Guten Tag zusammen,

Wenn ich mit der Windows-Fotoanzeige von einem Bild zum Nächsten klicke, erscheint - mal öfter, mal seltener - die Meldung "COM Surrogate funktioniert nicht mehr" und die Windows-Fotoanzeige schließt sich.
Da ich im Netz nichts exakt passendes gefunden habe, habe ich auch noch nichts unternommen, außer die drei vom Trojaner-Board empfohlenen Dateien runter geladen zu haben. Die entsprechenden Logfiles poste ich gleich mal mit.
Vielen Dank schon mal im voraus.

defogger_disable.log

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 13:57 on 06/09/2013 (bine)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Addition.txt

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 06-09-2013
Ran by bine at 2013-09-06 14:00:25
Running from C:\Users\bine\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
64 Bit HP CIO Components Installer (Version: 7.2.4)
Adobe AIR (x32 Version: 2.6.0.19120)
Adobe Community Help (x32 Version: 3.2.1)
Adobe Community Help (x32 Version: 3.2.1.650)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Adobe Photoshop Elements 9 (x32 Version: 9.0)
Adobe Premiere Elements 9 (x32 Version: 9.0)
Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98)
ALPS Touch Pad Driver (Version: 7.109.2020.209)
Apple Application Support (x32 Version: 1.2.1)
Apple Software Update (x32 Version: 2.1.1.116)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 2.0.8.8)
Atheros Driver Installation Program (x32 Version: 9.0)
Bejeweled 3 (x32 Version: 2.2.0.98)
Chuzzle Deluxe (x32 Version: 2.2.0.95)
D3DX10 (x32 Version: 15.4.2368.0902)
Dropbox (HKCU Version: 2.0.22)
eBay Worldwide (x32 Version: 2.2.0409)
Elements 9 Organizer (x32 Version: 9.0)
Elements STI Installer (x32 Version: 1.0)
Evernote v. 4.5.2 (x32 Version: 4.5.2.5866)
FATE (x32 Version: 2.2.0.97)
FileZilla Client 3.2.7.1 (x32 Version: 3.2.7.1)
Final Drive: Nitro (x32 Version: 2.2.0.95)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922)
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922)
Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922)
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)
Galerie foto Windows Live (x32 Version: 15.4.3502.0922)
Google Earth Plug-in (x32 Version: 7.1.1.1888)
Google Update Helper (x32 Version: 1.3.21.153)
HP Photosmart Wireless B110 All-In-One Driver 14.0 Rel. 7 (Version: 14.0)
Identity Card (x32 Version: 1.00.3501)
Insaniquarium Deluxe (x32 Version: 2.2.0.97)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Management Engine Components (x32 Version: 8.0.0.1351)
Intel(R) OpenCL CPU Runtime (x32)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2653)
Intel(R) Rapid Storage Technology (x32 Version: 11.0.0.1032)
Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.4.220)
Intel® Trusted Connect Service Client (Version: 1.23.216.0)
Jewel Match 3 (x32 Version: 2.2.0.98)
Jewel Quest Mysteries: The Seventh Gate Collector's Edition (x32 Version: 2.2.0.98)
John Deere Drive Green (x32 Version: 2.2.0.95)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Kobo (x32 Version: 2.1.5)
Launch Manager (x32 Version: 5.1.15)
McAfee Security Scan Plus (x32 Version: 3.0.318.3)
Media Go (x32 Version: 1.4.269)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.5139.5005)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)
Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)
Mozilla Maintenance Service (x32 Version: 23.0.1)
Mozilla Thunderbird 17.0.8 (x86 de) (x32 Version: 17.0.8)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
Nero BackItUp 10 (x32 Version: 5.8.11100.9.100)
Nero BackItUp 10 Help (CHM) (x32 Version: 10.6.10700)
Nero Control Center 10 (x32 Version: 10.6.12700.0.7)
Nero ControlCenter 10 Help (CHM) (x32 Version: 10.6.10700)
Nero Core Components 10 (x32 Version: 2.0.19900.9.11)
Nero DiscSpeed 10 (x32 Version: 6.4.10500.1.100)
Nero DiscSpeed 10 Help (CHM) (x32 Version: 10.6.10700)
Nero Express 10 (x32 Version: 10.6.10700.5.100)
Nero Express 10 Help (CHM) (x32 Version: 10.6.10700)
Nero Multimedia Suite 10 Essentials (x32 Version: 10.6.10300)
Nero Multimedia Suite 10 Essentials (x32 Version: 10.6.10400)
Nero RescueAgent 10 (x32 Version: 3.6.10500.3.100)
Nero RescueAgent 10 Help (CHM) (x32 Version: 10.6.10700)
Nero StartSmart 10 (x32 Version: 10.6.10600.4.100)
Nero StartSmart 10 Help (CHM) (x32 Version: 10.6.10700)
Nero Update (x32 Version: 1.0.10900.31.0)
Network64 (Version: 140.0.212.000)
Norton Online Backup (x32 Version: 2.1.17869)
OpenOffice.org 3.4.1 (x32 Version: 3.41.9593)
Packard Bell Games (x32 Version: 1.0.2.5)
Packard Bell Power Management (x32 Version: 6.00.3010)
Packard Bell Recovery Management (x32 Version: 5.00.3507)
Packard Bell Registration (x32 Version: 1.04.3506)
Packard Bell ScreenSaver (x32 Version: 1.1.0915.2011)
Packard Bell Social Networks (x32 Version: 3.0.3106)
Packard Bell Updater (x32 Version: 1.02.3501)
Penguins! (x32 Version: 2.2.0.98)
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98)
PlayStation(R)Network Downloader (x32 Version: 2.02.00076)
PlayStation(R)Store (x32 Version: 3.1.8.07881)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922)
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922)
Polar Bowler (x32 Version: 2.2.0.97)
Pošta Windows Live (x32 Version: 15.4.3502.0922)
PS_AIO_07_B110_SW_Min (x32 Version: 140.0.142.000)
QuickTime (x32 Version: 7.66.71.0)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6564)
Realtek PCIE Card Reader (x32 Version: 6.1.7601.85)
rosoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Scan (x32 Version: 140.0.77.000)
Skype™ 5.10 (x32 Version: 5.10.116)
Slingo Deluxe (x32 Version: 2.2.0.95)
Sony Ericsson PC Companion 1.60.13 (x32 Version: 1.60.13)
Sony Ericsson PC Suite 6.011.00 (x32 Version: 6.011.00)
Toolbox (x32 Version: 140.0.424.000)
Torchlight (x32 Version: 2.2.0.98)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update Installer for WildTangent Games App (x32)
Video Web Camera (x32 Version: 1.5.2108.00)
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.97)
Wedding Dash (x32 Version: 2.2.0.95)
Welcome Center (x32 Version: 1.02.3507)
WildTangent Games App (Packard Bell Games) (x32 Version: 4.0.5.32)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3538.0513)
Windows Live Fotogaléria (x32 Version: 15.4.3502.0922)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live Fotogalleri (x32 Version: 15.4.3502.0922)
Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922)
Windows Live Fotótár (x32 Version: 15.4.3502.0922)
Windows Live Galeria de Fotos (x32 Version: 15.4.3502.0922)
Windows Live Galerija fotografija (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3538.0513)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Windows Live 影像中心 (x32 Version: 15.4.3502.0922)
Windows Live 程式集 (x32 Version: 15.4.3502.0922)
Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922)
Windows Liven sähköposti (x32 Version: 15.4.3502.0922)
Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922)
XnView 1.99.6 (x32 Version: 1.99.6)
Zuma Deluxe (x32 Version: 2.2.0.95)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922)
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922)
Почта Windows Live (x32 Version: 15.4.3502.0922)
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922)
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922)
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922)
بريد Windows Live (x32 Version: 15.4.3502.0922)
معرض صور Windows Live (x32 Version: 15.4.3502.0922)

==================== Restore Points  =========================

13-08-2013 07:56:36 Windows Update
15-08-2013 07:43:20 Windows Update
20-08-2013 16:09:29 Windows Update
27-08-2013 08:33:15 Windows Update
02-09-2013 08:05:45 Windows Update
06-09-2013 07:52:53 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started
Task: {14B43F86-285A-4408-9026-B294F8039B7A} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {1D7C31EF-3DEE-4EA2-B0FB-8FCBD5D5752F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-30] (Google Inc.)
Task: {3550140F-5D3E-4187-A02A-49F55F998DEE} - System32\Tasks\UALU notificatin => C:\Program Files\Packard Bell\Packard Bell Updater\UALU.exe [2012-02-07] (Acer Incorporated)
Task: {69F882C1-5269-4E4C-BEDA-E527F65C48BC} - System32\Tasks\NBAgent => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [2012-01-16] (Nero AG)
Task: {7E245981-F5A0-405A-AA55-ABF1C3DEE117} - System32\Tasks\{E607C569-DC3C-4323-B188-B54F7D421A45} => C:\Program Files (x86)\XnView\xnview.exe [2012-12-18] (XnView, hxxp://www.xnview.com)
Task: {85DE68F4-CEA8-4C91-85C9-6954437BD6F0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-20] (Adobe Systems Incorporated)
Task: {9405E8FE-126A-4F57-8069-BED848749419} - System32\Tasks\{4B450212-6888-463D-9699-16AF519D123E} => C:\Program Files (x86)\XnView\xnview.exe [2012-12-18] (XnView, hxxp://www.xnview.com)
Task: {B3ED4E4C-8EB9-4CD5-BFFC-9AFD959D32C1} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {D191062F-92A7-414B-8A7E-DECADB6039DE} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2008-07-30] (Apple Inc.)
Task: {EE68E607-4C34-4B3E-8881-4CEA72664A06} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {FE1AA4A2-2EA1-41AA-9ABB-3AF384B19D96} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-30] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-06-06 16:15 - 2012-02-07 17:53 - 00271232 _____ (Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\SysHook.dll
2013-05-25 02:36 - 2013-05-25 02:36 - 00164016 _____ (Dropbox, Inc.) C:\Users\bine\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
2009-08-23 19:24 - 2009-08-23 19:24 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2012-04-20 09:29 - 2012-02-14 03:57 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrDEU.lrc
2012-04-20 09:28 - 2012-02-14 03:53 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-04-21 12:06 - 2011-06-21 03:32 - 00417144 _____ (Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApResGR.dll
2012-04-21 12:06 - 2011-09-21 12:26 - 00112504 _____ (Alps Electric Co., Ltd.) C:\Windows\system32\VXDIF.DLL
2012-04-21 12:06 - 2011-07-23 08:36 - 01075064 _____ (Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.DLL
2012-04-21 12:06 - 2010-05-31 15:23 - 00039792 _____ (Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\EzAuto.dll
2012-04-21 12:06 - 2010-10-04 14:12 - 00279408 _____ (Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\EzLaunch.DLL
2012-06-06 16:15 - 2012-02-07 17:53 - 00218000 _____ (Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\BrightnessControl.dll
2012-06-06 16:15 - 2012-02-07 17:53 - 00216472 _____ (Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\PowerSettingControl.dll
2012-06-06 16:15 - 2012-02-07 17:53 - 00215944 _____ (Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\CommonControl.dll
2012-04-21 12:06 - 2012-03-23 11:33 - 00880208 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDUtl.dll
2012-04-21 12:06 - 2011-03-14 13:44 - 00075856 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\NTKCUtl.dll
2013-03-04 19:30 - 2009-06-24 10:32 - 00262144 _____ (Avanquest Software) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\bvrpctln.dll
2013-03-04 19:30 - 2009-11-24 17:31 - 00549888 ____N (Avanquest Software) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\NewUI.dll
2013-03-04 19:30 - 2009-02-05 14:25 - 00049152 _____ (Avanquest Software) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\BVRPNAC.dll
2013-03-04 19:30 - 2009-06-17 10:28 - 00317440 _____ (BVRP Software) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\MExplorer.dll
2013-03-04 19:30 - 2009-12-04 13:52 - 00327680 _____ (Avanquest Software) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\ModemWiz.dll
2013-03-04 19:30 - 2008-12-05 16:05 - 00073728 _____ (Avanquest Software) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\Comm.dll
2013-03-04 19:30 - 2007-02-07 15:31 - 00036864 _____ (Sony Ericsson Mobile Communications AB) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\ModExch.dll
2013-03-04 19:30 - 2009-06-17 13:09 - 00356352 _____ (Avanquest Software) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\RasCnxMngr.dll
2013-03-04 19:30 - 2009-04-02 15:57 - 00278528 _____ (BVRP Software) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\WFP1N.dll
2013-03-04 19:30 - 2009-05-15 17:14 - 00114688 _____ (BVRP Software) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\WUNPACLN.dll
2012-11-14 01:32 - 2012-11-14 01:32 - 03558400 _____ (wxWidgets development team) C:\Users\bine\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll
2013-03-13 22:48 - 2013-03-13 22:48 - 24978944 _____ () C:\Users\bine\AppData\Roaming\Dropbox\bin\libcef.dll
2013-03-13 22:48 - 2013-03-13 22:48 - 09956864 _____ (The ICU Project) C:\Users\bine\AppData\Roaming\Dropbox\bin\icudt.dll
2012-04-21 12:06 - 2012-03-08 09:01 - 00080976 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\ComFnUtl.dll
2012-04-21 12:06 - 2009-07-14 08:53 - 00128008 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\CDRomUtl.dll
2012-04-21 12:06 - 2009-07-27 06:42 - 00062472 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MixerUtl.dll
2012-04-21 12:06 - 2009-07-27 06:47 - 00068104 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\Wnd2File.dll
2012-04-21 12:06 - 2009-07-27 12:43 - 00068104 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\PowerUtl.dll
2012-04-21 12:06 - 2012-02-22 11:30 - 00327760 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\OSDUtl2.dll
2012-04-21 12:06 - 2009-07-27 06:38 - 00088584 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\SzUPFUtl.dll
2012-04-21 12:06 - 2012-03-22 03:44 - 00432208 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\RadioWndUtl.dll
2012-04-21 12:06 - 2012-03-23 11:33 - 00397904 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\aipflib.dll
2012-04-21 12:06 - 2012-03-06 09:09 - 00104528 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LmSmbKel.dll
2012-04-21 12:06 - 2009-07-03 10:29 - 00147464 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\VistaVol.DLL
2012-08-10 16:51 - 2012-08-10 16:51 - 01742848 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\sal3.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00085504 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\uwinapi.dll
2012-08-13 10:51 - 2012-08-13 10:51 - 00271872 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\sofficeapp.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 01048064 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\comphelpMSC.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00439808 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\cppuhelper3MSC.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00013824 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\salhelper3MSC.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00152064 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\cppu3.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00597504 _____ (STLport Consulting, Inc.) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\stlport_vc7145.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00358400 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\ucbhelper4MSC.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00094720 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\vos3MSC.dll
2012-08-13 10:51 - 2012-08-13 10:51 - 00139776 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\deploymentmisc.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00589312 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\tl.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00705536 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\basegfx.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00027136 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\i18nisolang1MSC.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00952320 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\utl.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00531968 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\xcr.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 02995200 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\sfx.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00407552 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\fwe.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00159232 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\fwi.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00835072 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\svl.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00257536 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\sot.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 03118592 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\svt.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00067072 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\i18nutilMSC.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00951808 _____ (IBM Corporation and others) C:\Program Files (x86)\OpenOffice.org 3\program\icuuc40.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 13914112 _____ (IBM Corporation and others) C:\Program Files (x86)\OpenOffice.org 3\program\icudt40.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00093696 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\jvmfwk3.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 02364416 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\tk.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 03496960 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\vcl.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00029696 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\i18npaper.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00086528 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\sax.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 01772032 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\sb.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00052224 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\msci_uno.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00499712 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\bootstrap.uno.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00093184 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\reg3.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00053760 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\store3.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00035328 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\xmlreader.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00375808 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\configmgr.uno.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00024064 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\localebe1.uno.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00092672 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\stocservices.uno.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00210944 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\ucb1.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 01777664 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\fwk.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00258560 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\ucpfile1.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 01317376 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\i18npool.uno.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 01071616 _____ (IBM Corporation and others) C:\Program Files (x86)\OpenOffice.org 3\program\icuin40.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00286720 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\oleautobridge.uno.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00148480 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\emser.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00236032 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\uui.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00183808 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\filterconfig1.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00051712 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\swd.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00115200 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\dnd.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 08563200 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\sw.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00212480 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\avmedia.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00842240 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\drawinglayer.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00382464 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\canvastools.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00293376 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\cppcanvas.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 01519104 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\editeng.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 03012096 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\xo.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00987136 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\lng.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 02562048 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\svx.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 05574656 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\svxcore.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00707584 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\localedata_euro.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00104448 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\localedata_en.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 01172480 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\msword.DLL
2012-08-10 16:51 - 2012-08-10 16:51 - 00723456 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\msfilter.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00325632 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\unoxml.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00177664 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\updchk.uno.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00180224 _____ (The cURL library, hxxp://curl.haxx.se/) C:\Program Files (x86)\OpenOffice.org 3\program\libcurl.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00373760 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\xstor.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00098304 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\reflection.uno.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00324096 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\package2.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00051712 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\fileacc.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00155648 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\sax.uno.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00107520 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\sysdtrans.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 01673728 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\frm.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 02480640 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\dbtools.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00023552 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\jvmaccess3MSC.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00099328 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\introspection.uno.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00046592 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\evtatt.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00091648 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\fsstorage.uno.dll
2012-08-13 10:51 - 2012-08-13 10:51 - 00559104 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\deployment.uno.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00154112 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\helplinker.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00170496 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxslt.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00024576 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\ucpexpand1.uno.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00054272 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\updatefeed.uno.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00008704 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\onlinecheck.DLL
2012-08-10 16:51 - 2012-08-10 16:51 - 00048640 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\updchk.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00062464 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\res.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00257024 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\ucpchelp1.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00040960 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\dtrans.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00297984 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\fwl.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 01497600 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\swui.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00051200 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\ftransl.dll

==================== Alternate Data Streams (whitelisted) ==========

AlternateDataStreams: C:\ProgramData\Temp:373E1720


==================== Faulty Device Manager Devices =============

Name: Photosmart B110 series
Description: Photosmart B110 series
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Photosmart B110 series
Description: Photosmart B110 series
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: HP
Service: StillCam
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (09/06/2013 00:38:44 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: DllHost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bca54
Name des fehlerhaften Moduls: igdumd64.dll, Version: 8.15.10.2653, Zeitstempel: 0x4f3aac44
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000030eb06
ID des fehlerhaften Prozesses: 0xcdc
Startzeit der fehlerhaften Anwendung: 0xDllHost.exe0
Pfad der fehlerhaften Anwendung: DllHost.exe1
Pfad des fehlerhaften Moduls: DllHost.exe2
Berichtskennung: DllHost.exe3

Error: (09/06/2013 10:32:31 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Sony.Mrs,processorArchitecture="AMD64",type="win32",version="2.2.0.0"1". Fehler in Manifest- oder Richtliniendatei "Sony.Mrs,processorArchitecture="AMD64",type="win32",version="2.2.0.0"2" in Zeile  Sony.Mrs,processorArchitecture="AMD64",type="win32",version="2.2.0.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: Sony.Mrs,processorArchitecture="AMD64",type="win32",version="2.2.0.0".
Definition: Sony.Mrs,processorArchitecture="x86",type="win32",version="2.2.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (09/06/2013 09:48:40 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/06/2013 09:48:40 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Sony.Mrs,processorArchitecture="AMD64",type="win32",version="2.2.0.0"1". Fehler in Manifest- oder Richtliniendatei "Sony.Mrs,processorArchitecture="AMD64",type="win32",version="2.2.0.0"2" in Zeile  Sony.Mrs,processorArchitecture="AMD64",type="win32",version="2.2.0.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: Sony.Mrs,processorArchitecture="AMD64",type="win32",version="2.2.0.0".
Definition: Sony.Mrs,processorArchitecture="x86",type="win32",version="2.2.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (09/06/2013 03:56:39 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: DllHost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bca54
Name des fehlerhaften Moduls: igdumd64.dll, Version: 8.15.10.2653, Zeitstempel: 0x4f3aac44
Ausnahmecode: 0xc000041d
Fehleroffset: 0x000000000030eb06
ID des fehlerhaften Prozesses: 0x168c
Startzeit der fehlerhaften Anwendung: 0xDllHost.exe0
Pfad der fehlerhaften Anwendung: DllHost.exe1
Pfad des fehlerhaften Moduls: DllHost.exe2
Berichtskennung: DllHost.exe3

Error: (09/06/2013 03:56:36 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: DllHost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bca54
Name des fehlerhaften Moduls: igdumd64.dll, Version: 8.15.10.2653, Zeitstempel: 0x4f3aac44
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000030eb06
ID des fehlerhaften Prozesses: 0x168c
Startzeit der fehlerhaften Anwendung: 0xDllHost.exe0
Pfad der fehlerhaften Anwendung: DllHost.exe1
Pfad des fehlerhaften Moduls: DllHost.exe2
Berichtskennung: DllHost.exe3

Error: (09/06/2013 03:55:57 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: DllHost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bca54
Name des fehlerhaften Moduls: igdumd64.dll, Version: 8.15.10.2653, Zeitstempel: 0x4f3aac44
Ausnahmecode: 0xc000041d
Fehleroffset: 0x000000000030eb06
ID des fehlerhaften Prozesses: 0xca8
Startzeit der fehlerhaften Anwendung: 0xDllHost.exe0
Pfad der fehlerhaften Anwendung: DllHost.exe1
Pfad des fehlerhaften Moduls: DllHost.exe2
Berichtskennung: DllHost.exe3

Error: (09/06/2013 03:55:54 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: DllHost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bca54
Name des fehlerhaften Moduls: igdumd64.dll, Version: 8.15.10.2653, Zeitstempel: 0x4f3aac44
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000030eb06
ID des fehlerhaften Prozesses: 0xca8
Startzeit der fehlerhaften Anwendung: 0xDllHost.exe0
Pfad der fehlerhaften Anwendung: DllHost.exe1
Pfad des fehlerhaften Moduls: DllHost.exe2
Berichtskennung: DllHost.exe3

Error: (09/06/2013 03:47:37 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: DllHost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bca54
Name des fehlerhaften Moduls: igdumd64.dll, Version: 8.15.10.2653, Zeitstempel: 0x4f3aac44
Ausnahmecode: 0xc000041d
Fehleroffset: 0x000000000030eb06
ID des fehlerhaften Prozesses: 0x14b0
Startzeit der fehlerhaften Anwendung: 0xDllHost.exe0
Pfad der fehlerhaften Anwendung: DllHost.exe1
Pfad des fehlerhaften Moduls: DllHost.exe2
Berichtskennung: DllHost.exe3

Error: (09/06/2013 03:47:34 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: DllHost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bca54
Name des fehlerhaften Moduls: igdumd64.dll, Version: 8.15.10.2653, Zeitstempel: 0x4f3aac44
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000030eb06
ID des fehlerhaften Prozesses: 0x14b0
Startzeit der fehlerhaften Anwendung: 0xDllHost.exe0
Pfad der fehlerhaften Anwendung: DllHost.exe1
Pfad des fehlerhaften Moduls: DllHost.exe2
Berichtskennung: DllHost.exe3


System errors:
=============
Error: (09/06/2013 09:49:28 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (09/05/2013 00:49:19 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (09/05/2013 10:31:55 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (09/05/2013 03:04:16 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (09/04/2013 02:12:22 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (09/03/2013 11:21:57 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (09/02/2013 11:12:18 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (09/02/2013 10:02:15 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (09/01/2013 00:12:31 AM) (Source: DCOM) (User: )
Description: {005A3A96-BAC4-4B0A-94EA-C0CE100EA736}

Error: (08/31/2013 01:19:52 AM) (Source: DCOM) (User: )
Description: {005A3A96-BAC4-4B0A-94EA-C0CE100EA736}


Microsoft Office Sessions:
=========================
Error: (09/06/2013 00:38:44 PM) (Source: Application Error)(User: )
Description: DllHost.exe6.1.7600.163854a5bca54igdumd64.dll8.15.10.26534f3aac44c0000005000000000030eb06cdc01ceaaed3a68073cC:\Windows\system32\DllHost.exeC:\Windows\system32\igdumd64.dll806a6da2-16e0-11e3-bee1-e840f2f9903b

Error: (09/06/2013 10:32:31 AM) (Source: SideBySide)(User: )
Description: Sony.Mrs,processorArchitecture="AMD64",type="win32",version="2.2.0.0"Sony.Mrs,processorArchitecture="x86",type="win32",version="2.2.0.0"C:\Program Files (x86)\Sony\Media Go\MediaGo.exeC:\Program Files (x86)\Sony\Media Go\Sony.Mrs.MANIFEST3

Error: (09/06/2013 09:48:40 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/06/2013 09:48:40 AM) (Source: SideBySide)(User: )
Description: Sony.Mrs,processorArchitecture="AMD64",type="win32",version="2.2.0.0"Sony.Mrs,processorArchitecture="x86",type="win32",version="2.2.0.0"C:\Program Files (x86)\Sony\Media Go\MediaGo.exeC:\Program Files (x86)\Sony\Media Go\Sony.Mrs.MANIFEST3

Error: (09/06/2013 03:56:39 AM) (Source: Application Error)(User: )
Description: DllHost.exe6.1.7600.163854a5bca54igdumd64.dll8.15.10.26534f3aac44c000041d000000000030eb06168c01ceaaa445ce3262C:\Windows\system32\DllHost.exeC:\Windows\system32\igdumd64.dll9149b37d-1697-11e3-9644-e840f2f9903b

Error: (09/06/2013 03:56:36 AM) (Source: Application Error)(User: )
Description: DllHost.exe6.1.7600.163854a5bca54igdumd64.dll8.15.10.26534f3aac44c0000005000000000030eb06168c01ceaaa445ce3262C:\Windows\system32\DllHost.exeC:\Windows\system32\igdumd64.dll8f9f7fb0-1697-11e3-9644-e840f2f9903b

Error: (09/06/2013 03:55:57 AM) (Source: Application Error)(User: )
Description: DllHost.exe6.1.7600.163854a5bca54igdumd64.dll8.15.10.26534f3aac44c000041d000000000030eb06ca801ceaaa3c56d9d9bC:\Windows\system32\DllHost.exeC:\Windows\system32\igdumd64.dll7860892d-1697-11e3-9644-e840f2f9903b

Error: (09/06/2013 03:55:54 AM) (Source: Application Error)(User: )
Description: DllHost.exe6.1.7600.163854a5bca54igdumd64.dll8.15.10.26534f3aac44c0000005000000000030eb06ca801ceaaa3c56d9d9bC:\Windows\system32\DllHost.exeC:\Windows\system32\igdumd64.dll76bc21d5-1697-11e3-9644-e840f2f9903b

Error: (09/06/2013 03:47:37 AM) (Source: Application Error)(User: )
Description: DllHost.exe6.1.7600.163854a5bca54igdumd64.dll8.15.10.26534f3aac44c000041d000000000030eb0614b001ceaaa30b82e205C:\Windows\system32\DllHost.exeC:\Windows\system32\igdumd64.dll4e0ef6c2-1696-11e3-9644-e840f2f9903b

Error: (09/06/2013 03:47:34 AM) (Source: Application Error)(User: )
Description: DllHost.exe6.1.7600.163854a5bca54igdumd64.dll8.15.10.26534f3aac44c0000005000000000030eb0614b001ceaaa30b82e205C:\Windows\system32\DllHost.exeC:\Windows\system32\igdumd64.dll4cb07310-1696-11e3-9644-e840f2f9903b


==================== Memory info =========================== 

Percentage of memory in use: 36%
Total physical RAM: 3932.36 MB
Available physical RAM: 2477.67 MB
Total Pagefile: 7862.9 MB
Available Pagefile: 6345.19 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: (Packard Bell) (Fixed) (Total:341.85 GB) (Free:267.92 GB) NTFS
Drive e: (Daten) (Fixed) (Total:339.19 GB) (Free:202.02 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: BBF1E206)
Partition 1: (Not Active) - (Size=18 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=342 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=339 GB) - (Type=OF Extended)

==================== End Of Log ============================
         

FRST.txt

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-09-2013
Ran by bine (administrator) on BINE-PC on 06-09-2013 13:59:08
Running from C:\Users\bine\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Adobe Systems Incorporated) c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Acer Incorporated) C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
() C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
(Sony Ericsson Mobile Communications AB) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe
(Dropbox, Inc.) C:\Users\bine\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\HidFind.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apntex.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Users\bine\Desktop\Defogger.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12446824 2012-02-11] (Realtek Semiconductor)
HKLM\...\Run: [Apoint] - C:\Program Files\Apoint2K\Apoint.exe [576376 2012-02-02] (Alps Electric Co., Ltd.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [497648 2010-07-29] (Adobe Systems Incorporated)
HKLM\...\Run: [Power Management] - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [1829768 2012-02-07] (Acer Incorporated)
HKLM\...\Policies\Explorer: [NoActiveDesktop] 1
HKLM\...\Policies\Explorer: [NoActiveDesktopChanges] 1
HKCU\...\Run: [Sony Ericsson PC Companion] - C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe [774144 2009-12-08] (Sony Ericsson Mobile Communications AB)
MountPoints2: {8f491e12-1289-11e3-b118-e840f2f9903b} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL G:\Harley.exe www.h-d2011my-press.eu
MountPoints2: {d901a9ae-849e-11e2-805f-e840f2f9903b} - H:\Startme.exe
HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-02] (Symantec Corporation)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1105488 2012-03-23] (Dritek System Inc.)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-26] (Intel Corporation)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2010-03-17] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [162408 2011-09-13] ()
HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [162408 2011-09-13] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\bine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\bine\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\bine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://home.tb.ask.com/index.jhtml?n=77DE8857&p2=^UX^xdm244^YYA^de&ptb=8AD5A822-1D9D-4BCD-85AB-D333BF96C986&si=MA_MAPS_FIG_GER_13
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://packardbell.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snap.do/?publisher=SnapdoGOblidooYB&dpid=SnapdoGOblidooYB&co=DE&userid=231adb63-7983-4d8c-9071-fee617ccf76d&searchtype=ds&q={searchTerms}&installDate=29/04/2013
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snap.do/?publisher=SnapdoGOblidooYB&dpid=SnapdoGOblidooYB&co=DE&userid=231adb63-7983-4d8c-9071-fee617ccf76d&searchtype=ds&q={searchTerms}&installDate=29/04/2013
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=APBTDF&pc=MAPB&src=IE-SearchBox
SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=SnapdoGOblidooYB&dpid=SnapdoGOblidooYB&co=DE&userid=231adb63-7983-4d8c-9071-fee617ccf76d&searchtype=ds&q={searchTerms}&installDate=29/04/2013
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=SnapdoGOblidooYB&dpid=SnapdoGOblidooYB&co=DE&userid=231adb63-7983-4d8c-9071-fee617ccf76d&searchtype=ds&q={searchTerms}&installDate=29/04/2013
SearchScopes: HKLM-x32 - {b0441a0e-a49a-4e16-afc1-74ecced1921f} URL = hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^UX^xdm244^YYA^de&si=MA_MAPS_FIG_GER_13&ptb=8AD5A822-1D9D-4BCD-85AB-D333BF96C986&ind=2013071907&n=77fd0a23&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=SnapdoGOblidooYB&dpid=SnapdoGOblidooYB&co=DE&userid=231adb63-7983-4d8c-9071-fee617ccf76d&searchtype=ds&q={searchTerms}&installDate=29/04/2013
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=SnapdoGOblidooYB&dpid=SnapdoGOblidooYB&co=DE&userid=231adb63-7983-4d8c-9071-fee617ccf76d&searchtype=ds&q={searchTerms}&installDate=29/04/2013
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&affID=120519&babsrc=SP_ss&mntrId=7C33666D57B5AA63
SearchScopes: HKCU - {b0441a0e-a49a-4e16-afc1-74ecced1921f} URL = hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^UX^xdm244^YYA^de&si=MA_MAPS_FIG_GER_13&ptb=8AD5A822-1D9D-4BCD-85AB-D333BF96C986&ind=2013071907&n=77fd0a23&psa=&st=sb&searchfor={searchTerms}
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\bine\AppData\Roaming\Mozilla\Firefox\Profiles\omutrhle.default
FF user.js: detected! => C:\Users\bine\AppData\Roaming\Mozilla\Firefox\Profiles\omutrhle.default\user.js
FF NewTab: about:blank
FF DefaultSearchEngine: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.de/
FF Keyword.URL: hxxp://search.tb.ask.com/search/GGmain.jhtml?st=kwd&ptb=8AD5A822-1D9D-4BCD-85AB-D333BF96C986&n=77fd0a26&ind=2013071910&p2=^UX^xdm244^YYA^de&si=MA_MAPS_FIG_GER_13&searchfor=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @SonyCreativeSoftware.com/Media Go,version=1.0 - C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Media Software and Services Inc)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\bine\AppData\Roaming\Mozilla\Firefox\Profiles\omutrhle.default\searchplugins\ask-web-search.xml
FF SearchPlugin: C:\Users\bine\AppData\Roaming\Mozilla\Firefox\Profiles\omutrhle.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\bine\AppData\Roaming\Mozilla\Firefox\Profiles\omutrhle.default\searchplugins\BrowserProtect.xml
FF SearchPlugin: C:\Users\bine\AppData\Roaming\Mozilla\Firefox\Profiles\omutrhle.default\searchplugins\delta.xml
FF SearchPlugin: C:\Users\bine\AppData\Roaming\Mozilla\Firefox\Profiles\omutrhle.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Yahoo! Toolbar - C:\Users\bine\AppData\Roaming\Mozilla\Firefox\Profiles\omutrhle.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}

==================== Services (Whitelisted) =================

R2 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [871296 2012-02-07] (Acer Incorporated)
R2 GREGService; C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe [28264 2012-02-29] (Acer Incorporated)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation)
R2 Live Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [255376 2012-02-07] (Acer Incorporated)
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)
R2 OMSI download service; C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [90112 2009-04-30] ()

==================== Drivers (Whitelisted) ====================

S3 s1039bus; C:\Windows\System32\DRIVERS\s1039bus.sys [127600 2009-11-19] (MCCI Corporation)
S3 s1039mdfl; C:\Windows\System32\DRIVERS\s1039mdfl.sys [19568 2009-11-19] (MCCI Corporation)
S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [161904 2009-11-19] (MCCI Corporation)
S3 s1039mgmt; C:\Windows\System32\DRIVERS\s1039mgmt.sys [141424 2009-11-19] (MCCI Corporation)
S3 s1039nd5; C:\Windows\System32\DRIVERS\s1039nd5.sys [34416 2009-11-19] (MCCI Corporation)
S3 s1039obex; C:\Windows\System32\DRIVERS\s1039obex.sys [137328 2009-11-19] (MCCI Corporation)
S3 s1039unic; C:\Windows\System32\DRIVERS\s1039unic.sys [158320 2009-11-19] (MCCI Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-06 13:57 - 2013-09-06 13:57 - 00000470 _____ C:\Users\bine\Desktop\defogger_disable.log
2013-09-06 13:57 - 2013-09-06 13:57 - 00000000 _____ C:\Users\bine\defogger_reenable
2013-09-06 13:47 - 2013-09-06 13:47 - 00377856 _____ C:\Users\bine\Desktop\1z45y8b9.exe
2013-09-06 13:45 - 2013-09-06 13:46 - 01948360 _____ (Farbar) C:\Users\bine\Desktop\FRST64.exe
2013-09-06 13:43 - 2013-09-06 13:43 - 00050477 _____ C:\Users\bine\Desktop\Defogger.exe
2013-09-06 13:40 - 2013-09-06 13:40 - 00016408 _____ C:\Users\bine\Desktop\get-mirror-server.html
2013-09-06 13:35 - 2013-09-06 13:35 - 00007894 _____ C:\Users\bine\Desktop\Anleitung_ TrojanerBoard.txt
2013-09-06 12:47 - 2013-09-06 12:47 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2013-08-18 22:08 - 2013-08-18 22:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-15 09:50 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-15 09:50 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-15 09:50 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-15 09:50 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-15 09:50 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-15 09:50 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-15 09:50 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-15 09:50 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-15 09:50 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-15 09:50 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-15 09:50 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-15 09:50 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-14 10:31 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-14 10:31 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-14 10:31 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-14 10:31 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-14 10:31 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-14 10:31 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-14 10:31 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-14 10:31 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-14 10:27 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-14 10:27 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-14 10:27 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-14 10:27 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-14 10:27 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-14 10:27 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-14 10:27 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-08-14 10:27 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-14 10:27 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-08-14 10:27 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-08-14 10:27 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-08-14 10:27 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-14 10:27 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-08-14 10:27 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-08-14 10:27 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-08-14 10:27 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-08-14 10:27 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-08-14 10:27 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-14 10:27 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-07 12:25 - 2013-08-08 09:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird

==================== One Month Modified Files and Folders =======

2013-09-06 13:58 - 2013-09-06 13:58 - 00000000 ____D C:\FRST
2013-09-06 13:57 - 2013-09-06 13:57 - 00000470 _____ C:\Users\bine\Desktop\defogger_disable.log
2013-09-06 13:57 - 2013-09-06 13:57 - 00000000 _____ C:\Users\bine\defogger_reenable
2013-09-06 13:57 - 2012-12-16 13:13 - 00000000 ____D C:\Users\bine
2013-09-06 13:47 - 2013-09-06 13:47 - 00377856 _____ C:\Users\bine\Desktop\1z45y8b9.exe
2013-09-06 13:46 - 2013-09-06 13:45 - 01948360 _____ (Farbar) C:\Users\bine\Desktop\FRST64.exe
2013-09-06 13:43 - 2013-09-06 13:43 - 00050477 _____ C:\Users\bine\Desktop\Defogger.exe
2013-09-06 13:40 - 2013-09-06 13:40 - 00016408 _____ C:\Users\bine\Desktop\get-mirror-server.html
2013-09-06 13:35 - 2013-09-06 13:35 - 00007894 _____ C:\Users\bine\Desktop\Anleitung_ TrojanerBoard.txt
2013-09-06 13:31 - 2012-04-21 12:07 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-06 13:27 - 2009-07-14 06:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-06 13:27 - 2009-07-14 06:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-06 13:24 - 2013-03-30 02:07 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-06 12:50 - 2013-02-10 18:24 - 00000000 ____D C:\Users\bine\AppData\Roaming\XnView
2013-09-06 12:47 - 2013-09-06 12:47 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2013-09-06 12:47 - 2012-12-16 14:37 - 00000000 ____D C:\Users\bine\AppData\Roaming\Adobe
2013-09-06 12:47 - 2012-04-21 12:06 - 00000000 ____D C:\ProgramData\Adobe
2013-09-06 12:41 - 2013-06-28 16:24 - 00000000 ____D C:\Users\bine\AppData\Local\CrashDumps
2013-09-06 12:14 - 2012-06-06 15:44 - 01558304 _____ C:\Windows\WindowsUpdate.log
2013-09-06 11:24 - 2013-03-30 02:07 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-06 09:48 - 2013-04-29 12:37 - 00000000 ___RD C:\Users\bine\Dropbox
2013-09-06 09:48 - 2013-04-29 11:26 - 00000000 ____D C:\Users\bine\AppData\Roaming\Dropbox
2013-09-06 09:48 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-06 09:48 - 2009-07-14 06:51 - 00052517 _____ C:\Windows\setupact.log
2013-09-06 02:39 - 2012-06-07 01:36 - 01542364 _____ C:\Windows\system32\perfh007.dat
2013-09-06 02:39 - 2012-06-07 01:36 - 00414586 _____ C:\Windows\system32\perfc007.dat
2013-09-06 02:39 - 2009-07-14 07:13 - 00005430 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-05 12:25 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-09-05 03:15 - 2013-07-28 09:57 - 00000000 ____D C:\Users\bine\Desktop\Desktop-Bilder
2013-09-03 15:26 - 2013-07-28 09:55 - 00000000 ____D C:\Users\bine\Desktop\Rechnungen-2013
2013-08-22 09:11 - 2013-07-24 15:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-20 22:33 - 2012-04-21 12:07 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-20 22:33 - 2012-04-21 12:07 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-20 22:33 - 2012-04-21 12:07 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-18 22:08 - 2013-08-18 22:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-15 15:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-08-15 09:46 - 2013-07-23 23:59 - 00000000 ____D C:\Windows\system32\MRT
2013-08-15 09:44 - 2013-06-27 00:01 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-08 09:56 - 2013-08-07 12:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-08-07 11:44 - 2012-12-31 00:30 - 00000000 ____D C:\Users\bine\AppData\Local\Thunderbird

Files to move or delete:
====================
C:\Users\bine\AppData\Local\Temp\install_reader11_de_mssd_aih.exe
C:\Users\bine\AppData\Local\Temp\uninst1.exe
C:\Users\bine\AppData\Local\Temp\wajam_install.exe
C:\Users\bine\AppData\Local\Temp\{8C030983-978B-4EEF-9F87-ED0C9B216FA3}\ISBEW64.exe
C:\Users\bine\AppData\Local\Temp\VCB\Languages\ZHH\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\TRK\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\THA\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\SVE\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\RUS\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\PTG\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\PLK\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\NOR\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\NLD\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\JPN\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\ITA\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\HUN\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\HEB\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\FRC\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\FRA\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\FIN\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\ESP\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\ESM\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\ENU\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\ENG\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\ELL\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\DEU\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\DAN\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\CSY\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\CHT\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\CHS\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\ARB\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Graphics\NewUI.dll
C:\Users\bine\AppData\Local\Temp\Upgrade\MediaGo_1.4.exe
C:\Users\bine\AppData\Local\Temp\Upgrade\Sony Ericsson PC Suite_6.011.00_Web_DEU.exe
C:\Users\bine\AppData\Local\Temp\PCCompanion\NewUI.dll
C:\Users\bine\AppData\Local\Temp\PCCompanion\Drivers\DPInst.exe
C:\Users\bine\AppData\Local\Temp\PCCompanion\Drivers\DPInst64.exe
C:\Users\bine\AppData\Local\Temp\nsx5E09.tmp\DropboxNSISTools.dll
C:\Users\bine\AppData\Local\Temp\nsx5E09.tmp\UAC.dll
C:\Users\bine\AppData\Local\Temp\DM\qYy3nbGh1voxO2Q\bin.dll
C:\Users\bine\AppData\Local\Temp\DM\qYy3nbGh1voxO2Q\config.dll
C:\Users\bine\AppData\Local\Temp\DM\qYy3nbGh1voxO2Q\DomaIQ.exe
C:\Users\bine\AppData\Local\Temp\DM\qYy3nbGh1voxO2Q\routes.dll
C:\Users\bine\AppData\Local\Temp\DM\qYy3nbGh1voxO2Q\software\Delta Babylon.exe
C:\Users\bine\AppData\Local\Temp\DM\qYy3nbGh1voxO2Q\software\FlashPlayer.exe
C:\Users\bine\AppData\Local\Temp\DM\qYy3nbGh1voxO2Q\software\OptimizerPro.exe
C:\Users\bine\AppData\Local\Temp\bus9C8D\ff21v.exe
C:\Users\bine\AppData\Local\Temp\A858045B-BAB0-7891-B59B-921EE368A014\Setup.exe
C:\Users\bine\AppData\Local\Temp\A858045B-BAB0-7891-B59B-921EE368A014\sqlite3.dll
C:\Users\bine\AppData\Local\Temp\A858045B-BAB0-7891-B59B-921EE368A014\Latest\ccp.exe
C:\Users\bine\AppData\Local\Temp\A858045B-BAB0-7891-B59B-921EE368A014\Latest\ChromeToolbarSetup.dll
C:\Users\bine\AppData\Local\Temp\A858045B-BAB0-7891-B59B-921EE368A014\Latest\CrxInstaller.dll
C:\Users\bine\AppData\Local\Temp\A858045B-BAB0-7891-B59B-921EE368A014\Latest\GUninstaller.exe
C:\Users\bine\AppData\Local\Temp\A858045B-BAB0-7891-B59B-921EE368A014\Latest\IEHelper.dll
C:\Users\bine\AppData\Local\Temp\A858045B-BAB0-7891-B59B-921EE368A014\Latest\MyBabylonTB.exe
C:\Users\bine\AppData\Local\Temp\A858045B-BAB0-7891-B59B-921EE368A014\Latest\Setup.exe
C:\Users\bine\AppData\Local\Temp\A858045B-BAB0-7891-B59B-921EE368A014\Latest\sqlite3.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\hpzc3212.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\HPZids01.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\HPZids40.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\hpzsetup.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\hpzstub.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\hpzuci12.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\util\ccc\CCC_Uninstaller.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\util\ccc\FixErr1714.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\util\ccc\hpqrrx08.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\util\ccc\PrintUtil.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\util\ccc\x64\printutil.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\util\ccc\enu\WindowsXP-KB822603-x86-enu.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\HPCommunication.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\HPeDiag.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\HPeSupport.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\HPScripting.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzarp01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzcdl01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzchk01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzdui01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzdui40.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzfwx01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzgat01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzmsi01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpznop01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpznui01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpznui40.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpznuiprn01.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpznuiprn40.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzpnp01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzpnp40.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzprl01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzprl40.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzpsc01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzpsl01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzrcn01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzrcv01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzrein01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzscr01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzscr40.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzshl01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzshl40.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpztim01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzwis01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzwrp01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzwup01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\InstallMetrics.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\InternetUtil.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\msxml3.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\msxml3a.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\msxml3r.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\RulesEngine.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\usbready.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\x64\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\wis\Win2K_XP\instmsi.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\atl90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\hpqNwDr01.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\hpzscb01.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\hpzscbi0SmrtK.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\hpzscbi1BPDUSB.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\hpzscbi257usw.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\hpzscbi259Nop.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\hpzscbi2Snmp.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\mfc90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\mfc90u.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\mfcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\mfcm90u.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\msvcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\msvcp90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\msvcr90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\atl90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\hpqNwDr40.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\hpzscb01.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\hpzscbi0SmrtK.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\hpzscbi1BPDUSB.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\hpzscbi257usw.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\hpzscbi259Nop.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\hpzscbi2Snmp.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\mfc90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\mfc90u.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\mfcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\mfcm90u.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\msvcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\msvcp90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\msvcr90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\scanner\x64\hposc_p04a.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\scanner\x64\hpost_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\scanner\x64\hposwia_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\scanner\x32\hposc_p04a.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\scanner\x32\hpost_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\scanner\x32\hposwia_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\scanner\x32\hpotsti1.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\dot4\win2000\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\dot4\win2000\hppldcoi.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\dot4\win2000\hpzc3212.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\dot4\amd64\winxp\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\dot4\amd64\winxp\hppldcoi.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\dot4\amd64\winxp\hppldcoi.x64.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\hpzc3212.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\HPZids01.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\HPZids40.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\hpzsetup.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\hpzstub.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\hpzuci12.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\util\ccc\CCC_Uninstaller.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\util\ccc\FixErr1714.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\util\ccc\hpqrrx08.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\util\ccc\PrintUtil.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\util\ccc\x64\printutil.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\util\ccc\enu\WindowsXP-KB822603-x86-enu.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\HPCommunication.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\HPeDiag.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\HPeSupport.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\HPScripting.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzarp01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzcdl01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzchk01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzdui01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzdui40.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzfwx01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzgat01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzmsi01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpznop01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpznui01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpznui40.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpznuiprn01.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpznuiprn40.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzpnp01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzpnp40.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzprl01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzprl40.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzpsc01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzpsl01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzrcn01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzrcv01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzrein01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzscr01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzscr40.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzshl01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzshl40.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpztim01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzwis01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzwrp01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzwup01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\InstallMetrics.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\InternetUtil.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\msxml3.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\msxml3a.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\msxml3r.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\RulesEngine.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\usbready.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\x64\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\wis\Win2K_XP\instmsi.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\atl90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\hpqNwDr01.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\hpzscb01.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\hpzscbi0SmrtK.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\hpzscbi1BPDUSB.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\hpzscbi257usw.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\hpzscbi259Nop.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\hpzscbi2Snmp.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\mfc90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\mfc90u.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\mfcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\mfcm90u.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\msvcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\msvcp90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\msvcr90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\atl90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\hpqNwDr40.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\hpzscb01.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\hpzscbi0SmrtK.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\hpzscbi1BPDUSB.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\hpzscbi257usw.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\hpzscbi259Nop.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\hpzscbi2Snmp.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\mfc90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\mfc90u.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\mfcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\mfcm90u.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\msvcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\msvcp90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\msvcr90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\scanner\x64\hposc_p04a.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\scanner\x64\hpost_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\scanner\x64\hposwia_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\scanner\x32\hposc_p04a.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\scanner\x32\hpost_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\scanner\x32\hposwia_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\scanner\x32\hpotsti1.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\dot4\win2000\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\dot4\win2000\hppldcoi.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\dot4\win2000\hpzc3212.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\dot4\amd64\winxp\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\dot4\amd64\winxp\hppldcoi.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\dot4\amd64\winxp\hppldcoi.x64.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\hpzc3212.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\HPZids01.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\HPZids40.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\hpzsetup.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\hpzstub.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\hpzuci12.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\util\ccc\CCC_Uninstaller.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\util\ccc\FixErr1714.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\util\ccc\hpqrrx08.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\util\ccc\PrintUtil.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\util\ccc\x64\printutil.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\util\ccc\enu\WindowsXP-KB822603-x86-enu.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\HPCommunication.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\HPeDiag.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\HPeSupport.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\HPScripting.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzarp01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzcdl01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzchk01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzdui01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzdui40.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzfwx01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzgat01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzmsi01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpznop01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpznui01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpznui40.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpznuiprn01.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpznuiprn40.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzpnp01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzpnp40.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzprl01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzprl40.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzpsc01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzpsl01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzrcn01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzrcv01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzrein01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzscr01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzscr40.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzshl01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzshl40.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpztim01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzwis01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzwrp01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzwup01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\InstallMetrics.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\InternetUtil.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\msxml3.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\msxml3a.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\msxml3r.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\RulesEngine.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\usbready.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\x64\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\wis\Win2K_XP\instmsi.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\atl90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\hpqNwDr01.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\hpzscb01.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\hpzscbi0SmrtK.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\hpzscbi1BPDUSB.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\hpzscbi257usw.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\hpzscbi259Nop.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\hpzscbi2Snmp.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\mfc90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\mfc90u.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\mfcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\mfcm90u.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\msvcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\msvcp90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\msvcr90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\atl90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\hpqNwDr40.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\hpzscb01.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\hpzscbi0SmrtK.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\hpzscbi1BPDUSB.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\hpzscbi257usw.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\hpzscbi259Nop.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\hpzscbi2Snmp.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\mfc90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\mfc90u.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\mfcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\mfcm90u.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\msvcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\msvcp90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\msvcr90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\scanner\x64\hposc_p04a.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\scanner\x64\hpost_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\scanner\x64\hposwia_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\scanner\x32\hposc_p04a.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\scanner\x32\hpost_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\scanner\x32\hposwia_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\scanner\x32\hpotsti1.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\dot4\win2000\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\dot4\win2000\hppldcoi.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\dot4\win2000\hpzc3212.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\dot4\amd64\winxp\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\dot4\amd64\winxp\hppldcoi.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\dot4\amd64\winxp\hppldcoi.x64.dll
C:\Users\bine\AppData\Local\Temp\531A2BEC-BAB0-7891-8297-C1AE3FD28693\BabMaint.exe
C:\Users\bine\AppData\Local\Temp\531A2BEC-BAB0-7891-8297-C1AE3FD28693\BUSolution.dll
C:\Users\bine\AppData\Local\Temp\531A2BEC-BAB0-7891-8297-C1AE3FD28693\BUSUninstall.exe
C:\Users\bine\AppData\Local\Temp\531A2BEC-BAB0-7891-8297-C1AE3FD28693\ccp.exe
C:\Users\bine\AppData\Local\Temp\531A2BEC-BAB0-7891-8297-C1AE3FD28693\ChromeToolbarSetup.dll
C:\Users\bine\AppData\Local\Temp\531A2BEC-BAB0-7891-8297-C1AE3FD28693\CrxInstaller.dll
C:\Users\bine\AppData\Local\Temp\531A2BEC-BAB0-7891-8297-C1AE3FD28693\GUninstaller.exe
C:\Users\bine\AppData\Local\Temp\531A2BEC-BAB0-7891-8297-C1AE3FD28693\MyBabylonTB.exe
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\GoogleEarth.exe
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemyext.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\earthps.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\geplugin.exe
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\ge_expat.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\googleearth_free.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\icudt.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGAttrs.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGCore.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGExportCommon.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGGfx.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGMath.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGOpt.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGSg.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGUtils.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\msvcp100.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\msvcr100.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\npgeplugin.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\plugin_ax.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\QtCore4.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\QtGui4.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\QtNetwork4.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\QtWebKit4.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\imageformats\qgif4.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\imageformats\qjpeg4.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\optimizations\IGOptExtension.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\D3DCompiler_43.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\d3dx9_43.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\IGAttrs.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\IGGfx.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\IGSg.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\libEGL.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\libGLESv2.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogl\IGAttrs.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogl\IGGfx.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogl\IGSg.dll

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-01 01:30

==================== End Of Log ============================
         

Gmer.txt

GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-09-06 14:38:00
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 ST750LM0 rev.2AR1 698,64GB
Running: 1z45y8b9.exe; Driver: C:\Users\bine\AppData\Local\Temp\kxldqpow.sys


---- Kernel code sections - GMER 2.1 ----

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 544                                                                                     fffff80002fc0000 16 bytes [BD, 00, 10, 00, 00, 48, 8B, ...]
INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 562                                                                                     fffff80002fc0012 1 byte [F0]

---- User code sections - GMER 2.1 ----

.text     C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1968] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   00000000757b1465 2 bytes [7B, 75]
.text     C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1968] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  00000000757b14bb 2 bytes [7B, 75]
.text     ...                                                                                                                                                    * 2
.text     C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe[2660] C:\Windows\syswow64\USER32.dll!GetMenu + 412                     00000000756d51dd 7 bytes JMP 000000010019be30
.text     C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe[2660] C:\Windows\syswow64\USER32.dll!PeekMessageA + 407                00000000756d610b 7 bytes JMP 000000010019bf70
.text     C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe[2660] C:\Windows\syswow64\USER32.dll!CreateDialogIndirectParamW + 131  00000000756dc6c1 7 bytes JMP 000000010019bf50
.text     C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe[2660] C:\Windows\syswow64\USER32.dll!MessageBoxIndirectA + 199         000000007571fc98 7 bytes JMP 000000010019bfc0
.text     C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe[2660] C:\Windows\syswow64\USER32.dll!MessageBoxIndirectW + 52          000000007571fcd1 7 bytes JMP 000000010019c090
.text     C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe[2660] C:\Windows\syswow64\USER32.dll!MessageBoxExA + 31                000000007571fcf5 7 bytes JMP 000000010019c040
.text     C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe[2660] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69          00000000757b1465 2 bytes [7B, 75]
.text     C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe[2660] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155         00000000757b14bb 2 bytes [7B, 75]
.text     ...                                                                                                                                                    * 2
.text     C:\Program Files (x86)\Launch Manager\LManager.exe[3008] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                       00000000757b1465 2 bytes [7B, 75]
.text     C:\Program Files (x86)\Launch Manager\LManager.exe[3008] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                      00000000757b14bb 2 bytes [7B, 75]
.text     ...                                                                                                                                                    * 2
.text     C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3444] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   00000000757b1465 2 bytes [7B, 75]
.text     C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3444] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  00000000757b14bb 2 bytes [7B, 75]
.text     ...                                                                                                                                                    * 2
.text     C:\Users\bine\Desktop\Defogger.exe[4200] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                       00000000757b1465 2 bytes [7B, 75]
.text     C:\Users\bine\Desktop\Defogger.exe[4200] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                      00000000757b14bb 2 bytes [7B, 75]
.text     ...                                                                                                                                                    * 2

---- Threads - GMER 2.1 ----

Thread    C:\Windows\System32\svchost.exe [4124:3060]                                                                                                            000007fef2069688

---- EOF - GMER 2.1 ----
         

hi,

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Hier die geforderten Logfiles:

mbam-log-2013-09-07 (00-21-04).txt

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.09.06.09

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16660
bine :: BINE-PC [Administrator]

07.09.2013 00:21:04
mbam-log-2013-09-07 (00-21-04).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 237108
Laufzeit: 4 Minute(n), 52 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 7
HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\DataMngr_Toolbar (PUP.Optional.DataMngr) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\DataMngr (PUP.Optional.DataMngr) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\delta LTD (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\babylontoolbar (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 5
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.AskWebSearch) -> Bösartig: (hxxp://home.tb.ask.com/index.jhtml?n=77DE8857&p2=^UX^xdm244^YYA^de&ptb=8AD5A822-1D9D-4BCD-85AB-D333BF96C986&si=MA_MAPS_FIG_GER_13) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Search Page (PUP.Optional.Snapdo) -> Bösartig: (hxxp://feed.snap.do/?publisher=SnapdoGOblidooYB&dpid=SnapdoGOblidooYB&co=DE&userid=231adb63-7983-4d8c-9071-fee617ccf76d&searchtype=ds&q={searchTerms}&installDate=29/04/2013) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Search Bar (PUP.Optional.Snapdo) -> Bösartig: (hxxp://feed.snap.do/?publisher=SnapdoGOblidooYB&dpid=SnapdoGOblidooYB&co=DE&userid=231adb63-7983-4d8c-9071-fee617ccf76d&searchtype=ds&q={searchTerms}&installDate=29/04/2013) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Search|Default_Search_URL (PUP.Optional.Snapdo) -> Bösartig: (hxxp://feed.snap.do/?publisher=SnapdoGOblidooYB&dpid=SnapdoGOblidooYB&co=DE&userid=231adb63-7983-4d8c-9071-fee617ccf76d&searchtype=ds&q={searchTerms}&installDate=29/04/2013) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Search|SearchAssistant (PUP.Optional.Snapdo) -> Bösartig: (hxxp://feed.snap.do/?publisher=SnapdoGOblidooYB&dpid=SnapdoGOblidooYB&co=DE&userid=231adb63-7983-4d8c-9071-fee617ccf76d&searchtype=ds&q={searchTerms}&installDate=29/04/2013) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.

Infizierte Verzeichnisse: 4
C:\Users\bine\AppData\Roaming\Babylon (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\bine\AppData\Local\Temp\mt_ffx\Delta (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\bine\AppData\Local\Temp\mt_ffx\Delta\delta (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\bine\AppData\Local\Temp\mt_ffx\Delta\delta\1.8.16.16 (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateien: 11
C:\Users\bine\AppData\Local\Temp\2qNDDWX3.exe.part (PUP.Optional.InstallCore) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\bine\AppData\Local\Temp\wajam_install.exe (PUP.Optional.Wajam.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\bine\AppData\Local\Temp\531A2BEC-BAB0-7891-8297-C1AE3FD28693\MyBabylonTB.exe (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\bine\AppData\Local\Temp\A858045B-BAB0-7891-B59B-921EE368A014\Latest\MyBabylonTB.exe (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\bine\AppData\Local\Temp\A858045B-BAB0-7891-B59B-921EE368A014\Latest\Setup.exe (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\bine\AppData\Local\Temp\DM\qYy3nbGh1voxO2Q\DomaIQ.exe (Adware.DomaIQ) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\bine\AppData\Local\Temp\DM\qYy3nbGh1voxO2Q\software\Delta Babylon.exe (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\bine\AppData\Local\Temp\DM\qYy3nbGh1voxO2Q\software\FlashPlayer.exe (Trojan.DomaIQ) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\bine\AppData\Local\Temp\DM\qYy3nbGh1voxO2Q\software\OptimizerPro.exe (PUP.Optional.OptimizePro.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\bine\Downloads\FlashPlayer.exe (Adware.DomaIQ) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\bine\AppData\Roaming\Babylon\log_file.txt (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
         

AdwCleaner[S0].txt

# AdwCleaner v3.002 - Bericht erstellt am 07/09/2013 um 00:41:41
# Updated 01/09/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : bine - BINE-PC
# Gestartet von : C:\Users\bine\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\Program Files (x86)\Iminent
Ordner Gelöscht : C:\Program Files (x86)\optimizer pro
Ordner Gelöscht : C:\Users\bine\AppData\LocalLow\iac
Ordner Gelöscht : C:\Users\bine\AppData\Roaming\Mozilla\Firefox\Profiles\omutrhle.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
Datei Gelöscht : C:\END
Datei Gelöscht : C:\Users\bine\AppData\Roaming\Mozilla\Firefox\Profiles\omutrhle.default\\invalidprefs.js
Datei Gelöscht : C:\Users\bine\AppData\Roaming\Mozilla\Firefox\Profiles\omutrhle.default\searchplugins\ask-web-search.xml
Datei Gelöscht : C:\Users\bine\AppData\Roaming\Mozilla\Firefox\Profiles\omutrhle.default\searchplugins\Babylon.xml
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\searchplugins\Babylon.xml
Datei Gelöscht : C:\Users\bine\AppData\Roaming\Mozilla\Firefox\Profiles\omutrhle.default\searchplugins\BrowserProtect.xml
Datei Gelöscht : C:\Users\bine\AppData\Roaming\Mozilla\Firefox\Profiles\omutrhle.default\searchplugins\delta.xml
Datei Gelöscht : C:\Users\bine\AppData\Roaming\Mozilla\Firefox\Profiles\omutrhle.default\searchplugins\Web Search.xml
Datei Gelöscht : C:\Users\bine\AppData\Roaming\Mozilla\Firefox\Profiles\omutrhle.default\user.js

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WajamUpdater_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WajamUpdater_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\5c55dddae639be17
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F0B76E1-4E46-427B-B55B-B90593468AC6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlüssel Gelöscht : HKCU\Software\BabylonToolbar
Schlüssel Gelöscht : HKCU\Software\Iminent
Schlüssel Gelöscht : HKCU\Software\SmartBar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\HappyLyrics
Schlüssel Gelöscht : HKLM\Software\Babylon
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\Iminent
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\DomaIQ

***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16660

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]

-\\ Mozilla Firefox v23.0.1 (de)

[ Datei : C:\Users\bine\AppData\Roaming\Mozilla\Firefox\Profiles\omutrhle.default\prefs.js ]

Zeile gelöscht : user_pref("extensions.delta.admin", false);
Zeile gelöscht : user_pref("extensions.delta.aflt", "babsst");
Zeile gelöscht : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Zeile gelöscht : user_pref("extensions.delta.autoRvrt", "false");
Zeile gelöscht : user_pref("extensions.delta.bbDpng", "13");
Zeile gelöscht : user_pref("extensions.delta.cntry", "DE");
Zeile gelöscht : user_pref("extensions.delta.dfltLng", "en");
Zeile gelöscht : user_pref("extensions.delta.excTlbr", false);
Zeile gelöscht : user_pref("extensions.delta.ffxUnstlRst", true);
Zeile gelöscht : user_pref("extensions.delta.hdrMd5", "1EE64ECC2011382B82C309AA2E29E29F");
Zeile gelöscht : user_pref("extensions.delta.id", "7c33b5bf000000000000666d57b5aa63");
Zeile gelöscht : user_pref("extensions.delta.instlDay", "15824");
Zeile gelöscht : user_pref("extensions.delta.instlRef", "sst");
Zeile gelöscht : user_pref("extensions.delta.lastVrsnTs", "1.8.16.1619:42:47");
Zeile gelöscht : user_pref("extensions.delta.newTab", false);
Zeile gelöscht : user_pref("extensions.delta.prdct", "delta");
Zeile gelöscht : user_pref("extensions.delta.prtnrId", "delta");
Zeile gelöscht : user_pref("extensions.delta.rvrt", "false");
Zeile gelöscht : user_pref("extensions.delta.sg", "azb");
Zeile gelöscht : user_pref("extensions.delta.smplGrp", "none");
Zeile gelöscht : user_pref("extensions.delta.tlbrId", "base");
Zeile gelöscht : user_pref("extensions.delta.tlbrSrchUrl", "");
Zeile gelöscht : user_pref("extensions.delta.vrsn", "1.8.16.16");
Zeile gelöscht : user_pref("extensions.delta.vrsnTs", "1.8.16.1619:42:47");
Zeile gelöscht : user_pref("extensions.delta.vrsni", "1.8.16.16");
Zeile gelöscht : user_pref("extensions.mywebsearch.prevDefaultEngine", "Google");
Zeile gelöscht : user_pref("extensions.mywebsearch.prevKwdEnabled", true);
Zeile gelöscht : user_pref("extensions.mywebsearch.prevSelectedEngine", "Google");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._39Members_.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=8AD5A822-1D9D-4BCD-85AB-D333BF96C986&n=77fd0a26&p2=^UX^xdm244^YYA^de&si=MA_MAPS_FIG_GER_13");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._39Members_.hp.enabled", false);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._39Members_.hp.user.defined", true);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._39Members_.initialized", true);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._39Members_.installation.contextKey", "");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._39Members_.installation.installDate", "2013071910");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._39Members_.installation.partnerId", "^UX^xdm244^YYA^de");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._39Members_.installation.partnerSubId", "MA_MAPS_FIG_GER_13");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._39Members_.installation.success", true);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._39Members_.installation.toolbarId", "8AD5A822-1D9D-4BCD-85AB-D333BF96C986");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._39Members_.lastActivePing", "1374479319772");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._39Members_.options.defaultSearch", true);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._39Members_.options.homePageEnabled", true);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._39Members_.options.keywordEnabled", true);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._39Members_.options.tabEnabled", true);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._39Members_.weather.location", "10001");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark.hp.enabled", false);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark.hp.enabled.guid", "");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark.lastInstalled", "mapsgalaxy@mindspark.com");
Zeile gelöscht : user_pref("extensions.wajam.affiliate_id", "1401");
Zeile gelöscht : user_pref("extensions.wajam.firstrun", "false");
Zeile gelöscht : user_pref("extensions.wajam.log_send_info", "false");
Zeile gelöscht : user_pref("extensions.wajam.mappingListJsonString", "{\"version\":\"0.21086\",\"supported_sites\":{\"google\":{\"patterns\":[\"^hxxp\\\\:\\/\\/www\\\\.google\\\\..{2,3}(|\\\\\\/ig|\\\\\\/firefox)\",\"[...]
Zeile gelöscht : user_pref("extensions.wajam.no_trace", "false");
Zeile gelöscht : user_pref("extensions.wajam.server_current_mapping_version", "0.21086");
Zeile gelöscht : user_pref("extensions.wajam.supported_sites.encryptedgoogle.wajam_google_js", "try {window['APP_LABEL_NAME'] = 'wajam';window['APP_LABEL_NAME_FULL_UC'] = 'WAJAM';window['WAJAM_APP_LABEL_NAME_UC'] = 'W[...]
Zeile gelöscht : user_pref("extensions.wajam.supported_sites.google.wajam_google_se_js", "try {window['APP_LABEL_NAME'] = 'wajam';window['APP_LABEL_NAME_FULL_UC'] = 'WAJAM';window['WAJAM_APP_LABEL_NAME_UC'] = 'Wajam';[...]
Zeile gelöscht : user_pref("extensions.wajam.supported_sites.wikipedia.wajam_se_js", "try {window['APP_LABEL_NAME'] = 'wajam';window['APP_LABEL_NAME_FULL_UC'] = 'WAJAM';window['WAJAM_APP_LABEL_NAME_UC'] = 'Wajam';wind[...]
Zeile gelöscht : user_pref("extensions.wajam.supported_sites.yahoo.wajam_se_js", "try {window['APP_LABEL_NAME'] = 'wajam';window['APP_LABEL_NAME_FULL_UC'] = 'WAJAM';window['WAJAM_APP_LABEL_NAME_UC'] = 'Wajam';window['[...]
Zeile gelöscht : user_pref("extensions.wajam.trace_log", "1367227159636 - processDOMLoad - mappingListJsonString is null, request mapping\n1367227159641 - processDOMLoad - Checking: hxxp://www.windownloader24.de/downl[...]
Zeile gelöscht : user_pref("extensions.wajam.unique_id", "8939A2308AA7DF0D839B0EEA34D641EF");
Zeile gelöscht : user_pref("extensions.wajam.user_current_mapping_version", "0");
Zeile gelöscht : user_pref("extensions.wajam.version", "1.26");
Zeile gelöscht : user_pref("extensions.wajam.website_version", "1.00267.0");
Zeile gelöscht : user_pref("keyword.URL", "hxxp://search.tb.ask.com/search/GGmain.jhtml?st=kwd&ptb=8AD5A822-1D9D-4BCD-85AB-D333BF96C986&n=77fd0a26&ind=2013071910&p2=^UX^xdm244^YYA^de&si=MA_MAPS_FIG_GER_13&searchfor=")[...]

*************************

AdwCleaner[R0].txt - [15985 octets] - [07/09/2013 00:39:26]
AdwCleaner[S0].txt - [15167 octets] - [07/09/2013 00:41:41]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [15228 octets] ##########
         

JRT.txt

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.5.8 (09.05.2013:1)
OS: Windows 7 Home Premium x64
Ran by bine on 07.09.2013 at  0:49:19,94
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-52579477-1900824640-453213239-1000\Software\SweetIM
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{b0441a0e-a49a-4e16-afc1-74ecced1921f}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{b0441a0e-a49a-4e16-afc1-74ecced1921f}



~~~ Files



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\bine\appdata\local\{448C4C2C-B68B-4D6E-8DD0-6BFEDAC46AC0}
Successfully deleted: [Empty Folder] C:\Users\bine\appdata\local\{5338611E-50E6-4113-BEA3-180DE397F6CA}
Successfully deleted: [Empty Folder] C:\Users\bine\appdata\local\{732F00C0-6E7A-4C6F-A764-18348C663C9F}
Successfully deleted: [Empty Folder] C:\Users\bine\appdata\local\{858FD94C-D8B0-4889-A1AB-97986DBDB448}
Successfully deleted: [Empty Folder] C:\Users\bine\appdata\local\{8A17F584-90FF-4E79-9D22-32CAE93FBFCA}
Successfully deleted: [Empty Folder] C:\Users\bine\appdata\local\{9850DD51-31B9-4773-B64C-F739D2B81A14}
Successfully deleted: [Empty Folder] C:\Users\bine\appdata\local\{A822E9F1-B120-4104-9847-769142B2EE9F}
Successfully deleted: [Empty Folder] C:\Users\bine\appdata\local\{DCE14FB6-D212-4BC0-AA96-F4529C6B21EF}
Successfully deleted: [Empty Folder] C:\Users\bine\appdata\local\{E7200689-5732-4FEA-885E-AC541D39F665}
Successfully deleted: [Empty Folder] C:\Users\bine\appdata\local\{F0C81BC3-38B0-41A3-8016-20ED3CA61C2A}
Successfully deleted: [Empty Folder] C:\Users\bine\appdata\local\{F2F40398-B1A6-42E3-B145-F8F8608D46AA}



~~~ FireFox

Successfully deleted the following from C:\Users\bine\AppData\Roaming\mozilla\firefox\profiles\omutrhle.default\prefs.js

user_pref("iminent.webbooster.scripts.minibar.ROOTEXTENSION", "chrome://iminentwebbooster/content/minibar");
user_pref("iminent.webbooster.scripts.minibar.Services.BHPCode", "01");
user_pref("iminent.webbooster.scripts.minibar.Services.DefaultEvent", "000");
user_pref("iminent.webbooster.scripts.minibar.Services.DefaultWebSite", "000");
user_pref("iminent.webbooster.scripts.minibar.Services.IminentClientCode", "11");
user_pref("iminent.webbooster.scripts.minibar.Services.SmartFavCode", "02");
user_pref("iminent.webbooster.scripts.minibar.displayFavLinks", "1");
user_pref("iminent.webbooster.scripts.sslminibar.ROOTEXTENSION", "chrome://iminentwebbooster/content/minibar");
user_pref("iminent.webbooster.scripts.sslminibar.Services.BHPCode", "01");
user_pref("iminent.webbooster.scripts.sslminibar.Services.DefaultEvent", "000");
user_pref("iminent.webbooster.scripts.sslminibar.Services.DefaultWebSite", "000");
user_pref("iminent.webbooster.scripts.sslminibar.Services.IminentClientCode", "11");
user_pref("iminent.webbooster.scripts.sslminibar.Services.SmartFavCode", "02");
user_pref("iminent.webbooster.scripts.sslminibar.ShowThankyouPixel", "0");
user_pref("iminent.webbooster.scripts.sslminibar.displayFavLinks", "1");
user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent100", "1368475871618");
user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent102", "1368474189201");
Emptied folder: C:\Users\bine\AppData\Roaming\mozilla\firefox\profiles\omutrhle.default\minidumps [46 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 07.09.2013 at  0:55:01,45
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

Und ein frisches FRST

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-09-2013
Ran by bine (administrator) on BINE-PC on 07-09-2013 00:58:16
Running from C:\Users\bine\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Adobe Systems Incorporated) c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Acer Incorporated) C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
() C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
(Sony Ericsson Mobile Communications AB) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe
(Dropbox, Inc.) C:\Users\bine\AppData\Roaming\Dropbox\bin\Dropbox.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\HidFind.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apntex.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Users\bine\Desktop\Defogger.exe
(Microsoft Corporation) c:\program files\windows defender\MpCmdRun.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12446824 2012-02-11] (Realtek Semiconductor)
HKLM\...\Run: [Apoint] - C:\Program Files\Apoint2K\Apoint.exe [576376 2012-02-02] (Alps Electric Co., Ltd.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [497648 2010-07-29] (Adobe Systems Incorporated)
HKLM\...\Run: [Power Management] - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [1829768 2012-02-07] (Acer Incorporated)
HKLM\...\Policies\Explorer: [NoActiveDesktop] 1
HKLM\...\Policies\Explorer: [NoActiveDesktopChanges] 1
HKCU\...\Run: [Sony Ericsson PC Companion] - C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe [774144 2009-12-08] (Sony Ericsson Mobile Communications AB)
MountPoints2: {8f491e12-1289-11e3-b118-e840f2f9903b} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL G:\Harley.exe www.h-d2011my-press.eu
MountPoints2: {d901a9ae-849e-11e2-805f-e840f2f9903b} - H:\Startme.exe
HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-02] (Symantec Corporation)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1105488 2012-03-23] (Dritek System Inc.)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-26] (Intel Corporation)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2010-03-17] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [162408 2011-09-13] ()
HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [162408 2011-09-13] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\bine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\bine\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\bine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://packardbell.msn.com
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=APBTDF&pc=MAPB&src=IE-SearchBox
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\bine\AppData\Roaming\Mozilla\Firefox\Profiles\omutrhle.default
FF NewTab: about:blank
FF DefaultSearchEngine: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @SonyCreativeSoftware.com/Media Go,version=1.0 - C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Media Software and Services Inc)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

==================== Services (Whitelisted) =================

R2 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [871296 2012-02-07] (Acer Incorporated)
R2 GREGService; C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe [28264 2012-02-29] (Acer Incorporated)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation)
S2 Live Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [255376 2012-02-07] (Acer Incorporated)
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)
R2 OMSI download service; C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [90112 2009-04-30] ()

==================== Drivers (Whitelisted) ====================

S3 s1039bus; C:\Windows\System32\DRIVERS\s1039bus.sys [127600 2009-11-19] (MCCI Corporation)
S3 s1039mdfl; C:\Windows\System32\DRIVERS\s1039mdfl.sys [19568 2009-11-19] (MCCI Corporation)
S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [161904 2009-11-19] (MCCI Corporation)
S3 s1039mgmt; C:\Windows\System32\DRIVERS\s1039mgmt.sys [141424 2009-11-19] (MCCI Corporation)
S3 s1039nd5; C:\Windows\System32\DRIVERS\s1039nd5.sys [34416 2009-11-19] (MCCI Corporation)
S3 s1039obex; C:\Windows\System32\DRIVERS\s1039obex.sys [137328 2009-11-19] (MCCI Corporation)
S3 s1039unic; C:\Windows\System32\DRIVERS\s1039unic.sys [158320 2009-11-19] (MCCI Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-07 00:49 - 2013-09-07 00:49 - 00000000 ____D C:\Windows\ERUNT
2013-09-07 00:47 - 2013-09-07 00:47 - 01028823 _____ (Thisisu) C:\Users\bine\Desktop\JRT.exe
2013-09-07 00:44 - 2013-09-07 00:44 - 00015321 _____ C:\Users\bine\Desktop\AdwCleaner[S0].txt
2013-09-07 00:39 - 2013-09-07 00:41 - 00000000 ____D C:\AdwCleaner
2013-09-07 00:36 - 2013-09-07 00:37 - 01037222 _____ C:\Users\bine\Desktop\adwcleaner.exe
2013-09-07 00:18 - 2013-09-07 00:18 - 00000000 ____D C:\Users\bine\AppData\Roaming\Malwarebytes
2013-09-07 00:17 - 2013-09-07 00:17 - 00001117 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-07 00:17 - 2013-09-07 00:17 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-07 00:17 - 2013-09-07 00:17 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-07 00:17 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-09-07 00:07 - 2013-09-07 00:08 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\bine\Desktop\mbam-setup-1.75.0.1300.exe
2013-09-07 00:01 - 2013-09-07 00:01 - 00001811 _____ C:\Users\bine\Desktop\Anleitung2_TrojanerBoard.txt
2013-09-06 14:38 - 2013-09-06 14:38 - 00005056 _____ C:\Users\bine\Desktop\Gmer.txt
2013-09-06 14:00 - 2013-09-06 14:00 - 00056774 _____ C:\Users\bine\Desktop\FRST1.txt
2013-09-06 14:00 - 2013-09-06 14:00 - 00045051 _____ C:\Users\bine\Desktop\Addition.txt
2013-09-06 13:58 - 2013-09-06 13:58 - 00000000 ____D C:\FRST
2013-09-06 13:57 - 2013-09-07 00:48 - 00000470 _____ C:\Users\bine\Desktop\defogger_disable.log
2013-09-06 13:57 - 2013-09-06 13:57 - 00000000 _____ C:\Users\bine\defogger_reenable
2013-09-06 13:47 - 2013-09-06 13:47 - 00377856 _____ C:\Users\bine\Desktop\1z45y8b9.exe
2013-09-06 13:45 - 2013-09-06 13:46 - 01948360 _____ (Farbar) C:\Users\bine\Desktop\FRST64.exe
2013-09-06 13:43 - 2013-09-06 13:43 - 00050477 _____ C:\Users\bine\Desktop\Defogger.exe
2013-09-06 13:40 - 2013-09-06 13:40 - 00016408 _____ C:\Users\bine\Desktop\get-mirror-server.html
2013-09-06 13:35 - 2013-09-06 14:22 - 00007925 _____ C:\Users\bine\Desktop\Anleitung_ TrojanerBoard.txt
2013-09-06 12:47 - 2013-09-06 12:47 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2013-08-18 22:08 - 2013-08-18 22:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-15 09:50 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-15 09:50 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-15 09:50 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-15 09:50 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-15 09:50 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-15 09:50 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-15 09:50 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-15 09:50 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-15 09:50 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-15 09:50 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-15 09:50 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-15 09:50 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-14 10:31 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-14 10:31 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-14 10:31 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-14 10:31 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-14 10:31 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-14 10:31 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-14 10:31 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-14 10:31 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-14 10:27 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-14 10:27 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-14 10:27 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-14 10:27 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-14 10:27 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-14 10:27 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-14 10:27 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-08-14 10:27 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-14 10:27 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-08-14 10:27 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-08-14 10:27 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-08-14 10:27 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-14 10:27 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-08-14 10:27 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-08-14 10:27 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-08-14 10:27 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-08-14 10:27 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-08-14 10:27 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-14 10:27 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

==================== One Month Modified Files and Folders =======

2013-09-07 00:55 - 2013-09-07 00:55 - 00003949 _____ C:\Users\bine\Desktop\JRT.txt
2013-09-07 00:50 - 2009-07-14 06:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-07 00:50 - 2009-07-14 06:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-07 00:49 - 2013-09-07 00:49 - 00000000 ____D C:\Windows\ERUNT
2013-09-07 00:48 - 2013-09-06 13:57 - 00000470 _____ C:\Users\bine\Desktop\defogger_disable.log
2013-09-07 00:47 - 2013-09-07 00:47 - 01028823 _____ (Thisisu) C:\Users\bine\Desktop\JRT.exe
2013-09-07 00:44 - 2013-09-07 00:44 - 00015321 _____ C:\Users\bine\Desktop\AdwCleaner[S0].txt
2013-09-07 00:43 - 2013-04-29 12:37 - 00000000 ___RD C:\Users\bine\Dropbox
2013-09-07 00:43 - 2013-04-29 11:26 - 00000000 ____D C:\Users\bine\AppData\Roaming\Dropbox
2013-09-07 00:43 - 2013-03-30 02:07 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-07 00:43 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-07 00:43 - 2009-07-14 06:51 - 00052741 _____ C:\Windows\setupact.log
2013-09-07 00:42 - 2012-06-06 15:44 - 01596106 _____ C:\Windows\WindowsUpdate.log
2013-09-07 00:41 - 2013-09-07 00:39 - 00000000 ____D C:\AdwCleaner
2013-09-07 00:37 - 2013-09-07 00:36 - 01037222 _____ C:\Users\bine\Desktop\adwcleaner.exe
2013-09-07 00:31 - 2010-11-21 05:47 - 00393724 _____ C:\Windows\PFRO.log
2013-09-07 00:24 - 2013-03-30 02:07 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-07 00:18 - 2013-09-07 00:18 - 00000000 ____D C:\Users\bine\AppData\Roaming\Malwarebytes
2013-09-07 00:17 - 2013-09-07 00:17 - 00001117 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-07 00:17 - 2013-09-07 00:17 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-07 00:17 - 2013-09-07 00:17 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-07 00:08 - 2013-09-07 00:07 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\bine\Desktop\mbam-setup-1.75.0.1300.exe
2013-09-07 00:01 - 2013-09-07 00:01 - 00001811 _____ C:\Users\bine\Desktop\Anleitung2_TrojanerBoard.txt
2013-09-06 23:31 - 2012-04-21 12:07 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-06 23:29 - 2013-02-10 18:24 - 00000000 ____D C:\Users\bine\AppData\Roaming\XnView
2013-09-06 22:55 - 2012-06-07 01:36 - 01557156 _____ C:\Windows\system32\perfh007.dat
2013-09-06 22:55 - 2012-06-07 01:36 - 00419322 _____ C:\Windows\system32\perfc007.dat
2013-09-06 22:55 - 2009-07-14 07:13 - 00005430 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-06 14:38 - 2013-09-06 14:38 - 00005056 _____ C:\Users\bine\Desktop\Gmer.txt
2013-09-06 14:22 - 2013-09-06 13:35 - 00007925 _____ C:\Users\bine\Desktop\Anleitung_ TrojanerBoard.txt
2013-09-06 14:00 - 2013-09-06 14:00 - 00056774 _____ C:\Users\bine\Desktop\FRST1.txt
2013-09-06 14:00 - 2013-09-06 14:00 - 00045051 _____ C:\Users\bine\Desktop\Addition.txt
2013-09-06 13:58 - 2013-09-06 13:58 - 00000000 ____D C:\FRST
2013-09-06 13:57 - 2013-09-06 13:57 - 00000000 _____ C:\Users\bine\defogger_reenable
2013-09-06 13:57 - 2012-12-16 13:13 - 00000000 ____D C:\Users\bine
2013-09-06 13:47 - 2013-09-06 13:47 - 00377856 _____ C:\Users\bine\Desktop\1z45y8b9.exe
2013-09-06 13:46 - 2013-09-06 13:45 - 01948360 _____ (Farbar) C:\Users\bine\Desktop\FRST64.exe
2013-09-06 13:43 - 2013-09-06 13:43 - 00050477 _____ C:\Users\bine\Desktop\Defogger.exe
2013-09-06 13:40 - 2013-09-06 13:40 - 00016408 _____ C:\Users\bine\Desktop\get-mirror-server.html
2013-09-06 12:47 - 2013-09-06 12:47 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2013-09-06 12:47 - 2012-12-16 14:37 - 00000000 ____D C:\Users\bine\AppData\Roaming\Adobe
2013-09-06 12:47 - 2012-04-21 12:06 - 00000000 ____D C:\ProgramData\Adobe
2013-09-06 12:41 - 2013-06-28 16:24 - 00000000 ____D C:\Users\bine\AppData\Local\CrashDumps
2013-09-05 12:25 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-09-05 03:15 - 2013-07-28 09:57 - 00000000 ____D C:\Users\bine\Desktop\Desktop-Bilder
2013-09-03 15:26 - 2013-07-28 09:55 - 00000000 ____D C:\Users\bine\Desktop\Rechnungen-2013
2013-08-22 09:11 - 2013-07-24 15:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-20 22:33 - 2012-04-21 12:07 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-20 22:33 - 2012-04-21 12:07 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-20 22:33 - 2012-04-21 12:07 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-18 22:08 - 2013-08-18 22:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-15 15:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-08-15 09:46 - 2013-07-23 23:59 - 00000000 ____D C:\Windows\system32\MRT
2013-08-15 09:44 - 2013-06-27 00:01 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-08 09:56 - 2013-08-07 12:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird

Files to move or delete:
====================
C:\Users\bine\AppData\Local\Temp\install_reader11_de_mssd_aih.exe
C:\Users\bine\AppData\Local\Temp\Quarantine.exe
C:\Users\bine\AppData\Local\Temp\uninst1.exe
C:\Users\bine\AppData\Local\Temp\{8C030983-978B-4EEF-9F87-ED0C9B216FA3}\ISBEW64.exe
C:\Users\bine\AppData\Local\Temp\VCB\Languages\ZHH\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\TRK\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\THA\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\SVE\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\RUS\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\PTG\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\PLK\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\NOR\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\NLD\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\JPN\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\ITA\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\HUN\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\HEB\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\FRC\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\FRA\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\FIN\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\ESP\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\ESM\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\ENU\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\ENG\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\ELL\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\DEU\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\DAN\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\CSY\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\CHT\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\CHS\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\ARB\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Graphics\NewUI.dll
C:\Users\bine\AppData\Local\Temp\Upgrade\MediaGo_1.4.exe
C:\Users\bine\AppData\Local\Temp\Upgrade\Sony Ericsson PC Suite_6.011.00_Web_DEU.exe
C:\Users\bine\AppData\Local\Temp\PCCompanion\NewUI.dll
C:\Users\bine\AppData\Local\Temp\PCCompanion\Drivers\DPInst.exe
C:\Users\bine\AppData\Local\Temp\PCCompanion\Drivers\DPInst64.exe
C:\Users\bine\AppData\Local\Temp\nsx5E09.tmp\DropboxNSISTools.dll
C:\Users\bine\AppData\Local\Temp\nsx5E09.tmp\UAC.dll
C:\Users\bine\AppData\Local\Temp\jrt\erunt\ERUNT.EXE
C:\Users\bine\AppData\Local\Temp\DM\qYy3nbGh1voxO2Q\bin.dll
C:\Users\bine\AppData\Local\Temp\DM\qYy3nbGh1voxO2Q\config.dll
C:\Users\bine\AppData\Local\Temp\DM\qYy3nbGh1voxO2Q\routes.dll
C:\Users\bine\AppData\Local\Temp\bus9C8D\ff21v.exe
C:\Users\bine\AppData\Local\Temp\A858045B-BAB0-7891-B59B-921EE368A014\Setup.exe
C:\Users\bine\AppData\Local\Temp\A858045B-BAB0-7891-B59B-921EE368A014\sqlite3.dll
C:\Users\bine\AppData\Local\Temp\A858045B-BAB0-7891-B59B-921EE368A014\Latest\ccp.exe
C:\Users\bine\AppData\Local\Temp\A858045B-BAB0-7891-B59B-921EE368A014\Latest\ChromeToolbarSetup.dll
C:\Users\bine\AppData\Local\Temp\A858045B-BAB0-7891-B59B-921EE368A014\Latest\CrxInstaller.dll
C:\Users\bine\AppData\Local\Temp\A858045B-BAB0-7891-B59B-921EE368A014\Latest\GUninstaller.exe
C:\Users\bine\AppData\Local\Temp\A858045B-BAB0-7891-B59B-921EE368A014\Latest\IEHelper.dll
C:\Users\bine\AppData\Local\Temp\A858045B-BAB0-7891-B59B-921EE368A014\Latest\sqlite3.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\hpzc3212.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\HPZids01.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\HPZids40.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\hpzsetup.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\hpzstub.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\hpzuci12.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\util\ccc\CCC_Uninstaller.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\util\ccc\FixErr1714.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\util\ccc\hpqrrx08.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\util\ccc\PrintUtil.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\util\ccc\x64\printutil.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\util\ccc\enu\WindowsXP-KB822603-x86-enu.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\HPCommunication.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\HPeDiag.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\HPeSupport.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\HPScripting.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzarp01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzcdl01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzchk01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzdui01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzdui40.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzfwx01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzgat01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzmsi01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpznop01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpznui01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpznui40.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpznuiprn01.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpznuiprn40.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzpnp01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzpnp40.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzprl01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzprl40.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzpsc01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzpsl01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzrcn01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzrcv01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzrein01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzscr01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzscr40.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzshl01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzshl40.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpztim01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzwis01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzwrp01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzwup01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\InstallMetrics.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\InternetUtil.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\msxml3.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\msxml3a.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\msxml3r.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\RulesEngine.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\usbready.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\x64\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\wis\Win2K_XP\instmsi.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\atl90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\hpqNwDr01.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\hpzscb01.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\hpzscbi0SmrtK.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\hpzscbi1BPDUSB.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\hpzscbi257usw.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\hpzscbi259Nop.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\hpzscbi2Snmp.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\mfc90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\mfc90u.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\mfcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\mfcm90u.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\msvcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\msvcp90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\msvcr90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\atl90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\hpqNwDr40.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\hpzscb01.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\hpzscbi0SmrtK.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\hpzscbi1BPDUSB.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\hpzscbi257usw.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\hpzscbi259Nop.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\hpzscbi2Snmp.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\mfc90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\mfc90u.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\mfcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\mfcm90u.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\msvcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\msvcp90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\msvcr90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\scanner\x64\hposc_p04a.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\scanner\x64\hpost_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\scanner\x64\hposwia_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\scanner\x32\hposc_p04a.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\scanner\x32\hpost_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\scanner\x32\hposwia_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\scanner\x32\hpotsti1.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\dot4\win2000\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\dot4\win2000\hppldcoi.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\dot4\win2000\hpzc3212.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\dot4\amd64\winxp\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\dot4\amd64\winxp\hppldcoi.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\dot4\amd64\winxp\hppldcoi.x64.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\hpzc3212.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\HPZids01.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\HPZids40.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\hpzsetup.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\hpzstub.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\hpzuci12.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\util\ccc\CCC_Uninstaller.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\util\ccc\FixErr1714.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\util\ccc\hpqrrx08.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\util\ccc\PrintUtil.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\util\ccc\x64\printutil.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\util\ccc\enu\WindowsXP-KB822603-x86-enu.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\HPCommunication.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\HPeDiag.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\HPeSupport.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\HPScripting.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzarp01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzcdl01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzchk01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzdui01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzdui40.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzfwx01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzgat01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzmsi01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpznop01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpznui01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpznui40.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpznuiprn01.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpznuiprn40.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzpnp01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzpnp40.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzprl01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzprl40.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzpsc01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzpsl01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzrcn01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzrcv01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzrein01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzscr01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzscr40.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzshl01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzshl40.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpztim01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzwis01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzwrp01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzwup01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\InstallMetrics.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\InternetUtil.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\msxml3.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\msxml3a.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\msxml3r.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\RulesEngine.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\usbready.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\x64\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\wis\Win2K_XP\instmsi.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\atl90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\hpqNwDr01.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\hpzscb01.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\hpzscbi0SmrtK.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\hpzscbi1BPDUSB.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\hpzscbi257usw.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\hpzscbi259Nop.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\hpzscbi2Snmp.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\mfc90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\mfc90u.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\mfcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\mfcm90u.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\msvcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\msvcp90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\msvcr90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\atl90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\hpqNwDr40.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\hpzscb01.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\hpzscbi0SmrtK.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\hpzscbi1BPDUSB.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\hpzscbi257usw.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\hpzscbi259Nop.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\hpzscbi2Snmp.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\mfc90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\mfc90u.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\mfcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\mfcm90u.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\msvcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\msvcp90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\msvcr90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\scanner\x64\hposc_p04a.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\scanner\x64\hpost_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\scanner\x64\hposwia_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\scanner\x32\hposc_p04a.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\scanner\x32\hpost_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\scanner\x32\hposwia_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\scanner\x32\hpotsti1.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\dot4\win2000\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\dot4\win2000\hppldcoi.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\dot4\win2000\hpzc3212.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\dot4\amd64\winxp\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\dot4\amd64\winxp\hppldcoi.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\dot4\amd64\winxp\hppldcoi.x64.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\hpzc3212.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\HPZids01.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\HPZids40.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\hpzsetup.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\hpzstub.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\hpzuci12.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\util\ccc\CCC_Uninstaller.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\util\ccc\FixErr1714.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\util\ccc\hpqrrx08.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\util\ccc\PrintUtil.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\util\ccc\x64\printutil.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\util\ccc\enu\WindowsXP-KB822603-x86-enu.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\HPCommunication.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\HPeDiag.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\HPeSupport.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\HPScripting.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzarp01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzcdl01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzchk01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzdui01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzdui40.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzfwx01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzgat01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzmsi01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpznop01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpznui01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpznui40.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpznuiprn01.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpznuiprn40.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzpnp01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzpnp40.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzprl01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzprl40.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzpsc01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzpsl01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzrcn01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzrcv01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzrein01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzscr01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzscr40.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzshl01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzshl40.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpztim01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzwis01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzwrp01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzwup01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\InstallMetrics.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\InternetUtil.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\msxml3.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\msxml3a.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\msxml3r.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\RulesEngine.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\usbready.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\x64\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\wis\Win2K_XP\instmsi.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\atl90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\hpqNwDr01.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\hpzscb01.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\hpzscbi0SmrtK.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\hpzscbi1BPDUSB.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\hpzscbi257usw.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\hpzscbi259Nop.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\hpzscbi2Snmp.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\mfc90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\mfc90u.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\mfcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\mfcm90u.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\msvcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\msvcp90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\msvcr90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\atl90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\hpqNwDr40.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\hpzscb01.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\hpzscbi0SmrtK.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\hpzscbi1BPDUSB.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\hpzscbi257usw.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\hpzscbi259Nop.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\hpzscbi2Snmp.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\mfc90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\mfc90u.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\mfcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\mfcm90u.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\msvcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\msvcp90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\msvcr90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\scanner\x64\hposc_p04a.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\scanner\x64\hpost_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\scanner\x64\hposwia_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\scanner\x32\hposc_p04a.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\scanner\x32\hpost_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\scanner\x32\hposwia_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\scanner\x32\hpotsti1.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\dot4\win2000\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\dot4\win2000\hppldcoi.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\dot4\win2000\hpzc3212.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\dot4\amd64\winxp\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\dot4\amd64\winxp\hppldcoi.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\dot4\amd64\winxp\hppldcoi.x64.dll
C:\Users\bine\AppData\Local\Temp\531A2BEC-BAB0-7891-8297-C1AE3FD28693\BabMaint.exe
C:\Users\bine\AppData\Local\Temp\531A2BEC-BAB0-7891-8297-C1AE3FD28693\BUSolution.dll
C:\Users\bine\AppData\Local\Temp\531A2BEC-BAB0-7891-8297-C1AE3FD28693\BUSUninstall.exe
C:\Users\bine\AppData\Local\Temp\531A2BEC-BAB0-7891-8297-C1AE3FD28693\ccp.exe
C:\Users\bine\AppData\Local\Temp\531A2BEC-BAB0-7891-8297-C1AE3FD28693\ChromeToolbarSetup.dll
C:\Users\bine\AppData\Local\Temp\531A2BEC-BAB0-7891-8297-C1AE3FD28693\CrxInstaller.dll
C:\Users\bine\AppData\Local\Temp\531A2BEC-BAB0-7891-8297-C1AE3FD28693\GUninstaller.exe
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\GoogleEarth.exe
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemyext.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\earthps.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\geplugin.exe
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\ge_expat.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\googleearth_free.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\icudt.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGAttrs.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGCore.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGExportCommon.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGGfx.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGMath.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGOpt.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGSg.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGUtils.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\msvcp100.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\msvcr100.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\npgeplugin.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\plugin_ax.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\QtCore4.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\QtGui4.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\QtNetwork4.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\QtWebKit4.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\imageformats\qgif4.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\imageformats\qjpeg4.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\optimizations\IGOptExtension.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\D3DCompiler_43.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\d3dx9_43.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\IGAttrs.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\IGGfx.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\IGSg.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\libEGL.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\libGLESv2.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogl\IGAttrs.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogl\IGGfx.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogl\IGSg.dll

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-01 01:30

==================== End Of Log ============================
         

--- --- ---

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

Puuuuh...das mit eset hat ja ganz schön lang gedauert, sorry für die späte Antwort.
Here are the results of the Bines scans

Eset Smartinstaller

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=aba61192e28801438c47b9dcb616d4b8
# engine=15043
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-09-07 05:52:00
# local_time=2013-09-07 07:52:00 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776573 100 94 68170 130206170 0 0
# scanned=239802
# found=0
# cleaned=0
# scan_time=6596
         

Securtity Check

 Results of screen317's Security Check version 0.99.72  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 10  
``````````````Antivirus/Firewall Check:`````````````` 
 WMI entry may not exist for antivirus; attempting automatic update. 
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 Adobe Flash Player 11.8.800.94  
 Adobe Reader XI  
 Mozilla Firefox (23.0.1) 
 Mozilla Thunderbird (17.0.8) 
````````Process Check: objlist.exe by Laurent````````  
 Symantec Norton Online Backup NOBuAgent.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         

Und das frische FRST

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-09-2013
Ran by bine (administrator) on BINE-PC on 08-09-2013 14:23:22
Running from C:\Users\bine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7XRY2M8E
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Adobe Systems Incorporated) c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
() C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
(Sony Ericsson Mobile Communications AB) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe
(Dropbox, Inc.) C:\Users\bine\AppData\Roaming\Dropbox\bin\Dropbox.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\HidFind.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apntex.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\system32\prevhost.exe
() C:\Users\bine\Desktop\Defogger.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12446824 2012-02-11] (Realtek Semiconductor)
HKLM\...\Run: [Apoint] - C:\Program Files\Apoint2K\Apoint.exe [576376 2012-02-02] (Alps Electric Co., Ltd.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [497648 2010-07-29] (Adobe Systems Incorporated)
HKLM\...\Run: [Power Management] - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [1829768 2012-02-07] (Acer Incorporated)
HKLM\...\Policies\Explorer: [NoActiveDesktop] 1
HKLM\...\Policies\Explorer: [NoActiveDesktopChanges] 1
HKCU\...\Run: [Sony Ericsson PC Companion] - C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe [774144 2009-12-08] (Sony Ericsson Mobile Communications AB)
MountPoints2: {8f491e12-1289-11e3-b118-e840f2f9903b} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL G:\Harley.exe www.h-d2011my-press.eu
MountPoints2: {d901a9ae-849e-11e2-805f-e840f2f9903b} - H:\Startme.exe
HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-02] (Symantec Corporation)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1105488 2012-03-23] (Dritek System Inc.)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-26] (Intel Corporation)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2010-03-17] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [162408 2011-09-13] ()
HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [162408 2011-09-13] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\bine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\bine\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\bine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://packardbell.msn.com
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=APBTDF&pc=MAPB&src=IE-SearchBox
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\bine\AppData\Roaming\Mozilla\Firefox\Profiles\omutrhle.default
FF NewTab: about:blank
FF DefaultSearchEngine: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @SonyCreativeSoftware.com/Media Go,version=1.0 - C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Media Software and Services Inc)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

==================== Services (Whitelisted) =================

R2 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [871296 2012-02-07] (Acer Incorporated)
R2 GREGService; C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe [28264 2012-02-29] (Acer Incorporated)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation)
R2 Live Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [255376 2012-02-07] (Acer Incorporated)
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)
R2 OMSI download service; C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [90112 2009-04-30] ()

==================== Drivers (Whitelisted) ====================

S3 s1039bus; C:\Windows\System32\DRIVERS\s1039bus.sys [127600 2009-11-19] (MCCI Corporation)
S3 s1039mdfl; C:\Windows\System32\DRIVERS\s1039mdfl.sys [19568 2009-11-19] (MCCI Corporation)
S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [161904 2009-11-19] (MCCI Corporation)
S3 s1039mgmt; C:\Windows\System32\DRIVERS\s1039mgmt.sys [141424 2009-11-19] (MCCI Corporation)
S3 s1039nd5; C:\Windows\System32\DRIVERS\s1039nd5.sys [34416 2009-11-19] (MCCI Corporation)
S3 s1039obex; C:\Windows\System32\DRIVERS\s1039obex.sys [137328 2009-11-19] (MCCI Corporation)
S3 s1039unic; C:\Windows\System32\DRIVERS\s1039unic.sys [158320 2009-11-19] (MCCI Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-08 14:14 - 2013-09-08 14:14 - 00891115 _____ C:\Users\bine\Desktop\SecurityCheck.exe
2013-09-07 17:52 - 2013-09-07 17:53 - 02347384 _____ (ESET) C:\Users\bine\Desktop\esetsmartinstaller_enu.exe
2013-09-07 17:52 - 2013-09-07 17:52 - 00001387 _____ C:\Users\bine\Desktop\Anleitung3_TrojanerBoard.txt
2013-09-07 17:50 - 2013-09-07 17:50 - 00000321 _____ C:\Users\bine\Desktop\Problembeschreibung COM Surrogate.txt
2013-09-07 00:59 - 2013-09-07 00:59 - 00055518 _____ C:\Users\bine\Desktop\FRST2.txt
2013-09-07 00:55 - 2013-09-07 00:55 - 00003949 _____ C:\Users\bine\Desktop\JRT.txt
2013-09-07 00:49 - 2013-09-07 00:49 - 00000000 ____D C:\Windows\ERUNT
2013-09-07 00:47 - 2013-09-07 00:47 - 01028823 _____ (Thisisu) C:\Users\bine\Desktop\JRT.exe
2013-09-07 00:44 - 2013-09-07 00:44 - 00015321 _____ C:\Users\bine\Desktop\AdwCleaner[S0].txt
2013-09-07 00:39 - 2013-09-07 00:41 - 00000000 ____D C:\AdwCleaner
2013-09-07 00:36 - 2013-09-07 00:37 - 01037222 _____ C:\Users\bine\Desktop\adwcleaner.exe
2013-09-07 00:18 - 2013-09-07 00:18 - 00000000 ____D C:\Users\bine\AppData\Roaming\Malwarebytes
2013-09-07 00:17 - 2013-09-07 00:17 - 00001117 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-07 00:17 - 2013-09-07 00:17 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-07 00:17 - 2013-09-07 00:17 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-07 00:17 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-09-07 00:07 - 2013-09-07 00:08 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\bine\Desktop\mbam-setup-1.75.0.1300.exe
2013-09-07 00:01 - 2013-09-07 00:01 - 00001811 _____ C:\Users\bine\Desktop\Anleitung2_TrojanerBoard.txt
2013-09-06 14:38 - 2013-09-06 14:38 - 00005056 _____ C:\Users\bine\Desktop\Gmer.txt
2013-09-06 14:00 - 2013-09-06 14:00 - 00056774 _____ C:\Users\bine\Desktop\FRST1.txt
2013-09-06 14:00 - 2013-09-06 14:00 - 00045051 _____ C:\Users\bine\Desktop\Addition.txt
2013-09-06 13:58 - 2013-09-06 13:58 - 00000000 ____D C:\FRST
2013-09-06 13:57 - 2013-09-08 14:21 - 00000470 _____ C:\Users\bine\Desktop\defogger_disable.log
2013-09-06 13:57 - 2013-09-06 13:57 - 00000000 _____ C:\Users\bine\defogger_reenable
2013-09-06 13:47 - 2013-09-06 13:47 - 00377856 _____ C:\Users\bine\Desktop\1z45y8b9.exe
2013-09-06 13:43 - 2013-09-06 13:43 - 00050477 _____ C:\Users\bine\Desktop\Defogger.exe
2013-09-06 13:40 - 2013-09-06 13:40 - 00016408 _____ C:\Users\bine\Desktop\get-mirror-server.html
2013-09-06 13:35 - 2013-09-06 14:22 - 00007925 _____ C:\Users\bine\Desktop\Anleitung_ TrojanerBoard.txt
2013-09-06 12:47 - 2013-09-06 12:47 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2013-08-18 22:08 - 2013-08-18 22:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-15 09:50 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-15 09:50 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-15 09:50 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-15 09:50 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-15 09:50 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-15 09:50 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-15 09:50 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-15 09:50 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-15 09:50 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-15 09:50 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-15 09:50 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-15 09:50 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-14 10:31 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-14 10:31 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-14 10:31 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-14 10:31 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-14 10:31 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-14 10:31 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-14 10:31 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-14 10:31 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-14 10:27 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-14 10:27 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-14 10:27 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-14 10:27 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-14 10:27 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-14 10:27 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-14 10:27 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-08-14 10:27 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-14 10:27 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-08-14 10:27 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-08-14 10:27 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-08-14 10:27 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-14 10:27 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-08-14 10:27 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-08-14 10:27 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-08-14 10:27 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-08-14 10:27 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-08-14 10:27 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-14 10:27 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

==================== One Month Modified Files and Folders =======

2013-09-08 14:21 - 2013-09-06 13:57 - 00000470 _____ C:\Users\bine\Desktop\defogger_disable.log
2013-09-08 14:17 - 2013-09-08 14:17 - 00000818 _____ C:\Users\bine\Desktop\checkup.txt
2013-09-08 14:14 - 2013-09-08 14:14 - 00891115 _____ C:\Users\bine\Desktop\SecurityCheck.exe
2013-09-08 14:14 - 2009-07-14 06:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-08 14:14 - 2009-07-14 06:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-08 14:11 - 2012-06-07 01:36 - 01586740 _____ C:\Windows\system32\perfh007.dat
2013-09-08 14:11 - 2012-06-07 01:36 - 00428794 _____ C:\Windows\system32\perfc007.dat
2013-09-08 14:11 - 2012-06-06 15:44 - 01645250 _____ C:\Windows\WindowsUpdate.log
2013-09-08 14:11 - 2009-07-14 07:13 - 00005430 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-08 14:07 - 2013-04-29 12:37 - 00000000 ___RD C:\Users\bine\Dropbox
2013-09-08 14:07 - 2013-04-29 11:26 - 00000000 ____D C:\Users\bine\AppData\Roaming\Dropbox
2013-09-08 14:07 - 2013-03-30 02:07 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-08 14:07 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-08 14:07 - 2009-07-14 06:51 - 00052965 _____ C:\Windows\setupact.log
2013-09-08 01:36 - 2012-04-21 12:07 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-07 17:53 - 2013-09-07 17:52 - 02347384 _____ (ESET) C:\Users\bine\Desktop\esetsmartinstaller_enu.exe
2013-09-07 17:52 - 2013-09-07 17:52 - 00001387 _____ C:\Users\bine\Desktop\Anleitung3_TrojanerBoard.txt
2013-09-07 17:50 - 2013-09-07 17:50 - 00000321 _____ C:\Users\bine\Desktop\Problembeschreibung COM Surrogate.txt
2013-09-07 17:39 - 2013-06-28 16:24 - 00000000 ____D C:\Users\bine\AppData\Local\CrashDumps
2013-09-07 00:59 - 2013-09-07 00:59 - 00055518 _____ C:\Users\bine\Desktop\FRST2.txt
2013-09-07 00:55 - 2013-09-07 00:55 - 00003949 _____ C:\Users\bine\Desktop\JRT.txt
2013-09-07 00:49 - 2013-09-07 00:49 - 00000000 ____D C:\Windows\ERUNT
2013-09-07 00:47 - 2013-09-07 00:47 - 01028823 _____ (Thisisu) C:\Users\bine\Desktop\JRT.exe
2013-09-07 00:44 - 2013-09-07 00:44 - 00015321 _____ C:\Users\bine\Desktop\AdwCleaner[S0].txt
2013-09-07 00:41 - 2013-09-07 00:39 - 00000000 ____D C:\AdwCleaner
2013-09-07 00:37 - 2013-09-07 00:36 - 01037222 _____ C:\Users\bine\Desktop\adwcleaner.exe
2013-09-07 00:31 - 2010-11-21 05:47 - 00393724 _____ C:\Windows\PFRO.log
2013-09-07 00:18 - 2013-09-07 00:18 - 00000000 ____D C:\Users\bine\AppData\Roaming\Malwarebytes
2013-09-07 00:17 - 2013-09-07 00:17 - 00001117 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-07 00:17 - 2013-09-07 00:17 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-07 00:17 - 2013-09-07 00:17 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-07 00:08 - 2013-09-07 00:07 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\bine\Desktop\mbam-setup-1.75.0.1300.exe
2013-09-07 00:01 - 2013-09-07 00:01 - 00001811 _____ C:\Users\bine\Desktop\Anleitung2_TrojanerBoard.txt
2013-09-06 23:29 - 2013-02-10 18:24 - 00000000 ____D C:\Users\bine\AppData\Roaming\XnView
2013-09-06 14:38 - 2013-09-06 14:38 - 00005056 _____ C:\Users\bine\Desktop\Gmer.txt
2013-09-06 14:22 - 2013-09-06 13:35 - 00007925 _____ C:\Users\bine\Desktop\Anleitung_ TrojanerBoard.txt
2013-09-06 14:00 - 2013-09-06 14:00 - 00056774 _____ C:\Users\bine\Desktop\FRST1.txt
2013-09-06 14:00 - 2013-09-06 14:00 - 00045051 _____ C:\Users\bine\Desktop\Addition.txt
2013-09-06 13:58 - 2013-09-06 13:58 - 00000000 ____D C:\FRST
2013-09-06 13:57 - 2013-09-06 13:57 - 00000000 _____ C:\Users\bine\defogger_reenable
2013-09-06 13:57 - 2012-12-16 13:13 - 00000000 ____D C:\Users\bine
2013-09-06 13:47 - 2013-09-06 13:47 - 00377856 _____ C:\Users\bine\Desktop\1z45y8b9.exe
2013-09-06 13:43 - 2013-09-06 13:43 - 00050477 _____ C:\Users\bine\Desktop\Defogger.exe
2013-09-06 13:40 - 2013-09-06 13:40 - 00016408 _____ C:\Users\bine\Desktop\get-mirror-server.html
2013-09-06 12:47 - 2013-09-06 12:47 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2013-09-06 12:47 - 2012-12-16 14:37 - 00000000 ____D C:\Users\bine\AppData\Roaming\Adobe
2013-09-06 12:47 - 2012-04-21 12:06 - 00000000 ____D C:\ProgramData\Adobe
2013-09-05 12:25 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-09-05 03:15 - 2013-07-28 09:57 - 00000000 ____D C:\Users\bine\Desktop\Desktop-Bilder
2013-09-03 15:26 - 2013-07-28 09:55 - 00000000 ____D C:\Users\bine\Desktop\Rechnungen-2013
2013-08-22 09:11 - 2013-07-24 15:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-20 22:33 - 2012-04-21 12:07 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-20 22:33 - 2012-04-21 12:07 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-20 22:33 - 2012-04-21 12:07 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-18 22:08 - 2013-08-18 22:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-15 15:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-08-15 09:46 - 2013-07-23 23:59 - 00000000 ____D C:\Windows\system32\MRT
2013-08-15 09:44 - 2013-06-27 00:01 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

Files to move or delete:
====================
C:\ProgramData\hpe2F64.dll
C:\Users\bine\AppData\Local\Temp\install_reader11_de_mssd_aih.exe
C:\Users\bine\AppData\Local\Temp\Quarantine.exe
C:\Users\bine\AppData\Local\Temp\uninst1.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-01 01:30

==================== End Of Log ============================
         

--- --- ---


Ob, der Fehler nun beseitigt ist, kann ich leider nicht sagen, weil beim Öffnen mit der Windows-Fotoanzeige des ersten Bildes folgendes angezeigt wird:
"Das Bild kann nicht geöffnet werden, da Sie nicht berechtigt sind, auf den Dateispeocherort zuzugreifen."

Downloade dir bitte Windows Repair (All In One) von hier.

• Installiere das Programm. Starte es, nachdem die Installation abgeschlossen wurde.
• Klicke auf Step 2 und drücke unter Check Disk auf Do It.
  
  
• Wenn der Vorgang abgeschlossen ist, klicke auf Step 3 und drücke unter System File Check auf Do It.
  
  
• Nachdem der Vorgang abgeschlossen ist, klicke auf Start Repairs, wähle den Advanced Mode und drücke Start.
  
  
• Gehe bitte sicher, dass die Kästchen wie unten zu sehen angehakt sind. Bitte hake zusätzlich noch Set Windows Services to Default Startup an.
• Hake Restart System when Finished an.
• Drücke Start.
  
  

Danke Schrauber für die Hilfe, die Bilder lassen ich wieder mit der Windows-Fotoanzeige öffnen.
Die COM Surrogate-Fehlermeldung beim Weiterklicken mit der Pfeiltaste nach rechts taucht allerdings immer noch auf.
Im Windows-Wartungscenter habe ich unter "Problemdetails" folgendes gefunden:

COM Surrogate

Problem				Datum			Status
Nicht mehr funktionsfähig	09.09.2013 11:48	        Nicht berichtet

Beschreibung
Pfad der fehlerhaften Anwendung:	C:\Windows\System32\dllhost.exe

Problemsignatur
Problemereignisame:	APPCRASH
Anwendungsname:	DllHost.exe
Anwendungsversion:	6.1.7600.16385
Anwendungszeitstempel:	4a5bca54
Fehlermodulname:	igdumd64.dll
Fehlermodulversion:	8.15.10.2653
Fehlermodulzeitstempel:	4f3aac44
Ausnahmecode:	c0000005
Ausnahmeoffset:	000000000030eb06
Betriebsystemversion:	6.1.7601.2.1.0.768.3
Gebietsschema-ID:	1031
Zusatzinformation 1:	64d0
Zusatzinformation 2:	64d0bc94d41913867b2f060e9920fc97
Zusatzinformation 3:	27a4
Zusatzinformation 4:	27a40da6500705a490ae668a1cbe8425
         

Könnte eine ältere Version der DllHost.exe das Problem beheben?

Lass mal SFC laufen:

Windows-taste + R, schreibe

sfc /scannow

und drücke enter.

Boah! Das hat's wohl gebracht
Habe jetzt gut 200 Bilder durchgeklickt, ohne dass der Fehler auch nur einmal auftrat.
Gebt mir noch zwei Tage für weitere Tests, aber so wie's aussieht, war's das

Ganz herzlichen Dank Schrauber, cooles Board
Spende folgt auf den Fuß

Fertig

Die Reihenfolge ist hier entscheidend.

1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
   • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
   • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
   • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
3. Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
   • Schließe alle offenen Programme.
   • Starte die delfix.exe mit einem Doppelklick.
   • Setze vor jede Funktion ein Häkchen.
   • Klicke auf Start.
   • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
   • Starte deinen Rechner abschließend neu.
4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

• Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
• Windows Updates
  • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
  • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
• Gehe sicher das die automatischen Updates aktiviert sind.
• Software Updates
  Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
  Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

• Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

• MalwareBytes Anti Malware
  Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
  Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
  Ein Tutorial zur Verwendung findest Du hier.
• WinPatrol
  Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

• SpywareBlaster
  Eine kurze Einführung findest du Hier
• MVPs hosts file
  Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
• WOT (Web of trust)
  Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

• Opera
• Mozilla Firefox.
  • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
  • NoScript
    Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    
  • AdblockPlus
    Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
    Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts

• Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
• verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
• Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
• Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.