
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5\contextmenu_toolbar_conduit-services_com[2].txt	--a---- 7158 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 975C952D94CC90E3174437C36DD068BF
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA\contextmenu_toolbar_conduit-services_com[1].txt	--a---- 6691 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 22C13F28D75B95B054B566E3EFD671B6
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Conduit\Community Alerts\Feeds\http___alerts_conduit-services_com_root_1006347_1002062_DE.xml	--a---- 184 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 76C284659F77056211BD059E8BE790DA
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Conduit\Toolbar\Facebook\http___facebook_conduit-services_com_Settings_ashx_locale=de-de&browserType=IE&toolbarVersion=6_3_8_0.xml	--a---- 11092 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] DFE1156D289BCE111E7C1EEA48E3EC78
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634062498888125000_png.png	--a---- 509 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 40ECBDFF6DF6593ACDEAD0021DCC7336
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634062499232812500_png.png	--a---- 670 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] D9CE725CB6F7C294C96BDF01D653A8D5
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634084042422158750_png.png	--a---- 1255 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 9E8DF6405FF11276857592FE66436A9E
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634449636811350000_png.png	--a---- 529 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 810FDF4A283DB1CFFFF73828531AC0D7
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634450328731600000_gif.gif	--a---- 751 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 37EFC5213E8D077F0D53566FCAB2F422
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634450329932693750_png.png	--a---- 543 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 79525287B3FA7899A4F6F9DA3961B984
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634450333556443750_gif.gif	--a---- 779 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 94223BBE299C4CB066F1825D6873D9D4
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_images_634450514020931251_24PX_png.png	--a---- 1245 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 7872C86EF94AFD26D7D5CB7B3035FE56
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_Menu-silkset_accept_gif-Silk_1-634450335085812500_gif.gif	--a---- 778 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 77BEF4D5D2C3A1919EBCE6A325F3AB66
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_About_png.png	--a---- 821 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 99D5F75C338F2A877CBF891E0F18746E
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Browse_png.png	--a---- 729 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] F2291FAB46ED9291A1A2FFE9F88E9D84
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Contact_png.png	--a---- 531 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] A847C5F6CE2C700048749892DD2E0619
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Hide_png.png	--a---- 669 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] FED9E00C76F647EE6A0B7CC684C89F0C
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_LikeIcon_png.png	--a---- 263 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 36BD416D16391EFAAAFB2C3C54EAE986
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_MoreFromPublisher_png.png	--a---- 734 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 943ADFD9E0DF1507F7BC419802BF4303
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_More_png.png	--a---- 562 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 36C6FB9C84D4AF5C5D7C5B277A0E4A01
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Options_png.png	--a---- 493 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 275C9DA2D536F18F528C80E050C3D705
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Privacy_png.png	--a---- 706 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 3AD88BD8E832DA39FAAEDF07AD595F94
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Refresh_png.png	--a---- 674 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 650731EEF807C292E699779B12CBE552
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Upgrade_png.png	--a---- 607 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 9B4D914888BCFFCBAE6757A0E450551C
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Events_png.png	--a---- 705 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 70B83DCDF7A6FA34240E1AA1D23EE535
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Friends_png.png	--a---- 746 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 2AE805114215925E00858FD2FEFF1439
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Groups_png.png	--a---- 669 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 6CFEA2D0DB786FDB4D72C1C1DE036822
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Home_png.png	--a---- 338 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] DB45ACA16C515F2FD8CB3B6F5E4FC386
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Inbox_png.png	--a---- 545 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 6EB69BFCBFD422247C103705B532BFE1
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Logout_png.png	--a---- 514 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 7F396C3A400239B9B66DEC2D503D86BB
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Photos_png.png	--a---- 3355 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] EC261A170D34BE434129E71B9C2C0408
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Profile_png.png	--a---- 594 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 62C86296694EF7F41D380804A58EF5CA
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Settings_png.png	--a---- 415 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] E42D284CC0436B66C1DB4AAFFCCC1957
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Share_png.png	--a---- 461 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] B4AEAC6600360BC4148538F716453AAC
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Status_png.png	--a---- 699 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 640E17444F44717CA5039BCB7FD3551E
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_ClientImages_radio_gif.gif	--a---- 419 bytes	[21:17 11/11/2011]	[21:17 11/11/2011] 01B83C91554738F6AFFB7895BBBA73FB
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_about_gif.gif	--a---- 403 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] EC3C2B4E0DEC4D880BAFF88ABBF94188
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_clear_history_gif.gif	--a---- 414 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] A9E001CBC00B06B121DFBC80707F5298
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_contact_gif.gif	--a---- 278 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 15DEF39E438E807E2F0E22D44FDC7FB7
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_help_gif.gif	--a---- 405 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 995595D4C685D659E8F03CD0A287EDDF
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_options_gif.gif	--a---- 361 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 464E244E7E2F27FB85E0C3AB69D72104
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_privacy_gif.gif	--a---- 425 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 6427565C7105DC497287866100F260BB
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_refresh_gif.gif	--a---- 381 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] AE7C9F67594A84B096D225601ACB0B2A
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_shrink_gif.gif	--a---- 351 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] C3EBA0237D68F665AF6D663906221092
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_upgrade_gif.gif	--a---- 399 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 8BE02D510B4B2E05AD2611B1E9A0BD56
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_SearchEngines_images_search_gif.gif	--a---- 405 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 66018EAE0906C9831A821CAE5D1089BB
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_SearchEngines_news_icon_gif.gif	--a---- 371 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 84896837EDB1A78C14DB6A2F3A0AEE3A
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_searchengines_search_icon_gif.gif	--a---- 322 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 948781E4B6478290050ECA4423B89B1E
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_searchengines_softonic_gif.gif	--a---- 606 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 2A1D4FB45F62D3D260F2134228FAB05E
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_SearchEngines_tfd_gif.gif	--a---- 240 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] AE5A39669C623937C0839E079E1088D5
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_SearchEngines_video_gif.gif	--a---- 335 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 766433EF38BDA83C4FD4932027A4B9D5
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___weather_conduit_com_images_weather_Default_sunny_night_gif.gif	--a---- 204 bytes	[21:17 11/11/2011]	[21:17 11/11/2011] 5EBD213E8A460652C883CBF68C152B5B
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=GottenApps&locale=de-de.xml	--a---- 7158 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 975C952D94CC90E3174437C36DD068BF
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=OtherApps&locale=de-de.xml	--a---- 5625 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 9270590F46BFBAF0C0247EDF65291797
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=SharedApps&locale=de-de.xml	--a---- 6691 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 22C13F28D75B95B054B566E3EFD671B6
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=Toolbar&locale=de-de.xml	--a---- 5624 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 008A9ED67B706E1C56569441ADD9BB72

Searching for "*Babylon*"
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Mozilla Firefox\Extensions\ffxtlbr@babylon.com\defaults\preferences\babylon.js.vir	--a---- 790 bytes	[09:01 25/08/2013]	[17:07 23/08/2012] 60B791BE510FEBD82F7B030EEEE4FD7B
C:\Program Files (x86)\The Creative Assembly\Rome - Total War\data\settlement_plans\hanging_gardens_of_babylon.txt	--a---- 4180 bytes	[16:12 16/10/2010]	[14:48 27/08/2004] B273CD535924187A093DC16EB0BE42F6
C:\Program Files (x86)\The Creative Assembly\Rome - Total War\data\settlement_plans\hanging_gardens_of_babylon_battle.txt	--a---- 4180 bytes	[16:12 16/10/2010]	[14:48 27/08/2004] B273CD535924187A093DC16EB0BE42F6
C:\Program Files (x86)\The Creative Assembly\Rome - Total War\data\settlement_plans\overlays\overlay_babylon.cas	--a---- 11804 bytes	[16:15 16/10/2010]	[09:48 04/12/2002] 8448A2CC181D360CC1C5D07BCA4245E3
C:\Program Files (x86)\The Creative Assembly\Rome - Total War\data\settlement_plans\underlays\underlay_babylon.cas	--a---- 7777 bytes	[16:15 16/10/2010]	[09:49 04/12/2002] 36365EBDD546FFD6D478CE4BB9F794DD
C:\Program Files (x86)\Winamp\Plugins\Milkdrop2\presets\stahlregen + geiss + shifter - babylon.milk	--a---- 26473 bytes	[20:18 28/04/2009]	[20:18 28/04/2009] FD56279AD850D3AA87454766302DACF1
C:\Users\ADMIN.Ace\AppData\Roaming\Microsoft\Windows\Recent\Babylon.lnk	--a---- 875 bytes	[21:31 07/02/2013]	[21:31 07/02/2013] 9D836E907EC2492FD6DE8823EF29C016

Searching for "*Crossrider*"
No files found.

Searching for "*ZoneAlarm LTD Toolbar*"
No files found.

Searching for "*DuckDuckGo*"
C:\Users\xxxxi\AppData\Roaming\Mozilla\Firefox\Profiles\r6n9rara.default\searchplugins\duckduckgo.xml	--a---- 10530 bytes	[11:30 21/07/2013]	[11:30 21/07/2013] A6574189A7EDFCB62C01DA52590E0CF6
C:\Users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\xke09otc.default-1359736880158\searchplugins\duckduckgo.xml	--a---- 10530 bytes	[10:55 31/08/2013]	[10:55 31/08/2013] A6574189A7EDFCB62C01DA52590E0CF6

========== folderfind ==========

Searching for "*Ask.com*"
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Ask.com	d------	[09:43 01/09/2013]

Searching for "*Ask Toolbar*"
No folders found.

Searching for "*Ask Search*"
No folders found.

Searching for "*SoftonicDownloader*"
No folders found.

Searching for "*Conduit*"
C:\Users\AppData\LocalLow\Conduit	d------	[19:08 03/11/2010]
C:\Users\xxxxxxx\AppData\LocalLow\Conduit	d------	[20:12 16/11/2010]
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\Repository\conduit_CT2613550_CT2613550	d------	[12:14 14/01/2011]
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Conduit	d------	[21:16 11/11/2011]
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\Repository\conduit_CT2613550_CT2613550	d------	[21:16 11/11/2011]
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\Repository\conduit_CT2613550_de-de	d------	[21:16 11/11/2011]

Searching for "*Babylon*"
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Mozilla Firefox\Extensions\ffxtlbr@babylon.com	d------	[09:43 01/09/2013]

Searching for "*Crossrider*"
No folders found.

Searching for "*ZoneAlarm LTD Toolbar*"
C:\Users\xxxxi\AppData\Roaming\CheckPoint\ZoneAlarm LTD Toolbar	d------	[06:26 12/08/2012]
C:\Users\xxxxxxx\AppData\Roaming\CheckPoint\ZoneAlarm LTD Toolbar	d------	[14:40 11/08/2012]

Searching for "*DuckDuckGo*"
No folders found.

========== regfind ==========

Searching for "Ask.com"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\Search\ask.com]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MAPI/IPM.Task]
"PreviewDetails"="prop:*System.DueDate;*System.Task.CompletionStatus;*System.Task.Owner;*System.Keywords"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\MAPI/IPM.Task]
"PreviewDetails"="prop:*System.DueDate;*System.Task.CompletionStatus;*System.Task.Owner;*System.Keywords"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Ask.com\Updater\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Ask.com\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Ask.com\assets\oobe\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Ask.com\assets\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\chrome\content\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\chrome\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\chrome\skin\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\defaults\preferences\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\defaults\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\searchplugins\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\chrome\skin\ ask_32x.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2BDF3E992C0908741B7C11F4B4E0F775]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\assets\oobe\b.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6B3BC4CF5ECE1F54BBA174C13A1AB907]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\TaskScheduler.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\UpdateTask.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\defaults\preferences\defaults.js"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BEABAA33A5E68374DBF197F2A00CD011]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\searchplugins\askcom.xml"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E656433EAEAD2EB479907D4FE70AA98E]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\chrome\content\about.js"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF\InstallProperties]
"HelpLink"="hxxp://about.ask.com/en/docs/about/index.shtml"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF\InstallProperties]
"Publisher"="Ask.com"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\AskToolbar\ButtonData\208]
"displayicon"="hxxp://apnwidgets.ask.com/widget/TWCWeather/images/weatherIcons16/alert.png"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\AskToolbar\Macro]
"InstallDir"="C:\Program Files (x86)\Ask.com\"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\SearchScopes\{7EF54776-F063-4D14-97A6-09FF4BF8935C}]
"URL"="hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=crm&q={searchTerms}&locale=de_DE&apn_ptnrs=U3&apn_dtid=OSJ000YYDE&apn_uid=1C4D2F40-200D-4D3C-B0BE-7EC20B329ED2&apn_sauid=3189768B-FED8-41C4-9B4B-4CFF582D94F5"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\SearchScopes\{7EF54776-F063-4D14-97A6-09FF4BF8935C}]
"FaviconURL"="hxxp://www.ask.com/favicon.ico"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\Search\ask.com]
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\Search\ask.com]

Searching for "Ask Toolbar"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF\InstallProperties]
"DisplayName"="Ask Toolbar"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EEE57F91-46AE-4F46-B09D-97D11ED65F6E}]
"Path"="\Scheduled Update for Ask Toolbar"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar]

Searching for "Ask Search"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\SearchScopes\{7EF54776-F063-4D14-97A6-09FF4BF8935C}]
"DisplayName"="Ask Search"

Searching for "SoftonicDownloader"
No data found.

Searching for "Conduit"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\063A857434EDED11A893800002C0A966]
"045F27F206F16624596059B2126D46D0"="C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\iSyncConduit.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\063A857434EDED11A893800002C0A966\045F27F206F16624596059B2126D46D0]
"File"="iSyncConduit.dll"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit]
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit\Community Alerts\Data\Feeds\1002062]
"Url"="hxxp://alerts.conduit-services.com/root/1006347/1002062/DE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit\Community Alerts\Settings]
"ALPServicesServerName"="hxxp://alert.services.conduit.com"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit\Community Alerts\Settings]
"ALPClientsServerName"="hxxp://alert.client.conduit.com"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit\Community Alerts\Settings]
"AutoUpdateServerName"="hxxp://alert.storage.conduit.com"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit\Community Alerts\Settings\Services\ChannelsSettings]
"URL"="hxxp://alert.services.conduit.com/channels/?aid=EB_CHANNEL_ID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit\Community Alerts\Settings\Services\DynamicDialogs]
"URL"="hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit\Community Alerts\Settings\Services\Login]
"URL"="hxxp://alert.services.conduit.com/Alerts/AlertServices.asmx/AlertLogin"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit\Community Alerts\Settings\Services\Translation]
"URL"="hxxp://alerts.conduit-services.com/translation/?locale=EB_LOCALE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit\Community Alerts\Settings\Services\Usage]
"URL"="hxxp://alert.services.conduit.com/Alerts/AlertServices.asmx/SetAlertUsageRequest"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit\Toolbar\Facebook\InfoService\hxxp://facebook.conduit-services.com/Settings.ashx?locale=de-de&browserType=IE&toolbarVersion=6.3.8.0]
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"Server"="users.conduit.com"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"GroupingServerURL"="hxxp://grouping.services.conduit.com/"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"PrivacyPageURL"="hxxp://www.conduit.com/privacy/Default.aspx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"DisplayTrusteSeal"="hxxp://trust.conduit.com/EB_ORIGINAL_CTID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"UsageURL"="hxxp://usage.users.conduit.com/UsersWebService.asmx/UsersRequests"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"ClientLogURL"="hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"UninstallURL"="hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550]
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppRegisterUsage]
"ServiceUrl"="hxxp://apps.usage.conduit-services.com/AppOperations/AppRegistration.ashx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppsMetaData]
"ServiceUrl"="hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppsSettings]
"ServiceUrl"="hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_COMP_ID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppTrackingFirstTime]
"ServiceUrl"="hxxp://tracking.usage.app.conduit-services.com/FirstTime.ashx?current=EB_APPTRACKING_CURRENT_STATE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppTrackingUsage]
"ServiceUrl"="hxxp://tracking.usage.app.conduit-services.com/Usage.ashx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppUninstallUsage]
"ServiceUrl"="hxxp://apps.usage.conduit-services.com/AppOperations/AppUninstall.ashx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\BrowserToolbarsInfo]
"ServiceUrl"="hxxp://counting.usage.toolbar.conduit-services.com/usage.ashx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ClientErrorLog]
"ServiceUrl"="hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx?op=ReportDiagnosticsEvent"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\DynamicDialogs]
"ServiceUrl"="hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=EB_TOOLBAR_VERSION"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\GottenAppsContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=EB_LOCALE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\HostingUsage]
"ServiceUrl"="hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\OtherAppsContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=EB_LOCALE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\SearchSettings]
"ServiceUrl"="hxxp://API.search.conduit.com/Settings/?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\SharedAppsContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=EB_LOCALE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarAppComponentUsage]
"ServiceUrl"="hxxp://component.usage.toolbar.conduit-services.com/ToolbarComponentUsage.ashx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarAppUsage]
"ServiceUrl"="hxxp://usage.toolbar.conduit-services.com/ToolbarUsage.ashx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarComponentUsage]
"ServiceUrl"="hxxp://component.usage.toolbar.conduit-services.com/ToolbarComponentUsage.ashx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=EB_LOCALE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarGrouping]
"ServiceUrl"="hxxp://grouping.services.conduit.com/GroupingRequest.ctp?type=GetGroup&ctid=EB_ORIGINAL_CTID&lut=0&locale=EB_OS_LOCALE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarLogin]
"ServiceUrl"="hxxp://login.toolbar.conduit-services.com/Login.ashx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarSettings]
"ServiceUrl"="hxxp://settings.toolbar.conduit-services.com/?ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarSettingsForPublisher]
"ServiceUrl"="hxxp://settings.publisher.toolbar.conduit-services.com/?ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarSettingsForSB]
"ServiceUrl"="hxxp://settings.smartbar.conduit-services.com/settings/?ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarSettingsPublisherForSB]
"ServiceUrl"="hxxp://settings.publisher.smartbar.conduit-services.com/settings/?ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarTranslation]
"ServiceUrl"="hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarUninstall]
"ServiceUrl"="hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarUsage]
"ServiceUrl"="hxxp://usage.toolbar.conduit-services.com/ToolbarUsage.ashx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\UninstallDialog]
"ServiceUrl"="hxxp://UninstallDialog.conduit-services.com/view/view.aspx?ctid=EB_TOOLBAR_ID&version=EB_TOOLBAR_VERSION"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\UninstallDialogUsage]
"ServiceUrl"="hxxp://uninstalldialogusage.toolbar.conduit-services.com/Usage.ashx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550_CT2613550]
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550_de-de]
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\1121525870]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\1139983309]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\2607372324]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\3054915312]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\3279788275]
"dbname"="conduit_CT2613550_de-de"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\3497721787]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\3658808454]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\393351170]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\916659265]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings]
"SocialDomains"="social.conduit.com;apps.conduit.com;services.apps.conduit.com"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\FeatureProtector\BrowserSearch]
"URLFromService"="hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2613550"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\FeatureProtector\BrowserSearch]
"ConduitEnabled"="TRUE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\FeatureProtector\HomePage]
"URLFromService"="hxxp://search.conduit.com?SearchSource=10&ctid=CT2613550"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\FeatureProtector\HomePage]
"ConduitEnabled"="TRUE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\MyStuff]
"AddStuffLink"="hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\MyStuff]
"ConduitEnable"="TRUE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\RadioPlayer]
"ServerUrl"="hxxp://radio.services.conduit.com/RadioRequest.ctp"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Search\Settings]
"ContextMenuSearchUrl"="hxxp://search.conduit.com/ResultsExt.aspx?q=MYSEARCHTERM&ctid=EB_CTID&octid=EB_ORIGINAL_CTID&SearchSource=8"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\SearchInNewTab]
"AboutTabsDataUrlConduit"="hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\SearchInNewTab]
"AboutTabsEnabledByConduit"="TRUE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\SearchInNewTab]
"AboutTabsUsageUrl"="hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Update]
"ModuleURL"="hxxp://ieupdate.conduit.com/ver5.7.4.0/tbedrs.dll"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Upgrade]
"ModuleURL"="hxxp://ieupgrade.conduit-download.com/IEUpgrade/ver5.7.4.0/tbedrs.dll"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Weather]
"SearchServerUrl"="hxxp://search.conduit.com/"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Weather\de-de]
"Forecast"="<FORECAST><LOCATION_ID>GMXX0007</LOCATION_ID><DAYS><DAY1><DATE>20111111</DATE><DAY>Freitag</DAY><F_MIN>29</F_MIN><F_MAX>40</F_MAX><C_MIN>-1</C_MIN><C_MAX>4</C_MAX><UV_DESCRIPTION>Niedrig</UV_DESCRIPTION><UV_INDEX>1</UV_INDEX><SUNSET>4:20 pm</SUNSET><SUNRISE>7:20 am</SUNRISE><MOONRISE>4:24 pm</MOONRISE><MOONSET>8:04 am</MOONSET><MOON_PHASE>Abnehmend vorspringend</MOON_PHASE><CONDITION_DESCRIPTION>Sonnig</CONDITION_DESCRIPTION><CONDITION_ICON>hxxp://weather.conduit.com/images/weather/Default/sunny_big.gif</CONDITION_ICON></DAY1><DAY2><DATE>20111112</DATE><DAY>Samstag</DAY><F_MIN>29</F_MIN><F_MAX>46</F_MAX><C_MIN>-1</C_MIN><C_MAX>7</C_MAX><UV_DESCRIPTION>Niedrig</UV_DESCRIPTION><UV_INDEX>1</UV_INDEX><SUNSET>4:18 pm</SUNSET><SUNRISE>7:22 am</SUNRISE><MOONRISE>5:05 pm</MOONRISE><MOONSET>9:04 am</MOONSET><MOON_PHASE>Abnehmend vorspringend</MOON_PHASE><CONDITION_DESCRIPTION>Sonnig</CONDITION_DESCRIPTIO
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Conduit]
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Conduit\Community Alerts\Data\Feeds\1002062]
"Url"="hxxp://alerts.conduit-services.com/root/1006347/1002062/DE"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Conduit\Community Alerts\Settings]
"ALPServicesServerName"="hxxp://alert.services.conduit.com"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Conduit\Community Alerts\Settings]
"ALPClientsServerName"="hxxp://alert.client.conduit.com"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Conduit\Community Alerts\Settings]
"AutoUpdateServerName"="hxxp://alert.storage.conduit.com"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Conduit\Toolbar\Facebook\InfoService\hxxp://facebook.conduit-services.com/Settings.ashx?locale=de-de&browserType=IE&toolbarVersion=5.5.3.2]
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"Server"="users.conduit.com"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"GroupingServerURL"="hxxp://grouping.services.conduit.com/"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"PrivacyPageURL"="hxxp://www.conduit.com/privacy/Default.aspx"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"TrusteURL"="hxxp://trust.conduit.com/EB_ORIGINAL_CTID"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"UsageURL"="hxxp://usage.users.conduit.com/UsersWebService.asmx/UsersRequests"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"ClientLogURL"="hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"UninstallURL"="hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"Write us link"="mailto:geremy@conduit.com"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550]
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppsMetaData]
"ServiceUrl"="hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppsSettings]
"ServiceUrl"="hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_COMP_ID"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppTrackingFirstTime]
"ServiceUrl"="hxxp://tracking.usage.app.conduit-services.com/FirstTime.ashx?current=EB_APPTRACKING_CURRENT_STATE"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppTrackingUsage]
"ServiceUrl"="hxxp://tracking.usage.app.conduit-services.com/Usage.ashx"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\BrowserToolbarsInfo]
"ServiceUrl"="hxxp://counting.usage.toolbar.conduit-services.com/usage.ashx"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ClientErrorLog]
"ServiceUrl"="hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx?op=ReportDiagnosticsEvent"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\DynamicDialogs]
"ServiceUrl"="hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=EB_TOOLBAR_VERSION"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\GottenAppsContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=EB_LOCALE"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\OtherAppsContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=EB_LOCALE"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\SharedAppsContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=EB_LOCALE"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarAppComponentUsage]
"ServiceUrl"="hxxp://component.usage.toolbar.conduit-services.com/ToolbarComponentUsage.ashx"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarAppUsage]
"ServiceUrl"="hxxp://usage.toolbar.conduit-services.com/ToolbarUsage.ashx"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarComponentUsage]
"ServiceUrl"="hxxp://component.usage.toolbar.conduit-services.com/ToolbarComponentUsage.ashx"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=EB_LOCALE"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarLogin]
"ServiceUrl"="hxxp://login.toolbar.conduit-services.com/Login.ashx"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarSettings]
"ServiceUrl"="hxxp://settings.toolbar.search.conduit.com/root/EB_TOOLBAR_ID/EB_ORIGINAL_CTID"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarSettingsForPublisher]
"ServiceUrl"="hxxp://settings.publisher.toolbar.conduit-services.com/?ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarTranslation]
"ServiceUrl"="hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarUsage]
"ServiceUrl"="hxxp://usage.toolbar.conduit-services.com/ToolbarUsage.ashx"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550_CT2613550]
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\169875435]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\2149621329]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\786731368]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\LanguagePack]
"LanguagePackServerUrl"="hxxp://translation.users.conduit.com/Translation.ashx"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\MyStuff]
"ServiceURL"="hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\MyStuff]
"AddStuffLink"="hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\MyStuff]
"ConduitEnable"="TRUE"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Search\Settings]
"ContextMenuSearchUrl"="hxxp://search.conduit.com/ResultsExt.aspx?q=MYSEARCHTERM&ctid=EB_CTID&octid=EB_ORIGINAL_CTID&SearchSource=8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\SearchInNewTab]
"AboutTabsDataUrlConduit"="hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\SearchInNewTab]
"AboutTabsEnabledByConduit"="TRUE"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\SearchInNewTab]
"AboutTabsUsageUrl"="hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Update]
"ModuleURL"="hxxp://ieupdate.conduit.com/ver5.5.3.2/tbedrs.dll"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Upgrade]
"ModuleURL"="hxxp://ieupgrade.conduit-download.com/IEUpgrade/ver5.5.3.2/tbedrs.dll"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Conduit]
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit]
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit\Community Alerts\Data\Feeds\1002062]
"Url"="hxxp://alerts.conduit-services.com/root/1006347/1002062/DE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit\Community Alerts\Settings]
"ALPServicesServerName"="hxxp://alert.services.conduit.com"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit\Community Alerts\Settings]
"ALPClientsServerName"="hxxp://alert.client.conduit.com"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit\Community Alerts\Settings]
"AutoUpdateServerName"="hxxp://alert.storage.conduit.com"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit\Community Alerts\Settings\Services\ChannelsSettings]
"URL"="hxxp://alert.services.conduit.com/channels/?aid=EB_CHANNEL_ID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit\Community Alerts\Settings\Services\DynamicDialogs]
"URL"="hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit\Community Alerts\Settings\Services\Login]
"URL"="hxxp://alert.services.conduit.com/Alerts/AlertServices.asmx/AlertLogin"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit\Community Alerts\Settings\Services\Translation]
"URL"="hxxp://alerts.conduit-services.com/translation/?locale=EB_LOCALE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit\Community Alerts\Settings\Services\Usage]
"URL"="hxxp://alert.services.conduit.com/Alerts/AlertServices.asmx/SetAlertUsageRequest"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit\Toolbar\Facebook\InfoService\hxxp://facebook.conduit-services.com/Settings.ashx?locale=de-de&browserType=IE&toolbarVersion=6.3.8.0]
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"Server"="users.conduit.com"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"GroupingServerURL"="hxxp://grouping.services.conduit.com/"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"PrivacyPageURL"="hxxp://www.conduit.com/privacy/Default.aspx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"DisplayTrusteSeal"="hxxp://trust.conduit.com/EB_ORIGINAL_CTID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"UsageURL"="hxxp://usage.users.conduit.com/UsersWebService.asmx/UsersRequests"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"ClientLogURL"="hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"UninstallURL"="hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550]
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppRegisterUsage]
"ServiceUrl"="hxxp://apps.usage.conduit-services.com/AppOperations/AppRegistration.ashx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppsMetaData]
"ServiceUrl"="hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppsSettings]
"ServiceUrl"="hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_COMP_ID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppTrackingFirstTime]
"ServiceUrl"="hxxp://tracking.usage.app.conduit-services.com/FirstTime.ashx?current=EB_APPTRACKING_CURRENT_STATE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppTrackingUsage]
"ServiceUrl"="hxxp://tracking.usage.app.conduit-services.com/Usage.ashx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppUninstallUsage]
"ServiceUrl"="hxxp://apps.usage.conduit-services.com/AppOperations/AppUninstall.ashx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\BrowserToolbarsInfo]
"ServiceUrl"="hxxp://counting.usage.toolbar.conduit-services.com/usage.ashx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ClientErrorLog]
"ServiceUrl"="hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx?op=ReportDiagnosticsEvent"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\DynamicDialogs]
"ServiceUrl"="hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=EB_TOOLBAR_VERSION"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\GottenAppsContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=EB_LOCALE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\HostingUsage]
"ServiceUrl"="hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\OtherAppsContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=EB_LOCALE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\SearchSettings]
"ServiceUrl"="hxxp://API.search.conduit.com/Settings/?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\SharedAppsContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=EB_LOCALE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarAppComponentUsage]
"ServiceUrl"="hxxp://component.usage.toolbar.conduit-services.com/ToolbarComponentUsage.ashx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarAppUsage]
"ServiceUrl"="hxxp://usage.toolbar.conduit-services.com/ToolbarUsage.ashx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarComponentUsage]
"ServiceUrl"="hxxp://component.usage.toolbar.conduit-services.com/ToolbarComponentUsage.ashx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=EB_LOCALE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarGrouping]
"ServiceUrl"="hxxp://grouping.services.conduit.com/GroupingRequest.ctp?type=GetGroup&ctid=EB_ORIGINAL_CTID&lut=0&locale=EB_OS_LOCALE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarLogin]
"ServiceUrl"="hxxp://login.toolbar.conduit-services.com/Login.ashx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarSettings]
"ServiceUrl"="hxxp://settings.toolbar.conduit-services.com/?ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarSettingsForPublisher]
"ServiceUrl"="hxxp://settings.publisher.toolbar.conduit-services.com/?ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarSettingsForSB]
"ServiceUrl"="hxxp://settings.smartbar.conduit-services.com/settings/?ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarSettingsPublisherForSB]
"ServiceUrl"="hxxp://settings.publisher.smartbar.conduit-services.com/settings/?ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarTranslation]
"ServiceUrl"="hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarUninstall]
"ServiceUrl"="hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarUsage]
"ServiceUrl"="hxxp://usage.toolbar.conduit-services.com/ToolbarUsage.ashx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\UninstallDialog]
"ServiceUrl"="hxxp://UninstallDialog.conduit-services.com/view/view.aspx?ctid=EB_TOOLBAR_ID&version=EB_TOOLBAR_VERSION"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\UninstallDialogUsage]
"ServiceUrl"="hxxp://uninstalldialogusage.toolbar.conduit-services.com/Usage.ashx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550_CT2613550]
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550_de-de]
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\1121525870]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\1139983309]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\2607372324]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\3054915312]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\3279788275]
"dbname"="conduit_CT2613550_de-de"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\3497721787]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\3658808454]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\393351170]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\916659265]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings]
"SocialDomains"="social.conduit.com;apps.conduit.com;services.apps.conduit.com"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\FeatureProtector\BrowserSearch]
"URLFromService"="hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2613550"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\FeatureProtector\BrowserSearch]
"ConduitEnabled"="TRUE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\FeatureProtector\HomePage]
"URLFromService"="hxxp://search.conduit.com?SearchSource=10&ctid=CT2613550"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\FeatureProtector\HomePage]
"ConduitEnabled"="TRUE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\MyStuff]
"AddStuffLink"="hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\MyStuff]
"ConduitEnable"="TRUE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\RadioPlayer]
"ServerUrl"="hxxp://radio.services.conduit.com/RadioRequest.ctp"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Search\Settings]
"ContextMenuSearchUrl"="hxxp://search.conduit.com/ResultsExt.aspx?q=MYSEARCHTERM&ctid=EB_CTID&octid=EB_ORIGINAL_CTID&SearchSource=8"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\SearchInNewTab]
"AboutTabsDataUrlConduit"="hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\SearchInNewTab]
"AboutTabsEnabledByConduit"="TRUE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\SearchInNewTab]
"AboutTabsUsageUrl"="hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Update]
"ModuleURL"="hxxp://ieupdate.conduit.com/ver5.7.4.0/tbedrs.dll"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Upgrade]
"ModuleURL"="hxxp://ieupgrade.conduit-download.com/IEUpgrade/ver5.7.4.0/tbedrs.dll"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Weather]
"SearchServerUrl"="hxxp://search.conduit.com/"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Weather\de-de]
"Forecast"="<FORECAST><LOCATION_ID>GMXX0007</LOCATION_ID><DAYS><DAY1><DATE>20111111</DATE><DAY>Freitag</DAY><F_MIN>29</F_MIN><F_MAX>40</F_MAX><C_MIN>-1</C_MIN><C_MAX>4</C_MAX><UV_DESCRIPTION>Niedrig</UV_DESCRIPTION><UV_INDEX>1</UV_INDEX><SUNSET>4:20 pm</SUNSET><SUNRISE>7:20 am</SUNRISE><MOONRISE>4:24 pm</MOONRISE><MOONSET>8:04 am</MOONSET><MOON_PHASE>Abnehmend vorspringend</MOON_PHASE><CONDITION_DESCRIPTION>Sonnig</CONDITION_DESCRIPTION><CONDITION_ICON>hxxp://weather.conduit.com/images/weather/Default/sunny_big.gif</CONDITION_ICON></DAY1><DAY2><DATE>20111112</DATE><DAY>Samstag</DAY><F_MIN>29</F_MIN><F_MAX>46</F_MAX><C_MIN>-1</C_MIN><C_MAX>7</C_MAX><UV_DESCRIPTION>Niedrig</UV_DESCRIPTION><UV_INDEX>1</UV_INDEX><SUNSET>4:18 pm</SUNSET><SUNRISE>7:22 am</SUNRISE><MOONRISE>5:05 pm</MOONRISE><MOONSET>9:04 am</MOONSET><MOON_PHASE>Abnehmend vorspringend</MOON_PHASE><CONDITION_DESCRIPTION>Sonnig</CONDITION_DESCRIPTIO

Searching for "Babylon"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}]
"DllName"="BabylonToolbarTlbr.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\BabylonToolbar\Shared\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\BabylonToolbar\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\BabylonToolbar\CR\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\BabylonToolbar\FF\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\BabylonToolbar\IE\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}]
"DllName"="BabylonToolbarTlbr.dll"

Searching for "Crossrider"
No data found.

Searching for "ZoneAlarm LTD Toolbar"
No data found.

Searching for "DuckDuckGo"
No data found.

Searching for "         "
[HKEY_LOCAL_MACHINE\SOFTWARE\Canon\WIA\Devices\MP550 series]
"ProductId"="MP550           "
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell]
"ConfigXML"="             <PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="1" XmlRenderingType="text" >                 <InitializationParameters>                     <Param Name="PSVersion" Value="2.0"/>                 </InitializationParameters>                 <Resources>                     <Resource ResourceUri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell" SupportsOptions="true" ExactMatch="true">                         <Security xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Uri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell" ExactMatch="true" Sddl="O:NSG:BAD:P(A;;GA;;;BA)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)"/>                         <Capability Type="Shell"/>                     </Resource>                 </Res
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell32]
"ConfigXML"="<PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell32" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="1" XmlRenderingType="text" Architecture="32" >                         <InitializationParameters>                             <Param Name="PSVersion" Value="2.0"/>                         </InitializationParameters>                         <Resources>                             <Resource ResourceUri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell32" SupportsOptions="true" ExactMatch="true">                                 <Security xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Uri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell32" ExactMatch="true" Sddl="O:NSG:BAD:P(A;;GA;;;BA)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)"/>                                
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_APPLE&PROD_IPOD&REV_1.70#000A27002297E590&0#]
"DeviceDesc"="iPod            "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SANDISK&PROD_CRUZER&REV_8.01#432430165D808A62&0#]
"DeviceDesc"="Cruzer          "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_APPLE&PROD_IPOD&REV_1.70#000A27002297E590&0#]
"DeviceDesc"="iPod            "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SANDISK&PROD_CRUZER&REV_8.01#432430165D808A62&0#]
"DeviceDesc"="Cruzer          "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_APPLE&PROD_IPOD&REV_1.70#000A27002297E590&0#]
"DeviceDesc"="iPod            "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SANDISK&PROD_CRUZER&REV_8.01#432430165D808A62&0#]
"DeviceDesc"="Cruzer          "

-= EOF =-
Gruß und gute
Geändert von Pechvogel44 (02.09.2013 um 20:26 Uhr)

Alt 03.09.2013, 09:38   #11
M-K-D-B
/// TB-Ausbilder
 
DuckDuckGo läßt sich nicht enfernen - Standard

DuckDuckGo läßt sich nicht enfernen


Servus,



wir entfernen die letzten Reste und kontrollieren nochmal alles.


Wichtig:
Du hast deinen Benutzernamen durch xxxx unkenntlich gemacht. Vor dem Fix musst du deinen richtigen Benutzernamen für die jeweilige Stelle einfügen, sonst wird der Fix nicht funktionieren!




Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument


Code:
ATTFilter
start
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
Toolbar: HKCU - No Name - {FC2B76FC-2132-4D80-A9A3-1F5C6E49066B} -  No File
Toolbar: HKCU - No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} -  No File
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: Google
FF Homepage: about:home
FF NetworkProxy: "http", "127.0.0.1"
FF NetworkProxy: "http_port", 62707
FF NetworkProxy: "type", 0
Task: {EEE57F91-46AE-4F46-B09D-97D11ED65F6E} - \Scheduled Update for Ask Toolbar No Task File
C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wuxxxxx.defaultx\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
C:\Users\xxxxxxx\AppData\LocalLow\Conduit
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit
C:\Users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\3udiwpab.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Conduit
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit
C:\Users\xxxxi\AppData\Roaming\Mozilla\Firefox\Profiles\r6n9rara.default\searchplugins\duckduckgo.xml
C:\Users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\xke09otc.default-1359736880158\searchplugins\duckduckgo.xml
C:\Users\xxxxxxx\AppData\Roaming\CheckPoint
Reg: reg delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\Search\ask.com" /f
Reg: reg delete "HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\AskToolbar" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF" /f
Reg: reg delete "HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit" /f
Reg: reg delete "HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit" /f
end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.






Schritt 2
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.






Schritt 3

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset






Schritt 4
Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.





Bitte poste mit deiner nächsten Antwort
  • die Logdatei von FRST,
  • die Logdatei von MBAM,
  • die Logdatei von ESET,
  • die Logdatei von SecurityCheck.
Alt 03.09.2013, 18:00   #12
Pechvogel44
 
DuckDuckGo läßt sich nicht enfernen - Standard

DuckDuckGo läßt sich nicht enfernen


Hallo Mathias,

hier schon mal das Fixlog (Rest folgt):

Code:
ATTFilter
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-09-2013 05
Ran by ADMIN at 2013-09-03 18:56:01 Run:2
Running from C:\Users\xxxxxxx\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
start
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
Toolbar: HKCU - No Name - {FC2B76FC-2132-4D80-A9A3-1F5C6E49066B} -  No File
Toolbar: HKCU - No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} -  No File
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: Google
FF Homepage: about:home
FF NetworkProxy: "http", "127.0.0.1"
FF NetworkProxy: "http_port", 62707
FF NetworkProxy: "type", 0
Task: {EEE57F91-46AE-4F46-B09D-97D11ED65F6E} - \Scheduled Update for Ask Toolbar No Task File
C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wuxxxxx.defaultx\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
C:\Users\xxxxxxx\AppData\LocalLow\Conduit
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit
C:\Users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\3udiwpab.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Conduit
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit
C:\Users\xxxxi\AppData\Roaming\Mozilla\Firefox\Profiles\r6n9rara.default\searchplugins\duckduckgo.xml
C:\Users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\xke09otc.default-1359736880158\searchplugins\duckduckgo.xml
C:\Users\xxxxxxx\AppData\Roaming\CheckPoint
Reg: reg delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\Search\ask.com" /f
Reg: reg delete "HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\AskToolbar" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF" /f
Reg: reg delete "HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit" /f
Reg: reg delete "HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit" /f
end
*****************

HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key deleted successfully.
HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64} => Key deleted successfully.
HKCR\CLSID\{67A2568C-7A0A-4EED-AECC-B5405DE63B64} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key deleted successfully.
HKCR\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{FC2B76FC-2132-4D80-A9A3-1F5C6E49066B} => Value deleted successfully.
HKCR\CLSID\{FC2B76FC-2132-4D80-A9A3-1F5C6E49066B} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} => Value deleted successfully.
HKCR\CLSID\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} => Key not found.
Firefox SearchEngineOrder.1 deleted successfully.
Firefox SelectedSearchEngine deleted successfully.
Firefox homepage deleted successfully.
Firefox Proxy settings were reset.
Firefox Proxy settings were reset.
Firefox Proxy settings were reset.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EEE57F91-46AE-4F46-B09D-97D11ED65F6E} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EEE57F91-46AE-4F46-B09D-97D11ED65F6E} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar => Key deleted successfully.
C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wuxxxxx.defaultx\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5} => Moved successfully.
"C:\Users\xxxxxxx\AppData\LocalLow\Conduit" => File/Directory not found.
"C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit" => File/Directory not found.
"C:\Users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\3udiwpab.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}" => File/Directory not found.
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Conduit => Moved successfully.
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit => Moved successfully.
C:\Users\xxxxi\AppData\Roaming\Mozilla\Firefox\Profiles\r6n9rara.default\searchplugins\duckduckgo.xml => Moved successfully.
C:\Users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\xke09otc.default-1359736880158\searchplugins\duckduckgo.xml => Moved successfully.
"C:\Users\xxxxxxx\AppData\Roaming\CheckPoint" => File/Directory not found.

========= reg delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\Search\ask.com" /f =========

Der Vorgang wurde erfolgreich beendet.



========= End of Reg: =========


========= reg delete "HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\AskToolbar" /f =========

FEHLER: Der angegebene Registrierungsschlssel bzw. Wert wurde nicht gefunden.


========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF" /f =========

Der Vorgang wurde erfolgreich beendet.



========= End of Reg: =========


========= reg delete "HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit" /f =========

Der Vorgang wurde erfolgreich beendet.



========= End of Reg: =========


========= reg delete "HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit" /f =========

Der Vorgang wurde erfolgreich beendet.



========= End of Reg: =========


==== End of Fixlog ====
Musste wohl auch als Admin laufen - vorher kamen einige Meldungen wegen fehlender Zugriffsrechte...

Malwarebytes Anti-Malware - Quick Scan
Code:
ATTFilter
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.09.03.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16660
ADMIN :: ACE [Administrator]

03.09.2013 19:06:29
mbam-log-2013-09-03 (19-06-29).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 307640
Laufzeit: 4 Minute(n), 

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 1
C:\Users\xxxxxxx\Downloads\winamp5581_full_emusic-7plus_de-de.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
Geändert von Pechvogel44 (03.09.2013 um 18:21 Uhr)

Alt 03.09.2013, 18:45   #13
M-K-D-B
/// TB-Ausbilder
 
DuckDuckGo läßt sich nicht enfernen - Standard

DuckDuckGo läßt sich nicht enfernen


Servus,


ja, ist von Vorteil, wenn die Tools als Admin laufen.


Fehlen noch ESET und SecurityCheck.

Alt 04.09.2013, 06:09   #14
Pechvogel44
 
DuckDuckGo läßt sich nicht enfernen - Standard

DuckDuckGo läßt sich nicht enfernen


Zitat:
Zitat von M-K-D-B Beitrag anzeigen
Fehlen noch ESET und SecurityCheck.
Ja doch...

ESET ist "schon" bei 31% (läuft seit 'ner 3/4 Stunde).

Und SecurityCheck hab ich immerhin schon runtergeladen.

Mein DuckDuckGo ist übrigens immer noch putzmunter

ESET ist jetzt nach 1 1/2 Stunden bei 33%

Mann! ESET hat insgesamt über vier Stunden gebraucht!

Hier das Log:

Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=4ec4a31112bfa44298fb6f792699a6dc
# end=stopped
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-08-08 07:20:46
# local_time=2012-08-08 09:20:46 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1792 16777215 100 0 23323511 23323511 0 0
# compatibility_mode=5893 16776638 100 94 23160111 96082883 0 0
# compatibility_mode=8192 67108863 100 0 284 284 0 0
# scanned=2781
# found=0
# cleaned=0
# scan_time=613
ESETSmartInstaller@High as downloader log:
all ok
esets_scanner_update returned -1 esets_gle=53251
ESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internet# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=4ec4a31112bfa44298fb6f792699a6dc
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-08-09 06:04:54
# local_time=2012-08-09 08:04:54 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=5.1.2600 NT Service Pack 2
# compatibility_mode=1792 16777215 100 0 23357461 23357461 0 0
# compatibility_mode=5893 16776638 100 94 23194061 96116833 0 0
# compatibility_mode=8192 67108863 100 0 34234 34234 0 0
# scanned=194888
# found=9
# cleaned=9
# scan_time=5310
C:\Program Files (x86)\Yontoo Layers Runtime\YontooIEClient.dll	a variant of Win32/Adware.Yontoo.A application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
C:\ProgramData\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_Setupx.dll	a variant of Win32/Adware.Yontoo.B application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
C:\ProgramData\Tarma Installer\{DE3B7BF9-0770-4104-BC0B-B1CCCCE2F053}\_Setupx.dll	a variant of Win32/Adware.Yontoo.B application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
C:\Users\ADMIN.Ace\AppData\Local\TempDIR\BetterInstaller.exe	a variant of Win32/Somoto.A application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
C:\Users\ADMIN.Ace\Downloads\SoftonicDownloader_fuer_netmeter.exe	a variant of Win32/SoftonicDownloader.A application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
E:\Downloads\SoftonicDownloader_fuer_fairstars-cd-ripper.exe	a variant of Win32/SoftonicDownloader.A application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
E:\Downloads\SoftonicDownloader_fuer_hydrogen.exe	a variant of Win32/SoftonicDownloader.A application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
E:\Downloads\SoftonicDownloader_fuer_netmeter.exe	a variant of Win32/SoftonicDownloader.A application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
E:\Downloads\SoftonicDownloader_fuer_ordrumbox.exe	a variant of Win32/SoftonicDownloader.A application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=4ec4a31112bfa44298fb6f792699a6dc
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-08-09 10:01:31
# local_time=2012-08-10 12:01:31 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=5.1.2600 NT Service Pack 2
# compatibility_mode=1792 16777215 100 0 23415217 23415217 0 0
# compatibility_mode=5893 16776638 100 94 23251817 96174589 0 0
# compatibility_mode=8192 67108863 100 0 91990 91990 0 0
# scanned=194982
# found=0
# cleaned=0
# scan_time=4952
ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=4ec4a31112bfa44298fb6f792699a6dc
# end=stopped
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-08-26 05:05:36
# local_time=2012-08-26 07:05:36 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1792 16777215 100 0 24828001 24828001 0 0
# compatibility_mode=5893 16776637 100 94 64870 97587373 0 0
# compatibility_mode=8192 67108863 100 0 1504774 1504774 0 0
# scanned=13
# found=0
# cleaned=0
# scan_time=12
ESETSmartInstaller@High as downloader log:
all ok
esets_scanner_update returned -1 esets_gle=53251
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=4ec4a31112bfa44298fb6f792699a6dc
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-08-26 06:15:13
# local_time=2012-08-26 08:15:13 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1792 16777215 100 0 24828098 24828098 0 0
# compatibility_mode=5893 16776637 100 94 64967 97587470 0 0
# compatibility_mode=8192 67108863 100 0 1504871 1504871 0 0
# scanned=196947
# found=2
# cleaned=2
# scan_time=4093
C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\plugin@yontoo.com\content\overlay.js	Win32/Adware.Yontoo application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wuxxxxx.defaultx\extensions\plugin@yontoo.com\content\overlay.js	Win32/Adware.Yontoo application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=4ec4a31112bfa44298fb6f792699a6dc
# engine=14998
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-09-03 09:49:13
# local_time=2013-09-03 11:49:13 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=774 16777213 85 91 4685599 154954825 0 0
# compatibility_mode=5893 16776637 100 94 19631 129874803 0 0
# scanned=219183
# found=1
# cleaned=0
# scan_time=15228
sh=58181F926788568394A7D4011629FE6F1DB25CA3 ft=1 fh=5573a96422ea8626 vn="Win32/Adware.RK.AP application" ac=I fn="E:\Downloads\FreeSoundRecorder941.exe"
und nun noch der SecurityCheck:
Code:
ATTFilter
 Results of screen317's Security Check version 0.99.72  
 Windows 7 Service Pack 1 x64   
 Internet Explorer 10  
``````````````Antivirus/Firewall Check:`````````````` 
avast! Antivirus   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 Java 7 Update 25  
 Adobe Flash Player 11.8.800.94  
 Adobe Reader 10.1.7 Adobe Reader out of Date!  
 Mozilla Firefox (Firefox,. Firefox out of Date!  
 Mozilla Thunderbird (3.1.6) Thunderbird out of Date!  
````````Process Check: objlist.exe by Laurent````````  
 Emsisoft Anti-Malware a2service.exe   
 AVAST Software Avast AvastSvc.exe  
 AVAST Software Avast AvastUI.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
Bin Fertig!
Geändert von Pechvogel44 (04.09.2013 um 06:14 Uhr)

Alt 04.09.2013, 08:39   #15
M-K-D-B
/// TB-Ausbilder
 
DuckDuckGo läßt sich nicht enfernen - Standard

DuckDuckGo läßt sich nicht enfernen


Servus,




Lösche die folgende Datei per Hand:
E:\Downloads\FreeSoundRecorder941.exe






Wenn du keine Probleme mehr hast, dann sind wir hier fertig. Deine Logdateien sind sauber.
Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.






Schritt 1
Deinstalliere bitte deine aktuelle Version von Adobe Reader
Start--> Systemsteuerung--> Software / Programme deinstallieren--> Adobe Reader
und lade dir die neue Version von Hier herunter-
Entferne den Hacken für den McAfee SecurityScan bzw. Google Chrome.





Schritt 2
  • Klicke auf > Hilfe > Über Firefox
  • Warte bis das Update geladen ist, klicke auf Update installieren und lasse Firefox neu starten.
  • Prüfe bitte, ob weitere Updates vorliegen oder ob Firefox aktuell ist.
  • Klicke nun auf > Add-ons > > Auf Updates überprüfen
  • Nach einem weiteren Neustart von Firefox sollte alles aktuell sein.

Prüfe bitte auch (regelmässig) ob folgende Links fehlende Updates bei deinen Plugins zeigen:




Schritt 3
Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.







Schritt 4
Abschließend habe ich noch ein paar Tipps zur Absicherung deines Systems.


Ich kann gar nicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher, dass du immer nur eine Anti-Viren Software installiert hast und dass diese auch up to date ist!


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion bietet zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • WOT (Web of trust)
    Dieses AddOn warnt dich, bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser
Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt, wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.


Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC


Halte dich fern von Registry Cleanern.
Diese Schaden deinem System mehr als dass sie helfen. Hier ein englischer Link:
Miekemoes Blogspot ( MVP )


Was du vermeiden solltest:
  • Klicke nicht auf alles, nur weil es dich dazu auffordert und schön bunt ist.
  • Verwende keine P2P oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie z.B. deinFoto.jpg.exe.



Nun bleibt mir nur noch dir viel Spaß beim sicheren Surfen zu wünschen... ... und vielleicht möchtest du ja das Trojaner-Board unterstützen?


Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.

Antwort
Seite 1 von 2 1 2

Themen zu DuckDuckGo läßt sich nicht enfernen
duckduckgo, enfernen, entferne, firefox, gefährlich, liebe, nervt, neustart, seite, seriös, standard, startseite, stelle, suchmaschine, suchmaschinen, troja, wirkt


« Windows7: HDvid codec v1 runtergeladen | GVU Trojaner Windows XP - kein abgesicherter Modus möglich »


Ähnliche Themen: DuckDuckGo läßt sich nicht enfernen


  1. Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht
    Log-Analyse und Auswertung - 05.08.2015 (22)
  2. Adware "Positive Finds" lässt sich in google Chrome nicht enfernen.
    Plagegeister aller Art und deren Bekämpfung - 15.02.2015 (10)
  3. DuckDuckGo lässt sich nicht aus Firefox entfernen
    Log-Analyse und Auswertung - 02.12.2014 (37)
  4. Firefox läßt sich nicht mehr öffnen - Der Vorgang wurde aufgrund von Beschränkungen auf dem Computer abgebrochen. Wenden sie sich an den Sys
    Log-Analyse und Auswertung - 05.08.2014 (17)
  5. Firefox läßt sich nicht mehr öffnen - Der Vorgang wurde aufgrund von Beschränkungen auf dem Computer abgebrochen. Wenden sie sich an den Sys
    Alles rund um Windows - 28.07.2014 (2)
  6. Wallpaper läßt sich nicht löschen
    Alles rund um Windows - 27.05.2013 (5)
  7. qvo6 läßt sich nicht etfernen
    Log-Analyse und Auswertung - 14.05.2013 (5)
  8. C:\test.exe läßt sich nicht entfernen
    Plagegeister aller Art und deren Bekämpfung - 28.02.2013 (3)
  9. Spyhunter 4 läßt sich nicht entfernen.
    Plagegeister aller Art und deren Bekämpfung - 02.05.2012 (30)
  10. sicherheitsdienstcenter läßt sich nicht starten
    Log-Analyse und Auswertung - 30.01.2011 (6)
  11. Trojaner lässt sich nicht enfernen
    Mülltonne - 05.09.2008 (2)
  12. ShlapiW32.dll läßt sich nicht entfernen
    Plagegeister aller Art und deren Bekämpfung - 09.08.2007 (6)
  13. Tr/Agent läßt sich nicht Entfernen
    Plagegeister aller Art und deren Bekämpfung - 12.06.2007 (1)
  14. Trojaner läßt sich nicht löschen
    Plagegeister aller Art und deren Bekämpfung - 21.10.2006 (3)
  15. Trojaner? lässt sich nicht enfernen !!
    Log-Analyse und Auswertung - 13.09.2005 (5)
  16. ahf.dll läßt sich nicht löschen
    Log-Analyse und Auswertung - 18.02.2005 (1)
  17. Systemwiederherstellung läßt sich nicht aktivieren !?
    Alles rund um Windows - 07.01.2005 (5)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema DuckDuckGo läßt sich nicht enfernen - Hallo, liebe Trojaner-Jäger, ich kann DuckDuckGo nicht aus dem Firefox entfernen. Nach jedem Neustart steht DuckDuckGo wieder an erster Stelle der Suchmaschinen und auch auf der Startseite ist das als - DuckDuckGo läßt sich nicht enfernen...
Archiv
Du betrachtest: DuckDuckGo läßt sich nicht enfernen auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19