Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com

Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com


Plagegeister aller Art und deren Bekämpfung: Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Seite 1 von 3 1 23
Alt 28.10.2013, 17:27   #1
MHN
 
Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com - Standard

Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com


Ich habe gesehen, dass Mitglieder wussten, wie man den QV06-Virus entfernt. Das schien ein recht aufwändiger Prozess. Wäre jemand so freundlich, mir die Hand zu führen? Die Sicherheitssoftware ist Norton 360°. Sie findet den Trojaner nicht.

Alt 28.10.2013, 17:30   #2
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com - Standard

Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com


Hallo erstmal?

Hallo und

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!



Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)



Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________

__________________
Alt 29.10.2013, 10:28   #3
MHN
 
Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com - Standard

Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com


Erst mal sehr herzlichen Dank für die Bereitschaft zu helfen!
Log Files von Norton kann ich nicht finden, aber der letzte Virenscan ergab 6 unwichtige Cookies, die ich unbesehen habe tilgen lassen. Es war allerdings kein Systemscan, weil ich noch nicht wusste, was ich da am Halse habe.
Bei dem Downloadversuch der Farbar-Software bin ich erst mal zum Unzipping-Programm geraten und dann zu einer Registry Cleanup Software(RegClean Pro), die von 73 Fehlern berichtet. Ich habe den Button für die Bereinigung (n0ch) nicht gedrückt. Soll ich, bevor ich fortfahre, die andere Software herunterzuladen und auszuführen?
Übrigens poppt jetzt ein Microsoft-Fester auf, das 2 Schadsoftware-Bedrohungen meldet. Auch da werde ich gefragt: Jetzt säubern?
__________________
Alt 29.10.2013, 15:29   #4
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com - Standard

Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com


Finger weg von Registry-Cleaner!!

Hinweis: Registry Cleaner

Ich sehe, dass du sogenannte Registry Cleaner installiert hast.
In deinem Fall RegClean Pro.

Wir raten von der Verwendung jeglicher Art von Registry Cleaner ab.

Der Grund ist ganz einfach:
Die Registry ist das Hirn des Systems. Funktioniert das Hirn nicht, funktioniert der Rest nicht mehr wirklich.
Man sollte nicht unnötigerweise an der Registry rumbasteln. Schon ein kleiner Fehler kann gravierende Folgen haben und auch Programme machen manchmal Fehler.
Zerstörst du die Registry, zerstörst du Windows.

Zudem ist der Nutzen zur Performancesteigerung umstritten und meist kaum im wahrnehmbaren Bereich.

Ich würde dir empfehlen, Registry Cleaner nicht weiterhin zu verwenden und über
Start --> Systemsteuerung --> Software (bei Windows XP)
Start --> Systemsteuerung --> Programme und Funktionen (bei Vista / Win 7)
zu deinstallieren.


Zitat:
Bei dem Downloadversuch der Farbar-Software bin ich erst mal zum Unzipping-Programm geraten
Du hast den falschen Downloadbutton gedrückt. Du musst oben rechts den grünen Button anklicken
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 29.10.2013, 15:47   #5
MHN
 
Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com - Standard

Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com


Farbar zeigt viele Errors in der Addition List. Mein Computer ist ganz neu (allerdings absichtlich Windows 7 als System. Ist es keine 64-Bit-Version? Wie kann ich das ggf. checken?
Hier das Farbar Log:
FRST Logfile:
[CODE]Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-10-2013
Ran by Hermann (administrator) on ACERLAPTOP on 29-10-2013 15:41:36
Running from C:\Users\Hermann\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Taiwan Shui Mu Chih Ching Technology Limited.) C:\Program Files (x86)\WinZipper\winzipersvc.exe
() C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\N360.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\N360.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Intel® Corporation) C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Atheros) C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_11_9_900_117_ActiveX.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe
(BatBrowse) C:\Program Files (x86)\BatBrowse\updateBatBrowse.exe
(MyPCBackup.com) C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe
(Systweak) C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\IEXPLORE.EXE
() C:\Program Files (x86)\OpenIt\Open It!\openit.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe
(Microsoft Corporation) \\?\C:\Windows\system32\wbem\WMIADAP.EXE

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [Power Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1829768 2012-02-07] (Acer Incorporated)
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4123 2012-01-20] ()
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12448872 2012-02-14] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1158248 2012-02-08] (Realtek Semiconductor)
HKLM-x32\...\Runonce: [Del804434] - cmd.exe /Q /D /c del "C:\Users\Hermann\AppData\Local\Temp\0.del" [x]
HKLM-x32\...\Runonce: [Del819332] - cmd.exe /Q /D /c del "C:\Users\Hermann\AppData\Local\Temp\0.del" [x]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Runonce: [Del804434] - cmd.exe /Q /D /c del "C:\Users\Hermann\AppData\Local\Temp\0.del"
HKCU\...\Runonce: [Del819332] - cmd.exe /Q /D /c del "C:\Users\Hermann\AppData\Local\Temp\0.del"
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1105488 2012-03-23] (Dritek System Inc.)
HKLM-x32\...\Run: [MDS_Menu] - C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)
HKLM-x32\...\Run: [hpqSRMon] - C:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exe [150016 2008-08-20] (Hewlett-Packard)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [245872 2013-05-15] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [201576 2013-05-15] (NVIDIA Corporation)
Startup: C:\Users\Hermann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
ShortcutTarget: MyPC Backup.lnk -> C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
Startup: C:\Users\Hermann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Überwachungstool für die Intel® Turbo-Boost-Technik 2.5.lnk
ShortcutTarget: Überwachungstool für die Intel® Turbo-Boost-Technik 2.5.lnk -> C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe (Intel® Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=ShoppingHelper&dpid=ShoppingHelper&co=DE&userid=373003a4-231d-90bf-c506-f0b938278db1&searchtype=ds&q={searchTerms}&installDate=27/10/2013
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Metacrawler Search
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1378325215&rver=6.1.6206.0&wp=MBI&wreply=http:%2F%2Fdu121w.dub121.mail.live.com%2Fdefault.aspx%3Frru%3Dinbox&lc=10 31&id=64855&mkt=de-de&cbcxt=mai&snsc=1
https://gm-secure.db.com/welcome.html?/ger/region/home/Home.eqsr?regionID=All&page=regionPage&regionCountryDisplay=regionPage&newPage=newRegionPage
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Delta Homes
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Metacrawler Search
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = Metacrawler Search
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe QVO6
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0C0BtDtCzyyBtA0ByDyCtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=2 136752658&ir=
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0C0BtDtCzyyBtA0ByDyCtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=2 136752658&ir=
SearchScopes: HKLM - {47222A32-D609-5E22-2A53-46D3A2D0413B} URL = QVO6
SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0C0BtDtCzyyBtA0ByDyCtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=2 136752658&ir=
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0C0BtDtCzyyBtA0ByDyCtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=2 136752658&ir=
SearchScopes: HKLM-x32 - {5094D06B-637F-9B72-0AA2-2702C3F93FD5} URL = hxxp://feed.snapdo.com/?publisher=ShoppingHelper&dpid=ShoppingHelper&co=DE&userid=373003a4-231d-90bf-c506-f0b938278db1&searchtype=ds&q={searchTerms}&installDate=27/10/2013
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0C0BtDtCzyyBtA0ByDyCtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=2 136752658&ir=
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0C0BtDtCzyyBtA0ByDyCtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=2 136752658&ir=
SearchScopes: HKCU - {47222A32-D609-5E22-2A53-46D3A2D0413B} URL = hxxp://feed.snapdo.com/?publisher=ShoppingHelper&dpid=ShoppingHelper&co=DE&userid=373003a4-231d-90bf-c506-f0b938278db1&searchtype=ds&q={searchTerms}&installDate=27/10/2013
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine64\21.1.0.18\coieplg.dll (Symantec Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\coieplg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\ips\ipsbho.dll (Symantec Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: BatBrowse - {b67b3dbb-c1c9-49d2-b016-2748b0b5017e} - C:\Program Files (x86)\BatBrowse\BatBrowseBHO.dll (BatBrowse)
BHO-x32: metacrawler Helper Object - {D4EF7D75-52C9-4BCE-B6DC-0976EFAB4B0B} - C:\Program Files (x86)\metaCrawler\1.8.19.0\bh\metacrawler.dll (Info Space)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.1.0.18\coieplg.dll (Symantec Corporation)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\coieplg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKLM-x32 - metacrawler Toolbar - {7EACAC38-B7F6-4514-9DC1-3428A7964ABD} - C:\Program Files (x86)\metaCrawler\1.8.19.0\metacrawlerTlbr.dll (Info Space)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - \User Data\Default\Extensions\newtab.crx
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\Exts\Chrome.crx

==================== Services (Whitelisted) =================

R2 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
S2 BackupStack; C:\Program Files (x86)\MyPC Backup\BackupStack.exe [38440 2013-09-19] (Just Develop It)
S2 CLKMSVC10_039CBDDF; C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\NavFilter\kmsvc.exe [241648 2011-01-28] (CyberLink)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation)
R2 N360; C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\N360.exe [264360 2013-10-08] (Symantec Corporation)
R2 RichVideo; C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [244904 2010-02-03] ()
R2 Update BatBrowse; C:\Program Files (x86)\BatBrowse\updateBatBrowse.exe [65824 2013-10-22] (BatBrowse)
R2 winzipersvc; C:\Program Files (x86)\WinZipper\winzipersvc.exe [424104 2013-08-23] (Taiwan Shui Mu Chih Ching Technology Limited.)
R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe [72864 2012-02-19] (Atheros)
S2 WsysSvc; C:\ProgramData\eSafe\eGdpSvc.exe [x]

==================== Drivers (Whitelisted) ====================

R1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\21.0.2.1\Definitions\BASHDefs\20131022.001\BHDrvx64.sys [1524824 2013-10-23] (Symantec Corporation)
R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1501000.012\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-09-25] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [140376 2013-09-25] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\21.0.2.1\Definitions\IPSDefs\20131025.002\IDSvia64.sys [521816 2013-10-29] (Symantec Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton 360\NortonData\21.0.2.1\Definitions\VirusDefs\20131028.038\ENG64.SYS [126040 2013-09-25] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton 360\NortonData\21.0.2.1\Definitions\VirusDefs\20131028.038\EX64.SYS [2099288 2013-09-25] (Symantec Corporation)
S3 RTL2832UBDA; C:\Windows\SysWow64\drivers\RTL2832UBDA.sys [225256 2011-05-17] (REALTEK SEMICONDUCTOR Corp.)
S3 RTL2832UUSB; C:\Windows\SysWow64\Drivers\RTL2832UUSB.sys [39016 2011-05-17] (REALTEK SEMICONDUCTOR Corp.)
S3 RTL2832U_IRHID; C:\Windows\SysWow64\DRIVERS\RTL2832U_IRHID.sys [48488 2011-06-13] (Realtek)
R3 SRTSP; C:\Windows\System32\Drivers\N360x64\1501000.012\SRTSP64.SYS [858200 2013-09-27] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1501000.012\SRTSPX64.SYS [36952 2013-07-31] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\N360x64\1501000.012\SYMDS64.SYS [493656 2013-08-01] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360x64\1501000.012\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-09-25] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360x64\1501000.012\Ironx64.SYS [264280 2013-07-31] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1501000.012\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)
S3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [33048 2006-11-30] (X10 Wireless Technology, Inc.)
R2 {6E090BD5-4EF5-4bf0-A968-74049E88E935}; C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\000.fcl [146928 2010-05-19] (CyberLink Corp.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-29 15:41 - 2013-10-29 15:41 - 00000000 ____D C:\FRST
2013-10-29 15:40 - 2013-10-29 15:40 - 01956538 _____ (Farbar) C:\Users\Hermann\Downloads\FRST64.exe
2013-10-29 10:19 - 2013-10-29 13:17 - 00000000 ____D C:\Program Files (x86)\Advanced System Protector
2013-10-29 10:19 - 2013-10-29 10:19 - 00003120 _____ C:\Windows\System32\Tasks\Advanced System Protector_startup
2013-10-29 10:19 - 2013-10-29 10:19 - 00001203 _____ C:\Users\Public\Desktop\Advanced System Protector.lnk
2013-10-29 10:19 - 2013-10-29 10:19 - 00001089 _____ C:\Users\Hermann\Desktop\MyPC Backup.lnk
2013-10-29 10:19 - 2013-10-29 10:19 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2013-10-29 10:19 - 2013-10-29 10:19 - 00000000 ____D C:\ProgramData\Systweak
2013-10-29 10:19 - 2013-10-29 10:19 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-10-29 10:19 - 2012-07-25 12:03 - 00016896 _____ C:\Windows\system32\sasnative64.exe
2013-10-29 10:18 - 2013-10-29 15:20 - 00000300 _____ C:\Windows\Tasks\MetaCrawler.job
2013-10-29 10:18 - 2013-10-29 15:01 - 00000280 _____ C:\Windows\Tasks\RegClean Pro_DEFAULT.job
2013-10-29 10:18 - 2013-10-29 13:17 - 00000000 ____D C:\Program Files (x86)\BatBrowse
2013-10-29 10:18 - 2013-10-29 10:19 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\Systweak
2013-10-29 10:18 - 2013-10-29 10:18 - 00003332 _____ C:\Windows\System32\Tasks\Advanced System Protector
2013-10-29 10:18 - 2013-10-29 10:18 - 00003248 _____ C:\Windows\System32\Tasks\MetaCrawler
2013-10-29 10:18 - 2013-10-29 10:18 - 00003108 _____ C:\Windows\System32\Tasks\RegClean Pro
2013-10-29 10:18 - 2013-10-29 10:18 - 00003038 _____ C:\Windows\System32\Tasks\RegClean Pro_UPDATES
2013-10-29 10:18 - 2013-10-29 10:18 - 00002882 _____ C:\Windows\System32\Tasks\RegClean Pro_DEFAULT
2013-10-29 10:18 - 2013-10-29 10:18 - 00001112 _____ C:\Users\Public\Desktop\Open It!.lnk
2013-10-29 10:18 - 2013-10-29 10:18 - 00001052 _____ C:\Users\Public\Desktop\RegClean Pro.lnk
2013-10-29 10:18 - 2013-10-29 10:18 - 00000288 _____ C:\Windows\Tasks\RegClean Pro_UPDATES.job
2013-10-29 10:18 - 2013-10-29 10:18 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\MetaCrawler
2013-10-29 10:18 - 2013-10-29 10:18 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\0D0S1L2Z1P1B
2013-10-29 10:18 - 2013-10-29 10:18 - 00000000 ____D C:\Program Files (x86)\RegClean Pro
2013-10-29 10:18 - 2013-10-29 10:18 - 00000000 ____D C:\Program Files (x86)\OpenIt
2013-10-29 10:18 - 2013-10-29 10:18 - 00000000 ____D C:\Program Files (x86)\metaCrawler
2013-10-29 10:18 - 2013-07-22 16:07 - 00020312 _____ (Systweak Inc., (Systweak - Download Software utilities for Windows optimization, Scan & Clean Spyware for Free)) C:\Windows\system32\roboot64.exe
2013-10-29 10:17 - 2013-10-29 15:25 - 00000300 _____ C:\Windows\Tasks\DigitalSite.job
2013-10-29 10:17 - 2013-10-29 10:25 - 00003248 _____ C:\Windows\System32\Tasks\DigitalSite
2013-10-29 10:17 - 2013-10-29 10:17 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\DigitalSite
2013-10-28 16:15 - 2013-10-28 16:15 - 00000460 _____ C:\Users\Hermann\Desktop\ACERLAPTOP 04.09.2013 1554 Lauf (E) - Verknüpfung.lnk
2013-10-18 23:04 - 2013-10-18 23:04 - 00000000 ____D C:\Windows\System32\Tasks\Norton 360
2013-10-11 15:57 - 2013-10-11 15:58 - 00102957 _____ C:\Users\Hermann\Desktop\Zustandsbericht Reisemobil.zip
2013-10-11 00:04 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-11 00:04 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-10-11 00:04 - 2013-09-22 23:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-11 00:04 - 2013-09-22 23:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-11 00:04 - 2013-09-22 23:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-11 00:04 - 2013-09-22 23:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-11 00:04 - 2013-09-21 04:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-11 00:04 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-11 00:04 - 2013-09-21 03:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-11 00:04 - 2013-09-21 03:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-10-10 21:41 - 2013-09-14 02:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-10-10 21:41 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-10-10 21:41 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-10-10 21:41 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2013-10-10 21:41 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-10-10 21:41 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-10-10 21:41 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-10-10 21:41 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-10-10 21:41 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-10-10 21:41 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-10-10 21:41 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-10-10 21:41 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-10-10 21:41 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2013-10-10 21:41 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-10-10 21:41 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2013-10-10 21:41 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-10-10 21:41 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-10-10 21:41 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-10-10 21:41 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-10-10 21:41 - 2013-08-28 02:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-10 21:41 - 2013-07-12 11:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-10-10 21:41 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-10 21:41 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-10-10 21:41 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-10 21:41 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-10-10 21:41 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2013-10-10 21:41 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2013-10-10 21:41 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-10 21:41 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2013-10-10 21:41 - 2013-07-03 05:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2013-10-10 21:41 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-10 21:41 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-10 21:41 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-10 21:41 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2013-10-10 21:41 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-10-10 21:41 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2013-10-10 21:41 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-10 21:41 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2013-10-10 21:41 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-10-10 21:41 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2013-10-10 21:41 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-10 21:41 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-10 21:41 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-10 21:40 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-10-10 21:40 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-10 21:40 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-10 21:40 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-08 13:07 - 2013-10-08 13:07 - 00000000 ____D C:\Users\Hermann\Documents\HP Photosmart Projects
2013-10-07 18:31 - 2013-10-28 15:20 - 00000000 ____D C:\Users\Hermann\AppData\Local\CrashDumps
2013-10-04 20:45 - 2013-10-04 20:45 - 01457152 _____ C:\Users\Hermann\Downloads\BatchedSearchResultsReport_2013-10-04_20-43-20.xls
2013-10-03 15:50 - 2013-10-03 15:50 - 00000000 ____D C:\Users\Hermann\Documents\Optimizer Pro
2013-10-03 15:48 - 2013-10-05 16:24 - 00000000 ____D C:\Program Files (x86)\Whilokii
2013-10-03 15:45 - 2013-10-29 14:55 - 00000300 _____ C:\Windows\Tasks\UpdaterEX.job
2013-10-03 15:45 - 2013-10-03 15:55 - 00003248 _____ C:\Windows\System32\Tasks\UpdaterEX
2013-10-03 15:45 - 2013-10-03 15:45 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\UpdaterEX
2013-10-03 15:44 - 2013-10-05 16:49 - 00000000 ____D C:\Program Files (x86)\BonanzaDealsLive
2013-10-03 15:44 - 2013-10-05 14:18 - 00000000 ____D C:\Program Files (x86)\BonanzaDeals
2013-10-03 15:44 - 2013-10-03 15:55 - 20586496 _____ C:\Users\Hermann\Downloads\SkypeSetup [1].exe
2013-10-03 15:44 - 2013-10-03 15:44 - 00000000 ____D C:\Users\Hermann\AppData\Local\BonanzaDealsLive
2013-10-03 15:44 - 2013-10-03 15:44 - 00000000 ____D C:\ProgramData\BonanzaDealsLive
2013-10-03 15:44 - 2013-10-03 15:44 - 00000000 ____D C:\ProgramData\BitGuard
2013-10-03 15:44 - 2013-10-03 15:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-03 15:43 - 2013-10-03 15:43 - 00000000 ____D C:\ProgramData\Babylon
2013-10-03 15:42 - 2013-10-03 15:54 - 00675952 _____ C:\Users\Hermann\Downloads\SkypeSetup.exe
2013-10-02 15:22 - 2013-10-08 14:46 - 00000000 ____D C:\Users\Bobby\Scans
2013-10-02 15:21 - 2013-10-02 15:22 - 00000000 ____D C:\Users\Bobby
2013-10-02 14:59 - 2013-10-02 14:59 - 00000000 ____D C:\Users\Hermann\AppData\Local\HP
2013-10-02 12:38 - 2013-10-02 15:15 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\HP
2013-10-02 12:38 - 2013-10-02 12:38 - 00000000 ____D C:\ProgramData\WEBREG
2013-10-02 12:36 - 2013-10-02 12:36 - 00002169 _____ C:\Users\Public\Desktop\HP Photosmart Essential 3.5.lnk
2013-10-02 12:36 - 2013-10-02 12:36 - 00000000 ____D C:\ProgramData\HP Product Assistant
2013-10-02 12:35 - 2013-10-02 15:23 - 00000000 ____D C:\UniScan
2013-10-02 12:35 - 2013-10-02 12:35 - 00001353 _____ C:\Users\Public\Desktop\HP Solution Center.lnk
2013-10-02 12:34 - 2013-10-02 12:59 - 00000000 ____D C:\Program Files (x86)\HP
2013-10-02 12:31 - 2013-10-02 12:42 - 00000359 _____ C:\ProgramData\hpzinstall.log
2013-10-01 19:54 - 2013-10-02 15:29 - 00000000 ____D C:\ProgramData\HP
2013-09-29 18:29 - 2013-09-29 18:41 - 00000566 _____ C:\Users\Hermann\AppData\Roaming\Microsoft\Windows\Start Menu\Deutsche Bank - Global Markets.website
2013-09-29 16:45 - 2013-09-29 16:45 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\SanDisk SecureAccess

Und hier der Addition File:[/B][/B]FRST Additions Logfile:
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-10-2013
Ran by Hermann at 2013-10-29 15:42:20
Running from C:\Users\Hermann\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Norton 360 Premier Edition (Enabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton 360 Premier Edition (Enabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton 360 Premier Edition (Enabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}

==================== Installed Programs ======================

AAVUpdateManager (x32 Version: 18.00.0000)
Acer Arcade Deluxe (x32 Version: 4.1.8623)
Acer Arcade Movie (x32 Version: 9.0.7417)
Acer Crystal Eye Webcam (x32 Version: 1.5.2108.00)
Acer ePower Management (x32 Version: 6.00.3010)
Acer Updater (x32 Version: 1.02.3502)
Adobe AIR (x32 Version: 3.8.0.870)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05)
Advanced System Protector (x32 Version: 2.1.1000.12150)
Advertising Center (x32 Version: 0.0.0.1)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 2.0.8.8)
BatBrowse 1.0.0 (Version: 1.0.0)
BufferChm (x32 Version: 130.0.327.000)
clear.fi Client (x32 Version: 1.00.3008)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
Destinations (x32 Version: 140.0.77.000)
DocProc (x32 Version: 13.0.0.0)
Dolby Home Theater v4 (x32 Version: 7.2.7000.7)
Extended Update (HKCU)
Google Update Helper (x32 Version: 1.3.23.0)
GPBaseService2 (x32 Version: 130.0.367.000)
HP Imaging Device Functions 13.0 (Version: 13.0)
HP Photosmart Essential 3.5 (Version: 3.5)
HP Scanjet 2400 (Version: 13.0)
HP Solution Center 13.0 (Version: 13.0)
HP Update (x32 Version: 4.000.011.006)
hpg2410 (x32 Version: 14.0.0.0)
HPPhotosmartEssential (x32 Version: 2.04.0000)
HPProductAssistant (x32 Version: 130.0.367.000)
Image Editor Packages (HKCU)
ImagXpress (x32 Version: 7.0.74.0)
Intel(R) Management Engine Components (x32 Version: 8.0.0.1351)
Intel(R) OpenCL CPU Runtime (x32)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2653)
Intel(R) Rapid Storage Technology (x32 Version: 11.0.0.1032)
Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.4.220)
Intel® Trusted Connect Service Client (Version: 1.23.216.0)
Launch Manager (x32 Version: 5.1.15)
MediaShow Espresso (x32 Version: 5.5.1403_23691)
metaCrawler (x32)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Office 2010 Service Pack 1 (SP1) (x32)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Home and Student 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Single Image 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MyPC Backup  (Version: )
Nero 9 Essentials (x32)
Nero BurnRights (x32 Version: 3.4.10.100)
Nero BurnRights Help (x32 Version: 3.4.4.100)
Nero ControlCenter (x32 Version: 9.0.0.1)
Nero CoverDesigner (x32 Version: 4.4.9.203)
Nero CoverDesigner Help (x32 Version: 4.4.6.100)
Nero DiscSpeed (x32 Version: 5.4.7.202)
Nero DiscSpeed Help (x32 Version: 5.4.4.100)
Nero DriveSpeed (x32 Version: 4.4.10.100)
Nero DriveSpeed Help (x32 Version: 4.4.4.100)
Nero InfoTool (x32 Version: 6.4.7.204)
Nero InfoTool Help (x32 Version: 6.4.4.100)
Nero Installer (x32 Version: 4.4.8.1)
Nero StartSmart (x32 Version: 9.4.11.207)
Nero StartSmart Help (x32 Version: 9.4.1.100)
Nero StartSmart OEM (x32 Version: 9.4.10.100)
neroxml (x32 Version: 1.0.0)
Norton 360 (x32 Version: 21.1.0.18)
NVIDIA Grafiktreiber 311.00 (Version: 311.00)
NVIDIA Install Application (Version: 2.1002.108.688)
NVIDIA Optimus 1.11.3 (Version: 1.11.3)
NVIDIA PhysX (x32 Version: 9.12.1031)
NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031)
NVIDIA Systemsteuerung 311.00 (Version: 311.00)
NVIDIA Update 1.11.3 (Version: 1.11.3)
NVIDIA Update Components (Version: 1.11.3)
OCR Software by I.R.I.S. 13.0 (Version: 13.0)
Open It! (x32 Version: 1.1.1)
PlayReady PC Runtime amd64 (Version: 1.3.0)
Qualcomm Atheros WiFi Driver Installation (x32 Version: 3.1)
REALTEK DTV USB DEVICE (x32 Version: 1.00.0000)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6570)
Realtek PCIE Card Reader (x32 Version: 6.1.7601.85)
RegClean Pro (x32 Version: 6.21)
Scan (x32 Version: 140.0.80.000)
SolutionCenter (x32 Version: 130.0.369.000)
Steuer-Spar-Erklärung 2013 (x32 Version: 18.09)
Überwachungstool für die Intel® Turbo-Boost-Technik 2.5 (Version: 2.5.1.0)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553065) (x32)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2566458) (x32)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32)
Update for Microsoft Word 2010 (KB2827323) 32-Bit Edition (x32)
Update for Zip Extractor (HKCU)
VLC media player 2.0.5 (x32 Version: 2.0.5)
WebReg (x32 Version: 130.0.128.017)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)
WinZipper (x32 Version: 1.4.8)
Zip Extractor Packages (HKCU)

==================== Restore Points  =========================

29-09-2013 17:00:02 Windows-Sicherung
29-09-2013 18:08:26 Windows-Sicherung
02-10-2013 11:57:48 Removed Scan
02-10-2013 11:58:18 Removed Destinations
02-10-2013 11:58:42 Installed Scan
02-10-2013 11:59:14 Installed Destinations
05-10-2013 11:22:49 Norton 360 Registry Clean
10-10-2013 22:51:59 Windows Update
29-10-2013 14:38:36 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0F01DAEB-C157-403F-9A06-69273FB8F1AF} - System32\Tasks\Dealply => C:\Users\Hermann\AppData\Roaming\Dealply\UpdateProc\UpdateTask.exe [2013-04-12] ()
Task: {1935D499-7A00-4811-BCC3-F850F0F640DB} - System32\Tasks\DigitalSite => C:\Users\Hermann\AppData\Roaming\DigitalSite\UpdateProc\UpdateTask.exe [2013-04-12] ()
Task: {4836E378-7773-4906-9FF8-F076352A1A93} - System32\Tasks\RegClean Pro => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe [2013-07-22] (Systweak Inc)
Task: {587108E5-6216-4579-9DA0-D268BA79DCF0} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\symerr.exe [2013-08-01] (Symantec Corporation)
Task: {6FCEB552-134E-4074-BB33-FD131999D7EE} - System32\Tasks\RegClean Pro_DEFAULT => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe [2013-07-22] (Systweak Inc)
Task: {7A8F25EE-86BC-4CA4-A5C6-B847DA31032B} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {87FC3D49-D708-4C68-8721-EC58B98E3058} - System32\Tasks\UpdaterEX => C:\Users\Hermann\AppData\Roaming\UpdaterEX\UpdateProc\UpdateTask.exe [2013-04-12] ()
Task: {8BF943DC-2A48-4D6F-AC2B-7F5FD7A44C16} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\symerr.exe [2013-08-01] (Symantec Corporation)
Task: {A7B99B0C-3A72-4173-A03D-B52AC0EA491F} - System32\Tasks\MetaCrawler => C:\Users\Hermann\AppData\Roaming\MetaCrawler\UpdateProc\UpdateTask.exe [2013-04-12] ()
Task: {B7294118-4E07-46B6-B3C9-0374A5C1CA39} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-09] (Adobe Systems Incorporated)
Task: {BADF51C0-4A92-4032-992A-EA4C38B56D9C} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\wscstub.exe [2013-10-08] (Symantec Corporation)
Task: {C997B960-5B1A-44F1-A7F0-276B3785EDC0} - System32\Tasks\Advanced System Protector => C:\Program Files (x86)\RegClean Pro\systweakasp.exe [2012-09-17] (Systweak Inc                                                )
Task: {D0B7B812-8CE5-4C5E-AF8F-32B0E6385B16} - System32\Tasks\Games\UpdateCheck_S-1-5-21-3312357363-170735279-3078533786-1002
Task: {D9D64127-8F5F-4339-AD27-759F631475CC} - System32\Tasks\DSite => C:\Users\Hermann\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE
Task: {EAE93784-D5F8-4EFD-90F9-678C692036F9} - System32\Tasks\Advanced System Protector_startup => C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe [2013-10-04] (Systweak)
Task: {EC051748-69E4-4B4C-B791-14A98B962CBE} - System32\Tasks\RegClean Pro_UPDATES => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe [2013-07-22] (Systweak Inc)
Task: {F72F0086-22BA-4285-98C0-9B5296F384A5} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Dealply.job => C:\Users\Hermann\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE
Task: C:\Windows\Tasks\DigitalSite.job => C:\Users\Hermann\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE
Task: C:\Windows\Tasks\DSite.job => C:\Users\Hermann\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE
Task: C:\Windows\Tasks\MetaCrawler.job => C:\Users\Hermann\AppData\Roaming\METACR~1\UPDATE~1\UPDATE~1.EXE
Task: C:\Windows\Tasks\RegClean Pro_DEFAULT.job => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe
Task: C:\Windows\Tasks\RegClean Pro_UPDATES.job => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe
Task: C:\Windows\Tasks\UpdaterEX.job => C:\Users\Hermann\AppData\Roaming\UPDATE~1\UPDATE~1\UPDATE~1.EXE

==================== Loaded Modules (whitelisted) =============

2012-02-14 08:53 - 2012-02-14 08:53 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-01-20 15:18 - 2012-01-20 15:18 - 00403968 _____ () C:\Program Files\Intel\TurboBoost\de\SignalIslandUi.resources.dll
2013-09-19 23:37 - 2013-09-19 23:37 - 00012288 _____ () C:\Program Files (x86)\MyPC Backup\GetText.dll
2013-09-19 23:32 - 2013-09-19 23:32 - 01102336 _____ () C:\Program Files (x86)\MyPC Backup\x64\System.Data.SQLite.dll
2013-08-23 16:56 - 2013-08-23 16:56 - 00612520 _____ () C:\Program Files (x86)\WinZipper\sqlite3.dll
2013-08-25 11:59 - 2013-08-25 11:59 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\991a8d378a3e64b31c0f4770ba9ae071\IsdiInterop.ni.dll
2013-05-15 13:15 - 2011-11-29 19:00 - 00059392 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2013-05-15 15:22 - 2011-12-16 09:39 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-10-29 10:19 - 2012-07-25 12:03 - 00886272 _____ () C:\Program Files (x86)\Advanced System Protector\System.Data.SQLite.dll
2013-10-29 10:19 - 2013-10-04 18:20 - 01730928 _____ () C:\Program Files (x86)\Advanced System Protector\aspsys.dll
2013-10-29 10:19 - 2012-07-25 12:03 - 00168448 _____ () C:\Program Files (x86)\Advanced System Protector\UNRAR.DLL
2013-03-27 22:50 - 2013-03-27 22:50 - 00020480 _____ () C:\Program Files (x86)\OpenIt\Open It!\libgcc_s_dw2-1.dll
2011-12-02 01:30 - 2011-12-02 01:30 - 00979982 _____ () C:\Program Files (x86)\OpenIt\Open It!\libstdc++-6.dll
2013-03-27 22:50 - 2013-03-27 22:50 - 00009826 _____ () C:\Program Files (x86)\OpenIt\Open It!\mingwm10.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (10/29/2013 10:05:11 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/29/2013 07:39:15 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/28/2013 03:20:47 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: DllHost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bca54
Name des fehlerhaften Moduls: igdumd64.dll, Version: 8.15.10.2653, Zeitstempel: 0x4f3aac44
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000030eb06
ID des fehlerhaften Prozesses: 0x1550
Startzeit der fehlerhaften Anwendung: 0xDllHost.exe0
Pfad der fehlerhaften Anwendung: DllHost.exe1
Pfad des fehlerhaften Moduls: DllHost.exe2
Berichtskennung: DllHost.exe3

Error: (10/28/2013 03:17:25 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: DllHost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bca54
Name des fehlerhaften Moduls: igdumd64.dll, Version: 8.15.10.2653, Zeitstempel: 0x4f3aac44
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000030eb06
ID des fehlerhaften Prozesses: 0xb8c
Startzeit der fehlerhaften Anwendung: 0xDllHost.exe0
Pfad der fehlerhaften Anwendung: DllHost.exe1
Pfad des fehlerhaften Moduls: DllHost.exe2
Berichtskennung: DllHost.exe3

Error: (10/28/2013 10:58:44 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/27/2013 09:05:43 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/27/2013 07:00:00 PM) (Source: Windows Backup) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "E:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"

Error: (10/27/2013 03:21:35 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/27/2013 10:22:24 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/27/2013 00:00:56 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (10/29/2013 10:04:49 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Wsys Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (10/29/2013 07:38:20 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Wsys Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (10/28/2013 10:58:23 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Wsys Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (10/27/2013 09:05:32 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Wsys Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (10/27/2013 03:21:26 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Wsys Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (10/27/2013 10:21:36 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Wsys Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (10/27/2013 00:00:23 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Wsys Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (10/26/2013 11:49:36 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Wsys Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (10/26/2013 11:23:16 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Wsys Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (10/26/2013 07:40:53 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Wsys Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2


Microsoft Office Sessions:
=========================
Error: (10/29/2013 10:05:11 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/29/2013 07:39:15 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/28/2013 03:20:47 PM) (Source: Application Error)(User: )
Description: DllHost.exe6.1.7600.163854a5bca54igdumd64.dll8.15.10.26534f3aac44c0000005000000000030eb06155001ced3e8af599d4aC:\Windows\system32\DllHost.exeC:\Windows\system32\igdumd64.dll23544278-3fdc-11e3-9a0a-7054d2cb0197

Error: (10/28/2013 03:17:25 PM) (Source: Application Error)(User: )
Description: DllHost.exe6.1.7600.163854a5bca54igdumd64.dll8.15.10.26534f3aac44c0000005000000000030eb06b8c01ced3e85289bbf9C:\Windows\system32\DllHost.exeC:\Windows\system32\igdumd64.dllaaf11b21-3fdb-11e3-9a0a-7054d2cb0197

Error: (10/28/2013 10:58:44 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/27/2013 09:05:43 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/27/2013 07:00:00 PM) (Source: Windows Backup)(User: )
Description: E:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)

Error: (10/27/2013 03:21:35 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/27/2013 10:22:24 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/27/2013 00:00:56 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Percentage of memory in use: 43%
Total physical RAM: 8030.36 MB
Available physical RAM: 4545.16 MB
Total Pagefile: 16058.89 MB
Available Pagefile: 12102 MB
Total Virtual: 8192 MB
Available Virtual: 8191.79 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:698.54 GB) (Free:609.09 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: 108480FC)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=699 GB) - (Type=07 NTFS)

==================== End Of Log ============================
--- --- ---

--- --- ---
Alt 29.10.2013, 15:50   #6
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com - Standard

Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com


Erstes Log von FRST sieht unvollständig aus, außerdem sitzen die CODE-Tags falsch, bitte korrigieren
__________________
--> Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com

Alt 29.10.2013, 15:59   #7
MHN
 
Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com - Standard

Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com


Nun ist noch ein Ärgernis hinzugetreten. Will ich eine neue Registerkarte im Internet-Explorer öffnen, kommt die Site von Metacrawler. Bisher hatte das noch gut funktioniert. Eine ungewünschte Suchsite öffnete sich beim Öffnen des Internet Explorers. Die musste man schließen und konnte mit den anderen Registerkarten, zum Beispiel solchen, die man über die Voreinstellung als eigentlich gewünschte Eröffnungsseiten per Mausklick öffnen konnte, fortfahren. Jetzt öffnet sich mit Metacrawler immer eine unerwünschte Site zusätzlich.

Alt 29.10.2013, 16:01   #8
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com - Standard

Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com


Das behandeln wir schon noch. Aber erstmal will ich das vollständige FRST-Log in CODE-Tags sehen
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 29.10.2013, 16:03   #9
MHN
 
Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com - Standard

Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com


Oh ja sorry. Hier das ganze Log
(Aber was bedeutet Code Tags? und sitzen falsch?)

Scan Tool (FRST.txt) (x64) Version: 28-10-2013
Ran by Hermann (administrator) on ACERLAPTOP on 29-10-2013 15:41:36
Running from C:\Users\Hermann\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Taiwan Shui Mu Chih Ching Technology Limited.) C:\Program Files (x86)\WinZipper\winzipersvc.exe
() C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\N360.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\N360.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Intel® Corporation) C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Atheros) C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_11_9_900_117_ActiveX.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe
(BatBrowse) C:\Program Files (x86)\BatBrowse\updateBatBrowse.exe
(MyPCBackup.com) C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe
(Systweak) C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\IEXPLORE.EXE
() C:\Program Files (x86)\OpenIt\Open It!\openit.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe
(Microsoft Corporation) \\?\C:\Windows\system32\wbem\WMIADAP.EXE

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [Power Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1829768 2012-02-07] (Acer Incorporated)
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4123 2012-01-20] ()
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12448872 2012-02-14] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1158248 2012-02-08] (Realtek Semiconductor)
HKLM-x32\...\Runonce: [Del804434] - cmd.exe /Q /D /c del "C:\Users\Hermann\AppData\Local\Temp\0.del" [x]
HKLM-x32\...\Runonce: [Del819332] - cmd.exe /Q /D /c del "C:\Users\Hermann\AppData\Local\Temp\0.del" [x]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Runonce: [Del804434] - cmd.exe /Q /D /c del "C:\Users\Hermann\AppData\Local\Temp\0.del"
HKCU\...\Runonce: [Del819332] - cmd.exe /Q /D /c del "C:\Users\Hermann\AppData\Local\Temp\0.del"
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1105488 2012-03-23] (Dritek System Inc.)
HKLM-x32\...\Run: [MDS_Menu] - C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)
HKLM-x32\...\Run: [hpqSRMon] - C:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exe [150016 2008-08-20] (Hewlett-Packard)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [245872 2013-05-15] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [201576 2013-05-15] (NVIDIA Corporation)
Startup: C:\Users\Hermann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
ShortcutTarget: MyPC Backup.lnk -> C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
Startup: C:\Users\Hermann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Überwachungstool für die Intel® Turbo-Boost-Technik 2.5.lnk
ShortcutTarget: Überwachungstool für die Intel® Turbo-Boost-Technik 2.5.lnk -> C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe (Intel® Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=ShoppingHelper&dpid=ShoppingHelper&co=DE&userid=373003a4-231d-90bf-c506-f0b938278db1&searchtype=ds&q={searchTerms}&installDate=27/10/2013
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Metacrawler Search
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1378325215&rver=6.1.6206.0&wp=MBI&wreply=http:%2F%2Fdu121w.dub121.mail.live.com%2Fdefault.aspx%3Frru%3Dinbox&lc=10 31&id=64855&mkt=de-de&cbcxt=mai&snsc=1
https://gm-secure.db.com/welcome.html?/ger/region/home/Home.eqsr?regionID=All&page=regionPage&regionCountryDisplay=regionPage&newPage=newRegionPage
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Delta Homes
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Metacrawler Search
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = Metacrawler Search
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe QVO6
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0C0BtDtCzyyBtA0ByDyCtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=2 136752658&ir=
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0C0BtDtCzyyBtA0ByDyCtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=2 136752658&ir=
SearchScopes: HKLM - {47222A32-D609-5E22-2A53-46D3A2D0413B} URL = QVO6
SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0C0BtDtCzyyBtA0ByDyCtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=2 136752658&ir=
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0C0BtDtCzyyBtA0ByDyCtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=2 136752658&ir=
SearchScopes: HKLM-x32 - {5094D06B-637F-9B72-0AA2-2702C3F93FD5} URL = hxxp://feed.snapdo.com/?publisher=ShoppingHelper&dpid=ShoppingHelper&co=DE&userid=373003a4-231d-90bf-c506-f0b938278db1&searchtype=ds&q={searchTerms}&installDate=27/10/2013
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0C0BtDtCzyyBtA0ByDyCtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=2 136752658&ir=
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0C0BtDtCzyyBtA0ByDyCtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=2 136752658&ir=
SearchScopes: HKCU - {47222A32-D609-5E22-2A53-46D3A2D0413B} URL = hxxp://feed.snapdo.com/?publisher=ShoppingHelper&dpid=ShoppingHelper&co=DE&userid=373003a4-231d-90bf-c506-f0b938278db1&searchtype=ds&q={searchTerms}&installDate=27/10/2013
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine64\21.1.0.18\coieplg.dll (Symantec Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\coieplg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\ips\ipsbho.dll (Symantec Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: BatBrowse - {b67b3dbb-c1c9-49d2-b016-2748b0b5017e} - C:\Program Files (x86)\BatBrowse\BatBrowseBHO.dll (BatBrowse)
BHO-x32: metacrawler Helper Object - {D4EF7D75-52C9-4BCE-B6DC-0976EFAB4B0B} - C:\Program Files (x86)\metaCrawler\1.8.19.0\bh\metacrawler.dll (Info Space)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.1.0.18\coieplg.dll (Symantec Corporation)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\coieplg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKLM-x32 - metacrawler Toolbar - {7EACAC38-B7F6-4514-9DC1-3428A7964ABD} - C:\Program Files (x86)\metaCrawler\1.8.19.0\metacrawlerTlbr.dll (Info Space)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - \User Data\Default\Extensions\newtab.crx
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\Exts\Chrome.crx

==================== Services (Whitelisted) =================

R2 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
S2 BackupStack; C:\Program Files (x86)\MyPC Backup\BackupStack.exe [38440 2013-09-19] (Just Develop It)
S2 CLKMSVC10_039CBDDF; C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\NavFilter\kmsvc.exe [241648 2011-01-28] (CyberLink)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation)
R2 N360; C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\N360.exe [264360 2013-10-08] (Symantec Corporation)
R2 RichVideo; C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [244904 2010-02-03] ()
R2 Update BatBrowse; C:\Program Files (x86)\BatBrowse\updateBatBrowse.exe [65824 2013-10-22] (BatBrowse)
R2 winzipersvc; C:\Program Files (x86)\WinZipper\winzipersvc.exe [424104 2013-08-23] (Taiwan Shui Mu Chih Ching Technology Limited.)
R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe [72864 2012-02-19] (Atheros)
S2 WsysSvc; C:\ProgramData\eSafe\eGdpSvc.exe [x]

==================== Drivers (Whitelisted) ====================

R1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\21.0.2.1\Definitions\BASHDefs\20131022.001\BHDrvx64.sys [1524824 2013-10-23] (Symantec Corporation)
R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1501000.012\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-09-25] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [140376 2013-09-25] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\21.0.2.1\Definitions\IPSDefs\20131025.002\IDSvia64.sys [521816 2013-10-29] (Symantec Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton 360\NortonData\21.0.2.1\Definitions\VirusDefs\20131028.038\ENG64.SYS [126040 2013-09-25] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton 360\NortonData\21.0.2.1\Definitions\VirusDefs\20131028.038\EX64.SYS [2099288 2013-09-25] (Symantec Corporation)
S3 RTL2832UBDA; C:\Windows\SysWow64\drivers\RTL2832UBDA.sys [225256 2011-05-17] (REALTEK SEMICONDUCTOR Corp.)
S3 RTL2832UUSB; C:\Windows\SysWow64\Drivers\RTL2832UUSB.sys [39016 2011-05-17] (REALTEK SEMICONDUCTOR Corp.)
S3 RTL2832U_IRHID; C:\Windows\SysWow64\DRIVERS\RTL2832U_IRHID.sys [48488 2011-06-13] (Realtek)
R3 SRTSP; C:\Windows\System32\Drivers\N360x64\1501000.012\SRTSP64.SYS [858200 2013-09-27] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1501000.012\SRTSPX64.SYS [36952 2013-07-31] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\N360x64\1501000.012\SYMDS64.SYS [493656 2013-08-01] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360x64\1501000.012\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-09-25] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360x64\1501000.012\Ironx64.SYS [264280 2013-07-31] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1501000.012\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)
S3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [33048 2006-11-30] (X10 Wireless Technology, Inc.)
R2 {6E090BD5-4EF5-4bf0-A968-74049E88E935}; C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\000.fcl [146928 2010-05-19] (CyberLink Corp.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-29 15:41 - 2013-10-29 15:41 - 00000000 ____D C:\FRST
2013-10-29 15:40 - 2013-10-29 15:40 - 01956538 _____ (Farbar) C:\Users\Hermann\Downloads\FRST64.exe
2013-10-29 10:19 - 2013-10-29 13:17 - 00000000 ____D C:\Program Files (x86)\Advanced System Protector
2013-10-29 10:19 - 2013-10-29 10:19 - 00003120 _____ C:\Windows\System32\Tasks\Advanced System Protector_startup
2013-10-29 10:19 - 2013-10-29 10:19 - 00001203 _____ C:\Users\Public\Desktop\Advanced System Protector.lnk
2013-10-29 10:19 - 2013-10-29 10:19 - 00001089 _____ C:\Users\Hermann\Desktop\MyPC Backup.lnk
2013-10-29 10:19 - 2013-10-29 10:19 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2013-10-29 10:19 - 2013-10-29 10:19 - 00000000 ____D C:\ProgramData\Systweak
2013-10-29 10:19 - 2013-10-29 10:19 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-10-29 10:19 - 2012-07-25 12:03 - 00016896 _____ C:\Windows\system32\sasnative64.exe
2013-10-29 10:18 - 2013-10-29 15:20 - 00000300 _____ C:\Windows\Tasks\MetaCrawler.job
2013-10-29 10:18 - 2013-10-29 15:01 - 00000280 _____ C:\Windows\Tasks\RegClean Pro_DEFAULT.job
2013-10-29 10:18 - 2013-10-29 13:17 - 00000000 ____D C:\Program Files (x86)\BatBrowse
2013-10-29 10:18 - 2013-10-29 10:19 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\Systweak
2013-10-29 10:18 - 2013-10-29 10:18 - 00003332 _____ C:\Windows\System32\Tasks\Advanced System Protector
2013-10-29 10:18 - 2013-10-29 10:18 - 00003248 _____ C:\Windows\System32\Tasks\MetaCrawler
2013-10-29 10:18 - 2013-10-29 10:18 - 00003108 _____ C:\Windows\System32\Tasks\RegClean Pro
2013-10-29 10:18 - 2013-10-29 10:18 - 00003038 _____ C:\Windows\System32\Tasks\RegClean Pro_UPDATES
2013-10-29 10:18 - 2013-10-29 10:18 - 00002882 _____ C:\Windows\System32\Tasks\RegClean Pro_DEFAULT
2013-10-29 10:18 - 2013-10-29 10:18 - 00001112 _____ C:\Users\Public\Desktop\Open It!.lnk
2013-10-29 10:18 - 2013-10-29 10:18 - 00001052 _____ C:\Users\Public\Desktop\RegClean Pro.lnk
2013-10-29 10:18 - 2013-10-29 10:18 - 00000288 _____ C:\Windows\Tasks\RegClean Pro_UPDATES.job
2013-10-29 10:18 - 2013-10-29 10:18 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\MetaCrawler
2013-10-29 10:18 - 2013-10-29 10:18 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\0D0S1L2Z1P1B
2013-10-29 10:18 - 2013-10-29 10:18 - 00000000 ____D C:\Program Files (x86)\RegClean Pro
2013-10-29 10:18 - 2013-10-29 10:18 - 00000000 ____D C:\Program Files (x86)\OpenIt
2013-10-29 10:18 - 2013-10-29 10:18 - 00000000 ____D C:\Program Files (x86)\metaCrawler
2013-10-29 10:18 - 2013-07-22 16:07 - 00020312 _____ (Systweak Inc., (Systweak - Download Software utilities for Windows optimization, Scan & Clean Spyware for Free)) C:\Windows\system32\roboot64.exe
2013-10-29 10:17 - 2013-10-29 15:25 - 00000300 _____ C:\Windows\Tasks\DigitalSite.job
2013-10-29 10:17 - 2013-10-29 10:25 - 00003248 _____ C:\Windows\System32\Tasks\DigitalSite
2013-10-29 10:17 - 2013-10-29 10:17 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\DigitalSite
2013-10-28 16:15 - 2013-10-28 16:15 - 00000460 _____ C:\Users\Hermann\Desktop\ACERLAPTOP 04.09.2013 1554 Lauf (E) - Verknüpfung.lnk
2013-10-18 23:04 - 2013-10-18 23:04 - 00000000 ____D C:\Windows\System32\Tasks\Norton 360
2013-10-11 15:57 - 2013-10-11 15:58 - 00102957 _____ C:\Users\Hermann\Desktop\Zustandsbericht Reisemobil.zip
2013-10-11 00:04 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-11 00:04 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-10-11 00:04 - 2013-09-22 23:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-11 00:04 - 2013-09-22 23:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-11 00:04 - 2013-09-22 23:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-11 00:04 - 2013-09-22 23:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-11 00:04 - 2013-09-21 04:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-11 00:04 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-11 00:04 - 2013-09-21 03:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-11 00:04 - 2013-09-21 03:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-10-10 21:41 - 2013-09-14 02:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-10-10 21:41 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-10-10 21:41 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-10-10 21:41 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2013-10-10 21:41 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-10-10 21:41 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-10-10 21:41 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-10-10 21:41 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-10-10 21:41 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-10-10 21:41 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-10-10 21:41 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-10-10 21:41 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-10-10 21:41 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2013-10-10 21:41 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-10-10 21:41 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2013-10-10 21:41 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-10-10 21:41 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-10-10 21:41 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-10-10 21:41 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-10-10 21:41 - 2013-08-28 02:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-10 21:41 - 2013-07-12 11:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-10-10 21:41 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-10 21:41 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-10-10 21:41 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-10 21:41 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-10-10 21:41 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2013-10-10 21:41 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2013-10-10 21:41 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-10 21:41 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2013-10-10 21:41 - 2013-07-03 05:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2013-10-10 21:41 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-10 21:41 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-10 21:41 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-10 21:41 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2013-10-10 21:41 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-10-10 21:41 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2013-10-10 21:41 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-10 21:41 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2013-10-10 21:41 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-10-10 21:41 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2013-10-10 21:41 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-10 21:41 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-10 21:41 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-10 21:40 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-10-10 21:40 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-10 21:40 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-10 21:40 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-08 13:07 - 2013-10-08 13:07 - 00000000 ____D C:\Users\Hermann\Documents\HP Photosmart Projects
2013-10-07 18:31 - 2013-10-28 15:20 - 00000000 ____D C:\Users\Hermann\AppData\Local\CrashDumps
2013-10-04 20:45 - 2013-10-04 20:45 - 01457152 _____ C:\Users\Hermann\Downloads\BatchedSearchResultsReport_2013-10-04_20-43-20.xls
2013-10-03 15:50 - 2013-10-03 15:50 - 00000000 ____D C:\Users\Hermann\Documents\Optimizer Pro
2013-10-03 15:48 - 2013-10-05 16:24 - 00000000 ____D C:\Program Files (x86)\Whilokii
2013-10-03 15:45 - 2013-10-29 14:55 - 00000300 _____ C:\Windows\Tasks\UpdaterEX.job
2013-10-03 15:45 - 2013-10-03 15:55 - 00003248 _____ C:\Windows\System32\Tasks\UpdaterEX
2013-10-03 15:45 - 2013-10-03 15:45 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\UpdaterEX
2013-10-03 15:44 - 2013-10-05 16:49 - 00000000 ____D C:\Program Files (x86)\BonanzaDealsLive
2013-10-03 15:44 - 2013-10-05 14:18 - 00000000 ____D C:\Program Files (x86)\BonanzaDeals
2013-10-03 15:44 - 2013-10-03 15:55 - 20586496 _____ C:\Users\Hermann\Downloads\SkypeSetup [1].exe
2013-10-03 15:44 - 2013-10-03 15:44 - 00000000 ____D C:\Users\Hermann\AppData\Local\BonanzaDealsLive
2013-10-03 15:44 - 2013-10-03 15:44 - 00000000 ____D C:\ProgramData\BonanzaDealsLive
2013-10-03 15:44 - 2013-10-03 15:44 - 00000000 ____D C:\ProgramData\BitGuard
2013-10-03 15:44 - 2013-10-03 15:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-03 15:43 - 2013-10-03 15:43 - 00000000 ____D C:\ProgramData\Babylon
2013-10-03 15:42 - 2013-10-03 15:54 - 00675952 _____ C:\Users\Hermann\Downloads\SkypeSetup.exe
2013-10-02 15:22 - 2013-10-08 14:46 - 00000000 ____D C:\Users\Bobby\Scans
2013-10-02 15:21 - 2013-10-02 15:22 - 00000000 ____D C:\Users\Bobby
2013-10-02 14:59 - 2013-10-02 14:59 - 00000000 ____D C:\Users\Hermann\AppData\Local\HP
2013-10-02 12:38 - 2013-10-02 15:15 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\HP
2013-10-02 12:38 - 2013-10-02 12:38 - 00000000 ____D C:\ProgramData\WEBREG
2013-10-02 12:36 - 2013-10-02 12:36 - 00002169 _____ C:\Users\Public\Desktop\HP Photosmart Essential 3.5.lnk
2013-10-02 12:36 - 2013-10-02 12:36 - 00000000 ____D C:\ProgramData\HP Product Assistant
2013-10-02 12:35 - 2013-10-02 15:23 - 00000000 ____D C:\UniScan
2013-10-02 12:35 - 2013-10-02 12:35 - 00001353 _____ C:\Users\Public\Desktop\HP Solution Center.lnk
2013-10-02 12:34 - 2013-10-02 12:59 - 00000000 ____D C:\Program Files (x86)\HP
2013-10-02 12:31 - 2013-10-02 12:42 - 00000359 _____ C:\ProgramData\hpzinstall.log
2013-10-01 19:54 - 2013-10-02 15:29 - 00000000 ____D C:\ProgramData\HP
2013-09-29 18:29 - 2013-09-29 18:41 - 00000566 _____ C:\Users\Hermann\AppData\Roaming\Microsoft\Windows\Start Menu\Deutsche Bank - Global Markets.website
2013-09-29 16:45 - 2013-09-29 16:45 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\SanDisk SecureAccess

==================== One Month Modified Files and Folders =======

2013-10-29 15:41 - 2013-10-29 15:41 - 00000000 ____D C:\FRST
2013-10-29 15:41 - 2011-04-12 08:43 - 00654166 _____ C:\Windows\system32\perfh007.dat
2013-10-29 15:41 - 2011-04-12 08:43 - 00130006 _____ C:\Windows\system32\perfc007.dat
2013-10-29 15:41 - 2009-07-14 06:13 - 01498506 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-29 15:40 - 2013-10-29 15:40 - 01956538 _____ (Farbar) C:\Users\Hermann\Downloads\FRST64.exe
2013-10-29 15:39 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-10-29 15:38 - 2013-05-15 13:02 - 01056328 _____ C:\Windows\WindowsUpdate.log
2013-10-29 15:30 - 2013-08-22 21:36 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-29 15:25 - 2013-10-29 10:17 - 00000300 _____ C:\Windows\Tasks\DigitalSite.job
2013-10-29 15:20 - 2013-10-29 10:18 - 00000300 _____ C:\Windows\Tasks\MetaCrawler.job
2013-10-29 15:15 - 2013-08-20 20:15 - 00000298 _____ C:\Windows\Tasks\Dealply.job
2013-10-29 15:01 - 2013-10-29 10:18 - 00000280 _____ C:\Windows\Tasks\RegClean Pro_DEFAULT.job
2013-10-29 14:55 - 2013-10-03 15:45 - 00000300 _____ C:\Windows\Tasks\UpdaterEX.job
2013-10-29 13:23 - 2013-08-20 22:05 - 00003946 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{CE278DBB-5B65-4B0F-914C-5D925E2EE7DC}
2013-10-29 13:17 - 2013-10-29 10:19 - 00000000 ____D C:\Program Files (x86)\Advanced System Protector
2013-10-29 13:17 - 2013-10-29 10:18 - 00000000 ____D C:\Program Files (x86)\BatBrowse
2013-10-29 11:38 - 2013-08-20 22:15 - 00000113 _____ C:\Users\Hermann\AppData\Roaming\WB.CFG
2013-10-29 11:38 - 2013-08-20 22:15 - 00000006 _____ C:\Users\Hermann\AppData\Roaming\WBPU-TTL.DAT
2013-10-29 10:25 - 2013-10-29 10:17 - 00003248 _____ C:\Windows\System32\Tasks\DigitalSite
2013-10-29 10:19 - 2013-10-29 10:19 - 00003120 _____ C:\Windows\System32\Tasks\Advanced System Protector_startup
2013-10-29 10:19 - 2013-10-29 10:19 - 00001203 _____ C:\Users\Public\Desktop\Advanced System Protector.lnk
2013-10-29 10:19 - 2013-10-29 10:19 - 00001089 _____ C:\Users\Hermann\Desktop\MyPC Backup.lnk
2013-10-29 10:19 - 2013-10-29 10:19 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2013-10-29 10:19 - 2013-10-29 10:19 - 00000000 ____D C:\ProgramData\Systweak
2013-10-29 10:19 - 2013-10-29 10:19 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-10-29 10:19 - 2013-10-29 10:18 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\Systweak
2013-10-29 10:19 - 2013-08-19 12:15 - 00000000 ___RD C:\Users\Hermann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-29 10:18 - 2013-10-29 10:18 - 00003332 _____ C:\Windows\System32\Tasks\Advanced System Protector
2013-10-29 10:18 - 2013-10-29 10:18 - 00003248 _____ C:\Windows\System32\Tasks\MetaCrawler
2013-10-29 10:18 - 2013-10-29 10:18 - 00003108 _____ C:\Windows\System32\Tasks\RegClean Pro
2013-10-29 10:18 - 2013-10-29 10:18 - 00003038 _____ C:\Windows\System32\Tasks\RegClean Pro_UPDATES
2013-10-29 10:18 - 2013-10-29 10:18 - 00002882 _____ C:\Windows\System32\Tasks\RegClean Pro_DEFAULT
2013-10-29 10:18 - 2013-10-29 10:18 - 00001112 _____ C:\Users\Public\Desktop\Open It!.lnk
2013-10-29 10:18 - 2013-10-29 10:18 - 00001052 _____ C:\Users\Public\Desktop\RegClean Pro.lnk
2013-10-29 10:18 - 2013-10-29 10:18 - 00000288 _____ C:\Windows\Tasks\RegClean Pro_UPDATES.job
2013-10-29 10:18 - 2013-10-29 10:18 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\MetaCrawler
2013-10-29 10:18 - 2013-10-29 10:18 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\0D0S1L2Z1P1B
2013-10-29 10:18 - 2013-10-29 10:18 - 00000000 ____D C:\Program Files (x86)\RegClean Pro
2013-10-29 10:18 - 2013-10-29 10:18 - 00000000 ____D C:\Program Files (x86)\OpenIt
2013-10-29 10:18 - 2013-10-29 10:18 - 00000000 ____D C:\Program Files (x86)\metaCrawler
2013-10-29 10:17 - 2013-10-29 10:17 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\DigitalSite
2013-10-29 10:12 - 2009-07-14 05:45 - 00021888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-29 10:12 - 2009-07-14 05:45 - 00021888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-29 10:07 - 2013-08-23 16:56 - 00000000 ____D C:\Program Files (x86)\WinZipper
2013-10-29 10:04 - 2010-11-21 04:47 - 00056286 _____ C:\Windows\PFRO.log
2013-10-29 10:04 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-29 10:04 - 2009-07-14 05:51 - 00042300 _____ C:\Windows\setupact.log
2013-10-28 16:15 - 2013-10-28 16:15 - 00000460 _____ C:\Users\Hermann\Desktop\ACERLAPTOP 04.09.2013 1554 Lauf (E) - Verknüpfung.lnk
2013-10-28 15:20 - 2013-10-07 18:31 - 00000000 ____D C:\Users\Hermann\AppData\Local\CrashDumps
2013-10-19 20:27 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-10-18 23:04 - 2013-10-18 23:04 - 00000000 ____D C:\Windows\System32\Tasks\Norton 360
2013-10-18 22:59 - 2013-09-25 18:14 - 00003206 _____ C:\Windows\System32\Tasks\Norton WSC Integration
2013-10-18 22:59 - 2013-09-25 18:14 - 00002321 _____ C:\Users\Public\Desktop\Norton 360.lnk
2013-10-18 22:59 - 2013-09-25 18:13 - 00000000 ____D C:\Windows\system32\Drivers\N360x64
2013-10-15 09:32 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-10-11 15:58 - 2013-10-11 15:57 - 00102957 _____ C:\Users\Hermann\Desktop\Zustandsbericht Reisemobil.zip
2013-10-11 15:58 - 2013-08-23 16:56 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\WinZipper
2013-10-11 07:20 - 2009-07-14 05:45 - 00342944 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-11 00:06 - 2013-08-19 18:19 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-11 00:02 - 2013-08-19 19:09 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-10-11 00:02 - 2013-08-19 19:09 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-10-10 23:58 - 2013-08-19 19:12 - 00000000 ____D C:\Windows\system32\MRT
2013-10-10 23:57 - 2013-08-19 19:12 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-10-09 13:31 - 2013-08-22 21:36 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-09 13:31 - 2013-08-22 21:36 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-09 13:31 - 2013-08-22 21:36 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-10-08 22:22 - 2013-08-19 18:19 - 00000000 ____D C:\Users\Hermann\AppData\Local\Microsoft Help
2013-10-08 14:46 - 2013-10-02 15:22 - 00000000 ____D C:\Users\Bobby\Scans
2013-10-08 13:07 - 2013-10-08 13:07 - 00000000 ____D C:\Users\Hermann\Documents\HP Photosmart Projects
2013-10-05 16:49 - 2013-10-03 15:44 - 00000000 ____D C:\Program Files (x86)\BonanzaDealsLive
2013-10-05 16:24 - 2013-10-03 15:48 - 00000000 ____D C:\Program Files (x86)\Whilokii
2013-10-05 16:24 - 2013-08-19 12:15 - 00086064 _____ C:\Users\Hermann\AppData\Local\GDIPFONTCACHEV1.DAT
2013-10-05 14:18 - 2013-10-03 15:44 - 00000000 ____D C:\Program Files (x86)\BonanzaDeals
2013-10-05 12:46 - 2013-08-19 15:05 - 00000000 ____D C:\Users\Hermann\Documents\Briefe
2013-10-04 20:45 - 2013-10-04 20:45 - 01457152 _____ C:\Users\Hermann\Downloads\BatchedSearchResultsReport_2013-10-04_20-43-20.xls
2013-10-03 15:55 - 2013-10-03 15:45 - 00003248 _____ C:\Windows\System32\Tasks\UpdaterEX
2013-10-03 15:55 - 2013-10-03 15:44 - 20586496 _____ C:\Users\Hermann\Downloads\SkypeSetup [1].exe
2013-10-03 15:54 - 2013-10-03 15:42 - 00675952 _____ C:\Users\Hermann\Downloads\SkypeSetup.exe
2013-10-03 15:50 - 2013-10-03 15:50 - 00000000 ____D C:\Users\Hermann\Documents\Optimizer Pro
2013-10-03 15:45 - 2013-10-03 15:45 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\UpdaterEX
2013-10-03 15:44 - 2013-10-03 15:44 - 00000000 ____D C:\Users\Hermann\AppData\Local\BonanzaDealsLive
2013-10-03 15:44 - 2013-10-03 15:44 - 00000000 ____D C:\ProgramData\BonanzaDealsLive
2013-10-03 15:44 - 2013-10-03 15:44 - 00000000 ____D C:\ProgramData\BitGuard
2013-10-03 15:44 - 2013-10-03 15:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-03 15:43 - 2013-10-03 15:43 - 00000000 ____D C:\ProgramData\Babylon
2013-10-02 15:29 - 2013-10-01 19:54 - 00000000 ____D C:\ProgramData\HP
2013-10-02 15:23 - 2013-10-02 12:35 - 00000000 ____D C:\UniScan
2013-10-02 15:22 - 2013-10-02 15:21 - 00000000 ____D C:\Users\Bobby
2013-10-02 15:15 - 2013-10-02 12:38 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\HP
2013-10-02 15:02 - 2013-08-19 12:14 - 00000000 ____D C:\Users\Hermann\AppData\Local\VirtualStore
2013-10-02 14:59 - 2013-10-02 14:59 - 00000000 ____D C:\Users\Hermann\AppData\Local\HP
2013-10-02 12:59 - 2013-10-02 12:34 - 00000000 ____D C:\Program Files (x86)\HP
2013-10-02 12:42 - 2013-10-02 12:31 - 00000359 _____ C:\ProgramData\hpzinstall.log
2013-10-02 12:38 - 2013-10-02 12:38 - 00000000 ____D C:\ProgramData\WEBREG
2013-10-02 12:36 - 2013-10-02 12:36 - 00002169 _____ C:\Users\Public\Desktop\HP Photosmart Essential 3.5.lnk
2013-10-02 12:36 - 2013-10-02 12:36 - 00000000 ____D C:\ProgramData\HP Product Assistant
2013-10-02 12:35 - 2013-10-02 12:35 - 00001353 _____ C:\Users\Public\Desktop\HP Solution Center.lnk
2013-10-02 09:22 - 2013-08-20 20:15 - 00000000 ____D C:\ProgramData\eSafe
2013-09-29 18:41 - 2013-09-29 18:29 - 00000566 _____ C:\Users\Hermann\AppData\Roaming\Microsoft\Windows\Start Menu\Deutsche Bank - Global Markets.website
2013-09-29 16:45 - 2013-09-29 16:45 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\SanDisk SecureAccess
2013-09-29 11:10 - 2013-09-28 10:45 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\eUpdate

Some content of TEMP:
====================
C:\Users\Hermann\AppData\Local\Temp\BackupSetup.exe
C:\Users\Hermann\AppData\Local\Temp\ose00000.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-29 15:06

==================== End Of Log ============================

Alt 29.10.2013, 16:05   #10
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com - Standard

Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com


CODE-Tags immer noch falsch. Wurde in meiner ersten Antwort erwähnt wie das zu bedienen ist. Außerdem solltest du deinen Beitrag editieren und nicht alles nochmal posten, aber gut, korriegiere es jetzt in dem du deinen letzten Beitrag editierst
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 29.10.2013, 16:37   #11
MHN
 
Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com - Standard

Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com


Ich habe die Datei wie beschrieben in ein Fenster des Editors kopiert (aber schon das Scanprogramm hatte eine solche Datei erzeugt). Ich finde kein #-Zeichen, weder im Text, noch in den Funktionen des Editors. Handelt es sich um die Funktion auf der Website? Ich habe mal auf Editieren gedrückt. Da scheint sich nichts zu tun. Ich werde die Datei also noch mal posten und hoffe, dass dann die Tags enthalten sind:
(Siehe unten)
Aber wo bleibt jetzt der Editor-Button? Oben waren die Dateien teilweise in einem Fenster.
FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-10-2013
Ran by Hermann (administrator) on ACERLAPTOP on 29-10-2013 16:30:31
Running from C:\Users\Hermann\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Taiwan Shui Mu Chih Ching Technology Limited.) C:\Program Files (x86)\WinZipper\winzipersvc.exe
() C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\N360.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\N360.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Intel® Corporation) C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Atheros) C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_11_9_900_117_ActiveX.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe
(BatBrowse) C:\Program Files (x86)\BatBrowse\updateBatBrowse.exe
(MyPCBackup.com) C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe
(Systweak) C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\IEXPLORE.EXE
() C:\Program Files (x86)\OpenIt\Open It!\openit.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [Power Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1829768 2012-02-07] (Acer Incorporated)
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4123 2012-01-20] ()
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12448872 2012-02-14] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1158248 2012-02-08] (Realtek Semiconductor)
HKLM-x32\...\Runonce: [Del804434] - cmd.exe /Q /D /c del "C:\Users\Hermann\AppData\Local\Temp\0.del" [x]
HKLM-x32\...\Runonce: [Del819332] - cmd.exe /Q /D /c del "C:\Users\Hermann\AppData\Local\Temp\0.del" [x]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Runonce: [Del804434] - cmd.exe /Q /D /c del "C:\Users\Hermann\AppData\Local\Temp\0.del"
HKCU\...\Runonce: [Del819332] - cmd.exe /Q /D /c del "C:\Users\Hermann\AppData\Local\Temp\0.del"
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1105488 2012-03-23] (Dritek System Inc.)
HKLM-x32\...\Run: [MDS_Menu] - C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)
HKLM-x32\...\Run: [hpqSRMon] - C:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exe [150016 2008-08-20] (Hewlett-Packard)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [245872 2013-05-15] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [201576 2013-05-15] (NVIDIA Corporation)
Startup: C:\Users\Hermann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
ShortcutTarget: MyPC Backup.lnk -> C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
Startup: C:\Users\Hermann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Überwachungstool für die Intel® Turbo-Boost-Technik 2.5.lnk
ShortcutTarget: Überwachungstool für die Intel® Turbo-Boost-Technik 2.5.lnk -> C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe (Intel® Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=ShoppingHelper&dpid=ShoppingHelper&co=DE&userid=373003a4-231d-90bf-c506-f0b938278db1&searchtype=ds&q={searchTerms}&installDate=27/10/2013
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Metacrawler Search
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1378325215&rver=6.1.6206.0&wp=MBI&wreply=http:%2F%2Fdu121w.dub121.mail.live.com%2Fdefault.aspx%3Frru%3Dinbox&lc=1031&id=64855&mkt=de-de&cbcxt=mai&snsc=1
https://gm-secure.db.com/welcome.html?/ger/region/home/Home.eqsr?regionID=All&page=regionPage&regionCountryDisplay=regionPage&newPage=newRegionPage
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Delta Homes
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Metacrawler Search
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = Metacrawler Search
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe QVO6
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0C0BtDtCzyyBtA0ByDyCtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=2136752658&ir=
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0C0BtDtCzyyBtA0ByDyCtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=2136752658&ir=
SearchScopes: HKLM - {47222A32-D609-5E22-2A53-46D3A2D0413B} URL = QVO6
SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0C0BtDtCzyyBtA0ByDyCtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=2136752658&ir=
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0C0BtDtCzyyBtA0ByDyCtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=2136752658&ir=
SearchScopes: HKLM-x32 - {5094D06B-637F-9B72-0AA2-2702C3F93FD5} URL = hxxp://feed.snapdo.com/?publisher=ShoppingHelper&dpid=ShoppingHelper&co=DE&userid=373003a4-231d-90bf-c506-f0b938278db1&searchtype=ds&q={searchTerms}&installDate=27/10/2013
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0C0BtDtCzyyBtA0ByDyCtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=2136752658&ir=
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0C0BtDtCzyyBtA0ByDyCtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=2136752658&ir=
SearchScopes: HKCU - {47222A32-D609-5E22-2A53-46D3A2D0413B} URL = hxxp://feed.snapdo.com/?publisher=ShoppingHelper&dpid=ShoppingHelper&co=DE&userid=373003a4-231d-90bf-c506-f0b938278db1&searchtype=ds&q={searchTerms}&installDate=27/10/2013
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine64\21.1.0.18\coieplg.dll (Symantec Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\coieplg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\ips\ipsbho.dll (Symantec Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: BatBrowse - {b67b3dbb-c1c9-49d2-b016-2748b0b5017e} - C:\Program Files (x86)\BatBrowse\BatBrowseBHO.dll (BatBrowse)
BHO-x32: metacrawler  Helper Object - {D4EF7D75-52C9-4BCE-B6DC-0976EFAB4B0B} - C:\Program Files (x86)\metaCrawler\1.8.19.0\bh\metacrawler.dll (Info Space)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.1.0.18\coieplg.dll (Symantec Corporation)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\coieplg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - metacrawler  Toolbar - {7EACAC38-B7F6-4514-9DC1-3428A7964ABD} - C:\Program Files (x86)\metaCrawler\1.8.19.0\metacrawlerTlbr.dll (Info Space)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - \User Data\Default\Extensions\newtab.crx
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\Exts\Chrome.crx

==================== Services (Whitelisted) =================

R2 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
S2 BackupStack; C:\Program Files (x86)\MyPC Backup\BackupStack.exe [38440 2013-09-19] (Just Develop It)
S2 CLKMSVC10_039CBDDF; C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\NavFilter\kmsvc.exe [241648 2011-01-28] (CyberLink)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation)
R2 N360; C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\N360.exe [264360 2013-10-08] (Symantec Corporation)
R2 RichVideo; C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [244904 2010-02-03] ()
R2 Update BatBrowse; C:\Program Files (x86)\BatBrowse\updateBatBrowse.exe [65824 2013-10-22] (BatBrowse)
R2 winzipersvc; C:\Program Files (x86)\WinZipper\winzipersvc.exe [424104 2013-08-23] (Taiwan Shui Mu Chih Ching Technology Limited.)
R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe [72864 2012-02-19] (Atheros)
S2 WsysSvc; C:\ProgramData\eSafe\eGdpSvc.exe [x]

==================== Drivers (Whitelisted) ====================

R1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\21.0.2.1\Definitions\BASHDefs\20131022.001\BHDrvx64.sys [1524824 2013-10-23] (Symantec Corporation)
R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1501000.012\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-09-25] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [140376 2013-09-25] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\21.0.2.1\Definitions\IPSDefs\20131025.002\IDSvia64.sys [521816 2013-10-29] (Symantec Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton 360\NortonData\21.0.2.1\Definitions\VirusDefs\20131028.038\ENG64.SYS [126040 2013-09-25] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton 360\NortonData\21.0.2.1\Definitions\VirusDefs\20131028.038\EX64.SYS [2099288 2013-09-25] (Symantec Corporation)
S3 RTL2832UBDA; C:\Windows\SysWow64\drivers\RTL2832UBDA.sys [225256 2011-05-17] (REALTEK SEMICONDUCTOR Corp.)
S3 RTL2832UUSB; C:\Windows\SysWow64\Drivers\RTL2832UUSB.sys [39016 2011-05-17] (REALTEK SEMICONDUCTOR Corp.)
S3 RTL2832U_IRHID; C:\Windows\SysWow64\DRIVERS\RTL2832U_IRHID.sys [48488 2011-06-13] (Realtek)
R3 SRTSP; C:\Windows\System32\Drivers\N360x64\1501000.012\SRTSP64.SYS [858200 2013-09-27] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1501000.012\SRTSPX64.SYS [36952 2013-07-31] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\N360x64\1501000.012\SYMDS64.SYS [493656 2013-08-01] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360x64\1501000.012\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-09-25] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360x64\1501000.012\Ironx64.SYS [264280 2013-07-31] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1501000.012\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)
S3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [33048 2006-11-30] (X10 Wireless Technology, Inc.)
R2 {6E090BD5-4EF5-4bf0-A968-74049E88E935}; C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\000.fcl [146928 2010-05-19] (CyberLink Corp.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-29 15:42 - 2013-10-29 15:43 - 00023606 _____ C:\Users\Hermann\Downloads\Addition.txt
2013-10-29 15:41 - 2013-10-29 15:41 - 00000000 ____D C:\FRST
2013-10-29 15:40 - 2013-10-29 15:40 - 01956538 _____ (Farbar) C:\Users\Hermann\Downloads\FRST64.exe
2013-10-29 10:19 - 2013-10-29 13:17 - 00000000 ____D C:\Program Files (x86)\Advanced System Protector
2013-10-29 10:19 - 2013-10-29 10:19 - 00003120 _____ C:\Windows\System32\Tasks\Advanced System Protector_startup
2013-10-29 10:19 - 2013-10-29 10:19 - 00001203 _____ C:\Users\Public\Desktop\Advanced System Protector.lnk
2013-10-29 10:19 - 2013-10-29 10:19 - 00001089 _____ C:\Users\Hermann\Desktop\MyPC Backup.lnk
2013-10-29 10:19 - 2013-10-29 10:19 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2013-10-29 10:19 - 2013-10-29 10:19 - 00000000 ____D C:\ProgramData\Systweak
2013-10-29 10:19 - 2013-10-29 10:19 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-10-29 10:19 - 2012-07-25 12:03 - 00016896 _____ C:\Windows\system32\sasnative64.exe
2013-10-29 10:18 - 2013-10-29 16:20 - 00000300 _____ C:\Windows\Tasks\MetaCrawler.job
2013-10-29 10:18 - 2013-10-29 15:52 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\Systweak
2013-10-29 10:18 - 2013-10-29 13:17 - 00000000 ____D C:\Program Files (x86)\BatBrowse
2013-10-29 10:18 - 2013-10-29 10:18 - 00003332 _____ C:\Windows\System32\Tasks\Advanced System Protector
2013-10-29 10:18 - 2013-10-29 10:18 - 00003248 _____ C:\Windows\System32\Tasks\MetaCrawler
2013-10-29 10:18 - 2013-10-29 10:18 - 00001112 _____ C:\Users\Public\Desktop\Open It!.lnk
2013-10-29 10:18 - 2013-10-29 10:18 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\MetaCrawler
2013-10-29 10:18 - 2013-10-29 10:18 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\0D0S1L2Z1P1B
2013-10-29 10:18 - 2013-10-29 10:18 - 00000000 ____D C:\Program Files (x86)\OpenIt
2013-10-29 10:18 - 2013-10-29 10:18 - 00000000 ____D C:\Program Files (x86)\metaCrawler
2013-10-29 10:18 - 2013-07-22 16:07 - 00020312 _____ (Systweak Inc., (Systweak - Download Software utilities for Windows optimization, Scan & Clean Spyware for Free)) C:\Windows\system32\roboot64.exe
2013-10-29 10:17 - 2013-10-29 16:25 - 00000300 _____ C:\Windows\Tasks\DigitalSite.job
2013-10-29 10:17 - 2013-10-29 10:25 - 00003248 _____ C:\Windows\System32\Tasks\DigitalSite
2013-10-29 10:17 - 2013-10-29 10:17 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\DigitalSite
2013-10-28 16:15 - 2013-10-28 16:15 - 00000460 _____ C:\Users\Hermann\Desktop\ACERLAPTOP 04.09.2013 1554 Lauf (E) - Verknüpfung.lnk
2013-10-18 23:04 - 2013-10-18 23:04 - 00000000 ____D C:\Windows\System32\Tasks\Norton 360
2013-10-11 15:57 - 2013-10-11 15:58 - 00102957 _____ C:\Users\Hermann\Desktop\Zustandsbericht Reisemobil.zip
2013-10-11 00:04 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-11 00:04 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-10-11 00:04 - 2013-09-22 23:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-11 00:04 - 2013-09-22 23:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-11 00:04 - 2013-09-22 23:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-11 00:04 - 2013-09-22 23:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-11 00:04 - 2013-09-21 04:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-11 00:04 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-11 00:04 - 2013-09-21 03:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-11 00:04 - 2013-09-21 03:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-10-10 21:41 - 2013-09-14 02:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-10-10 21:41 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-10-10 21:41 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-10-10 21:41 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2013-10-10 21:41 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-10-10 21:41 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-10-10 21:41 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-10-10 21:41 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-10-10 21:41 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-10-10 21:41 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-10-10 21:41 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-10-10 21:41 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-10-10 21:41 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2013-10-10 21:41 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-10-10 21:41 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2013-10-10 21:41 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-10-10 21:41 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-10-10 21:41 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-10-10 21:41 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-10-10 21:41 - 2013-08-28 02:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-10 21:41 - 2013-07-12 11:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-10-10 21:41 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-10 21:41 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-10-10 21:41 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-10 21:41 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-10-10 21:41 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2013-10-10 21:41 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2013-10-10 21:41 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-10 21:41 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2013-10-10 21:41 - 2013-07-03 05:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2013-10-10 21:41 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-10 21:41 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-10 21:41 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-10 21:41 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2013-10-10 21:41 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-10-10 21:41 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2013-10-10 21:41 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-10 21:41 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2013-10-10 21:41 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-10-10 21:41 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2013-10-10 21:41 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-10 21:41 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-10 21:41 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-10 21:40 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-10-10 21:40 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-10 21:40 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-10 21:40 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-08 13:07 - 2013-10-08 13:07 - 00000000 ____D C:\Users\Hermann\Documents\HP Photosmart Projects
2013-10-07 18:31 - 2013-10-28 15:20 - 00000000 ____D C:\Users\Hermann\AppData\Local\CrashDumps
2013-10-04 20:45 - 2013-10-04 20:45 - 01457152 _____ C:\Users\Hermann\Downloads\BatchedSearchResultsReport_2013-10-04_20-43-20.xls
2013-10-03 15:50 - 2013-10-03 15:50 - 00000000 ____D C:\Users\Hermann\Documents\Optimizer Pro
2013-10-03 15:48 - 2013-10-05 16:24 - 00000000 ____D C:\Program Files (x86)\Whilokii
2013-10-03 15:45 - 2013-10-29 15:55 - 00000300 _____ C:\Windows\Tasks\UpdaterEX.job
2013-10-03 15:45 - 2013-10-03 15:55 - 00003248 _____ C:\Windows\System32\Tasks\UpdaterEX
2013-10-03 15:45 - 2013-10-03 15:45 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\UpdaterEX
2013-10-03 15:44 - 2013-10-05 16:49 - 00000000 ____D C:\Program Files (x86)\BonanzaDealsLive
2013-10-03 15:44 - 2013-10-05 14:18 - 00000000 ____D C:\Program Files (x86)\BonanzaDeals
2013-10-03 15:44 - 2013-10-03 15:55 - 20586496 _____ C:\Users\Hermann\Downloads\SkypeSetup [1].exe
2013-10-03 15:44 - 2013-10-03 15:44 - 00000000 ____D C:\Users\Hermann\AppData\Local\BonanzaDealsLive
2013-10-03 15:44 - 2013-10-03 15:44 - 00000000 ____D C:\ProgramData\BonanzaDealsLive
2013-10-03 15:44 - 2013-10-03 15:44 - 00000000 ____D C:\ProgramData\BitGuard
2013-10-03 15:44 - 2013-10-03 15:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-03 15:43 - 2013-10-03 15:43 - 00000000 ____D C:\ProgramData\Babylon
2013-10-03 15:42 - 2013-10-03 15:54 - 00675952 _____ C:\Users\Hermann\Downloads\SkypeSetup.exe
2013-10-02 15:22 - 2013-10-08 14:46 - 00000000 ____D C:\Users\Bobby\Scans
2013-10-02 15:21 - 2013-10-02 15:22 - 00000000 ____D C:\Users\Bobby
2013-10-02 14:59 - 2013-10-02 14:59 - 00000000 ____D C:\Users\Hermann\AppData\Local\HP
2013-10-02 12:38 - 2013-10-02 15:15 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\HP
2013-10-02 12:38 - 2013-10-02 12:38 - 00000000 ____D C:\ProgramData\WEBREG
2013-10-02 12:36 - 2013-10-02 12:36 - 00002169 _____ C:\Users\Public\Desktop\HP Photosmart Essential 3.5.lnk
2013-10-02 12:36 - 2013-10-02 12:36 - 00000000 ____D C:\ProgramData\HP Product Assistant
2013-10-02 12:35 - 2013-10-02 15:23 - 00000000 ____D C:\UniScan
2013-10-02 12:35 - 2013-10-02 12:35 - 00001353 _____ C:\Users\Public\Desktop\HP Solution Center.lnk
2013-10-02 12:34 - 2013-10-02 12:59 - 00000000 ____D C:\Program Files (x86)\HP
2013-10-02 12:31 - 2013-10-02 12:42 - 00000359 _____ C:\ProgramData\hpzinstall.log
2013-10-01 19:54 - 2013-10-02 15:29 - 00000000 ____D C:\ProgramData\HP
2013-09-29 18:29 - 2013-09-29 18:41 - 00000566 _____ C:\Users\Hermann\AppData\Roaming\Microsoft\Windows\Start Menu\Deutsche Bank - Global Markets.website
2013-09-29 16:45 - 2013-09-29 16:45 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\SanDisk SecureAccess

==================== One Month Modified Files and Folders =======

2013-10-29 16:30 - 2013-08-22 21:36 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-29 16:25 - 2013-10-29 10:17 - 00000300 _____ C:\Windows\Tasks\DigitalSite.job
2013-10-29 16:20 - 2013-10-29 10:18 - 00000300 _____ C:\Windows\Tasks\MetaCrawler.job
2013-10-29 16:15 - 2013-08-20 20:15 - 00000298 _____ C:\Windows\Tasks\Dealply.job
2013-10-29 15:55 - 2013-10-03 15:45 - 00000300 _____ C:\Windows\Tasks\UpdaterEX.job
2013-10-29 15:52 - 2013-10-29 10:18 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\Systweak
2013-10-29 15:43 - 2013-10-29 15:42 - 00023606 _____ C:\Users\Hermann\Downloads\Addition.txt
2013-10-29 15:41 - 2013-10-29 15:41 - 00000000 ____D C:\FRST
2013-10-29 15:41 - 2011-04-12 08:43 - 00654166 _____ C:\Windows\system32\perfh007.dat
2013-10-29 15:41 - 2011-04-12 08:43 - 00130006 _____ C:\Windows\system32\perfc007.dat
2013-10-29 15:41 - 2009-07-14 06:13 - 01498506 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-29 15:40 - 2013-10-29 15:40 - 01956538 _____ (Farbar) C:\Users\Hermann\Downloads\FRST64.exe
2013-10-29 15:39 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-10-29 15:38 - 2013-05-15 13:02 - 01056328 _____ C:\Windows\WindowsUpdate.log
2013-10-29 13:23 - 2013-08-20 22:05 - 00003946 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{CE278DBB-5B65-4B0F-914C-5D925E2EE7DC}
2013-10-29 13:17 - 2013-10-29 10:19 - 00000000 ____D C:\Program Files (x86)\Advanced System Protector
2013-10-29 13:17 - 2013-10-29 10:18 - 00000000 ____D C:\Program Files (x86)\BatBrowse
2013-10-29 11:38 - 2013-08-20 22:15 - 00000113 _____ C:\Users\Hermann\AppData\Roaming\WB.CFG
2013-10-29 11:38 - 2013-08-20 22:15 - 00000006 _____ C:\Users\Hermann\AppData\Roaming\WBPU-TTL.DAT
2013-10-29 10:25 - 2013-10-29 10:17 - 00003248 _____ C:\Windows\System32\Tasks\DigitalSite
2013-10-29 10:19 - 2013-10-29 10:19 - 00003120 _____ C:\Windows\System32\Tasks\Advanced System Protector_startup
2013-10-29 10:19 - 2013-10-29 10:19 - 00001203 _____ C:\Users\Public\Desktop\Advanced System Protector.lnk
2013-10-29 10:19 - 2013-10-29 10:19 - 00001089 _____ C:\Users\Hermann\Desktop\MyPC Backup.lnk
2013-10-29 10:19 - 2013-10-29 10:19 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2013-10-29 10:19 - 2013-10-29 10:19 - 00000000 ____D C:\ProgramData\Systweak
2013-10-29 10:19 - 2013-10-29 10:19 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-10-29 10:19 - 2013-08-19 12:15 - 00000000 ___RD C:\Users\Hermann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-29 10:18 - 2013-10-29 10:18 - 00003332 _____ C:\Windows\System32\Tasks\Advanced System Protector
2013-10-29 10:18 - 2013-10-29 10:18 - 00003248 _____ C:\Windows\System32\Tasks\MetaCrawler
2013-10-29 10:18 - 2013-10-29 10:18 - 00001112 _____ C:\Users\Public\Desktop\Open It!.lnk
2013-10-29 10:18 - 2013-10-29 10:18 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\MetaCrawler
2013-10-29 10:18 - 2013-10-29 10:18 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\0D0S1L2Z1P1B
2013-10-29 10:18 - 2013-10-29 10:18 - 00000000 ____D C:\Program Files (x86)\OpenIt
2013-10-29 10:18 - 2013-10-29 10:18 - 00000000 ____D C:\Program Files (x86)\metaCrawler
2013-10-29 10:17 - 2013-10-29 10:17 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\DigitalSite
2013-10-29 10:12 - 2009-07-14 05:45 - 00021888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-29 10:12 - 2009-07-14 05:45 - 00021888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-29 10:07 - 2013-08-23 16:56 - 00000000 ____D C:\Program Files (x86)\WinZipper
2013-10-29 10:04 - 2010-11-21 04:47 - 00056286 _____ C:\Windows\PFRO.log
2013-10-29 10:04 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-29 10:04 - 2009-07-14 05:51 - 00042300 _____ C:\Windows\setupact.log
2013-10-28 16:15 - 2013-10-28 16:15 - 00000460 _____ C:\Users\Hermann\Desktop\ACERLAPTOP 04.09.2013 1554 Lauf (E) - Verknüpfung.lnk
2013-10-28 15:20 - 2013-10-07 18:31 - 00000000 ____D C:\Users\Hermann\AppData\Local\CrashDumps
2013-10-19 20:27 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-10-18 23:04 - 2013-10-18 23:04 - 00000000 ____D C:\Windows\System32\Tasks\Norton 360
2013-10-18 22:59 - 2013-09-25 18:14 - 00003206 _____ C:\Windows\System32\Tasks\Norton WSC Integration
2013-10-18 22:59 - 2013-09-25 18:14 - 00002321 _____ C:\Users\Public\Desktop\Norton 360.lnk
2013-10-18 22:59 - 2013-09-25 18:13 - 00000000 ____D C:\Windows\system32\Drivers\N360x64
2013-10-15 09:32 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-10-11 15:58 - 2013-10-11 15:57 - 00102957 _____ C:\Users\Hermann\Desktop\Zustandsbericht Reisemobil.zip
2013-10-11 15:58 - 2013-08-23 16:56 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\WinZipper
2013-10-11 07:20 - 2009-07-14 05:45 - 00342944 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-11 00:06 - 2013-08-19 18:19 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-11 00:02 - 2013-08-19 19:09 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-10-11 00:02 - 2013-08-19 19:09 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-10-10 23:58 - 2013-08-19 19:12 - 00000000 ____D C:\Windows\system32\MRT
2013-10-10 23:57 - 2013-08-19 19:12 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-10-09 13:31 - 2013-08-22 21:36 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-09 13:31 - 2013-08-22 21:36 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-09 13:31 - 2013-08-22 21:36 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-10-08 22:22 - 2013-08-19 18:19 - 00000000 ____D C:\Users\Hermann\AppData\Local\Microsoft Help
2013-10-08 14:46 - 2013-10-02 15:22 - 00000000 ____D C:\Users\Bobby\Scans
2013-10-08 13:07 - 2013-10-08 13:07 - 00000000 ____D C:\Users\Hermann\Documents\HP Photosmart Projects
2013-10-05 16:49 - 2013-10-03 15:44 - 00000000 ____D C:\Program Files (x86)\BonanzaDealsLive
2013-10-05 16:24 - 2013-10-03 15:48 - 00000000 ____D C:\Program Files (x86)\Whilokii
2013-10-05 16:24 - 2013-08-19 12:15 - 00086064 _____ C:\Users\Hermann\AppData\Local\GDIPFONTCACHEV1.DAT
2013-10-05 14:18 - 2013-10-03 15:44 - 00000000 ____D C:\Program Files (x86)\BonanzaDeals
2013-10-05 12:46 - 2013-08-19 15:05 - 00000000 ____D C:\Users\Hermann\Documents\Briefe
2013-10-04 20:45 - 2013-10-04 20:45 - 01457152 _____ C:\Users\Hermann\Downloads\BatchedSearchResultsReport_2013-10-04_20-43-20.xls
2013-10-03 15:55 - 2013-10-03 15:45 - 00003248 _____ C:\Windows\System32\Tasks\UpdaterEX
2013-10-03 15:55 - 2013-10-03 15:44 - 20586496 _____ C:\Users\Hermann\Downloads\SkypeSetup [1].exe
2013-10-03 15:54 - 2013-10-03 15:42 - 00675952 _____ C:\Users\Hermann\Downloads\SkypeSetup.exe
2013-10-03 15:50 - 2013-10-03 15:50 - 00000000 ____D C:\Users\Hermann\Documents\Optimizer Pro
2013-10-03 15:45 - 2013-10-03 15:45 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\UpdaterEX
2013-10-03 15:44 - 2013-10-03 15:44 - 00000000 ____D C:\Users\Hermann\AppData\Local\BonanzaDealsLive
2013-10-03 15:44 - 2013-10-03 15:44 - 00000000 ____D C:\ProgramData\BonanzaDealsLive
2013-10-03 15:44 - 2013-10-03 15:44 - 00000000 ____D C:\ProgramData\BitGuard
2013-10-03 15:44 - 2013-10-03 15:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-03 15:43 - 2013-10-03 15:43 - 00000000 ____D C:\ProgramData\Babylon
2013-10-02 15:29 - 2013-10-01 19:54 - 00000000 ____D C:\ProgramData\HP
2013-10-02 15:23 - 2013-10-02 12:35 - 00000000 ____D C:\UniScan
2013-10-02 15:22 - 2013-10-02 15:21 - 00000000 ____D C:\Users\Bobby
2013-10-02 15:15 - 2013-10-02 12:38 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\HP
2013-10-02 15:02 - 2013-08-19 12:14 - 00000000 ____D C:\Users\Hermann\AppData\Local\VirtualStore
2013-10-02 14:59 - 2013-10-02 14:59 - 00000000 ____D C:\Users\Hermann\AppData\Local\HP
2013-10-02 12:59 - 2013-10-02 12:34 - 00000000 ____D C:\Program Files (x86)\HP
2013-10-02 12:42 - 2013-10-02 12:31 - 00000359 _____ C:\ProgramData\hpzinstall.log
2013-10-02 12:38 - 2013-10-02 12:38 - 00000000 ____D C:\ProgramData\WEBREG
2013-10-02 12:36 - 2013-10-02 12:36 - 00002169 _____ C:\Users\Public\Desktop\HP Photosmart Essential 3.5.lnk
2013-10-02 12:36 - 2013-10-02 12:36 - 00000000 ____D C:\ProgramData\HP Product Assistant
2013-10-02 12:35 - 2013-10-02 12:35 - 00001353 _____ C:\Users\Public\Desktop\HP Solution Center.lnk
2013-10-02 09:22 - 2013-08-20 20:15 - 00000000 ____D C:\ProgramData\eSafe
2013-09-29 18:41 - 2013-09-29 18:29 - 00000566 _____ C:\Users\Hermann\AppData\Roaming\Microsoft\Windows\Start Menu\Deutsche Bank - Global Markets.website
2013-09-29 16:45 - 2013-09-29 16:45 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\SanDisk SecureAccess
2013-09-29 11:10 - 2013-09-28 10:45 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\eUpdate

Some content of TEMP:
====================
C:\Users\Hermann\AppData\Local\Temp\BackupSetup.exe
C:\Users\Hermann\AppData\Local\Temp\ose00000.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-29 15:06

==================== End Of Log ============================
--- --- ---

--- --- ---


Jetzt ist auch noch die Kette der Fragen und Antworten weg, weil der Button Beitrag bearbeiten augenscheinlich falsch ist.

Alt 29.10.2013, 16:41   #12
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com - Standard

Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com


Zum Editieren drückt man sinnigerweise auf den Button "Editieren" - "bearbeiten" gibt es hier nicht

Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 29.10.2013, 16:49   #13
MHN
 
Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com - Standard

Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com


Der Editor-Button hat sich gezeigt nach dem Antwort-Befehl, aber da wo ich die Code-Tags vermute, sitzen Kommandofelder auf: Alles auswählen/Aufklappen.
Irgendwas stimmt noch nicht.

Gewiss, aber ich war irritiert, weil sich immer noch kein # gezeigt hatte nach dem Kommando editieren. Soll ich mit dem Protokoll von Malware ebenso verfahren wie bisher? Ich hab immer noch das Gefühl, alles falsch zu machen und mehr Mühe als Hilfe zu bereiten.

Alt 29.10.2013, 16:53   #14
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com - Standard

Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com


Lies doch bitte mal die Beiträge richtig
Und Editieren brauchst du jetzt nichts mehr, ich warte noch auf was nächste Log von MBAR

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 29.10.2013, 17:29   #15
MHN
 
Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com - Standard

Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com


So, jetzt hab ichs begriffen, hoffe ich. Malwarebytes hat einen Befall in einem temp-Orner entdeckt, den anscheinend Norton sofort in Arbeit benommen hat. Daher der gute Befund und kein Neustart nötig gewesen.

Code:
ATTFilter
Malwarebytes Anti-Rootkit BETA 1.07.0.1007
www.malwarebytes.org

Database version: v2013.10.29.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16721
Hermann :: ACERLAPTOP [administrator]

29.10.2013 17:02:04
mbar-log-2013-10-29 (17-02-04).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 257084
Time elapsed: 16 minute(s), 50 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
Allerdings gab es bei der Installation von Malwarebytes einen Hinweis auf Rootkit-Aktivitäten, weil eine Adresse(?) nicht gefunden werden konnte.

Antwort
Seite 1 von 3 1 23

Themen zu Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com
browserfenster, deinstalliere, deinstallieren, delta-homes, entfern, freundlich, internet explorer, mitglieder, norton, qv06-virus, recht, sicherheitssoftware, troja, trojaner


« TR/CryptZPACK | GVU-Trojaner nach Windowsunlocker noch vorhanden »


Ähnliche Themen: Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com


  1. Spiel lässt sich nicht deinstallieren.
    Alles rund um Windows - 02.10.2015 (2)
  2. delta-homes browser hijacker geht nicht weg
    Log-Analyse und Auswertung - 19.06.2015 (3)
  3. Delta Homes, noch nicht Entfernt.
    Plagegeister aller Art und deren Bekämpfung - 30.03.2015 (7)
  4. Delta-Homes lässt sich nicht entfernen
    Plagegeister aller Art und deren Bekämpfung - 19.01.2015 (4)
  5. snapdo lässt sich nicht deinstallieren
    Log-Analyse und Auswertung - 30.09.2014 (3)
  6. RegClean Pro lässt sich nicht deinstallieren
    Log-Analyse und Auswertung - 09.02.2014 (8)
  7. yontoo 2.052 lässt sich nicht deinstallieren
    Plagegeister aller Art und deren Bekämpfung - 07.02.2014 (5)
  8. Ask Toobar lässt sich nicht deinstallieren + die Seite: "http://rvzr-a.akamaihd.net" öffnet sich ständig - Was kann ich tun?
    Plagegeister aller Art und deren Bekämpfung - 03.12.2013 (13)
  9. Delta-Homes im Firefox nicht zu entfernen
    Log-Analyse und Auswertung - 27.10.2013 (4)
  10. Delta-Homes in der Eingabezeile und Startseite des Chrome Browsers nicht zu entfernen.
    Plagegeister aller Art und deren Bekämpfung - 06.10.2013 (1)
  11. HDvid Codec V1 eingefangen, lässt sich nicht deinstallieren, Rechner hängt sich bei Beutzerwechsel auf
    Log-Analyse und Auswertung - 28.09.2013 (15)
  12. ASK Toolbar lässt sich nicht deinstallieren
    Plagegeister aller Art und deren Bekämpfung - 12.08.2013 (21)
  13. AVG lässt sich nicht deinstallieren
    Log-Analyse und Auswertung - 24.05.2011 (3)
  14. Antivir lässt sich nicht deinstallieren
    Antiviren-, Firewall- und andere Schutzprogramme - 22.02.2009 (7)
  15. LogMeIn lässt sich nicht deinstallieren
    Plagegeister aller Art und deren Bekämpfung - 14.10.2007 (3)
  16. Norton IS lässt sich nicht deinstallieren
    Plagegeister aller Art und deren Bekämpfung - 10.02.2007 (1)
  17. Pc Cillin lässt sich nicht deinstallieren
    Antiviren-, Firewall- und andere Schutzprogramme - 18.10.2005 (4)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com - Ich habe gesehen, dass Mitglieder wussten, wie man den QV06-Virus entfernt. Das schien ein recht aufwändiger Prozess. Wäre jemand so freundlich, mir die Hand zu führen? Die Sicherheitssoftware ist Norton - Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com...
Archiv
Du betrachtest: Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131