Tube Saver auf dem Rechner - erste Maßnahmen bereits ergriffen

# AdwCleaner v3.001 - Report created 30/08/2013 at 18:11:50
# Updated 24/08/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Wenderlein - WENDERLEIN-PC
# Running from : C:\Users\Wenderlein\Downloads\adwcleaner3001.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16660


-\\ Mozilla Firefox v23.0.1 (de)

[ File : C:\Users\Wenderlein\AppData\Roaming\Mozilla\Firefox\Profiles\76bcgcp6.default\prefs.js ]


[ File : C:\Users\Henriette\AppData\Roaming\Mozilla\Firefox\Profiles\p2a2hel4.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [6076 octets] - [29/08/2013 23:20:34]
AdwCleaner[R1].txt - [820 octets] - [30/08/2013 18:11:50]
AdwCleaner[S0].txt - [5789 octets] - [29/08/2013 23:36:23]

########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [939 octets] ##########
         

# AdwCleaner v3.001 - Report created 29/08/2013 at 23:36:23
# Updated 24/08/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Wenderlein - WENDERLEIN-PC
# Running from : C:\Users\Wenderlein\Downloads\adwcleaner3001.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Ask
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\Users\Wenderlein\AppData\Roaming\pdfforge
Folder Deleted : C:\Users\Henriette\AppData\Local\apn
Folder Deleted : C:\Users\Henriette\AppData\LocalLow\AskToolbar
Folder Deleted : C:\Users\Henriette\AppData\LocalLow\pdfforge
Folder Deleted : C:\Users\Henriette\AppData\LocalLow\Search Settings
File Deleted : C:\Users\Henriette\AppData\Roaming\Mozilla\Firefox\Profiles\p2a2hel4.default\searchplugins\Askcom.xml
File Deleted : C:\Users\Wenderlein\AppData\Roaming\Mozilla\Firefox\Profiles\76bcgcp6.default\searchplugins\Babylon.xml
File Deleted : C:\Users\Wenderlein\AppData\Roaming\Mozilla\Firefox\Profiles\76bcgcp6.default\searchplugins\BrowserDefender.xml
File Deleted : C:\Users\Wenderlein\AppData\Roaming\Mozilla\Firefox\Profiles\76bcgcp6.default\\invalidprefs.js
File Deleted : C:\Users\Wenderlein\AppData\Roaming\Mozilla\Firefox\Profiles\76bcgcp6.default\user.js

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Key Deleted : HKLM\SOFTWARE\526d6d0b234b844
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{57F2FC14-BE99-4DFB-B9F1-2458A4F496AB}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{57F2FC14-BE99-4DFB-B9F1-2458A4F496AB}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{25A3A431-30BB-47C8-AD6A-E1063801134F}]
Value Deleted : HKLM\SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist [1]
Key Deleted : HKCU\Software\BabSolution
Key Deleted : HKCU\Software\DataMngr
[#] Key Deleted : HKCU\Software\DataMngr_Toolbar
Key Deleted : HKCU\Software\delta LTD
Key Deleted : HKCU\Software\Delta
Key Deleted : HKCU\Software\AppDataLow\Software\TubeSaver
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\Software\Delta

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16660

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v23.0.1 (de)

[ File : C:\Users\Wenderlein\AppData\Roaming\Mozilla\Firefox\Profiles\76bcgcp6.default\prefs.js ]

Line Deleted : user_pref("extensions.delta.admin", false);
Line Deleted : user_pref("extensions.delta.aflt", "babsst");
Line Deleted : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Line Deleted : user_pref("extensions.delta.autoRvrt", "false");
Line Deleted : user_pref("extensions.delta.bbDpng", "1");
Line Deleted : user_pref("extensions.delta.cntry", "DE");
Line Deleted : user_pref("extensions.delta.dfltLng", "de");
Line Deleted : user_pref("extensions.delta.excTlbr", false);
Line Deleted : user_pref("extensions.delta.ffxUnstlRst", true);
Line Deleted : user_pref("extensions.delta.hdrMd5", "EDE7D6EA01A56E6DC7087F0E7C5821FC");
Line Deleted : user_pref("extensions.delta.id", "908968d50000000000000627373f8b9f");
Line Deleted : user_pref("extensions.delta.instlDay", "15917");
Line Deleted : user_pref("extensions.delta.instlRef", "sst");
Line Deleted : user_pref("extensions.delta.lastVrsnTs", "1.8.22.022:56:06");
Line Deleted : user_pref("extensions.delta.newTab", false);
Line Deleted : user_pref("extensions.delta.prdct", "delta");
Line Deleted : user_pref("extensions.delta.prtnrId", "delta");
Line Deleted : user_pref("extensions.delta.rvrt", "false");
Line Deleted : user_pref("extensions.delta.sg", "azb");
Line Deleted : user_pref("extensions.delta.smplGrp", "none");
Line Deleted : user_pref("extensions.delta.tlbrId", "base");
Line Deleted : user_pref("extensions.delta.tlbrSrchUrl", "");
Line Deleted : user_pref("extensions.delta.vrsn", "1.8.22.0");
Line Deleted : user_pref("extensions.delta.vrsnTs", "1.8.22.022:56:06");
Line Deleted : user_pref("extensions.delta.vrsni", "1.8.22.0");
Line Deleted : user_pref("extensions.delta_i.babExt", "");
Line Deleted : user_pref("extensions.delta_i.babTrack", "affID=120692&tsp=4960");
Line Deleted : user_pref("extensions.delta_i.srcExt", "ss");

[ File : C:\Users\Henriette\AppData\Roaming\Mozilla\Firefox\Profiles\p2a2hel4.default\prefs.js ]

Line Deleted : user_pref("browser.search.defaultengine", "Ask.com");
Line Deleted : user_pref("browser.search.order.1", "Ask.com");
Line Deleted : user_pref("extensions.asktb.ff-original-keyword-url", "");

*************************

AdwCleaner[R0].txt - [6076 octets] - [29/08/2013 23:20:34]
AdwCleaner[S0].txt - [5649 octets] - [29/08/2013 23:36:23]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [5709 octets] ##########
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-09-2013
Ran by Wenderlein at 2013-09-01 18:47:03
Running from C:\Users\Wenderlein\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
AAVUpdateManager (x32 Version: 18.00.0000)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03)
Akamai NetSession Interface (HKCU)
Avira Free Antivirus (x32 Version: 13.0.0.3885)
Bluetooth Win7 Suite (64) (Version: 7.2.0.83)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
Dell Mobile Broadband Manager (x32 Version: 7.2.1.0)
Dell Resource CD (x32 Version: 1.00.0000)
Dell System Detect (HKCU Version: 3.3.2.0)
Dell WLAN and Bluetooth Client Installation (x32 Version: 9.0)
Digital Line Detect (x32 Version: 1.21)
Dropbox (HKCU Version: 2.0.26)
IDT Audio (x32 Version: 1.0.6365.0)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2867)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Juniper Networks, Inc. Setup Client Activex Control (x32 Version: 2.1.1.1)
McAfee Security Scan Plus (x32 Version: 3.0.318.3)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office 2010 Service Pack 1 (SP1) (x32)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Project 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Project MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Project Professional 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1)
Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1)
Microsoft-Maus- und Tastatur-Center (Version: 2.1.177.0)
MindManager X5 Pro (x32 Version: 5.1.220)
Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)
Mozilla Maintenance Service (x32 Version: 23.0.1)
MSVC80_x64_v2 (Version: 1.0.3.0)
MSVC80_x86_v2 (x32 Version: 1.0.3.0)
MSVC90_x64 (Version: 1.0.1.2)
MSVC90_x86 (x32 Version: 1.0.1.2)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MyPhoneExplorer (x32 Version: 1.8.4)
PDF Architect (x32 Version: 1.0.52.8917)
PDFCreator (x32 Version: 1.6.2)
Praxisratgeber Kosten senken (x32)
Quickset64 (Version: 10.09.25)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30126)
rosoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Spybot - Search & Destroy (x32 Version: 2.1.21)
Steuer-Spar-Erklärung 2013 (x32 Version: 18.09)
TI USB 3.0 Host Controller Driver (x32 Version: 1.12.14.0)
TI USB3 Host Driver (x32 Version: 1.12.14.0)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553065) (x32)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2566458) (x32)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition (x32)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)

==================== Restore Points  =========================

11-08-2013 21:12:50 Geplanter Prüfpunkt
17-08-2013 18:30:57 Windows Update
18-08-2013 08:59:31 Windows Update
18-08-2013 19:55:25 Nokia Connectivity Cable Driver wird entfernt
18-08-2013 19:58:01 PC Connectivity Solution wird entfernt
27-08-2013 18:47:14 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {25750F64-840C-4FFA-B383-5A97BAAEA713} - System32\Tasks\WPD\SqmUpload_S-1-5-21-1337328646-500218452-1612779106-1003 => C:\Windows\System32\portabledeviceapi.dll [2010-11-21] (Microsoft Corporation)
Task: {714343F3-C92B-4942-BA00-1C0001EC8848} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-01-29] (Microsoft Corporation)
Task: {7EB4B505-CA92-4FDB-B185-3790BF2F58E3} - System32\Tasks\DSite => C:\Users\WENDER~1\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE No File
Task: {8C0803E4-826A-40EF-B4AE-092000AA2332} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)
Task: {967752B3-53AA-4A13-994F-42B9E96385CC} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe No File
Task: {A361466F-18C4-4895-B940-2A5F549FB76A} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe No File
Task: {B3B77240-C79D-463F-800C-46B80738571D} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-01-29] (Microsoft)
Task: {C8374070-A9EE-48EF-BC8D-84B7803A52DB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-29] (Adobe Systems Incorporated)
Task: {C9EF8666-8A58-48FD-9C9C-C2997B17D908} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-01-29] (Microsoft Corporation)
Task: {D17B2E54-AF73-4856-B45C-BACE193B03C2} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-01-29] (Microsoft Corporation)
Task: {DB9F2CF5-BDB9-4302-B61A-7775D6FE0D7A} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe No File
Task: {FE64A76B-EE22-4C3F-9015-F64E840DA382} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-01-29] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DSite.job => C:\Users\WENDER~1\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE

==================== Loaded Modules (whitelisted) =============

2009-07-14 01:19 - 2009-07-14 03:41 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\ktmw32.dll
2009-07-14 01:46 - 2009-07-14 03:41 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\tschannel.dll
2012-10-10 03:22 - 2012-10-10 03:22 - 12836864 _____ (Intel Corporation) C:\Windows\system32\igd10umd64.dll
2013-01-29 18:15 - 2013-01-29 18:15 - 00661448 _____ (Microsoft Corporation) C:\Windows\system32\MSVCP110.dll
2013-01-29 18:15 - 2013-01-29 18:15 - 00828872 _____ (Microsoft Corporation) C:\Windows\system32\MSVCR110.dll
2013-01-29 18:15 - 2013-01-29 18:15 - 01457264 _____ (Microsoft Corporation) c:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll
2013-01-29 18:15 - 2013-01-29 18:15 - 00617072 _____ (Microsoft Corporation) c:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\dpghnt\dpghnt.dll
2013-06-05 19:17 - 2013-06-05 19:17 - 00164016 _____ (Dropbox, Inc.) C:\Users\Wenderlein\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
2012-08-16 06:51 - 2012-08-16 06:51 - 06670496 _____ (Microsoft Corporation) C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
2012-12-19 02:13 - 2012-12-19 02:13 - 00176456 _____ (Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.4148_none_0a1d2fcba76b3f00\ATL90.DLL
2011-03-17 01:07 - 2011-03-17 01:07 - 04297568 _____ () C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf
2010-10-29 05:01 - 2010-10-29 05:01 - 08953768 _____ (Microsoft Corporation) C:\PROGRA~1\MICROS~2\Office14\1031\GrooveIntlResource.dll
2009-07-14 02:17 - 2009-07-14 03:40 - 00024576 _____ (Microsoft Corporation) C:\Windows\System32\drprov.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00129536 _____ (Microsoft Corporation) C:\Windows\System32\ntlanman.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00100864 _____ (Microsoft Corporation) C:\Windows\System32\davclnt.dll
2009-07-14 01:35 - 2009-07-14 03:40 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\FunDisc.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\fdproxy.dll
2011-05-20 12:15 - 2011-05-20 12:15 - 00061088 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AthCopyHook.dll
2009-07-14 02:31 - 2009-07-14 03:41 - 02137600 _____ (Microsoft Corporation) C:\Windows\System32\NLSData0007.dll
2010-11-21 05:23 - 2010-11-21 05:23 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\MAPI32.dll
2010-12-27 22:42 - 2010-12-27 22:42 - 01611120 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONFILTER.DLL
2010-10-20 16:19 - 2010-10-20 16:19 - 00291792 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\MAPISHELL.DLL
2010-03-23 07:12 - 2010-03-23 07:12 - 00594392 _____ (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\1031\mapishellr.dll
2012-10-10 03:22 - 2012-10-10 03:22 - 00110592 _____ (Intel Corporation) C:\Windows\System32\hccutils.DLL
2012-10-10 03:22 - 2012-10-10 03:22 - 00063488 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.dll
2012-10-10 03:22 - 2012-10-10 03:22 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrDEU.lrc
2012-10-10 03:22 - 2012-10-10 03:22 - 09007616 _____ (Intel Corporation) C:\Windows\System32\igfxress.dll
2012-10-10 03:22 - 2012-10-10 03:22 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2010-11-21 05:23 - 2010-11-21 05:23 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\ODBC32.dll
2012-12-19 14:03 - 2011-09-08 06:42 - 04113408 _____ (IDT, Inc.) C:\Program Files\IDT\WDM\STLang64.dll
2009-07-14 02:28 - 2009-07-14 03:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\odbcint.dll
2012-12-19 14:03 - 2011-09-08 06:42 - 00655872 ____N (IDT, Inc.) C:\Windows\system32\stapi64.dll
2011-05-20 12:16 - 2011-05-20 12:16 - 00066720 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Sync.dll
2011-05-20 12:15 - 2011-05-20 12:15 - 00073888 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\GOEP_SINGLE.DLL
2011-05-20 12:15 - 2011-05-20 12:15 - 02234016 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\OutLookLib.dll
2011-05-20 12:15 - 2011-05-20 12:15 - 00119456 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\L2capLib.dll
2011-05-20 12:15 - 2011-05-20 12:15 - 00043680 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BTBIP.DLL
2011-05-20 12:16 - 2011-05-20 12:16 - 00081056 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\RfcommLib.dll
2011-05-20 12:15 - 2011-05-20 12:15 - 00044704 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BPP.DLL
2011-05-20 12:15 - 2011-05-20 12:15 - 00079520 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\GOEP_bpp.DLL
2011-05-20 12:15 - 2011-05-20 12:15 - 00079008 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Handsfree.dll
2011-05-20 12:15 - 2011-05-20 12:15 - 00207520 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtObexFt.dll
2011-05-20 12:15 - 2011-05-20 12:15 - 00029856 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtFileStore.dll
2011-05-20 12:15 - 2011-05-20 12:15 - 00208544 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BTOBEXOP.dll
2011-05-20 12:15 - 2011-05-20 12:15 - 00030368 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtFileStoreOpp.dll
2011-05-20 12:15 - 2011-05-20 12:15 - 00072864 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\goep.dll
2011-05-20 12:15 - 2011-05-20 12:15 - 00305824 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\filetransfer.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00047104 _____ (Microsoft Corporation) C:\Windows\System32\wshBth.dll
2011-05-20 12:16 - 2011-05-20 12:16 - 00140448 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\skypeagent.dll
2012-12-19 03:13 - 2012-12-19 03:13 - 01658368 _____ (Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.5592_none_8448f49f328da8c3\MFC80.DLL
2011-05-20 12:15 - 2011-05-20 12:15 - 00118944 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\ObjPush.dll
2012-12-19 12:34 - 2012-07-05 00:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\NETAPI32.dll
2007-05-31 17:11 - 2007-05-31 17:11 - 00253832 _____ (Microsoft Corporation) C:\Windows\system32\rapistub.dll
2007-05-31 17:11 - 2007-05-31 17:11 - 00123272 _____ (Microsoft Corporation) C:\Windows\system32\RAPI.dll
2007-05-31 17:11 - 2007-05-31 17:11 - 00074120 _____ (Microsoft Corporation) C:\Windows\system32\CEUTIL.dll
2007-05-31 17:10 - 2007-05-31 17:10 - 00034696 _____ (Microsoft Corporation) C:\Windows\system32\rapiproxystub.dll
2007-05-31 17:11 - 2007-05-31 17:11 - 00040840 _____ (Microsoft Corporation) C:\Windows\system32\wcescommproxy.dll
2013-08-18 15:25 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-05-01 09:04 - 2013-05-01 09:04 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\D3D10Warp.dll
2009-07-14 02:00 - 2009-07-14 03:41 - 00283648 _____ (Microsoft Corporation) C:\Windows\System32\LocationApi.dll
2009-07-14 02:00 - 2009-07-14 03:41 - 00174592 _____ (Microsoft Corporation) C:\Windows\System32\SensorsApi.dll
2009-07-14 01:28 - 2009-07-14 03:41 - 00271360 _____ (Microsoft Corporation) C:\Windows\System32\WDSCORE.dll
2013-05-01 09:05 - 2013-05-01 09:05 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2009-07-14 01:56 - 2009-07-14 03:41 - 00163328 _____ (Microsoft Corporation) C:\Program Files\Windows Sidebar\wlsrvc.dll
2009-02-26 17:00 - 2009-02-26 17:00 - 00107904 _____ (Microsoft Corporation) C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
2009-07-30 19:25 - 2009-07-30 19:25 - 00995328 _____ (Brother Industries Ltd.) C:\Windows\system32\spool\DRIVERS\x64\3\BRUHLA4B.DLL
2009-07-14 02:39 - 2009-07-14 03:41 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\SPOOLSS.DLL
2009-07-30 19:25 - 2009-07-30 19:25 - 00068096 _____ (Brother Industries Ltd.) C:\Windows\system32\spool\DRIVERS\x64\3\BRLHLA4B.DLL
2009-07-30 19:25 - 2009-07-30 19:25 - 00382464 _____ (Brother Industries Ltd.) C:\Windows\system32\spool\DRIVERS\x64\3\BROHLA4B.DLL
2009-07-14 01:50 - 2009-07-14 03:40 - 00177664 _____ (Microsoft Corporation) C:\Windows\system32\AUTHZ.dll

==================== Alternate Data Streams (whitelisted) ==========



==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (09/01/2013 06:38:40 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/01/2013 10:10:18 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/01/2013 09:50:50 AM) (Source: Customer Experience Improvement Program) (User: )
Description: 80004005

Error: (08/31/2013 11:47:59 AM) (Source: Customer Experience Improvement Program) (User: )
Description: 80004005

Error: (08/31/2013 11:09:27 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2013 10:03:04 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/30/2013 06:14:26 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/30/2013 06:00:14 PM) (Source: Customer Experience Improvement Program) (User: )
Description: 80004005

Error: (08/30/2013 00:31:51 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/29/2013 11:39:16 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (09/01/2013 10:08:42 AM) (Source: DCOM) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}

Error: (08/31/2013 10:02:59 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (08/31/2013 10:02:59 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht.

Error: (08/28/2013 08:41:24 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎28.‎08.‎2013 um 15:07:56 unerwartet heruntergefahren.

Error: (08/27/2013 11:46:39 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (08/27/2013 08:48:18 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (08/27/2013 08:47:37 PM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (08/26/2013 11:05:15 PM) (Source: WMPNetworkSvc) (User: )
Description: 0x80004004-1

Error: (08/26/2013 08:17:47 AM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.

Error: (08/25/2013 10:33:58 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.


Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Percentage of memory in use: 47%
Total physical RAM: 4002.05 MB
Available physical RAM: 2092.16 MB
Total Pagefile: 8002.29 MB
Available Pagefile: 6016.29 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:339.73 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 6E414B1C)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-09-2013
Ran by Wenderlein (administrator) on WENDERLEIN-PC on 01-09-2013 18:46:33
Running from C:\Users\Wenderlein\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
() C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Atheros) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe
(Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\HelperService.exe
(Microsoft Corporation) c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(Atheros Communications) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AthBtTray.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdcBase.exe
(Akamai Technologies, Inc.) C:\Users\Wenderlein\AppData\Local\Akamai\netsession_win.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE
(Akamai Technologies, Inc.) C:\Users\Wenderlein\AppData\Local\Akamai\netsession_win.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe
(Dropbox, Inc.) C:\Users\Wenderlein\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Windows\Regedit.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1424896 2011-09-08] (IDT, Inc.)
HKLM\...\Run: [QuickSet] - C:\Program Files\Dell\QuickSet\QuickSet.exe [3668336 2011-03-24] (Dell Inc.)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe [627360 2011-05-20] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AthBtTray.exe [379552 2011-05-20] (Atheros Commnucations)
HKLM\...\Run: [Windows Mobile-based device management] - C:\Windows\WindowsMobile\wmdcBase.exe [660360 2007-05-31] (Microsoft Corporation)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Wenderlein\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKCU\...\Run: [OfficeSyncProcess] - C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [719672 2012-01-20] (Microsoft Corporation)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345144 2013-06-24] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Digital Line Detect.lnk
ShortcutTarget: Digital Line Detect.lnk -> C:\Program Files (x86)\Digital Line Detect\DLG.exe (Avanquest Software )
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\Henriette\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Wenderlein\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Wenderlein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Wenderlein\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=ST9500423AS_6WR2FZEAXXXX6WR2FZEA&ts=1378052584
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=ST9500423AS_6WR2FZEAXXXX6WR2FZEA&ts=1378052584
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=ST9500423AS_6WR2FZEAXXXX6WR2FZEA&ts=1378052584
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=ST9500423AS_6WR2FZEAXXXX6WR2FZEA&ts=1378052584
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=ST9500423AS_6WR2FZEAXXXX6WR2FZEA&ts=1378052584
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=ST9500423AS_6WR2FZEAXXXX6WR2FZEA&ts=1378052584
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=sc&from=cor&uid=ST9500423AS_6WR2FZEAXXXX6WR2FZEA&ts=1378052584
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=ST9500423AS_6WR2FZEAXXXX6WR2FZEA&ts=1378052584
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=ST9500423AS_6WR2FZEAXXXX6WR2FZEA&ts=1378052584
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=ST9500423AS_6WR2FZEAXXXX6WR2FZEA&ts=1378052584
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=ST9500423AS_6WR2FZEAXXXX6WR2FZEA&ts=1378052584
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=ST9500423AS_6WR2FZEAXXXX6WR2FZEA&ts=1378052584
SearchScopes: HKCU - {1F6989AC-FB05-4FC3-97D2-3CE104459070} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=ST9500423AS_6WR2FZEAXXXX6WR2FZEA&ts=1378052584
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GbR)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://juniper.net/dana-cached/sc/JuniperSetupClient.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Wenderlein\AppData\Roaming\Mozilla\Firefox\Profiles\76bcgcp6.default
FF user.js: detected! => C:\Users\Wenderlein\AppData\Roaming\Mozilla\Firefox\Profiles\76bcgcp6.default\user.js
FF NewTab: hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=ST9500423AS_6WR2FZEAXXXX6WR2FZEA&ts=1378052584
FF SearchEngineOrder.1: qvo6
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\qvo6.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: TubeSaver - C:\Users\Wenderlein\AppData\Roaming\Mozilla\Firefox\Profiles\76bcgcp6.default\Extensions\125
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=sc&from=cor&uid=ST9500423AS_6WR2FZEAXXXX6WR2FZEA&ts=1378052584

==================== Services (Whitelisted) =================

R2 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-06-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-24] (Avira Operations GmbH & Co. KG)
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-05-20] (Atheros)
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1324104 2013-01-09] (pdfforge GbR)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [795208 2013-01-09] (pdfforge GbR)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-03-30] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-03-30] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-30] (Avira Operations GmbH & Co. KG)
S3 pccsmcfd; system32\DRIVERS\pccsmcfdx64.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-01 18:39 - 2013-09-01 18:39 - 00000000 ___RD C:\Users\Wenderlein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2013-09-01 18:33 - 2013-09-01 18:34 - 01590206 _____ (Farbar) C:\Users\Wenderlein\Downloads\FRST64.exe
2013-09-01 18:23 - 2013-09-01 18:35 - 00000000 ____D C:\ProgramData\eSafe
2013-09-01 18:23 - 2013-09-01 18:23 - 00003262 _____ C:\Windows\System32\Tasks\DSite
2013-09-01 18:23 - 2013-09-01 18:23 - 00000302 _____ C:\Windows\Tasks\DSite.job
2013-09-01 18:23 - 2013-09-01 18:23 - 00000000 ____D C:\Users\Wenderlein\AppData\Roaming\DSite
2013-09-01 18:23 - 2013-09-01 18:23 - 00000000 ____D C:\User Data
2013-09-01 18:16 - 2013-09-01 18:16 - 00714816 _____ C:\Users\Wenderlein\Downloads\ZipOpenerSetup.exe
2013-08-29 23:51 - 2013-08-30 00:30 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-08-29 23:51 - 2013-08-29 23:53 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-08-29 23:51 - 2013-08-29 23:51 - 00001379 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-08-29 23:51 - 2013-08-29 23:51 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-08-29 23:51 - 2009-01-25 13:14 - 00017272 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2013-08-29 23:49 - 2013-08-29 23:50 - 37672592 _____ (Safer-Networking Ltd.                                       ) C:\Users\Wenderlein\Downloads\spybotsd-2.1.21-SR2.exe
2013-08-29 23:40 - 2013-08-30 18:12 - 00000000 ____D C:\Users\Wenderlein\Desktop\AntiVir
2013-08-29 23:20 - 2013-08-30 18:13 - 00000000 ____D C:\AdwCleaner
2013-08-29 23:20 - 2013-08-29 23:20 - 00994642 _____ C:\Users\Wenderlein\Downloads\adwcleaner3001.exe
2013-08-20 17:25 - 2013-08-20 17:25 - 01699016 _____ C:\Users\Henriette\Downloads\803608_803646_BB(2)
2013-08-20 17:25 - 2013-08-20 17:25 - 01699016 _____ C:\Users\Henriette\Downloads\803608_803646_BB(1)
2013-08-20 17:24 - 2013-08-20 17:24 - 01699016 _____ C:\Users\Henriette\Downloads\803608_803646_BB
2013-08-18 15:25 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-18 15:25 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-18 15:25 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-18 15:25 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-18 15:25 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-18 15:25 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-18 15:25 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-18 15:25 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-18 15:25 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-18 15:25 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-18 15:25 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-18 15:25 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-18 15:25 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-18 15:25 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-18 15:25 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-18 15:25 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-18 15:25 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-18 15:25 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-18 15:25 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-18 15:25 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-18 15:25 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-18 15:25 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-18 15:25 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-18 15:25 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-18 15:25 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-18 15:25 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-18 15:25 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-18 15:25 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-18 15:25 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-18 15:25 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-18 15:25 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-17 20:32 - 2013-08-17 20:32 - 00000000 ____D C:\Windows\system32\MRT
2013-08-17 20:31 - 2013-08-17 20:31 - 00000000 ____D C:\d35394afaa1287d1083ac718
2013-08-17 19:44 - 2013-08-17 19:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-15 14:05 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-15 14:04 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-15 14:04 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-15 14:04 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-15 14:04 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-15 14:04 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-15 14:04 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-15 14:04 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-08-15 14:04 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-15 14:04 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-15 14:04 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-15 14:04 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-15 14:04 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-15 14:04 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-08-15 14:04 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-08-15 14:04 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-08-15 14:04 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-15 14:04 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-15 14:04 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-08-15 14:04 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-15 14:04 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-15 14:04 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-15 14:04 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-08-15 14:04 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-08-15 14:04 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-08-15 14:04 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-08-15 14:04 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-10 22:10 - 2013-08-10 22:19 - 684191078 _____ C:\Users\Wenderlein\Downloads\Pfarrer Braun - Die Gärten des Rabbiners.wmv

==================== One Month Modified Files and Folders =======

2013-09-01 18:46 - 2009-07-14 06:45 - 00021264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-01 18:46 - 2009-07-14 06:45 - 00021264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-01 18:42 - 2012-12-19 01:41 - 02009005 _____ C:\Windows\WindowsUpdate.log
2013-09-01 18:39 - 2013-09-01 18:39 - 00000000 ___RD C:\Users\Wenderlein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2013-09-01 18:39 - 2013-07-24 21:42 - 00000000 ___RD C:\Users\Wenderlein\Dropbox
2013-09-01 18:39 - 2013-07-23 21:57 - 00000000 ____D C:\Users\Wenderlein\AppData\Roaming\Dropbox
2013-09-01 18:38 - 2010-11-21 05:47 - 00153382 _____ C:\Windows\PFRO.log
2013-09-01 18:38 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-01 18:38 - 2009-07-14 06:51 - 00050006 _____ C:\Windows\setupact.log
2013-09-01 18:37 - 2012-12-19 02:33 - 00000000 ____D C:\Users\Wenderlein\Documents\Outlook-Dateien
2013-09-01 18:35 - 2013-09-01 18:23 - 00000000 ____D C:\ProgramData\eSafe
2013-09-01 18:34 - 2013-09-01 18:33 - 01590206 _____ (Farbar) C:\Users\Wenderlein\Downloads\FRST64.exe
2013-09-01 18:23 - 2013-09-01 18:23 - 00003262 _____ C:\Windows\System32\Tasks\DSite
2013-09-01 18:23 - 2013-09-01 18:23 - 00000302 _____ C:\Windows\Tasks\DSite.job
2013-09-01 18:23 - 2013-09-01 18:23 - 00000000 ____D C:\Users\Wenderlein\AppData\Roaming\DSite
2013-09-01 18:23 - 2013-09-01 18:23 - 00000000 ____D C:\User Data
2013-09-01 18:23 - 2012-12-19 01:45 - 00001715 _____ C:\Users\Wenderlein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-09-01 18:16 - 2013-09-01 18:16 - 00714816 _____ C:\Users\Wenderlein\Downloads\ZipOpenerSetup.exe
2013-09-01 18:01 - 2013-01-13 17:43 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-01 17:50 - 2012-12-19 02:54 - 00000000 ____D C:\Users\Henriette\Documents\Bluetooth Folder
2013-09-01 17:50 - 2012-12-19 02:00 - 00000000 ____D C:\Users\Wenderlein\Documents\Bluetooth Folder
2013-09-01 17:46 - 2012-12-19 02:56 - 00000000 ____D C:\Users\Henriette\Documents\Outlook-Dateien
2013-09-01 17:26 - 2013-05-30 20:48 - 00000000 ___RD C:\Users\Henriette\Dropbox
2013-09-01 17:26 - 2013-05-30 20:46 - 00000000 ____D C:\Users\Henriette\AppData\Roaming\Dropbox
2013-08-30 18:13 - 2013-08-29 23:20 - 00000000 ____D C:\AdwCleaner
2013-08-30 18:12 - 2013-08-29 23:40 - 00000000 ____D C:\Users\Wenderlein\Desktop\AntiVir
2013-08-30 00:30 - 2013-08-29 23:51 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-08-29 23:53 - 2013-08-29 23:51 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-08-29 23:51 - 2013-08-29 23:51 - 00001379 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-08-29 23:51 - 2013-08-29 23:51 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-08-29 23:50 - 2013-08-29 23:49 - 37672592 _____ (Safer-Networking Ltd.                                       ) C:\Users\Wenderlein\Downloads\spybotsd-2.1.21-SR2.exe
2013-08-29 23:20 - 2013-08-29 23:20 - 00994642 _____ C:\Users\Wenderlein\Downloads\adwcleaner3001.exe
2013-08-29 22:25 - 2013-01-13 17:43 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-29 22:25 - 2012-12-20 14:27 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-29 22:25 - 2012-12-20 14:27 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-28 22:49 - 2012-12-21 21:19 - 00000000 ____D C:\Users\Wenderlein\Documents\Eigene Maps
2013-08-27 22:05 - 2012-12-19 10:36 - 00654400 _____ C:\Windows\system32\perfh007.dat
2013-08-27 22:05 - 2012-12-19 10:36 - 00130240 _____ C:\Windows\system32\perfc007.dat
2013-08-27 22:05 - 2009-07-14 07:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-27 20:48 - 2012-12-19 02:11 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-25 21:22 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-08-20 17:25 - 2013-08-20 17:25 - 01699016 _____ C:\Users\Henriette\Downloads\803608_803646_BB(2)
2013-08-20 17:25 - 2013-08-20 17:25 - 01699016 _____ C:\Users\Henriette\Downloads\803608_803646_BB(1)
2013-08-20 17:24 - 2013-08-20 17:24 - 01699016 _____ C:\Users\Henriette\Downloads\803608_803646_BB
2013-08-18 21:58 - 2012-12-19 02:32 - 00039502 _____ C:\Windows\DPINST.LOG
2013-08-18 21:57 - 2012-12-19 02:32 - 00000000 ____D C:\ProgramData\Nokia
2013-08-18 21:57 - 2012-12-19 02:31 - 00000000 ____D C:\Program Files (x86)\Nokia
2013-08-18 21:56 - 2012-12-19 13:03 - 00000000 ____D C:\Users\Wenderlein\AppData\Roaming\Nokia Suite
2013-08-18 21:56 - 2012-12-19 13:02 - 00000000 ____D C:\Users\Wenderlein\AppData\Roaming\Nokia
2013-08-17 20:32 - 2013-08-17 20:32 - 00000000 ____D C:\Windows\system32\MRT
2013-08-17 20:31 - 2013-08-17 20:31 - 00000000 ____D C:\d35394afaa1287d1083ac718
2013-08-17 20:31 - 2012-12-19 12:58 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-17 20:29 - 2012-12-19 12:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-17 19:45 - 2013-08-17 19:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-11 22:47 - 2013-07-31 22:56 - 00000000 ____D C:\Users\Wenderlein\AppData\Roaming\MyPhoneExplorer
2013-08-10 22:19 - 2013-08-10 22:10 - 684191078 _____ C:\Users\Wenderlein\Downloads\Pfarrer Braun - Die Gärten des Rabbiners.wmv
2013-08-03 15:12 - 2013-05-01 09:19 - 00000000 ____D C:\Users\Henriette\AppData\Local\CrashDumps

Files to move or delete:
====================
C:\Users\Henriette\AppData\Local\Temp\APNStub.exe
C:\Users\Henriette\AppData\Local\Temp\dsHostCheckerSetup.exe
C:\Users\Henriette\AppData\Local\Temp\firefoxjre_exe.exe
C:\Users\Henriette\AppData\Local\Temp\install_flashplayer11x32au_ltr5x64d_awc_aih.exe
C:\Users\Henriette\AppData\Local\Temp\MouseKeyboardCenterx64_1031.exe
C:\Users\Henriette\AppData\Local\Temp\{5A8BEBB7-AD5E-4ABD-9689-B186E2AE7819}\{28006915-2739-4EBE-B5E8-49B25D32EB33}\InstallHelper.dll
C:\Users\Henriette\AppData\Local\Temp\nsg8A66.tmp\DropboxNSISTools.dll
C:\Users\Henriette\AppData\Local\Temp\nsg8A66.tmp\UAC.dll
C:\Users\WENDER~1\AppData\Local\Temp\ose00000.exe
C:\Users\WENDER~1\AppData\Local\Temp\Quarantine.exe
C:\Users\WENDER~1\AppData\Local\Temp\_is1B8B.exe
C:\Users\WENDER~1\AppData\Local\Temp\_is4AA6.exe
C:\Users\WENDER~1\AppData\Local\Temp\_is65C4.exe
C:\Users\WENDER~1\AppData\Local\Temp\{BEF4440C-860C-43B2-99EA-0B20B17DDC49}\ISSetup.dll
C:\Users\WENDER~1\AppData\Local\Temp\{BEF4440C-860C-43B2-99EA-0B20B17DDC49}\_Setup.dll
C:\Users\WENDER~1\AppData\Local\Temp\{4623DC8F-571E-4772-BD83-8B24170AE3BC}\ISSetup.dll
C:\Users\WENDER~1\AppData\Local\Temp\{4623DC8F-571E-4772-BD83-8B24170AE3BC}\_Setup.dll
C:\Users\WENDER~1\AppData\Local\Temp\{21BA6E71-15D8-4501-B847-448805ABA1F8}\ISSetup.dll
C:\Users\WENDER~1\AppData\Local\Temp\{21BA6E71-15D8-4501-B847-448805ABA1F8}\_Setup.dll
C:\Users\WENDER~1\AppData\Local\Temp\is357113909\29559891_Setup.EXE
C:\Users\WENDER~1\AppData\Local\Temp\is357113909\cor_ar_201381417179_qvo6.exe
C:\Users\WENDER~1\AppData\Local\Temp\is357113909\DeltaTB.exe
C:\Users\WENDER~1\AppData\Local\Temp\is357113909\OpenItSetup.exe
C:\Users\WENDER~1\AppData\Local\Temp\is357113909\wajam_validate.exe
C:\Users\WENDER~1\AppData\Local\Temp\eIntaller\32A02CDEB29E491a83C7D1EA3E25D7D7\eGdpSvc.exe
C:\Users\WENDER~1\AppData\Local\Temp\eIntaller\32A02CDEB29E491a83C7D1EA3E25D7D7\eXQ.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-25 21:14

==================== End Of Log ============================
         

Search results from Spybot - Search & Destroy

30.08.2013 00:28:09
Scan took 00:19:58.
31 items found.

Delta.Toolbar: [SBI $04AEAE14] User settings (Registry Value, nothing done)
  HKEY_USERS\S-1-5-21-1337328646-500218452-1612779106-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\bProtectNewTabPageShow

Delta.Toolbar: [SBI $0760E887] User settings (Registry Value, nothing done)
  HKEY_USERS\S-1-5-21-1337328646-500218452-1612779106-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\bProtectShowTabsWelcome

Macromedia.FlashPlayer.Cookies: [SBI $1EF45977]  Text file (File, nothing done)
  C:\Users\Wenderlein\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PW9ZNHW3\www.ajaxcdn.org\swf.swf\dm_cookie.sol
  Properties.size=415
  Properties.md5=2BB848B3FB7233BF6D1601FEFE1C2B34
  Properties.filedate=1377807941
  Properties.filedatetext=2013-08-29 22:25:40

FastClick: [SBI $8E73A7FB] Tracking cookie (Internet Explorer (Benutzer): Wenderlein) (Browser: Cookie, nothing done)
  

MediaPlex: [SBI $8E73A7FB] Tracking cookie (Internet Explorer (Benutzer): Wenderlein) (Browser: Cookie, nothing done)
  

MediaPlex: [SBI $8E73A7FB] Tracking cookie (Internet Explorer (Benutzer): Wenderlein) (Browser: Cookie, nothing done)
  

DoubleClick: [SBI $8E73A7FB] Tracking cookie (Internet Explorer (Benutzer): Wenderlein) (Browser: Cookie, nothing done)
  

Internet Explorer: [SBI $1E8157BE] Typed URL list (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-1337328646-500218452-1612779106-1000\Software\Microsoft\Internet Explorer\TypedURLs

Internet Explorer: [SBI $FF589D0C] Download directory (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-1337328646-500218452-1612779106-1000\Software\Microsoft\Internet Explorer\Download Directory

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
  HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-1337328646-500218452-1612779106-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
  HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

MS Management Console: [SBI $ECD50EAD] Recent command list (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-1337328646-500218452-1612779106-1000\Software\Microsoft\Microsoft Management Console\Recent File List

MS Media Player: [SBI $5C51E349] Client ID (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-1337328646-500218452-1612779106-1000\Software\Microsoft\MediaPlayer\Player\Settings\Client ID

MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
  HKEY_USERS\.DEFAULT\Software\Microsoft\Direct3D\MostRecentApplication\Name

MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-1337328646-500218452-1612779106-1000\Software\Microsoft\Direct3D\MostRecentApplication\Name

MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
  HKEY_USERS\S-1-5-18\Software\Microsoft\Direct3D\MostRecentApplication\Name

MS DirectDraw: [SBI $EB49D5AF] Most recent application (Registry Change, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name

Windows: [SBI $1E4E2003] Drivers installation paths (Registry Change, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Installation Sources

Windows: [SBI $1E4E2003] Drivers installation paths (Registry Change, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Installation Sources

Windows.OpenWith: [SBI $F7204896] Open with list - .AVI extension (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-1337328646-500218452-1612779106-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.AVI\OpenWithList

Windows.OpenWith: [SBI $A1C94E79] Open with list - .BMP extension (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-1337328646-500218452-1612779106-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.BMP\OpenWithList

Windows Explorer: [SBI $AA0766B5] Stream history (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-1337328646-500218452-1612779106-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\StreamMRU

Windows Explorer: [SBI $D20DA0AD] Recent file global history (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-1337328646-500218452-1612779106-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs

Windows Media SDK: [SBI $37AAEDE6] Computer name (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-1337328646-500218452-1612779106-1000\Software\Microsoft\Windows Media\WMSDK\General\ComputerName

Windows Media SDK: [SBI $CAA58B6E] Unique ID (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-1337328646-500218452-1612779106-1000\Software\Microsoft\Windows Media\WMSDK\General\UniqueID

Windows Media SDK: [SBI $BACCD0DA] Volume serial number (Registry Value, nothing done)
  HKEY_USERS\S-1-5-21-1337328646-500218452-1612779106-1000\Software\Microsoft\Windows Media\WMSDK\General\VolumeSerialNumber

Cookie: [SBI $49804B54] Browser: Cookie (90) (Browser: Cookie, nothing done)
  

Cache: [SBI $49804B54] Browser: Cache (1293) (Browser: Cache, nothing done)
  

Verlauf: [SBI $49804B54] Browser: History (477) (Browser: History, nothing done)
  

Cookie: [SBI $49804B54] Browser: Cookie (20) (Browser: Cookie, nothing done)
  


--- Spybot - Search & Destroy version: 2.1.18.131  DLL (build: 20130516) ---

2013-05-16 blindman.exe (2.1.18.151)
2013-05-16 explorer.exe (2.1.18.177)
2013-05-16 SDBootCD.exe (2.1.18.109)
2013-05-16 SDCleaner.exe (2.1.18.110)
2013-05-16 SDDelFile.exe (2.1.18.94)
2013-06-18 SDDisableProxy.exe
2013-05-16 SDFiles.exe (2.1.18.135)
2013-03-20 SDFileScanHelper.exe (2.1.16.1)
2013-05-16 SDFSSvc.exe (2.1.18.208)
2013-05-16 SDHookHelper.exe (2.1.18.2)
2013-05-16 SDHookInst32.exe (2.1.18.2)
2013-05-16 SDHookInst64.exe (2.1.18.2)
2013-05-16 SDImmunize.exe (2.1.18.130)
2013-05-16 SDLogReport.exe (2.1.18.107)
2013-05-16 SDOnAccess.exe (2.1.18.4)
2013-05-16 SDPESetup.exe (2.1.18.3)
2013-05-16 SDPEStart.exe (2.1.18.86)
2013-05-16 SDPhoneScan.exe (2.1.18.28)
2013-05-16 SDPRE.exe (2.1.18.22)
2013-05-16 SDPrepPos.exe (2.1.18.10)
2013-05-16 SDQuarantine.exe (2.1.18.103)
2013-05-16 SDRootAlyzer.exe (2.1.18.116)
2013-05-16 SDSBIEdit.exe (2.1.18.39)
2013-05-16 SDScan.exe (2.1.18.177)
2013-05-16 SDScript.exe (2.1.18.53)
2013-05-16 SDSettings.exe (2.1.18.136)
2013-05-16 SDShell.exe (2.1.18.2)
2013-05-16 SDShred.exe (2.1.18.107)
2013-05-16 SDSysRepair.exe (2.1.18.101)
2013-05-16 SDTools.exe (2.1.18.150)
2013-07-25 SDTray.exe (2.1.21.129)
2013-05-16 SDUpdate.exe (2.1.18.91)
2013-05-16 SDUpdSvc.exe (2.1.18.76)
2013-07-10 SDWelcome.exe (2.1.21.129)
2013-05-15 SDWSCSvc.exe (2.1.18.2)
2013-06-19 spybotsd2-translation-frx.exe
2013-08-29 unins000.exe (51.1052.0.0)
1999-12-02 xcacls.exe
2012-08-23 borlndmm.dll (10.0.2288.42451)
2012-09-05 DelZip190.dll (1.9.0.107)
2012-09-10 libeay32.dll (1.0.0.4)
2012-09-10 libssl32.dll (1.0.0.4)
2013-05-16 SDAdvancedCheckLibrary.dll (2.1.18.98)
2013-05-16 SDAV.dll
2013-05-16 SDECon32.dll (2.1.18.113)
2013-05-16 SDECon64.dll (2.1.18.113)
2013-04-05 SDEvents.dll (2.1.16.2)
2013-05-16 SDFileScanLibrary.dll (2.1.18.12)
2013-05-16 SDHook32.dll (2.1.18.2)
2013-05-16 SDHook64.dll (2.1.18.2)
2013-05-16 SDImmunizeLibrary.dll (2.1.18.2)
2013-05-16 SDLicense.dll (2.1.18.0)
2013-05-16 SDLists.dll (2.1.18.4)
2013-05-16 SDResources.dll (2.1.18.7)
2013-05-16 SDScanLibrary.dll (2.1.18.131)
2013-05-16 SDTasks.dll (2.1.18.15)
2013-05-16 SDWinLogon.dll (2.1.18.0)
2012-08-23 sqlite3.dll
2012-09-10 ssleay32.dll (1.0.0.4)
2013-05-16 Tools.dll (2.1.18.36)
2012-12-18 Includes\Adware.sbi (*)
2013-08-28 Includes\AdwareC.sbi (*)
2010-08-13 Includes\Cookies.sbi (*)
2012-11-14 Includes\Dialer.sbi (*)
2012-11-14 Includes\DialerC.sbi (*)
2012-11-14 Includes\HeavyDuty.sbi (*)
2012-11-14 Includes\Hijackers.sbi (*)
2012-11-14 Includes\HijackersC.sbi (*)
2013-08-22 Includes\iPhone.sbi (*)
2013-06-25 Includes\Keyloggers.sbi (*)
2012-12-18 Includes\KeyloggersC.sbi (*)
2013-05-29 Includes\Malware.sbi (*)
2013-08-28 Includes\MalwareC.sbi (*)
2012-11-14 Includes\PUPS.sbi (*)
2013-08-06 Includes\PUPSC.sbi (*)
2012-11-14 Includes\Security.sbi (*)
2012-11-14 Includes\SecurityC.sbi (*)
2013-05-22 Includes\Spyware.sbi (*)
2013-08-06 Includes\SpywareC.sbi (*)
2011-06-07 Includes\Tracks.sbi (*)
2012-11-19 Includes\Tracks.uti (*)
2013-01-16 Includes\Trojans.sbi (*)
2013-05-13 Includes\TrojansC-02.sbi (*)
2013-07-31 Includes\TrojansC-03.sbi (*)
2013-08-28 Includes\TrojansC-04.sbi (*)
2013-05-08 Includes\TrojansC-05.sbi (*)
2013-08-06 Includes\TrojansC.sbi (*)
         

Search results from Spybot - Search & Destroy

30.08.2013 06:37:47
Scan took 00:19:58.
9 items found.

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
  HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
  HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
  HKEY_USERS\.DEFAULT\Software\Microsoft\Direct3D\MostRecentApplication\Name

MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
  HKEY_USERS\S-1-5-18\Software\Microsoft\Direct3D\MostRecentApplication\Name

MS DirectDraw: [SBI $EB49D5AF] Most recent application (Registry Change, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name

Windows: [SBI $1E4E2003] Drivers installation paths (Registry Change, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Installation Sources

Windows: [SBI $1E4E2003] Drivers installation paths (Registry Change, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Installation Sources

Cache: [SBI $49804B54] Browser: Cache (7) (Browser: Cache, nothing done)
  

Verlauf: [SBI $49804B54] Browser: History (2) (Browser: History, nothing done)
  


--- Spybot - Search & Destroy version: 2.1.18.131  DLL (build: 20130516) ---

2013-05-16 blindman.exe (2.1.18.151)
2013-05-16 explorer.exe (2.1.18.177)
2013-05-16 SDBootCD.exe (2.1.18.109)
2013-05-16 SDCleaner.exe (2.1.18.110)
2013-05-16 SDDelFile.exe (2.1.18.94)
2013-06-18 SDDisableProxy.exe
2013-05-16 SDFiles.exe (2.1.18.135)
2013-03-20 SDFileScanHelper.exe (2.1.16.1)
2013-05-16 SDFSSvc.exe (2.1.18.208)
2013-05-16 SDHookHelper.exe (2.1.18.2)
2013-05-16 SDHookInst32.exe (2.1.18.2)
2013-05-16 SDHookInst64.exe (2.1.18.2)
2013-05-16 SDImmunize.exe (2.1.18.130)
2013-05-16 SDLogReport.exe (2.1.18.107)
2013-05-16 SDOnAccess.exe (2.1.18.4)
2013-05-16 SDPESetup.exe (2.1.18.3)
2013-05-16 SDPEStart.exe (2.1.18.86)
2013-05-16 SDPhoneScan.exe (2.1.18.28)
2013-05-16 SDPRE.exe (2.1.18.22)
2013-05-16 SDPrepPos.exe (2.1.18.10)
2013-05-16 SDQuarantine.exe (2.1.18.103)
2013-05-16 SDRootAlyzer.exe (2.1.18.116)
2013-05-16 SDSBIEdit.exe (2.1.18.39)
2013-05-16 SDScan.exe (2.1.18.177)
2013-05-16 SDScript.exe (2.1.18.53)
2013-05-16 SDSettings.exe (2.1.18.136)
2013-05-16 SDShell.exe (2.1.18.2)
2013-05-16 SDShred.exe (2.1.18.107)
2013-05-16 SDSysRepair.exe (2.1.18.101)
2013-05-16 SDTools.exe (2.1.18.150)
2013-07-25 SDTray.exe (2.1.21.129)
2013-05-16 SDUpdate.exe (2.1.18.91)
2013-05-16 SDUpdSvc.exe (2.1.18.76)
2013-07-10 SDWelcome.exe (2.1.21.129)
2013-05-15 SDWSCSvc.exe (2.1.18.2)
2013-06-19 spybotsd2-translation-frx.exe
2013-08-29 unins000.exe (51.1052.0.0)
1999-12-02 xcacls.exe
2012-08-23 borlndmm.dll (10.0.2288.42451)
2012-09-05 DelZip190.dll (1.9.0.107)
2012-09-10 libeay32.dll (1.0.0.4)
2012-09-10 libssl32.dll (1.0.0.4)
2013-05-16 SDAdvancedCheckLibrary.dll (2.1.18.98)
2013-05-16 SDAV.dll
2013-05-16 SDECon32.dll (2.1.18.113)
2013-05-16 SDECon64.dll (2.1.18.113)
2013-04-05 SDEvents.dll (2.1.16.2)
2013-05-16 SDFileScanLibrary.dll (2.1.18.12)
2013-05-16 SDHook32.dll (2.1.18.2)
2013-05-16 SDHook64.dll (2.1.18.2)
2013-05-16 SDImmunizeLibrary.dll (2.1.18.2)
2013-05-16 SDLicense.dll (2.1.18.0)
2013-05-16 SDLists.dll (2.1.18.4)
2013-05-16 SDResources.dll (2.1.18.7)
2013-05-16 SDScanLibrary.dll (2.1.18.131)
2013-05-16 SDTasks.dll (2.1.18.15)
2013-05-16 SDWinLogon.dll (2.1.18.0)
2012-08-23 sqlite3.dll
2012-09-10 ssleay32.dll (1.0.0.4)
2013-05-16 Tools.dll (2.1.18.36)
2012-12-18 Includes\Adware.sbi (*)
2013-08-28 Includes\AdwareC.sbi (*)
2010-08-13 Includes\Cookies.sbi (*)
2012-11-14 Includes\Dialer.sbi (*)
2012-11-14 Includes\DialerC.sbi (*)
2012-11-14 Includes\HeavyDuty.sbi (*)
2012-11-14 Includes\Hijackers.sbi (*)
2012-11-14 Includes\HijackersC.sbi (*)
2013-08-22 Includes\iPhone.sbi (*)
2013-06-25 Includes\Keyloggers.sbi (*)
2012-12-18 Includes\KeyloggersC.sbi (*)
2013-05-29 Includes\Malware.sbi (*)
2013-08-28 Includes\MalwareC.sbi (*)
2012-11-14 Includes\PUPS.sbi (*)
2013-08-06 Includes\PUPSC.sbi (*)
2012-11-14 Includes\Security.sbi (*)
2012-11-14 Includes\SecurityC.sbi (*)
2013-05-22 Includes\Spyware.sbi (*)
2013-08-06 Includes\SpywareC.sbi (*)
2011-06-07 Includes\Tracks.sbi (*)
2012-11-19 Includes\Tracks.uti (*)
2013-01-16 Includes\Trojans.sbi (*)
2013-05-13 Includes\TrojansC-02.sbi (*)
2013-07-31 Includes\TrojansC-03.sbi (*)
2013-08-28 Includes\TrojansC-04.sbi (*)
2013-05-08 Includes\TrojansC-05.sbi (*)
2013-08-06 Includes\TrojansC.sbi (*)