|
Plagegeister aller Art und deren Bekämpfung: Programme lassen sich nicht mehr öffnenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
01.11.2013, 15:26 | #1 |
| Programme lassen sich nicht mehr öffnen Seid gegrüßt Trojaner-Board Team, ich hab in den letzten Tagen ein Problem uns war hatte ich eine Meldung bei meinem Wartungscenter:"Entfernen des Win32/Small.CA-Virus von Ihrem PC". Als ich es versucht habe irgendwie zu entfernen haben sich viele meiner Programme zu Verknüpfungen umgewandelt, unter anderem auch Mozilla, und lassen sich nicht mehr öffnen. Wenn ich drauf klick erscheint ein Fenster mit Verknüpfungsproblem, welches mich frägt ob ich die Verknüpfung löschen soll, welches ja das "Original" ist. Das Problem mit dem Virus wird zwar nicht angezeigt aber ich glaub es hat dennoch damit was zu tun. Ich hoffe ihr könnt mir da weiter helfen. Mfg sevenfour |
01.11.2013, 16:31 | #2 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Programme lassen sich nicht mehr öffnen Hallo und
__________________Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden? Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520 Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten! Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht! Zudem bitte auch ein Log mit Farbars Tool machen: Scan mit Farbar's Recovery Scan Tool (FRST) Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
Lesestoff: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
01.11.2013, 18:42 | #3 |
| Programme lassen sich nicht mehr öffnen Aber als ich Scan mit Farbar's Recovery Tool installieren will, warnt mich mein Internet Explorer das es schädlich sein kann.
__________________ |
01.11.2013, 18:46 | #4 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Programme lassen sich nicht mehr öffnen Das ist Blödsinn, FRST ist definitiv nicht schädlich
__________________ Logfiles bitte immer in CODE-Tags posten |
01.11.2013, 19:14 | #5 |
| Programme lassen sich nicht mehr öffnen Bitte schön hier ist die erste Datei FRST FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-10-2013 Ran by ******** (administrator) on ******-PC on 01-11-2013 18:35:55 Running from C:\Users\********\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WAKVHNOE Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe () C:\Windows\runservice.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe (Acer) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe (Sonix) C:\Windows\vsnp2std.exe (Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe (Akamai Technologies, Inc.) C:\Users\********\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.) C:\Users\********\AppData\Local\Akamai\netsession_win.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe () C:\Users\********\AppData\Roaming\BrowserCompanion\tbhcn.exe () C:\Windows\FixCamera.exe () C:\Windows\tsnp2std.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (Microsoft Corporation) C:\Program Files\windows defender\MSASCui.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_11_9_900_117_ActiveX.exe (Farbar) C:\Users\********\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WAKVHNOE\FRST64 (1).exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [snp2std] - C:\Windows\vsnp2std.exe [344064 2007-05-10] (Sonix) HKLM\...\Run: [IntelliPoint] - C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2399632 2011-04-13] (Microsoft Corporation) HKLM\...\Run: [Start WingMan Profiler] - C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-14] (Logitech Inc.) HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [2991856 2013-02-21] (Logitech, Inc.) HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart Winlogon\Notify\LBTWlgn: C:\Program Files\Common Files\LogiShrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.) HKCU\...\Run: [icq] - C:\Users\********\AppData\Roaming\ICQM\icq.exe [26606072 2012-12-30] (ICQ) HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\********\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.) HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20473504 2013-10-02] (Skype Technologies S.A.) HKCU\...\Policies\system: [LogonHoursAction] 2 HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1 HKCU\...\Policies\Explorer: [NoInstrumentation] 1 MountPoints2: E - E:\Setup.exe MountPoints2: {7fd1bb6b-a492-11df-b858-00016c6eadc5} - L:\autorun.exe HKLM-x32\...\Run: [JMB36X IDE Setup] - C:\Windows\RaidTool\xInsIDE.exe [36864 2007-03-20] () HKLM-x32\...\Run: [FixCamera] - C:\Windows\FixCamera.exe [20480 2007-02-12] () HKLM-x32\...\Run: [tsnp2std] - C:\Windows\tsnp2std.exe [270336 2007-05-12] () HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\avastui.exe [3567800 2013-10-24] (AVAST Software) HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe /default HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe /default HKU\Gast\...\Run: [swg] - "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" HKU\Gast\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe HKU\Gast\...\Run: [uTorrent] - "C:\Program Files (x86)\uTorrent\uTorrent.exe" HKU\*****\...\Run: [msnmsgr] - "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background HKU\*****\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe HKU\*****\...\Run: [uTorrent] - "C:\Program Files (x86)\uTorrent\uTorrent.exe" HKU\*****\...\Run: [ROC_JAN2013_TB] - "C:\Program Files (x86)\AVG Secure Search\ROC_JAN2013_TB.exe" /PROMPT /CMPID=JAN2013_TB HKU\*****\...\Run: [Facebook Update] - C:\Users\*****\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-02-16] (Facebook Inc.) HKU\*****\...\Run: [swg] - "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" HKU\*****\...\Policies\system: [LogonHoursAction] 2 HKU\*****\...\Policies\system: [DontDisplayLogonHoursWarnings] 1 HKU\************\...\Run: [ROC_JAN2013_TB] - "C:\Program Files (x86)\AVG Secure Search\ROC_JAN2013_TB.exe" /PROMPT /CMPID=JAN2013_TB HKU\************\...\Policies\system: [LogonHoursAction] 2 HKU\************\...\Policies\system: [DontDisplayLogonHoursWarnings] 1 HKU\UpdatusUser\...\Run: [swg] - "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" HKU\UpdatusUser\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe HKU\UpdatusUser\...\Run: [uTorrent] - "C:\Program Files (x86)\uTorrent\uTorrent.exe" HKU\UpdatusUser\...\Run: [ROC_JAN2013_TB] - "C:\Program Files (x86)\AVG Secure Search\ROC_JAN2013_TB.exe" /PROMPT /CMPID=JAN2013_TB HKU\UpdatusUser\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe /default Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe (No File) Startup: C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tbhcn.lnk ShortcutTarget: tbhcn.lnk -> C:\Users\********\AppData\Roaming\BrowserCompanion\tbhcn.exe () Startup: C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Xfire.lnk ShortcutTarget: Xfire.lnk -> C:\Program Files (x86)\Xfire\Xfire.exe (Xfire Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://de.msn.com/?ocid=ie9hp HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.google.de/ HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046} URLSearchHook: HKLM-x32 - (No Name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - No File URLSearchHook: HKLM-x32 - (No Name) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - No File URLSearchHook: HKLM-x32 - (No Name) - {c9508125-4747-4733-b048-e4b82dc9716d} - No File URLSearchHook: HKLM-x32 - (No Name) - {e8de9422-3b2c-4243-bf6f-235da84d8ef8} - No File URLSearchHook: HKLM-x32 - (No Name) - {7846ae31-bea2-438a-8f5e-2d899361656c} - No File URLSearchHook: HKLM-x32 - (No Name) - {22e03916-85c5-44b0-8dc9-1830c11238d9} - No File URLSearchHook: HKLM-x32 - (No Name) - {38542454-dfb6-44f5-b052-d4e071a3d073} - No File URLSearchHook: HKLM-x32 - (No Name) - {942cd1d4-9cc1-4d31-876a-ea8f489f7a59} - No File SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=DE&userid=52316e1f-a8ab-45be-a924-d8e1eecc9e54&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms} SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1524161 SearchScopes: HKLM-x32 - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&barid={32FD956B-8923-4336-84C4-B2AF5134DD4C} SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=DE&userid=52316e1f-a8ab-45be-a924-d8e1eecc9e54&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms} SearchScopes: HKCU - {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL = SearchScopes: HKCU - {4327FABE-3C22-4689-8DBF-D226CF777FE9} URL = hxxp://www.searchplusnetwork.com/?sp=vit4&q={searchTerms} SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&barid={32FD956B-8923-4336-84C4-B2AF5134DD4C} SearchScopes: HKCU - {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://go.mail.ru/search?q={searchTerms}&utf8in=1&fr=ietb BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: No Name - {AA58ED58-01DD-4d91-8333-CF10577473F7} - No File BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: No Name - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - No File BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - No File BHO-x32: ICQ Sparberater - {0766C1B9-B2DC-46E5-8934-4F3D6B42B1BD} - No File BHO-x32: No Name - {22e03916-85c5-44b0-8dc9-1830c11238d9} - No File BHO-x32: CescrtHlpr Object - {2EECD738-5844-4a99-B4B6-146BF802613B} - No File BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader) BHO-x32: No Name - {38542454-dfb6-44f5-b052-d4e071a3d073} - No File BHO-x32: No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll No File BHO-x32: No Name - {7846ae31-bea2-438a-8f5e-2d899361656c} - No File BHO-x32: No Name - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - No File BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll No File BHO-x32: No Name - {942cd1d4-9cc1-4d31-876a-ea8f489f7a59} - No File BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation) BHO-x32: No Name - {AA58ED58-01DD-4d91-8333-CF10577473F7} - No File BHO-x32: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.) BHO-x32: No Name - {c9508125-4747-4733-b048-e4b82dc9716d} - No File BHO-x32: No Name - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - No File BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll No File BHO-x32: No Name - {e8de9422-3b2c-4243-bf6f-235da84d8ef8} - No File BHO-x32: No Name - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - No File Toolbar: HKLM - DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - No File Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File Toolbar: HKLM - No Name - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - No File Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM - No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File Toolbar: HKLM-x32 - No Name - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - No File Toolbar: HKLM-x32 - No Name - {c9508125-4747-4733-b048-e4b82dc9716d} - No File Toolbar: HKLM-x32 - No Name - {e8de9422-3b2c-4243-bf6f-235da84d8ef8} - No File Toolbar: HKLM-x32 - No Name - {7846ae31-bea2-438a-8f5e-2d899361656c} - No File Toolbar: HKLM-x32 - No Name - {22e03916-85c5-44b0-8dc9-1830c11238d9} - No File Toolbar: HKLM-x32 - No Name - {38542454-dfb6-44f5-b052-d4e071a3d073} - No File Toolbar: HKLM-x32 - facemoods Toolbar - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - No File Toolbar: HKLM-x32 - No Name - {8dcb7100-df86-4384-8842-8fa844297b3f} - No File Toolbar: HKLM-x32 - No Name - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - No File Toolbar: HKLM-x32 - No Name - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No File Toolbar: HKLM-x32 - No Name - {942cd1d4-9cc1-4d31-876a-ea8f489f7a59} - No File Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File Toolbar: HKLM-x32 - No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File Toolbar: HKLM-x32 - No Name - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - No File Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Toolbar: HKCU - No Name - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - No File Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File Toolbar: HKCU - No Name - {C9508125-4747-4733-B048-E4B82DC9716D} - No File Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File Toolbar: HKCU - No Name - {E8DE9422-3B2C-4243-BF6F-235DA84D8EF8} - No File Toolbar: HKCU - No Name - {A057A204-BACC-4D26-9C92-30A187E26996} - No File Toolbar: HKCU - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} - No File Toolbar: HKCU - No Name - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - No File Toolbar: HKCU - No Name - {7846AE31-BEA2-438A-8F5E-2D899361656C} - No File Toolbar: HKCU - No Name - {22E03916-85C5-44B0-8DC9-1830C11238D9} - No File Toolbar: HKCU - No Name - {38542454-DFB6-44F5-B052-D4E071A3D073} - No File Toolbar: HKCU - DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - No File Toolbar: HKCU - No Name - {5E7F9DB2-3507-467D-AA2F-DCCB5971B5AF} - No File DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: HKLM-x32 {5D6F45B3-9043-443D-A792-115447494D24} hxxp://messenger.zone.msn.com/MessengerGamesContent/GameContent/de/uno1/GAME_UNO1.cab DPF: HKLM-x32 {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} hxxp://game.zylom.com/activex/zylomgamesplayer.cab DPF: HKLM-x32 {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx DPF: HKLM-x32 {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab DPF: HKLM-x32 {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} https://battlefield.play4free.com/static/updater/BP4FUpdater_1.0.80.2.cab DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: base64 - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - No File Handler: chrome - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - No File Handler: prox - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - No File Handler-x32: base64 - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - No File Handler-x32: chrome - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - No File Handler-x32: prox - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - No File Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) ShellExecuteHooks-x32: ShellHook Class - {88485281-8b4b-4f8d-9ede-82e29a064277} - No File [ ] Winsock: Catalog5 07 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File Not found () Winsock: Catalog5 08 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File Not found () FireFox: ======== FF ProfilePath: C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\1wqvfvqi.default-1382616403429 FF user.js: detected! => C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\1wqvfvqi.default-1382616403429\user.js FF DefaultSearchEngine: AVG Secure Search FF SelectedSearchEngine: AVG Secure Search FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll () FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/VirtualEarth3D,version=4.0 - C:\Program Files (x86)\Virtual Earth 3D\ () FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll No File FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll No File FF Plugin-x32: @microsoft.com/VirtualEarth3D,version=4.0 - C:\Program Files (x86)\Virtual Earth 3D\ () FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameeu.dll No File FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll No File FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll No File FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: @real.com/nppl3260;version=16.0.2.32 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll No File FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpplugin;version=16.0.2.32 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll No File FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll No File FF Plugin-x32: @virtools.com/3DviaPlayer - C:\Program Files (x86)\Virtools\3D Life Player\npvirtools.dll (Dassault Systèmes) FF Plugin HKCU: @nsroblox.roblox.com/launcher - C:\Users\********\AppData\Local\Roblox\Versions\version-221a4807685c44e7\\NPRobloxProxy.dll ( Roblox Corporation) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\********\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Extension: No Name - C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\1wqvfvqi.default-1382616403429\Extensions\staged FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt FF HKLM-x32\...\Firefox\Extensions: [{FCE04E1F-9378-4f39-96F6-5689A9159E45}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 Chrome: ======= Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION CHR HKLM-x32\...\Chrome\Extension: [bodddioamolcibagionmmobehnbhiakf] - C:\Program Files (x86)\BrowserCompanion\blabbers-ch.crx CHR HKLM-x32\...\Chrome\Extension: [dhkplhfnhceodhffomolpfigojocbpcb] - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbar.crx CHR HKLM-x32\...\Chrome\Extension: [edaibbiobngpbmeonadpbfafbkimjbdd] - C:\ProgramData\Logitech\LogiSmoothChromeExt.crx CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx CHR HKLM-x32\...\Chrome\Extension: [ihflimipbcaljfnojhhknppphnnciiif] - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.6\facemoods.crx CHR HKLM-x32\...\Chrome\Extension: [niapdbllcanepiiimjjndipklodoedlc] - C:\Users\********\AppData\Local\Temp\YontooLayers.crx ==================== Services (Whitelisted) ================= R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-10-24] (AVAST Software) R2 LicCtrlService; C:\Windows\runservice.exe [2560 2011-03-20] () R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15122208 2013-10-18] (NVIDIA Corporation) R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-02-08] () R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2099512 2013-10-08] (TuneUp Software) S4 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe /DisableUI [x] S3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [x] S2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [x] S2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [x] ==================== Drivers (Whitelisted) ==================== S3 AF9035HB; C:\Windows\System32\Drivers\AF9035HB.sys [907904 2010-05-15] (ITE Technologies ) S3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [18688 2007-05-30] (ArcSoft, Inc.) R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-10-24] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-10-24] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-10-24] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-10-24] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-10-24] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-10-24] (AVAST Software) R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2013-10-24] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-10-24] () S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-09-28] (NVIDIA Corporation) S1 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) S3 SNP2STD; C:\Windows\System32\DRIVERS\snp2sxp.sys [12484736 2007-05-10] () S3 SNP2STD; C:\Windows\SysWow64\DRIVERS\snp2sxp.sys [12179584 2007-05-10] () R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-09-18] (TuneUp Software) S3 CEDRIVER55; \??\C:\Program Files (x86)\Cheat Engine\dbk64.sys [x] S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x] S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x] S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [x] S4 sptd; \SystemRoot\\SystemRoot\System32\Drivers\sptd.sys [x] S2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; \??\C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\000.fcl [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-11-01 18:35 - 2013-11-01 18:35 - 00000000 ____D C:\FRST 2013-11-01 15:59 - 2013-11-01 15:59 - 00000000 __SHD C:\found.008 2013-11-01 15:12 - 2013-11-01 15:12 - 00000000 ____D C:\ProgramData\Uniblue 2013-11-01 14:56 - 2013-11-01 14:56 - 00050477 _____ C:\Users\********\Downloads\Defogger.exe 2013-11-01 14:56 - 2013-11-01 14:56 - 00000588 _____ C:\Users\********\Downloads\defogger_disable.log 2013-11-01 14:56 - 2013-11-01 14:56 - 00000020 _____ C:\Users\********\defogger_reenable 2013-11-01 14:51 - 2013-11-01 14:51 - 00000000 ____D C:\Users\********\AppData\Local\Avg2014 2013-11-01 11:19 - 2013-11-01 11:19 - 00000000 ____D C:\Program Files (x86)\Skype 2013-11-01 11:03 - 2013-11-01 11:03 - 00003110 _____ C:\Windows\System32\Tasks\{4FF0AB96-0F13-4927-ACD4-DD413A89DAEE} 2013-10-31 22:57 - 2013-10-31 22:57 - 00000000 ____D C:\Users\********\AppData\Roaming\Malwarebytes 2013-10-31 22:57 - 2013-10-31 22:57 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-10-31 22:56 - 2013-11-01 10:58 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-10-31 22:56 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-10-31 22:41 - 2013-10-31 22:52 - 00000000 ____D C:\63b9d940cd5dd60b0f760919 2013-10-31 22:40 - 2013-10-31 22:40 - 01021432 _____ (Microsoft Corporation) C:\Users\********\Downloads\NDP451-KB2859818-Web.exe 2013-10-31 21:47 - 2013-10-31 21:47 - 00614816 _____ C:\Users\********\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe 2013-10-31 21:28 - 2013-10-31 21:28 - 00003340 _____ C:\Windows\System32\Tasks\SpyHunter4Startup 2013-10-31 21:28 - 2013-10-31 21:28 - 00000000 ____D C:\Program Files\Enigma Software Group 2013-10-31 21:28 - 2013-10-31 21:28 - 00000000 _____ C:\autoexec.bat 2013-10-31 21:27 - 2013-10-31 21:46 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP 2013-10-31 14:29 - 2013-10-31 14:29 - 00262144 _____ C:\Windows\Minidump\103113-19422-01.dmp 2013-10-31 14:02 - 2013-10-31 14:02 - 00000236 _____ C:\Windows\LkmdfCoInst.log 2013-10-31 13:46 - 2013-10-31 13:46 - 00262144 _____ C:\Windows\Minidump\103113-19453-01.dmp 2013-10-31 13:43 - 2013-11-01 16:02 - 982653831 _____ C:\Windows\MEMORY.DMP 2013-10-31 11:24 - 2013-11-01 16:16 - 00007800 _____ C:\Windows\PFRO.log 2013-10-31 09:53 - 2013-10-23 11:30 - 30344480 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 22933792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 18199872 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 12572960 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-10-31 09:53 - 2013-10-23 11:30 - 11426568 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 11374520 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 09524088 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 09480328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 03131680 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 03124512 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 02946848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 02747168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433165.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433165.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 01241376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 00696096 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 00655136 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 00560416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-10-31 09:53 - 2013-01-29 09:35 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll 2013-10-31 09:49 - 2013-10-18 02:36 - 01063200 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2013-10-31 09:49 - 2013-10-18 02:36 - 00955168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2013-10-31 09:46 - 2013-11-01 16:17 - 00003853 _____ C:\Windows\setupact.log 2013-10-31 09:46 - 2013-10-31 09:46 - 00000000 _____ C:\Windows\setuperr.log 2013-10-31 09:46 - 2013-09-28 00:01 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2013-10-31 09:46 - 2013-09-28 00:01 - 00028960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2013-10-30 17:10 - 2013-10-30 17:10 - 00093239 _____ C:\Windows\SysWOW64\_m.dmp 2013-10-30 17:10 - 2013-10-08 12:29 - 00043320 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll 2013-10-30 17:10 - 2013-10-08 12:29 - 00040760 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe 2013-10-30 17:10 - 2013-10-08 12:29 - 00036152 _____ (TuneUp Software) C:\Windows\SysWOW64\uxtuneup.dll 2013-10-30 17:10 - 2013-10-08 12:29 - 00029496 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll 2013-10-30 17:09 - 2013-10-30 17:10 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014 2013-10-30 17:09 - 2013-10-30 17:09 - 00002229 _____ C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk 2013-10-30 17:09 - 2013-10-08 12:29 - 00025400 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll 2013-10-30 10:00 - 2013-10-30 10:00 - 00013400 ____N C:\bootsqm.dat 2013-10-30 09:58 - 2013-10-30 09:58 - 00000000 __SHD C:\found.007 2013-10-28 12:50 - 2013-10-28 12:50 - 00692869 _____ (UltraDefrag Development Team) C:\Users\********\Downloads\ultradefrag-6.0.2.bin.amd64.exe 2013-10-28 11:59 - 2013-11-01 10:58 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-10-28 11:53 - 2013-10-28 11:53 - 00003152 _____ C:\Windows\System32\Tasks\{79D02415-8C0D-4959-8F68-EE618CE9C037} 2013-10-28 11:52 - 2013-10-28 11:52 - 01735492 _____ C:\Users\********\Downloads\ROSetup20102.exe 2013-10-25 21:05 - 2013-10-25 21:05 - 20273928 _____ C:\Users\********\Downloads\260-04 ケープ・ホーン(Cape Horn).m4a 2013-10-25 21:05 - 2013-10-25 21:05 - 10036995 _____ C:\Users\********\Downloads\259-01 Candide Suite (arr. C. Grundman) - Candide_ Overture (arr. C. Grundman for band).m4a 2013-10-25 21:05 - 2013-10-25 21:05 - 02425015 _____ C:\Users\********\Downloads\167-03 Yiddish Dances_ Terkische.m4a 2013-10-25 12:48 - 2013-10-25 12:48 - 18080872 _____ (Adobe Systems Inc.) C:\Users\********\Downloads\AdobeAIRInstaller.exe 2013-10-24 17:46 - 2013-10-24 17:46 - 00000000 ____D C:\Users\*****\AppData\Roaming\AVAST Software 2013-10-24 13:20 - 2013-10-24 13:20 - 00000000 ____D C:\Users\********\AppData\Roaming\AVAST Software 2013-10-24 13:11 - 2013-10-24 13:13 - 24285184 _____ C:\Users\********\Downloads\SkypeSetup6932.msi 2013-10-24 13:09 - 2013-11-01 18:10 - 00000308 _____ C:\Windows\Tasks\FoxTab.job 2013-10-24 13:09 - 2013-10-24 13:09 - 00003256 _____ C:\Windows\System32\Tasks\FoxTab 2013-10-24 13:09 - 2013-10-24 13:09 - 00000000 ____D C:\Users\********\AppData\Roaming\FoxTab 2013-10-24 13:08 - 2013-10-24 13:08 - 20586496 _____ C:\Users\********\Downloads\SkypeSetup [1].exe 2013-10-24 13:07 - 2013-10-24 13:08 - 00683016 _____ C:\Users\********\Downloads\SkypeSetup.exe 2013-10-24 12:47 - 2013-10-24 12:47 - 00002962 _____ C:\Windows\System32\Tasks\{F329FDF7-6D9E-4D7F-B1DB-BEDABE94FC46} 2013-10-23 03:02 - 2013-10-23 03:02 - 00589600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2013-10-22 18:05 - 2013-10-22 18:05 - 00001068 _____ C:\Users\*****\Desktop\Star Wars Battlefront II spielen.lnk 2013-10-21 09:35 - 2013-10-21 09:35 - 00078848 _____ C:\Users\*****\Desktop\Deutsch_Türk.Club_Konsolos.wps 2013-10-21 05:24 - 2013-10-30 17:36 - 00000000 ____D C:\Users\************\Desktop\Neuer Ordner (5) 2013-10-20 20:04 - 2013-10-20 20:04 - 00000000 __SHD C:\found.006 2013-10-20 11:02 - 2013-10-20 11:02 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2013-10-20 11:02 - 2013-10-20 11:02 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2013-10-20 11:02 - 2013-10-20 11:02 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2013-10-20 11:02 - 2013-10-20 11:02 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2013-10-20 11:02 - 2013-10-20 11:02 - 00000000 ____D C:\Program Files\Java 2013-10-20 10:57 - 2013-10-20 10:59 - 30694824 _____ (Oracle Corporation) C:\Users\********\Downloads\jre-7u45-windows-x64.exe 2013-10-16 19:01 - 2013-10-16 19:01 - 00000000 ____D C:\Users\*****\Documents\FFOutput 2013-10-16 18:51 - 2013-10-16 18:51 - 00000000 ____D C:\Users\*****\AppData\Local\{27B0E517-4676-4C72-9512-EE5F7FDBD983} 2013-10-16 18:50 - 2013-10-16 18:50 - 00000000 ____D C:\Users\*****\AppData\Local\{8D7758A3-7FCD-47A5-BCEB-37BF718C2331} 2013-10-16 18:49 - 2013-10-16 18:49 - 00000000 ____D C:\Users\*****\AppData\Local\{3A5337BC-9A3B-440B-8733-8FEA0BF27B4B} 2013-10-14 14:33 - 2013-10-14 14:33 - 00000219 _____ C:\Users\********\Desktop\Dota 2.url 2013-10-13 08:10 - 2013-10-13 08:16 - 00000000 ____D C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TuxGuitar 1.2 2013-10-13 08:10 - 2013-10-13 08:10 - 00001095 _____ C:\Users\********\Desktop\tuxguitar.lnk 2013-10-13 08:10 - 2013-10-13 08:10 - 00000000 ____D C:\Program Files (x86)\TuxGuitar-Jet 2013-10-13 08:08 - 2013-10-13 08:08 - 16495636 _____ C:\Users\********\Downloads\tuxguitar-1.2-windows-x86-jet.exe 2013-10-12 10:56 - 2013-10-13 08:00 - 00000000 ____D C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Power Tab Software 2013-10-12 10:56 - 2013-10-12 10:56 - 05917258 _____ C:\Users\********\Downloads\powertab1.7.zip 2013-10-12 09:55 - 2013-10-12 09:54 - 07715210 _____ (Herac) C:\Users\********\Downloads\tuxguitar-1.2-windows-x86-installer(1).exe 2013-10-12 08:56 - 2013-10-12 08:56 - 00000211 _____ C:\fraglist.luar 2013-10-12 08:46 - 2013-11-01 10:59 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2013-10-12 08:46 - 2013-10-31 13:53 - 00002222 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-10-12 08:46 - 2013-10-24 13:16 - 01032416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2013-10-12 08:46 - 2013-10-24 13:16 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2013-10-12 08:46 - 2013-10-24 13:16 - 00205320 _____ C:\Windows\system32\Drivers\aswVmm.sys 2013-10-12 08:46 - 2013-10-24 13:16 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2013-10-12 08:46 - 2013-10-24 13:16 - 00084328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2013-10-12 08:46 - 2013-10-24 13:16 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys 2013-10-12 08:46 - 2013-10-24 13:16 - 00065264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys 2013-10-12 08:46 - 2013-10-24 13:16 - 00038984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys 2013-10-12 08:45 - 2013-10-24 13:16 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2013-10-12 08:35 - 2013-10-12 08:35 - 131918888 _____ C:\Users\********\Downloads\avast_free_antivirus_setup_8.0.1497.376.exe 2013-10-12 08:15 - 2013-10-12 08:15 - 00000000 __SHD C:\found.005 2013-10-11 19:27 - 2013-10-11 19:34 - 30669224 _____ (Oracle Corporation) C:\Users\********\Downloads\jre-7u40-windows-x64.exe 2013-10-11 18:30 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2013-10-11 18:30 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2013-10-11 18:30 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2013-10-11 18:30 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2013-10-11 18:30 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2013-10-11 18:30 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2013-10-11 18:30 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2013-10-11 13:26 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2013-10-11 13:26 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2013-10-11 13:26 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2013-10-11 13:26 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2013-10-11 13:26 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2013-10-11 13:26 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2013-10-11 13:26 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2013-10-11 13:26 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2013-10-11 13:26 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2013-10-11 13:26 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2013-10-11 13:26 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2013-10-11 13:26 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2013-10-11 07:34 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-10-11 07:34 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-10-11 07:34 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-10-11 07:34 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-10-11 07:34 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-10-11 07:34 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-10-11 07:34 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-10-11 07:34 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-10-11 07:34 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-10-11 07:34 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-10-11 07:34 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-10-11 07:34 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-10-11 07:34 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-10-11 07:34 - 2013-09-22 23:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-10-11 07:34 - 2013-09-22 23:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-10-11 07:34 - 2013-09-22 23:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-10-11 07:34 - 2013-09-22 23:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-10-11 07:34 - 2013-09-22 23:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-10-11 07:34 - 2013-09-22 23:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-10-11 07:34 - 2013-09-22 23:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-10-11 07:34 - 2013-09-22 23:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-10-11 07:34 - 2013-09-22 23:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-10-11 07:34 - 2013-09-22 23:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-10-11 07:34 - 2013-09-22 23:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-10-11 07:34 - 2013-09-22 23:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-10-11 07:34 - 2013-09-22 23:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-10-11 07:34 - 2013-09-22 23:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-10-11 07:34 - 2013-09-21 04:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-10-11 07:34 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-10-11 07:34 - 2013-09-21 03:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-10-11 07:34 - 2013-09-21 03:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-10-11 07:26 - 2013-09-14 02:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-10-11 07:26 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-10-11 07:26 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2013-10-11 07:26 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2013-10-11 07:26 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-10-11 07:26 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-10-11 07:26 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2013-10-11 07:26 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-10-11 07:26 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2013-10-11 07:26 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-10-11 07:26 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-10-11 07:26 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-10-11 07:26 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2013-10-11 07:26 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-10-11 07:26 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2013-10-11 07:26 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-10-11 07:26 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-10-11 07:26 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-10-11 07:26 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-10-11 07:26 - 2013-08-28 02:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-10-11 07:26 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2013-10-11 07:26 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2013-10-11 07:26 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2013-10-11 07:26 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2013-10-11 07:26 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2013-10-11 07:26 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2013-10-11 07:26 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2013-10-11 07:26 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2013-10-11 07:26 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2013-10-11 07:26 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2013-10-11 07:26 - 2013-07-03 05:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys 2013-10-11 07:26 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2013-10-11 07:26 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2013-10-11 07:26 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2013-10-09 07:44 - 2013-10-09 07:44 - 00000000 ____D C:\Users\*****\AppData\Local\LogMeIn 2013-10-08 17:46 - 2013-10-08 17:46 - 00008046 _____ C:\Users\********\Documents\Unbenannt 1.odt 2013-10-08 11:49 - 2013-10-08 11:49 - 00000000 __SHD C:\found.004 2013-10-07 19:01 - 2013-10-07 19:01 - 00015872 _____ C:\Users\*****\Desktop\\******\.wps 2013-10-07 15:42 - 2013-11-01 10:24 - 00000011 _____ C:\Users\*****\Desktop\Neues Textdokument.TXT 2013-10-05 17:40 - 2013-10-05 17:40 - 00000000 ____D C:\Users\********\AppData\Local\NVIDIA 2013-10-05 17:38 - 2013-10-05 17:38 - 22321072 _____ (NVIDIA Corporation) C:\Users\********\Downloads\GeForce_Experience_v1.6.1.0.exe 2013-10-05 17:38 - 2013-09-28 00:01 - 00029984 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2013-10-04 13:53 - 2013-10-04 13:53 - 00000000 ____D C:\ProgramData\AskPartnerNetwork 2013-10-04 13:53 - 2013-10-04 13:53 - 00000000 ____D C:\ProgramData\APN 2013-10-04 13:53 - 2013-10-04 13:53 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork 2013-10-03 16:17 - 2013-10-03 16:18 - 00031559 _____ C:\Users\********\Desktop\in-der-tat.jpeg 2013-10-03 08:28 - 2013-10-03 08:28 - 00000000 ____D C:\Users\********\AppData\Local\LogMeIn 2013-10-02 18:36 - 2013-10-02 18:36 - 28795304 _____ (DVDVideoSoft Ltd. ) C:\Users\********\Downloads\FreeYouTubeToMP3Converter.exe 2013-10-02 17:17 - 2013-10-02 17:17 - 00000000 ____D C:\Users\********\AppData\Local\LogMeIn 2013-10-02 17:17 - 2013-10-02 17:17 - 00000000 ____D C:\ProgramData\LogMeIn ==================== One Month Modified Files and Folders ======= 2013-11-01 18:35 - 2013-11-01 18:35 - 00000000 ____D C:\FRST 2013-11-01 18:30 - 2013-01-15 15:32 - 00125864 _____ C:\Users\********\AppData\Local\GDIPFONTCACHEV1.DAT 2013-11-01 18:30 - 2012-07-20 21:57 - 00000000 ____D C:\Users\********\AppData\Roaming\BrowserCompanion 2013-11-01 18:30 - 2011-04-07 16:31 - 00000000 ____D C:\Users\********\AppData\Roaming\Skype 2013-11-01 18:20 - 2013-04-01 09:32 - 00003934 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{72521656-C096-4BA5-AF31-0D14653F5896} 2013-11-01 18:10 - 2013-10-24 13:09 - 00000308 _____ C:\Windows\Tasks\FoxTab.job 2013-11-01 18:06 - 2011-03-04 12:41 - 00125864 _____ C:\Users\*****\AppData\Local\GDIPFONTCACHEV1.DAT 2013-11-01 17:37 - 2012-07-23 12:00 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-11-01 16:30 - 2013-02-16 10:25 - 00000928 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1583400021-3288482790-2347783300-1005UA.job 2013-11-01 16:25 - 2009-07-14 05:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-11-01 16:25 - 2009-07-14 05:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-11-01 16:21 - 2009-10-12 21:35 - 01547771 _____ C:\Windows\WindowsUpdate.log 2013-11-01 16:17 - 2013-10-31 09:46 - 00003853 _____ C:\Windows\setupact.log 2013-11-01 16:17 - 2013-01-15 15:29 - 00537992 _____ C:\Windows\system32\FNTCACHE.DAT 2013-11-01 16:17 - 2011-03-20 19:34 - 00001225 ___SH C:\Windows\SysWOW64\mmf.sys 2013-11-01 16:17 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-11-01 16:16 - 2013-10-31 11:24 - 00007800 _____ C:\Windows\PFRO.log 2013-11-01 16:15 - 2010-06-26 17:04 - 00000000 ___RD C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-11-01 16:02 - 2013-10-31 13:43 - 982653831 _____ C:\Windows\MEMORY.DMP 2013-11-01 16:02 - 2010-06-30 08:10 - 00000000 ____D C:\Windows\Minidump 2013-11-01 15:59 - 2013-11-01 15:59 - 00000000 __SHD C:\found.008 2013-11-01 15:12 - 2013-11-01 15:12 - 00000000 ____D C:\ProgramData\Uniblue 2013-11-01 14:56 - 2013-11-01 14:56 - 00050477 _____ C:\Users\********\Downloads\Defogger.exe 2013-11-01 14:56 - 2013-11-01 14:56 - 00000588 _____ C:\Users\********\Downloads\defogger_disable.log 2013-11-01 14:56 - 2013-11-01 14:56 - 00000020 _____ C:\Users\********\defogger_reenable 2013-11-01 14:56 - 2010-06-26 17:03 - 00000000 ____D C:\Users\meliksah 2013-11-01 14:51 - 2013-11-01 14:51 - 00000000 ____D C:\Users\********\AppData\Local\Avg2014 2013-11-01 14:31 - 2009-07-14 03:34 - 95944704 _____ C:\Windows\system32\config\SOFTWARE_tureg_old 2013-11-01 14:31 - 2009-07-14 03:34 - 26214400 _____ C:\Windows\system32\config\SYSTEM_tureg_old 2013-11-01 14:31 - 2009-07-14 03:34 - 00262144 _____ C:\Windows\system32\config\SECURITY_tureg_old 2013-11-01 14:27 - 2009-07-14 03:34 - 00524288 _____ C:\Windows\system32\config\DEFAULT_tureg_old 2013-11-01 14:27 - 2009-07-14 03:34 - 00172032 _____ C:\Windows\system32\config\SAM_tureg_old 2013-11-01 13:36 - 2013-01-23 16:27 - 00000000 ____D C:\Program Files (x86)\Steam 2013-11-01 11:20 - 2011-04-07 16:31 - 00000000 ____D C:\ProgramData\Skype 2013-11-01 11:19 - 2013-11-01 11:19 - 00000000 ____D C:\Program Files (x86)\Skype 2013-11-01 11:19 - 2013-09-27 15:11 - 00002545 _____ C:\Users\Public\Desktop\Skype.lnk 2013-11-01 11:17 - 2011-01-19 16:23 - 00787696 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2013-11-01 11:17 - 2009-09-25 17:34 - 03895000 _____ C:\Windows\system32\perfh007.dat 2013-11-01 11:17 - 2009-09-25 17:34 - 01201570 _____ C:\Windows\system32\perfc007.dat 2013-11-01 11:16 - 2009-07-14 06:13 - 00787696 _____ C:\Windows\system32\PerfStringBackup.INI 2013-11-01 11:03 - 2013-11-01 11:03 - 00003110 _____ C:\Windows\System32\Tasks\{4FF0AB96-0F13-4927-ACD4-DD413A89DAEE} 2013-11-01 10:59 - 2013-10-12 08:46 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2013-11-01 10:58 - 2013-10-31 22:56 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-11-01 10:58 - 2013-10-28 11:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-11-01 10:58 - 2012-10-20 18:42 - 00000000 ____D C:\Program Files (x86)\EXPERTool 2013-11-01 10:46 - 2013-07-25 10:55 - 00000000 ____D C:\Program Files (x86)\RealNetworks 2013-11-01 10:46 - 2013-03-07 17:36 - 00000000 ____D C:\Program Files (x86)\QuickTime 2013-11-01 10:46 - 2011-03-07 17:03 - 00000000 ____D C:\Program Files (x86)\Real 2013-11-01 10:46 - 2010-08-19 14:47 - 00000000 ____D C:\Program Files (x86)\OpenOffice.org 3 2013-11-01 10:46 - 2009-10-12 21:40 - 00000000 ____D C:\ProgramData\NVIDIA 2013-11-01 10:45 - 2011-04-26 16:07 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-11-01 10:42 - 2009-09-17 22:04 - 00000000 ____D C:\Program Files (x86)\Intel 2013-11-01 10:41 - 2012-03-04 17:14 - 00000000 ____D C:\Program Files (x86)\icq 2013-11-01 10:41 - 2011-01-18 14:04 - 00000000 ____D C:\Program Files (x86)\HP 2013-11-01 10:41 - 2009-09-17 22:42 - 00000000 ____D C:\Program Files (x86)\Google 2013-11-01 10:40 - 2009-10-12 21:42 - 00000000 ____D C:\Program Files (x86)\Cyberlink 2013-11-01 10:39 - 2009-10-12 21:40 - 00000000 ____D C:\Program Files (x86)\Acer Arcade Deluxe 2013-11-01 10:38 - 2012-10-28 13:12 - 00000000 ____D C:\Program Files (x86)\Xfire 2013-11-01 10:38 - 2009-09-17 22:39 - 00000000 ____D C:\Program Files (x86)\Acer 2013-11-01 10:37 - 2013-07-07 19:57 - 00000000 ____D C:\Program Files (x86)\TransportGigant Demo 2013-11-01 10:37 - 2010-09-10 13:52 - 00000000 ____D C:\Program Files (x86)\Ubisoft 2013-11-01 10:30 - 2013-02-16 10:25 - 00000906 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1583400021-3288482790-2347783300-1005Core.job 2013-11-01 10:24 - 2013-10-07 15:42 - 00000011 _____ C:\Users\********\Desktop\Neues Textdokument.TXT 2013-10-31 22:57 - 2013-10-31 22:57 - 00000000 ____D C:\Users\********\AppData\Roaming\Malwarebytes 2013-10-31 22:57 - 2013-10-31 22:57 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-10-31 22:52 - 2013-10-31 22:41 - 00000000 ____D C:\63b9d940cd5dd60b0f760919 2013-10-31 22:40 - 2013-10-31 22:40 - 01021432 _____ (Microsoft Corporation) C:\Users\********\Downloads\NDP451-KB2859818-Web.exe 2013-10-31 22:33 - 2009-09-17 22:29 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-10-31 22:31 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2013-10-31 22:28 - 2009-07-14 08:45 - 00000000 ____D C:\Windows\ShellNew 2013-10-31 22:28 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\MSBuild 2013-10-31 22:26 - 2009-07-14 03:34 - 00000695 _____ C:\Windows\win.ini 2013-10-31 21:47 - 2013-10-31 21:47 - 00614816 _____ C:\Users\********\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe 2013-10-31 21:46 - 2013-10-31 21:27 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP 2013-10-31 21:28 - 2013-10-31 21:28 - 00003340 _____ C:\Windows\System32\Tasks\SpyHunter4Startup 2013-10-31 21:28 - 2013-10-31 21:28 - 00000000 ____D C:\Program Files\Enigma Software Group 2013-10-31 21:28 - 2013-10-31 21:28 - 00000000 _____ C:\autoexec.bat 2013-10-31 19:53 - 2011-12-07 16:53 - 00000000 ____D C:\Users\*****\AppData\Local\PMB Files 2013-10-31 17:54 - 2010-10-03 10:50 - 00000000 ____D C:\Users\********\Documents\My Games 2013-10-31 17:42 - 2012-11-23 13:51 - 00002936 _____ C:\Windows\System32\Tasks\{0BC71482-B65A-4EC9-92AD-6F5CFB239B55} 2013-10-31 17:42 - 2012-11-23 13:50 - 00002936 _____ C:\Windows\System32\Tasks\{C41B7DF7-D76F-48C7-9709-DA7576062ED7} 2013-10-31 17:42 - 2012-11-23 13:50 - 00002936 _____ C:\Windows\System32\Tasks\{3D68952B-40CF-4E46-8156-203BCAC0BA5D} 2013-10-31 17:42 - 2012-11-23 13:49 - 00002936 _____ C:\Windows\System32\Tasks\{B3A3CF68-6DE7-432F-AA03-3CBDA910C1E7} 2013-10-31 17:42 - 2012-06-14 17:46 - 00003044 _____ C:\Windows\System32\Tasks\{7A282231-4C61-4AF0-8E8C-2458843988FF} 2013-10-31 17:42 - 2012-06-14 17:45 - 00003044 _____ C:\Windows\System32\Tasks\{7A26E76B-F7DE-4DF7-9AFF-29500E94A4B1} 2013-10-31 14:30 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-10-31 14:29 - 2013-10-31 14:29 - 00262144 _____ C:\Windows\Minidump\103113-19422-01.dmp 2013-10-31 14:02 - 2013-10-31 14:02 - 00000236 _____ C:\Windows\LkmdfCoInst.log 2013-10-31 14:02 - 2013-05-26 16:51 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys 2013-10-31 13:53 - 2013-10-12 08:46 - 00002222 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-10-31 13:46 - 2013-10-31 13:46 - 00262144 _____ C:\Windows\Minidump\103113-19453-01.dmp 2013-10-31 09:57 - 2010-09-13 13:33 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-10-31 09:49 - 2010-06-04 07:12 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-10-31 09:46 - 2013-10-31 09:46 - 00000000 _____ C:\Windows\setuperr.log 2013-10-31 08:49 - 2011-03-20 08:34 - 00000000 ____D C:\Users\*****\AppData\Roaming\TuneUp Software 2013-10-30 17:54 - 2009-07-14 03:34 - 40108032 _____ C:\Windows\system32\config\COMPONENTS_tureg_old 2013-10-30 17:36 - 2013-10-21 05:24 - 00000000 ____D C:\Users\************\Desktop\Neuer Ordner (5) 2013-10-30 17:36 - 2010-12-20 17:13 - 00000000 ____D C:\Users\********\Desktop\musik 2013-10-30 17:33 - 2012-04-09 12:41 - 00000000 ____D C:\Download 2013-10-30 17:22 - 2013-07-07 14:20 - 00002976 _____ C:\Windows\System32\Tasks\{2B9A10E4-AB62-4551-B7D8-3EF0321B19B4} 2013-10-30 17:22 - 2013-07-07 10:59 - 00002976 _____ C:\Windows\System32\Tasks\{83C074D9-5AC0-463C-B3CD-CCBFD83F8ECA} 2013-10-30 17:22 - 2013-07-06 15:59 - 00002976 _____ C:\Windows\System32\Tasks\{CFE76113-585E-40AF-B2A3-63DD523C7DFE} 2013-10-30 17:22 - 2013-07-06 15:54 - 00002976 _____ C:\Windows\System32\Tasks\{6F5827DC-8AC7-47F8-B931-DF4FDDE04EE5} 2013-10-30 17:15 - 2012-02-20 10:06 - 00000000 ____D C:\Users\********\AppData\Roaming\HpUpdate 2013-10-30 17:15 - 2010-07-03 23:15 - 00000000 ____D C:\Users\********\AppData\Roaming\Nero 2013-10-30 17:15 - 2010-06-26 17:03 - 00000000 ____D C:\Users\********\AppData\Local\Microsoft Help 2013-10-30 17:11 - 2011-10-21 16:17 - 00000000 ____D C:\Users\********\AppData\Local\LogMeIn Hamachi 2013-10-30 17:11 - 2010-11-26 21:59 - 00000000 ____D C:\ProgramData\TuneUp Software 2013-10-30 17:10 - 2013-10-30 17:10 - 00093239 _____ C:\Windows\SysWOW64\_m.dmp 2013-10-30 17:10 - 2013-10-30 17:09 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014 2013-10-30 17:09 - 2013-10-30 17:09 - 00002229 _____ C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk 2013-10-30 17:09 - 2012-02-19 08:46 - 00000000 ____D C:\Users\********\AppData\Roaming\TuneUp Software 2013-10-30 17:03 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\Help 2013-10-30 16:14 - 2011-05-24 16:30 - 00000000 ____D C:\Users\*****\AppData\Local\LogMeIn Hamachi 2013-10-30 10:00 - 2013-10-30 10:00 - 00013400 ____N C:\bootsqm.dat 2013-10-30 09:58 - 2013-10-30 09:58 - 00000000 __SHD C:\found.007 2013-10-28 12:50 - 2013-10-28 12:50 - 00692869 _____ (UltraDefrag Development Team) C:\Users\********\Downloads\ultradefrag-6.0.2.bin.amd64.exe 2013-10-28 12:50 - 2012-12-31 20:27 - 00000000 ____D C:\Program Files\UltraDefrag 2013-10-28 11:53 - 2013-10-28 11:53 - 00003152 _____ C:\Windows\System32\Tasks\{79D02415-8C0D-4959-8F68-EE618CE9C037} 2013-10-28 11:52 - 2013-10-28 11:52 - 01735492 _____ C:\Users\********\Downloads\ROSetup20102.exe 2013-10-27 12:30 - 2013-03-28 19:59 - 00000000 ____D C:\Users\********\Documents\cc regstri datei 2013-10-25 21:05 - 2013-10-25 21:05 - 20273928 _____ C:\Users\********\Downloads\260-04 ケープ・ホーン(Cape Horn).m4a 2013-10-25 21:05 - 2013-10-25 21:05 - 10036995 _____ C:\Users\********\Downloads\259-01 Candide Suite (arr. C. Grundman) - Candide_ Overture (arr. C. Grundman for band).m4a 2013-10-25 21:05 - 2013-10-25 21:05 - 02425015 _____ C:\Users\********\Downloads\167-03 Yiddish Dances_ Terkische.m4a 2013-10-25 12:48 - 2013-10-25 12:48 - 18080872 _____ (Adobe Systems Inc.) C:\Users\********\Downloads\AdobeAIRInstaller.exe 2013-10-24 17:46 - 2013-10-24 17:46 - 00000000 ____D C:\Users\*****\AppData\Roaming\AVAST Software 2013-10-24 13:20 - 2013-10-24 13:20 - 00000000 ____D C:\Users\********\AppData\Roaming\AVAST Software 2013-10-24 13:16 - 2013-10-12 08:46 - 01032416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2013-10-24 13:16 - 2013-10-12 08:46 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2013-10-24 13:16 - 2013-10-12 08:46 - 00205320 _____ C:\Windows\system32\Drivers\aswVmm.sys 2013-10-24 13:16 - 2013-10-12 08:46 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2013-10-24 13:16 - 2013-10-12 08:46 - 00084328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2013-10-24 13:16 - 2013-10-12 08:46 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys 2013-10-24 13:16 - 2013-10-12 08:46 - 00065264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys 2013-10-24 13:16 - 2013-10-12 08:46 - 00038984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys 2013-10-24 13:16 - 2013-10-12 08:45 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2013-10-24 13:16 - 2013-02-17 14:51 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2013-10-24 13:15 - 2013-02-17 14:44 - 00000000 ____D C:\ProgramData\AVAST Software 2013-10-24 13:14 - 2013-02-17 14:51 - 00000000 _____ C:\Windows\SysWOW64\config.nt 2013-10-24 13:13 - 2013-10-24 13:11 - 24285184 _____ C:\Users\********\Downloads\SkypeSetup6932.msi 2013-10-24 13:09 - 2013-10-24 13:09 - 00003256 _____ C:\Windows\System32\Tasks\FoxTab 2013-10-24 13:09 - 2013-10-24 13:09 - 00000000 ____D C:\Users\********\AppData\Roaming\FoxTab 2013-10-24 13:08 - 2013-10-24 13:08 - 20586496 _____ C:\Users\********\Downloads\SkypeSetup [1].exe 2013-10-24 13:08 - 2013-10-24 13:07 - 00683016 _____ C:\Users\********\Downloads\SkypeSetup.exe 2013-10-24 12:50 - 2012-05-02 18:15 - 00000000 ____D C:\Users\************\AppData\Roaming\Skype 2013-10-24 12:47 - 2013-10-24 12:47 - 00002962 _____ C:\Windows\System32\Tasks\{F329FDF7-6D9E-4D7F-B1DB-BEDABE94FC46} 2013-10-23 11:30 - 2013-10-31 09:53 - 30344480 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 22933792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 18199872 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 12572960 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-10-23 11:30 - 2013-10-31 09:53 - 11426568 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 11374520 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 09524088 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 09480328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 03131680 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 03124512 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 02946848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 02747168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433165.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433165.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 01241376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 00696096 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 00655136 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 00560416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-10-23 11:30 - 2013-09-17 21:22 - 18286416 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2013-10-23 11:30 - 2013-09-17 21:22 - 15855568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-10-23 11:30 - 2013-09-17 21:22 - 02695200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2013-10-23 11:30 - 2012-10-20 18:46 - 15212336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2013-10-23 11:30 - 2012-10-07 20:45 - 01435504 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2013-10-23 11:30 - 2010-04-03 21:55 - 00023287 _____ C:\Windows\system32\nvinfo.pb 2013-10-23 11:30 - 2009-09-17 22:58 - 03067560 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2013-10-23 09:20 - 2012-10-18 07:12 - 03426956 _____ C:\Windows\system32\nvcoproc.bin 2013-10-23 09:20 - 2010-07-09 15:27 - 06669600 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2013-10-23 09:20 - 2010-07-09 15:27 - 03489568 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2013-10-23 09:20 - 2010-07-09 15:27 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2013-10-23 09:20 - 2010-07-09 15:27 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2013-10-23 09:20 - 2009-07-14 08:51 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2013-10-23 09:20 - 2009-07-14 08:51 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2013-10-23 03:02 - 2013-10-23 03:02 - 00589600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2013-10-22 18:07 - 2010-06-03 15:40 - 00000000 ____D C:\Users\Public\Documents\Acer 2013-10-22 18:06 - 2011-03-11 15:07 - 00000000 ____D C:\Users\*****\Documents\DVDVideoSoft 2013-10-22 18:05 - 2013-10-22 18:05 - 00001068 _____ C:\Users\*****\Desktop\Star Wars Battlefront II spielen.lnk 2013-10-22 17:55 - 2013-09-15 19:34 - 00003342 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1583400021-3288482790-2347783300-1005 2013-10-22 17:55 - 2013-09-15 19:34 - 00003208 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1583400021-3288482790-2347783300-1005 2013-10-21 14:50 - 2011-12-24 18:41 - 00002878 _____ C:\Users\*****\AppData\Roaming\wklnhst.dat 2013-10-21 14:43 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\FxsTmp 2013-10-21 09:35 - 2013-10-21 09:35 - 00078848 _____ C:\Users\*****\Desktop\Deutsch_Türk.Club_Konsolos.wps 2013-10-20 20:04 - 2013-10-20 20:04 - 00000000 __SHD C:\found.006 2013-10-20 19:18 - 2012-07-01 21:01 - 00062464 _____ C:\Users\*****\Desktop\Deutsch_Türk.Club_Stadtführung (1).wps 2013-10-20 11:03 - 2013-09-27 16:38 - 00000000 ____D C:\ProgramData\Oracle 2013-10-20 11:02 - 2013-10-20 11:02 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2013-10-20 11:02 - 2013-10-20 11:02 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2013-10-20 11:02 - 2013-10-20 11:02 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2013-10-20 11:02 - 2013-10-20 11:02 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2013-10-20 11:02 - 2013-10-20 11:02 - 00000000 ____D C:\Program Files\Java 2013-10-20 10:59 - 2013-10-20 10:57 - 30694824 _____ (Oracle Corporation) C:\Users\********\Downloads\jre-7u45-windows-x64.exe 2013-10-18 02:36 - 2013-10-31 09:49 - 01063200 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2013-10-18 02:36 - 2013-10-31 09:49 - 00955168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2013-10-16 19:01 - 2013-10-16 19:01 - 00000000 ____D C:\Users\*****\Documents\FFOutput 2013-10-16 18:51 - 2013-10-16 18:51 - 00000000 ____D C:\Users\*****\AppData\Local\{27B0E517-4676-4C72-9512-EE5F7FDBD983} 2013-10-16 18:50 - 2013-10-16 18:50 - 00000000 ____D C:\Users\*****\AppData\Local\{8D7758A3-7FCD-47A5-BCEB-37BF718C2331} 2013-10-16 18:49 - 2013-10-16 18:49 - 00000000 ____D C:\Users\*****\AppData\Local\{3A5337BC-9A3B-440B-8733-8FEA0BF27B4B} 2013-10-16 18:49 - 2011-03-08 20:30 - 00000000 ____D C:\Users\*****\AppData\Local\Windows Live 2013-10-14 14:33 - 2013-10-14 14:33 - 00000219 _____ C:\Users\********\Desktop\Dota 2.url 2013-10-14 14:33 - 2010-08-10 10:34 - 00000000 ____D C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2013-10-13 18:21 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF 2013-10-13 18:19 - 2012-04-29 16:16 - 00127568 _____ C:\Users\************\AppData\Local\GDIPFONTCACHEV1.DAT 2013-10-13 10:59 - 2007-07-12 02:49 - 00000000 ____D C:\Windows\Panther 2013-10-13 10:00 - 2012-10-20 20:53 - 00000000 ____D C:\Users\*****\Desktop\gP5 2013-10-13 08:16 - 2013-10-13 08:10 - 00000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TuxGuitar 1.2 2013-10-13 08:10 - 2013-10-13 08:10 - 00001095 _____ C:\Users\*****\Desktop\tuxguitar.lnk 2013-10-13 08:10 - 2013-10-13 08:10 - 00000000 ____D C:\Program Files (x86)\TuxGuitar-Jet 2013-10-13 08:08 - 2013-10-13 08:08 - 16495636 _____ C:\Users\********\Downloads\tuxguitar-1.2-windows-x86-jet.exe 2013-10-13 08:00 - 2013-10-12 10:56 - 00000000 ____D C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Power Tab Software 2013-10-12 10:56 - 2013-10-12 10:56 - 05917258 _____ C:\Users\********\Downloads\powertab1.7.zip 2013-10-12 09:54 - 2013-10-12 09:55 - 07715210 _____ (Herac) C:\Users\********\Downloads\tuxguitar-1.2-windows-x86-installer(1).exe 2013-10-12 08:56 - 2013-10-12 08:56 - 00000211 _____ C:\fraglist.luar 2013-10-12 08:50 - 2010-06-03 18:49 - 00000000 ____D C:\ProgramData\Avira 2013-10-12 08:45 - 2013-02-17 14:44 - 00000000 ____D C:\Program Files\AVAST Software 2013-10-12 08:35 - 2013-10-12 08:35 - 131918888 _____ C:\Users\********\Downloads\avast_free_antivirus_setup_8.0.1497.376.exe 2013-10-12 08:15 - 2013-10-12 08:15 - 00000000 __SHD C:\found.005 2013-10-11 19:42 - 2010-07-19 12:04 - 00000000 ____D C:\Users\********\AppData\Roaming\ICQ 2013-10-11 19:34 - 2013-10-11 19:27 - 30669224 _____ (Oracle Corporation) C:\Users\*****\Downloads\jre-7u40-windows-x64.exe 2013-10-11 18:33 - 2013-07-29 22:13 - 00000000 ____D C:\Windows\system32\MRT 2013-10-11 18:33 - 2010-06-04 06:57 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-10-11 15:01 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-10-11 09:45 - 2012-05-21 14:04 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-10-10 17:37 - 2012-07-23 12:00 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-10-10 17:37 - 2012-04-01 13:24 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-10-10 17:37 - 2011-05-16 19:21 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-10-09 07:44 - 2013-10-09 07:44 - 00000000 ____D C:\Users\*****\AppData\Local\LogMeIn 2013-10-08 17:46 - 2013-10-08 17:46 - 00008046 _____ C:\Users\********\Documents\Unbenannt 1.odt 2013-10-08 12:29 - 2013-10-30 17:10 - 00043320 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll 2013-10-08 12:29 - 2013-10-30 17:10 - 00040760 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe 2013-10-08 12:29 - 2013-10-30 17:10 - 00036152 _____ (TuneUp Software) C:\Windows\SysWOW64\uxtuneup.dll 2013-10-08 12:29 - 2013-10-30 17:10 - 00029496 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll 2013-10-08 12:29 - 2013-10-30 17:09 - 00025400 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll 2013-10-08 11:49 - 2013-10-08 11:49 - 00000000 __SHD C:\found.004 2013-10-07 20:27 - 2012-04-29 12:05 - 00016896 _____ C:\Users\*****\Desktop\**************** Bewerbung.wps 2013-10-07 19:01 - 2013-10-07 19:01 - 00015872 _____ C:\Users\*****\Desktop\****.wps 2013-10-05 17:40 - 2013-10-05 17:40 - 00000000 ____D C:\Users\********\AppData\Local\NVIDIA 2013-10-05 17:38 - 2013-10-05 17:38 - 22321072 _____ (NVIDIA Corporation) C:\Users\********\Downloads\GeForce_Experience_v1.6.1.0.exe 2013-10-04 13:53 - 2013-10-04 13:53 - 00000000 ____D C:\ProgramData\AskPartnerNetwork 2013-10-04 13:53 - 2013-10-04 13:53 - 00000000 ____D C:\ProgramData\APN 2013-10-04 13:53 - 2013-10-04 13:53 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork 2013-10-03 17:56 - 2010-11-21 14:35 - 00005202 _____ C:\Users\********\AppData\Roaming\wklnhst.dat 2013-10-03 16:30 - 2012-02-24 21:46 - 00000000 ____D C:\Users\********\Desktop\fotoapperat 2013-10-03 16:18 - 2013-10-03 16:17 - 00031559 _____ C:\Users\********\Desktop\in-der-tat.jpeg 2013-10-03 10:18 - 2012-10-20 20:53 - 00000000 ____D C:\Users\********\Desktop\SLH_7ac_2010-allebilder 2013-10-03 08:28 - 2013-10-03 08:28 - 00000000 ____D C:\Users\********\AppData\Local\LogMeIn 2013-10-02 18:37 - 2011-02-08 14:29 - 00000000 ____D C:\Users\********\AppData\Roaming\DVDVideoSoft 2013-10-02 18:36 - 2013-10-02 18:36 - 28795304 _____ (DVDVideoSoft Ltd. ) C:\Users\********\Downloads\FreeYouTubeToMP3Converter.exe 2013-10-02 18:09 - 2012-08-04 15:00 - 00000000 ____D C:\Users\*****\AppData\Local\Mozilla 2013-10-02 17:17 - 2013-10-02 17:17 - 00000000 ____D C:\Users\********\AppData\Local\LogMeIn 2013-10-02 17:17 - 2013-10-02 17:17 - 00000000 ____D C:\ProgramData\LogMeIn Files to move or delete: ==================== C:\ProgramData\hash.dat C:\Users\********\xobglu16.dll C:\Users\********\xobglu32.dll Some content of TEMP: ==================== C:\Users\*****\AppData\Local\Temp\AskSLib.dll C:\Users\*****\AppData\Local\Temp\avgnt.exe C:\Users\*****\AppData\Local\Temp\drm_dialogs.dll C:\Users\*****\AppData\Local\Temp\F24B.tmpcrt.dll C:\Users\*****\AppData\Local\Temp\F26B.tmpcrt.dll C:\Users\*****\AppData\Local\Temp\FileSystemView.dll C:\Users\*****\AppData\Local\Temp\GLF30D5.tmp.tbturk.dll C:\Users\*****\AppData\Local\Temp\nvStInst.exe C:\Users\********\AppData\Local\Temp\nvStInst.exe C:\Users\********\AppData\Local\Temp\SHSetup.exe C:\Users\************\AppData\Local\Temp\AskSLib.dll C:\Users\************\AppData\Local\Temp\avgnt.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-10-23 14:06 ==================== End Of Log ============================ --- --- --- |
01.11.2013, 19:15 | #6 |
| Programme lassen sich nicht mehr öffnen die Zweite Datei Addition Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-10-2013 Ran by ******** at 2013-11-01 18:48:36 Running from C:\Users\********\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WAKVHNOE Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== 1310 (x32 Version: 130.0.365.000) 1310_Help (x32 Version: 82.0.58.000) 1310Trb (x32 Version: 82.0.242.000) 3DVIA player 5.0 (x32 Version: 5.0.0.15) 64 Bit HP CIO Components Installer (Version: 7.2.8) 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0) Acer Arcade Deluxe (x32 Version: 3.1.6731) Acrobat.com (x32 Version: 1.6.65) Adobe AIR (x32 Version: 3.9.0.1030) Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117) Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117) Adobe Shockwave Player 12.0 (x32 Version: 12.0.2.122) Advertising Center (x32 Version: 0.0.0.2) AIO_CDB_ProductContext (x32 Version: 130.0.365.000) AIO_CDB_Software (x32 Version: 130.0.365.000) AIO_Scan (x32 Version: 130.0.421.000) Akamai NetSession Interface (HKCU) Animation Shop 3 Try And Buy (x32 Version: 3.0.4.0000) Apple Application Support (x32 Version: 2.3.4) Apple Software Update (x32 Version: 2.1.3.127) Audiograbber 1.83 SE (x32 Version: 1.83 SE) avast! Free Antivirus (x32 Version: 9.0.2006) Avira SearchFree Toolbar (x32 Version: 12.6.0.1898) Backup Manager Advance (x32 Version: 2.0.2.19) Bing Bar (x32 Version: 7.0.601.0) Bing Maps 3D (Version: 4.0.903.16005) BufferChm (x32 Version: 130.0.331.000) Compatibility Pack für 2007 Office System (x32 Version: 12.0.6612.1000) Copy (x32 Version: 130.0.428.000) Counter-Strike 2D 0.1.2.0 (x32) CyberLink PowerDirector (x32 Version: 7.0.3003) D3DX10 (x32 Version: 15.4.2368.0902) Dealio Toolbar v4.6 (x32 Version: 4.6) Destinations (x32 Version: 140.0.77.000) DeviceDiscovery (x32 Version: 130.0.465.000) DocProc (x32 Version: 13.0.0.0) Dota 2 (x32) EasyBits GO (HKCU) eBay Worldwide (x32 Version: 2.1.0703) Empire: Total War (x32) eReg (x32 Version: 1.20.138.34) Facebook Video Calling 1.2.0.287 (x32 Version: 1.2.287) Fax (x32 Version: 130.0.418.000) File Splitter and Joiner (FFSJ v3.2) (x32) Firebird SQL Server - MAGIX Edition (x32 Version: 2.1.31.0) FRANKIE - LUSTIGE WELTREISE (x32) FreeCAD 0.13 (x32 Version: 0.13.1828) GameShadow (x32 Version: 2.02.0000) GeForce Experience NvStream Client Components (Version: 1.6.28) Google Drive (x32 Version: 1.12.5329.1887) Google Earth Plug-in (x32 Version: 7.1.1.1888) Google Toolbar for Internet Explorer (x32 Version: 1.0.0) Google Update Helper (x32 Version: 1.3.21.165) Gothic II Datenbank (HKCU Version: 5.0 Beta) GPBaseService2 (x32 Version: 130.0.371.000) Hewlett-Packard ACLM.NET v1.1.0.0 (x32 Version: 1.00.0000) HP Product Detection (x32 Version: 11.14.0001) HP Update (x32 Version: 5.005.000.001) HPDiagnosticAlert (x32 Version: 1.00.0000) HPPhotoGadget (x32 Version: 130.0.282.000) HPPhotosmartEssential (x32 Version: 2.04.0000) HPProductAssistant (x32 Version: 130.0.371.000) HPSSupply (x32 Version: 130.0.371.000) ICQ 8.0 (build 5981, für aktuellen Benutzer) (HKCU Version: 8.0.5981.0) ICQ Sparberater (x32 Version: 1.3.671) Icy Tower v1.5 (x32) ImagXpress (x32 Version: 7.0.74.0) Java 7 Update 40 (x32 Version: 7.0.400) Java 7 Update 45 (64-bit) (Version: 7.0.450) Java Auto Updater (x32 Version: 2.1.9.8) Java(TM) 6 Update 22 (x32 Version: 6.0.220) JavaFX 2.1.1 (x32 Version: 2.1.1) Junk Mail filter update (x32 Version: 15.4.3502.0922) L&H TTS3000 Deutsch (x32) Left 4 Dead 2 (x32) LogicCircuit (x32 Version: 1.9.0803) Logitech Gaming Software 5.10 (Version: 5.10.127) Logitech SetPoint 6.52 (Version: 6.52.74) LogMeIn Hamachi (x32 Version: 2.2.0.58) MarketResearch (x32 Version: 130.0.374.000) Mesh Runtime (x32 Version: 15.4.5722.2) Messenger Companion (x32 Version: 15.4.3502.0922) Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938) Microsoft .NET Framework 4.5.1 (Deutsch) (Version: 4.5.50938) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938) Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft IntelliPoint 8.1 (Version: 8.15.406.0) Microsoft Mathematics (64-Bit) (Version: 4.0) Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0) Microsoft Silverlight (Version: 5.1.20913.0) Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT_amd64 (x32 Version: 15.4.2862.0708) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) MSXML 4.0 SP2 Parser und SDK (x32 Version: 4.20.9818.0) mufin player 2.5 (x32 Version: 2.5.1.248) MyWinLocker (x32 Version: 3.1.72.0) Nero ControlCenter (x32 Version: 9.0.0.1) Nero DiscSpeed (x32 Version: 5.4.7.201) Nero DiscSpeed Help (x32 Version: 5.4.4.100) Nero DriveSpeed (x32 Version: 4.4.7.201) Nero DriveSpeed Help (x32 Version: 4.4.4.100) Nero Express Help (x32 Version: 9.4.9.100) Nero InfoTool (x32 Version: 6.4.7.201) Nero InfoTool Help (x32 Version: 6.4.4.100) Nero Installer (x32 Version: 4.4.8.1) Nero Online Upgrade (x32 Version: 1.3.0.0) Nero StartSmart (x32 Version: 9.4.11.209) Nero StartSmart Help (x32 Version: 9.4.1.100) Nero StartSmart OEM (x32 Version: 9.16.0.100) NeroExpress (x32 Version: 9.4.10.505) neroxml (x32 Version: 1.0.0) Network64 (Version: 130.0.572.000) Network64 (Version: 140.0.221.000) NVIDIA 3D Vision Controller-Treiber 331.65 (Version: 331.65) NVIDIA 3D Vision Treiber 331.65 (Version: 331.65) NVIDIA Display Control Panel (Version: 6.14.12.5896) NVIDIA GeForce Experience 1.7 (Version: 1.7) NVIDIA Grafiktreiber 331.65 (Version: 331.65) NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4) NVIDIA Install Application (Version: 2.1002.140.952) NVIDIA LED Visualizer 1.0 (Version: 1.0) NVIDIA PhysX (x32 Version: 9.13.0725) NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725) NVIDIA ShadowPlay 9.3.16 (Version: 9.3.16) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3165) NVIDIA Systemsteuerung 331.65 (Version: 331.65) NVIDIA Update 9.3.16 (Version: 9.3.16) NVIDIA Update Components (Version: 9.3.16) NVIDIA Virtual Audio 1.2.9 (Version: 1.2.9) OpenOffice.org 3.3 (x32 Version: 3.3.9567) Pando Media Booster (x32 Version: 2.6.0.8) Parmen (x32) Pizza Syndicate (x32) PVSonyDll (Version: 1.00.0001) QuickTime (x32 Version: 7.74.80.86) RealDownloader (x32 Version: 1.3.2) RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0) RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0) RealUpgrade 1.1 (x32 Version: 1.1.0) Roblox for ******** (HKCU) Rome - Total War(TM) (x32 Version: 1.0) Scan (x32 Version: 140.0.80.000) SHIELD Streaming (Version: 1.6.34) Skype™ 6.9 (x32 Version: 6.9.106) SmartWebPrinting (x32 Version: 130.0.457.000) SolutionCenter (x32 Version: 130.0.373.000) Status (x32 Version: 130.0.469.000) Steam (x32 Version: 1.0.0.0) swMSM (x32 Version: 12.0.0.1) TeamViewer 7 (x32 Version: 7.0.12979) Toolbox (x32 Version: 130.0.648.000) TrackMania Nations Forever (x32) TrayApp (x32 Version: 130.0.422.000) TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.141) TuneUp Utilities 2014 (x32 Version: 14.0.1000.141) TuneUp Utilities 2014 (x32 Version: 14.0.1000.55) TuneUp Utilities Language Pack (de-DE) (x32 Version: 12.0.3500.13) TuxGuitar 1.2 (x32) UE3Redist (HKCU Version: 1.00.0000) Unity Web Player (HKCU Version: ) UnloadSupport (x32 Version: 11.0.0) VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0) VirtualDJ Home FREE (x32 Version: 7.4) Vokabel Trainer 5 (x32) WebReg (x32 Version: 130.0.132.017) Windows Live Communications Platform (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3555.0308) Windows Live Family Safety (Version: 15.4.3555.0308) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922) Windows Live ID Sign-in Assistant (Version: 7.250.4232.0) Windows Live Installer (x32 Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3555.0308) Windows Live Mail (x32 Version: 15.4.3502.0922) Windows Live Mesh (x32 Version: 15.4.3502.0922) Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2) Windows Live Messenger (x32 Version: 15.4.3538.0513) Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922) Windows Live MIME IFilter (Version: 15.4.3502.0922) Windows Live Movie Maker (x32 Version: 15.4.3502.0922) Windows Live Photo Common (x32 Version: 15.4.3502.0922) Windows Live Photo Gallery (x32 Version: 15.4.3502.0922) Windows Live PIMT Platform (x32 Version: 15.4.3508.1109) Windows Live Remote Client (Version: 15.4.5722.2) Windows Live Remote Client Resources (Version: 15.4.5722.2) Windows Live Remote Service (Version: 15.4.5722.2) Windows Live Remote Service Resources (Version: 15.4.5722.2) Windows Live SOXE (x32 Version: 15.4.3502.0922) Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922) Windows Live Sync (x32 Version: 14.0.8117.416) Windows Live UX Platform (x32 Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109) Windows Live Writer (x32 Version: 15.4.3502.0922) Windows Live Writer Resources (x32 Version: 15.4.3502.0922) WinRAR (x32) Xfire (remove only) (x32) XP-Games JRE (x32) XviD MPEG-4 Video Codec (x32 Version: XviD-1.0.3-20122004) Yontoo 1.10.02 (Version: 1.10.02) Zip Motion Block Video codec (Remove Only) (x32) ==================== Restore Points ========================= 31-10-2013 20:56:05 Removed Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 31-10-2013 20:56:19 Removed Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 31-10-2013 20:57:14 Microsoft Visual C++ 2005 Redistributable wird entfernt 31-10-2013 20:59:29 Microsoft Visual C++ 2005 Redistributable wird entfernt 31-10-2013 21:01:37 Microsoft Visual C++ 2005 Redistributable wird entfernt 31-10-2013 21:02:07 Microsoft Visual C++ 2005 Redistributable (x64) wird entfernt 31-10-2013 21:03:27 Removed Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 31-10-2013 21:04:51 Removed Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 31-10-2013 21:05:07 Microsoft Visual C++ 2005 Redistributable (x64) wird entfernt 31-10-2013 21:06:56 Removed Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 31-10-2013 21:07:18 Removed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 31-10-2013 21:09:12 Removed Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 31-10-2013 21:10:10 Removed Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 31-10-2013 21:10:32 Removed Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 31-10-2013 21:14:01 Removed Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 31-10-2013 21:14:36 Removed Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 31-10-2013 21:15:40 Removed Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 31-10-2013 21:16:08 Removed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 31-10-2013 21:17:00 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 wurde entfernt. 31-10-2013 21:18:12 Removed Microsoft Visual J# .NET Redistributable Package 1.1 31-10-2013 21:19:04 Removed Microsoft Visual J# .NET Redistributable Package 1.1 31-10-2013 21:20:12 Removed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 31-10-2013 21:21:12 Removed Microsoft Office Suite Activation Assistant. 31-10-2013 21:23:28 Removed Microsoft Office Language Pack 2007 - German/Deutsch 31-10-2013 21:24:53 Removed Microsoft Office Enterprise 2007 31-10-2013 21:30:42 Removed Microsoft Office Home and Student 2007 31-10-2013 21:35:21 Microsoft Office Live Add-in 1.5 wird entfernt 31-10-2013 21:36:09 Microsoft Office Outlook Connector wurde entfernt. 31-10-2013 21:37:18 Microsoft Office PowerPoint Viewer 2007 (German) wird entfernt 31-10-2013 21:39:01 Removed Microsoft SQL Server 2005 Compact Edition [ENU] 31-10-2013 21:39:45 Microsoft Office File Validation Add-In wird entfernt 31-10-2013 21:52:38 Microsoft Works wird entfernt 31-10-2013 22:49:34 Windows Update 01-11-2013 09:14:29 Windows Update 01-11-2013 09:50:41 Removed Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 01-11-2013 10:04:24 Removed Guitar Hero Three Control Panel 01-11-2013 10:05:38 Removed Sibelius 7 OpenType Fonts 01-11-2013 10:14:51 Windows Update 01-11-2013 14:12:54 Uniblue DriverScanner installation ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {07989B3B-454C-4918-A70E-EE192A5FFD2F} - System32\Tasks\{9AFA3371-7006-4221-8666-354C9AD5F4E5} => E:\Setup.exe Task: {0B3C13F1-6F2F-4F63-9490-59BF376FF187} - System32\Tasks\{2341DB95-2831-4D12-991F-36B9A53D141E} => C:\Users\********\Desktop\Neuer Ordner (3)\akws 1025\AKW-Simulator.exe Task: {1337546E-3962-46CF-9213-2E87CB6201F5} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2011-04-13] (Microsoft Corporation) Task: {169FF95B-2FE1-4C94-8AE1-486035A436BB} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1583400021-3288482790-2347783300-1003 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {16AFC3C8-047D-4C79-BB74-AE5C0CCD2EC4} - System32\Tasks\{09B29C9E-0691-451A-B9B2-60D242EF2062} => C:\Program Files (x86)\LucasArts\Star Wars Empire at War Forces of Corruption\swfoc.exe Task: {179A571C-F727-41D7-97ED-39DED54F53DD} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1583400021-3288482790-2347783300-1003 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {1B351627-CEA7-4D5A-A030-1A497F7D80EC} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-10-24] (AVAST Software) Task: {1B4FCC5F-FFCB-4E76-8AB9-A2173A9A488C} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation) Task: {1B62C4FE-D028-426C-B3C6-B58259043E9B} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe Task: {1B67CE64-CAFD-4274-854A-68E635502F2E} - System32\Tasks\{8E6935CE-3E53-42A4-B757-3C92E22DCF51} => C:\Users\********\Desktop\GuitarPro6-r7840.exe Task: {1B7486DB-1FD9-449D-9886-20711D51767B} - System32\Tasks\{B3A3CF68-6DE7-432F-AA03-3CBDA910C1E7} => C:\Pizza Syndicate\autorun.exe [1999-02-18] () Task: {24D08894-5F40-4309-9E8B-F81952E4A623} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled Task: {2C8D13B5-97F5-49E9-A8CD-6DF61AA23F62} - System32\Tasks\{EAFA96F6-EC23-4412-9DC8-AD7367E87996} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2013-10-02] (Skype Technologies S.A.) Task: {2D100437-5219-43AB-92FA-67A610FB5721} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1583400021-3288482790-2347783300-1005Core => C:\Users\*****\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-02-16] (Facebook Inc.) Task: {2FE96321-8772-4961-BA3F-597BA2FDBB6A} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1583400021-3288482790-2347783300-1010 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {363A5405-BF54-4BFF-9171-A05783C9CB23} - System32\Tasks\{2081B64B-3DBB-4955-9450-ABF4B9DAFFBA} => C:\Program Files (x86)\Sicherheitspaket\FSGUI\fscuif.exe Task: {43201502-53C6-468F-B03E-87992BBD9726} - System32\Tasks\{69230F70-8360-4772-92CD-C0F674FA0165} => C:\Users\********\Desktop\battlelog-web-plugins-1.122.0-retail-prod.exe Task: {433026CC-7EB8-461F-8925-A50195F256BB} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1583400021-3288482790-2347783300-1005 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {44A783B8-0455-41E9-9841-B1C72BF5C391} - System32\Tasks\{ABFA1C77-5864-4B1B-B2E1-AF6D2D7E725A} => C:\Program Files (x86)\Steam\Steam.exe [2013-10-30] (Valve Corporation) Task: {4624D37A-5089-4CB5-BA4E-B0D524901FC6} - System32\Tasks\{BD290309-21DB-43AB-BD24-9B8781A11957} => E:\Setup.exe Task: {47783148-F707-4D9C-BD45-EB7CB0DF7C20} - System32\Tasks\{3D68952B-40CF-4E46-8156-203BCAC0BA5D} => C:\Pizza Syndicate\autorun.exe [1999-02-18] () Task: {482F9BB8-6FD4-4DE4-9E9C-F0AE568D144F} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1583400021-3288482790-2347783300-1005 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {5049D56F-3D2B-48F3-8D6D-CB89B7EC0B03} - System32\Tasks\{665413B6-FE01-4E68-8AD4-D0EAF6A5F6F0} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-10-02] (Skype Technologies S.A.) Task: {52AFEEF3-F5B4-44F6-804D-279DD6E95E06} - System32\Tasks\FoxTab => C:\Users\********\AppData\Roaming\FoxTab\UpdateProc\UpdateTask.exe [2013-04-12] () Task: {5CD8DD51-8AA5-4591-9711-D89BD5514983} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1583400021-3288482790-2347783300-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {636C597B-B223-424F-89D4-6A13A37E3417} - System32\Tasks\{AB5B5496-A7C0-4B81-BD2A-8A5FAC65D77D} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-10-02] (Skype Technologies S.A.) Task: {6813A7A1-4E02-44D8-9CB4-0BDAEA16EF3E} - System32\Tasks\Egis technology-Online-Aktualisierungsprogramm => C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe Task: {6C517702-696F-4E87-B837-DCDE5CD5797C} - System32\Tasks\{83C074D9-5AC0-463C-B3CD-CCBFD83F8ECA} => C:\Program Files (x86)\JoWooD\Gothic II\UNWISE.EXE Task: {6DCDE9E4-2660-4BBE-BA21-EB33D8ADF64E} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe Task: {6E1206B0-4FDE-4953-BCA6-2622209AFDB8} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1583400021-3288482790-2347783300-1005UA => C:\Users\*****\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-02-16] (Facebook Inc.) Task: {6E260654-D4AE-463B-8E35-EE47976EDFFC} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1583400021-3288482790-2347783300-1005 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {6E7813F9-6B9B-4C84-8206-C3B7FCDCBB58} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1583400021-3288482790-2347783300-1010 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {6FE2E12F-B06B-4942-8169-66DBA72BBBEF} - System32\Tasks\{7A26E76B-F7DE-4DF7-9AFF-29500E94A4B1} => C:\Program Files (x86)\LucasArts\Star Wars Battlefront II\GameData\BattlefrontII.exe Task: {70CB140F-498E-4502-BD49-E0C99BBE0F35} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-20] (Microsoft Corporation) Task: {72A8C807-5AAF-4D8B-B69B-307A5C8EA3E7} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2013\OneClick.exe Task: {7ACE2E5D-C9A5-4D79-8ADA-8D04B561FF2E} - System32\Tasks\{6F5827DC-8AC7-47F8-B931-DF4FDDE04EE5} => C:\Program Files (x86)\JoWooD\Gothic II\UNWISE.EXE Task: {7BAD55EA-9D7B-4EF0-B367-F55A30BAF0D8} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1583400021-3288482790-2347783300-1005 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {7BE7E921-FB49-4E73-813C-B393E29092B3} - System32\Tasks\{F329FDF7-6D9E-4D7F-B1DB-BEDABE94FC46} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-10-02] (Skype Technologies S.A.) Task: {7DE5AC8E-421E-4A48-BAAD-3F10ED6CE1B9} - System32\Tasks\{84B2EB19-0089-4F2D-983A-AF8C2FFB9D4F} => C:\Users\********\Desktop\battlelog-web-plugins-1.122.0-retail-prod.exe Task: {80045386-EC5E-4BB4-8153-385A9848135B} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1583400021-3288482790-2347783300-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {81CDD7E3-096F-4962-99BA-FB11713F7C9C} - System32\Tasks\{512E8505-8AF6-403C-80E8-E49317558DE2} => C:\Users\********\Desktop\Neuer Ordner (3)\akws 1025\AKW-Simulator.exe Task: {89868ABC-071A-4E9A-B524-D398709F7A28} - System32\Tasks\{C41B7DF7-D76F-48C7-9709-DA7576062ED7} => C:\Pizza Syndicate\autorun.exe [1999-02-18] () Task: {8BCAFD64-261D-48B5-BDA1-023F27630D3C} - System32\Tasks\{A7738D04-25CC-4B81-AF10-AB0740DCDF23} => E:\Setup.exe Task: {991DEB80-DB37-41B7-BDA3-365F04EB4D03} - System32\Tasks\{7A282231-4C61-4AF0-8E8C-2458843988FF} => C:\Program Files (x86)\LucasArts\Star Wars Battlefront II\GameData\BattlefrontII.exe Task: {9924B34A-612A-4B73-978D-7860BD012E59} - System32\Tasks\{2B9A10E4-AB62-4551-B7D8-3EF0321B19B4} => C:\Program Files (x86)\JoWooD\Gothic II\UNWISE.EXE Task: {9B7EA1DD-5D67-4D19-BE68-CCA4822C50FE} - System32\Tasks\{D58120BE-C6C8-441B-A834-1A9B0EA3640E} => C:\Users\********\Desktop\battlelog-web-plugins-1.122.0-retail-prod.exe Task: {9DA46253-3CAC-4075-B63C-7CBCAC643166} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1583400021-3288482790-2347783300-1010 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {A1876BB7-BEDB-4CF7-AE6F-AA87C1E9592C} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1583400021-3288482790-2347783300-1003 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {A1BC0B6F-7B1D-4CFA-A658-7D8C0E8F82F9} - System32\Tasks\{0BC71482-B65A-4EC9-92AD-6F5CFB239B55} => C:\Pizza Syndicate\autorun.exe [1999-02-18] () Task: {B240EFEF-4E55-4192-B4DC-3320ED4B8F54} - System32\Tasks\{EF90139E-C1FA-4110-B844-DCB852AA3EA6} => C:\Program Files (x86)\Sicherheitspaket\FSGUI\fscuif.exe Task: {B5D7F5A9-4643-4E91-8680-A839A610F58D} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks Task: {BB9FD87C-0AE0-471D-84C7-32AF084EC4DD} - System32\Tasks\{9F097E94-7591-49F9-B973-86A9F7DD0287} => E:\Setup.exe Task: {BE087926-0E7F-4E6E-A476-D343340B5E7D} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe Task: {C120983C-DB10-4F5F-B54B-8FE0999FE79A} - System32\Tasks\{E2A37C1F-6C2D-4E67-9C5F-24174B7C4DD2} => E:\The Broken Land.exe Task: {C174BC81-49C6-4BB5-8984-915B3976B646} - System32\Tasks\Real Player online update program => C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe Task: {C3D805A8-1FD4-4778-946F-DAF909C61E7A} - System32\Tasks\{C373329E-70CF-456E-8B8B-F0D97EDDAD3E} => C:\Users\********\Desktop\battlelog-web-plugins-1.122.0-retail-prod.exe Task: {C8844DEC-E72E-46EE-AAE9-F13316A8CEE0} - System32\Tasks\HP online update program => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe Task: {C887286F-443D-4538-BCA4-45C02D67CE2D} - System32\Tasks\{C138E7D2-A31B-4CB9-B64F-6A396DB85818} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-10-02] (Skype Technologies S.A.) Task: {CCC08A68-02C2-4D8C-9E6E-3EF09AAF5400} - System32\Tasks\{D6A11FA9-E643-4258-9EA9-22FC3F1E2A8E} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-10-02] (Skype Technologies S.A.) Task: {CE408FE3-7CDC-46FC-BED5-AE105704D890} - System32\Tasks\{1A4F3D1C-2B90-43BB-AC5D-3A2A466C1018} => E:\The Broken Land.exe Task: {E0AAEECA-EB8B-436A-A669-B6D93B26C235} - System32\Tasks\{6FFA4839-DB18-48CD-855F-466D47280053} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-10-02] (Skype Technologies S.A.) Task: {E166C363-36FF-4231-9174-E9EA68167CDD} - System32\Tasks\Divx online update program => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe Task: {E3016692-E259-4613-9B2B-E81DF645F23E} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1583400021-3288482790-2347783300-1010 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {E919EF1C-3E8B-4FEC-87B7-19CB2A5B06ED} - System32\Tasks\SpyHunter4Startup => C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe Task: {EB207000-60B3-4F27-AFF6-14F6015D83D7} - System32\Tasks\{93911B9C-E818-4F28-9D2E-57CFF8CEA8D6} => C:\Program Files (x86)\LucasArts\Star Wars Empire at War Forces of Corruption\swfoc.exe Task: {EBE2A4F6-618F-4831-9D89-6FF03CD79B32} - System32\Tasks\{62E8A66C-D59C-4ED1-A0ED-E68D94694E36} => C:\Program Files (x86)\Steam\Steam.exe [2013-10-30] (Valve Corporation) Task: {F3CB480D-45F4-4C29-84F1-C6073CC48CB1} - System32\Tasks\{1C974E19-1231-43CF-8AF6-DD70544CFB1C} => C:\Program Files (x86)\Activision\Modern Warfare 2\iw4sp.exe Task: {F5752BBF-8A98-4370-9F81-9D46B24F6D8A} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1583400021-3288482790-2347783300-1003 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {F6C7FFBF-1E55-4CA6-8E96-AF8D429FF834} - System32\Tasks\ArcSoft Connect Daemon => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe Task: {F711A952-D26C-4E5C-868D-AD0C94AC0975} - System32\Tasks\{CFE76113-585E-40AF-B2A3-63DD523C7DFE} => C:\Program Files (x86)\JoWooD\Gothic II\UNWISE.EXE Task: {FB692F23-8C0B-4AB4-B788-39327C14FFB9} - System32\Tasks\{2E8832F1-1F55-45E4-ACD9-351D0305B561} => C:\Users\********\Desktop\battlelog-web-plugins-1.122.0-retail-prod.exe Task: {FC1C5DA1-14F2-467E-BB4B-5BB0F98CD433} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-10] (Adobe Systems Incorporated) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1583400021-3288482790-2347783300-1005Core.job => C:\Users\*****\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1583400021-3288482790-2347783300-1005UA.job => C:\Users\*****\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\FoxTab.job => C:\Users\********\AppData\Roaming\FoxTab\UpdateProc\UpdateTask.exe ==================== Loaded Modules (whitelisted) ============= 2010-07-24 18:56 - 2010-03-15 10:28 - 00052224 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll 2013-11-01 14:34 - 2013-11-01 13:14 - 02137088 _____ () C:\Program Files\AVAST Software\Avast\defs\13110100\algo.dll 2011-03-20 19:34 - 2011-03-20 19:34 - 00048640 _____ () C:\Windows\mmfs.dll 2013-10-24 13:16 - 2013-10-24 13:16 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\ProgramData\Temp:0B9176C0 AlternateDataStreams: C:\ProgramData\Temp:1D32EC29 AlternateDataStreams: C:\ProgramData\Temp:4CF61E54 AlternateDataStreams: C:\ProgramData\Temp:4D066AD2 AlternateDataStreams: C:\ProgramData\Temp:5D7E5A8F AlternateDataStreams: C:\ProgramData\Temp:93DE1838 AlternateDataStreams: C:\ProgramData\Temp:AB689DEA AlternateDataStreams: C:\ProgramData\Temp:ABE89FFE AlternateDataStreams: C:\ProgramData\Temp:D1B5B4F1 AlternateDataStreams: C:\ProgramData\Temp:E1F04E8D AlternateDataStreams: C:\ProgramData\Temp:E3C56885 AlternateDataStreams: C:\ProgramData\Temp:F3176E45 ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service" ==================== Faulty Device Manager Devices ============= Name: PS/2 Mouse Description: PS/2 Mouse Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318} Manufacturer: Logitech Service: i8042prt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: PS/2 Keyboard Description: PS/2 Keyboard Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318} Manufacturer: Logitech Service: i8042prt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: Power Control [2009/10/12 22:42:43] Description: Power Control [2009/10/12 22:42:43] Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: {49DE1C67-83F8-4102-99E0-C16DCC7EEC796} Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== Error: (11/01/2013 05:59:35 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 10.0.9200.16720, Zeitstempel: 0x523cf127 Name des fehlerhaften Moduls: Flash32_11_9_900_117.ocx, Version: 11.9.900.117, Zeitstempel: 0x5244d34f Ausnahmecode: 0xc0000005 Fehleroffset: 0x005a6c27 ID des fehlerhaften Prozesses: 0x27e0 Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0 Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1 Pfad des fehlerhaften Moduls: IEXPLORE.EXE2 Berichtskennung: IEXPLORE.EXE3 Error: (11/01/2013 05:59:16 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 10.0.9200.16720, Zeitstempel: 0x523cf127 Name des fehlerhaften Moduls: Flash32_11_9_900_117.ocx, Version: 11.9.900.117, Zeitstempel: 0x5244d34f Ausnahmecode: 0xc0000005 Fehleroffset: 0x005ac4a5 ID des fehlerhaften Prozesses: 0x7140 Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0 Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1 Pfad des fehlerhaften Moduls: IEXPLORE.EXE2 Berichtskennung: IEXPLORE.EXE3 Error: (11/01/2013 04:59:33 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 10.0.9200.16720, Zeitstempel: 0x523cf127 Name des fehlerhaften Moduls: jscript9.dll, Version: 10.0.9200.16720, Zeitstempel: 0x523cfbbb Ausnahmecode: 0xc0000005 Fehleroffset: 0x000c7e48 ID des fehlerhaften Prozesses: 0x13b0 Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0 Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1 Pfad des fehlerhaften Moduls: IEXPLORE.EXE2 Berichtskennung: IEXPLORE.EXE3 Error: (11/01/2013 04:57:03 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: svchost.exe_SysMain, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc3c1 Name des fehlerhaften Moduls: sysmain.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7c9db Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000004e03 ID des fehlerhaften Prozesses: 0x660 Startzeit der fehlerhaften Anwendung: 0xsvchost.exe_SysMain0 Pfad der fehlerhaften Anwendung: svchost.exe_SysMain1 Pfad des fehlerhaften Moduls: svchost.exe_SysMain2 Berichtskennung: svchost.exe_SysMain3 Error: (11/01/2013 04:30:48 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.ATL,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1". Die abhängige Assemblierung "Microsoft.VC90.ATL,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (11/01/2013 04:30:48 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.ATL,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1". Die abhängige Assemblierung "Microsoft.VC90.ATL,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (11/01/2013 04:30:48 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.ATL,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1". Die abhängige Assemblierung "Microsoft.VC90.ATL,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (11/01/2013 04:30:48 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.ATL,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1". Die abhängige Assemblierung "Microsoft.VC90.ATL,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (11/01/2013 04:30:48 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053"1". Die abhängige Assemblierung "Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (11/01/2013 04:20:30 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 10.0.9200.16720, Zeitstempel: 0x523cf127 Name des fehlerhaften Moduls: MSHTML.dll, Version: 10.0.9200.16721, Zeitstempel: 0x523f7a70 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00132f3a ID des fehlerhaften Prozesses: 0x13a8 Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0 Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1 Pfad des fehlerhaften Moduls: IEXPLORE.EXE2 Berichtskennung: IEXPLORE.EXE3 System errors: ============= Error: (11/01/2013 04:57:09 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Superfetch" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts. Error: (11/01/2013 04:30:54 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (11/01/2013 04:20:06 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "HP Network Devices Support" wurde mit folgendem Fehler beendet: %%126 Error: (11/01/2013 04:18:35 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (11/01/2013 04:17:50 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Power Control [2009/10/12 22:42:43]" wurde aufgrund folgenden Fehlers nicht gestartet: %%3 Error: (11/01/2013 04:17:30 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows-Bilderfassung (WIA)" ist vom Dienst "Shellhardwareerkennung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (11/01/2013 04:17:19 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "HP CUE DeviceDiscovery Service" wurde mit folgendem Fehler beendet: %%126 Error: (11/01/2013 04:04:44 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "HP Network Devices Support" wurde mit folgendem Fehler beendet: %%126 Error: (11/01/2013 04:04:44 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Google Update Service (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (11/01/2013 04:04:10 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Microsoft Office Sessions: ========================= Error: (11/01/2013 05:59:35 PM) (Source: Application Error)(User: ) Description: IEXPLORE.EXE10.0.9200.16720523cf127Flash32_11_9_900_117.ocx11.9.900.1175244d34fc0000005005a6c2727e001ced723b9a78cd6C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\SysWOW64\Macromed\Flash\Flash32_11_9_900_117.ocxfbb39e13-4316-11e3-8999-00016c6eadc5 Error: (11/01/2013 05:59:16 PM) (Source: Application Error)(User: ) Description: IEXPLORE.EXE10.0.9200.16720523cf127Flash32_11_9_900_117.ocx11.9.900.1175244d34fc0000005005ac4a5714001ced72348d9426cC:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\SysWOW64\Macromed\Flash\Flash32_11_9_900_117.ocxf03b2f73-4316-11e3-8999-00016c6eadc5 Error: (11/01/2013 04:59:33 PM) (Source: Application Error)(User: ) Description: IEXPLORE.EXE10.0.9200.16720523cf127jscript9.dll10.0.9200.16720523cfbbbc0000005000c7e4813b001ced715e9420936C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\SysWOW64\jscript9.dll99228225-430e-11e3-8999-00016c6eadc5 Error: (11/01/2013 04:57:03 PM) (Source: Application Error)(User: ) Description: svchost.exe_SysMain6.1.7600.163854a5bc3c1sysmain.dll6.1.7601.175144ce7c9dbc00000050000000000004e0366001ced7157b2dac3cC:\Windows\system32\svchost.exec:\windows\system32\sysmain.dll3f5beed7-430e-11e3-8999-00016c6eadc5 Error: (11/01/2013 04:30:48 PM) (Source: SideBySide)(User: ) Description: Microsoft.VC90.ATL,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"C:\Program Files\Logitech\SetPointP\Macros\MacroEmail.dll Error: (11/01/2013 04:30:48 PM) (Source: SideBySide)(User: ) Description: Microsoft.VC90.ATL,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"C:\Program Files\Logitech\SetPointP\Macros\MacroMedia.dll Error: (11/01/2013 04:30:48 PM) (Source: SideBySide)(User: ) Description: Microsoft.VC90.ATL,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"C:\Program Files\Logitech\SetPointP\Macros\MacroAppSwitch.dll Error: (11/01/2013 04:30:48 PM) (Source: SideBySide)(User: ) Description: Microsoft.VC90.ATL,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"C:\Program Files\Logitech\SetPointP\Macros\MacroCore.dll Error: (11/01/2013 04:30:48 PM) (Source: SideBySide)(User: ) Description: Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053"C:\Program Files\Logitech\Gaming Software\LWEMon.exe Error: (11/01/2013 04:20:30 PM) (Source: Application Error)(User: ) Description: IEXPLORE.EXE10.0.9200.16720523cf127MSHTML.dll10.0.9200.16721523f7a70c000000500132f3a13a801ced715cbeabf18C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\system32\MSHTML.dll242b9b65-4309-11e3-8999-00016c6eadc5 CodeIntegrity Errors: =================================== Date: 2013-10-21 15:25:36.458 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\spsys.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-10-21 15:25:36.299 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\spsys.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-01-30 14:13:52.118 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00176_004\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-01-30 13:39:19.913 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00176_004\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-01-30 13:26:40.753 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00176_004\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-01-30 13:18:29.210 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00175_003\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-01-30 08:03:26.642 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00175_003\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-01-30 07:45:21.585 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00175_003\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-01-29 13:12:35.342 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00175_003\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-01-29 12:39:26.809 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00175_003\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 29% Total physical RAM: 8183.08 MB Available physical RAM: 5781.04 MB Total Pagefile: 16364.34 MB Available Pagefile: 14097.61 MB Total Virtual: 8192 MB Available Virtual: 8191.78 MB ==================== Drives ================================ Drive c: (Acer) (Fixed) (Total:690.95 GB) (Free:531.32 GB) NTFS Drive d: (DATA) (Fixed) (Total:691.21 GB) (Free:358.59 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1397 GB) (Disk ID: B03163E9) Partition 1: (Not Active) - (Size=15 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=691 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=691 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
02.11.2013, 00:07 | #7 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Programme lassen sich nicht mehr öffnen Da gefällt mit einiges nicht. Dann bitte jetzt Combofix ausführen: Scan mit Combofix
__________________ Logfiles bitte immer in CODE-Tags posten |
02.11.2013, 12:10 | #8 |
| Programme lassen sich nicht mehr öffnen Bitte schön hier ist der Text. Ich hätte noch zwei Fragen. Die eine wäre,das im Fenster in Combofix stand das Datein gelöscht wurden sind,ich hoffe nicht das es wichtige Dateien waren oder? Die andere wäre ob ich das Programm löschen kann? Code:
ATTFilter ComboFix 13-11-01.03 - ******** 02.11.2013 11:29:23.1.4 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.8183.6177 [GMT 1:00] ausgeführt von:: c:\users\********\Downloads\ComboFix.exe AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B} SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\program files (x86)\UNWISE.EXE c:\programdata\1358438490.bdinstall.bin c:\programdata\1361108637.bdinstall.bin c:\users\*****\4.0 c:\users\*****\AppData\Roaming\facemoods.com c:\users\*****\Documents\~WRL0003.tmp c:\users\********\AppData\Roaming\.# c:\users\********\AppData\Roaming\PriceGong c:\users\********\AppData\Roaming\PriceGong\Data\1.xml c:\users\********\AppData\Roaming\PriceGong\Data\a.xml c:\users\********\AppData\Roaming\PriceGong\Data\b.xml c:\users\********\AppData\Roaming\PriceGong\Data\c.xml c:\users\********\AppData\Roaming\PriceGong\Data\d.xml c:\users\********\AppData\Roaming\PriceGong\Data\e.xml c:\users\********\AppData\Roaming\PriceGong\Data\f.xml c:\users\********\AppData\Roaming\PriceGong\Data\g.xml c:\users\********\AppData\Roaming\PriceGong\Data\h.xml c:\users\********\AppData\Roaming\PriceGong\Data\i.xml c:\users\********\AppData\Roaming\PriceGong\Data\J.xml c:\users\********\AppData\Roaming\PriceGong\Data\k.xml c:\users\********\AppData\Roaming\PriceGong\Data\l.xml c:\users\********\AppData\Roaming\PriceGong\Data\m.xml c:\users\********\AppData\Roaming\PriceGong\Data\mru.xml c:\users\********\AppData\Roaming\PriceGong\Data\n.xml c:\users\********\AppData\Roaming\PriceGong\Data\o.xml c:\users\********\AppData\Roaming\PriceGong\Data\p.xml c:\users\********\AppData\Roaming\PriceGong\Data\q.xml c:\users\********\AppData\Roaming\PriceGong\Data\r.xml c:\users\********\AppData\Roaming\PriceGong\Data\s.xml c:\users\********\AppData\Roaming\PriceGong\Data\t.xml c:\users\********\AppData\Roaming\PriceGong\Data\u.xml c:\users\********\AppData\Roaming\PriceGong\Data\v.xml c:\users\********\AppData\Roaming\PriceGong\Data\w.xml c:\users\********\AppData\Roaming\PriceGong\Data\x.xml c:\users\********\AppData\Roaming\PriceGong\Data\y.xml c:\users\********\AppData\Roaming\PriceGong\Data\z.xml c:\windows\IsUn0407.exe . . ((((((((((((((((((((((( Dateien erstellt von 2013-10-02 bis 2013-11-02 )))))))))))))))))))))))))))))) . . 2013-11-02 10:39 . 2013-11-02 10:39 -------- d-----w- c:\users\Default\AppData\Local\temp 2013-11-02 10:39 . 2013-11-02 10:39 -------- d-----w- c:\users\************\AppData\Local\temp 2013-11-02 10:39 . 2013-11-02 10:39 -------- d-----w- c:\users\*****\AppData\Local\temp 2013-11-02 10:38 . 2013-11-02 10:38 -------- d-----w- c:\users\Gast\AppData\Local\temp 2013-11-02 10:38 . 2013-11-02 10:38 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp 2013-11-02 10:22 . 2013-11-02 10:22 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{ABE1CD17-5D28-48F2-BAEE-87131E440139}\offreg.dll 2013-11-01 20:23 . 2013-11-01 20:23 -------- d-----w- c:\program files (x86)\Common Files\Steam 2013-11-01 20:20 . 2013-11-01 20:20 -------- d-----w- c:\program files (x86)\Mozilla Maintenance Service 2013-11-01 20:19 . 2013-11-01 20:19 -------- d-----w- c:\users\********\AppData\Local\BonanzaDealsLive 2013-11-01 20:19 . 2013-11-01 20:19 -------- d-----w- c:\programdata\BonanzaDealsLive 2013-11-01 20:19 . 2013-11-01 20:19 -------- d-----w- c:\program files (x86)\Wajam 2013-11-01 20:19 . 2013-11-01 20:19 -------- d-----w- c:\program files (x86)\BonanzaDeals 2013-11-01 17:35 . 2013-11-01 17:35 -------- d-----w- C:\FRST 2013-11-01 14:59 . 2013-11-01 14:59 -------- d-----w- C:\found.008 2013-11-01 14:12 . 2013-11-01 14:12 -------- d-----w- c:\programdata\Uniblue 2013-11-01 13:51 . 2013-11-01 13:51 -------- d-----w- c:\users\********\AppData\Local\Avg2014 2013-11-01 10:19 . 2013-11-01 10:19 -------- d-----w- c:\program files (x86)\Common Files\Skype 2013-11-01 10:19 . 2013-11-01 10:19 -------- d-----w- c:\program files (x86)\Skype 2013-11-01 10:19 . 2013-10-14 07:12 10280728 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{ABE1CD17-5D28-48F2-BAEE-87131E440139}\mpengine.dll 2013-11-01 10:07 . 2013-11-01 10:07 -------- d-----w- c:\program files (x86)\Microsoft.NET 2013-10-31 21:57 . 2013-10-31 21:57 -------- d-----w- c:\users\********\AppData\Roaming\Malwarebytes 2013-10-31 21:57 . 2013-10-31 21:57 -------- d-----w- c:\programdata\Malwarebytes 2013-10-31 21:56 . 2013-11-01 09:58 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware 2013-10-31 21:56 . 2013-04-04 13:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys 2013-10-31 21:46 . 2013-10-31 21:46 -------- d-----w- c:\windows\Migration 2013-10-31 21:41 . 2013-10-31 21:52 -------- d-----w- C:\63b9d940cd5dd60b0f760919 2013-10-31 20:28 . 2013-10-31 20:28 -------- d-----w- c:\program files\Enigma Software Group 2013-10-31 20:27 . 2013-10-31 20:46 -------- d-----w- c:\windows\72AAF4551E54475BB0AB5413C78D0E63.TMP 2013-10-31 08:49 . 2013-10-18 01:36 1063200 ----a-w- c:\windows\system32\nvspcap64.dll 2013-10-31 08:49 . 2013-10-18 01:36 955168 ----a-w- c:\windows\SysWow64\nvspcap.dll 2013-10-31 08:46 . 2013-09-27 23:01 39200 ----a-w- c:\windows\system32\drivers\nvvad64v.sys 2013-10-31 08:46 . 2013-09-27 23:01 28960 ----a-w- c:\windows\SysWow64\nvaudcap32v.dll 2013-10-30 16:10 . 2013-10-08 11:29 43320 ----a-w- c:\windows\system32\uxtuneup.dll 2013-10-30 16:10 . 2013-10-08 11:29 36152 ----a-w- c:\windows\SysWow64\uxtuneup.dll 2013-10-30 16:10 . 2013-10-08 11:29 40760 ----a-w- c:\windows\system32\TURegOpt.exe 2013-10-30 16:10 . 2013-10-08 11:29 29496 ----a-w- c:\windows\system32\authuitu.dll 2013-10-30 16:09 . 2013-10-08 11:29 25400 ----a-w- c:\windows\SysWow64\authuitu.dll 2013-10-30 16:09 . 2013-10-30 16:10 -------- d-----w- c:\program files (x86)\TuneUp Utilities 2014 2013-10-30 08:58 . 2013-10-30 08:58 -------- d-----w- C:\found.007 2013-10-24 16:46 . 2013-10-24 16:46 -------- d-----w- c:\users\*****\AppData\Roaming\AVAST Software 2013-10-24 12:20 . 2013-10-24 12:20 -------- d-----w- c:\users\********\AppData\Roaming\AVAST Software 2013-10-24 12:09 . 2013-10-24 12:09 -------- d-----w- c:\users\********\AppData\Roaming\FoxTab 2013-10-23 02:02 . 2013-10-23 02:02 589600 ----a-w- c:\windows\SysWow64\nvStreaming.exe 2013-10-20 19:04 . 2013-10-20 19:04 -------- d-----w- C:\found.006 2013-10-20 10:02 . 2013-10-20 10:02 312744 ----a-w- c:\windows\system32\javaws.exe 2013-10-20 10:02 . 2013-10-20 10:02 189352 ----a-w- c:\windows\system32\javaw.exe 2013-10-20 10:02 . 2013-10-20 10:02 189352 ----a-w- c:\windows\system32\java.exe 2013-10-20 10:02 . 2013-10-20 10:02 108968 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll 2013-10-20 10:02 . 2013-10-20 10:02 -------- d-----w- c:\program files\Java 2013-10-13 17:21 . 2013-10-31 08:43 -------- d-----w- c:\users\********\AppData\Local\ElevatedDiagnostics 2013-10-13 07:10 . 2013-10-13 07:10 -------- d-----w- c:\program files (x86)\TuxGuitar-Jet 2013-10-12 07:46 . 2013-10-24 12:16 409832 ----a-w- c:\windows\system32\drivers\aswSP.sys 2013-10-12 07:46 . 2013-10-24 12:16 38984 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys 2013-10-12 07:46 . 2013-10-24 12:16 92544 ----a-w- c:\windows\system32\drivers\aswRdr2.sys 2013-10-12 07:46 . 2013-10-24 12:16 65264 ----a-w- c:\windows\system32\drivers\aswTdi.sys 2013-10-12 07:46 . 2013-10-24 12:16 1032416 ----a-w- c:\windows\system32\drivers\aswSnx.sys 2013-10-12 07:46 . 2013-10-24 12:16 205320 ----a-w- c:\windows\system32\drivers\aswVmm.sys 2013-10-12 07:46 . 2013-10-24 12:16 65776 ----a-w- c:\windows\system32\drivers\aswRvrt.sys 2013-10-12 07:46 . 2013-10-24 12:16 84328 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys 2013-10-12 07:45 . 2013-10-24 12:16 43152 ----a-w- c:\windows\avastSS.scr 2013-10-12 07:15 . 2013-10-12 07:15 -------- d-----w- C:\found.005 2013-10-11 17:30 . 2013-09-04 12:12 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys 2013-10-11 17:30 . 2013-09-04 12:11 325120 ----a-w- c:\windows\system32\drivers\usbport.sys 2013-10-11 17:30 . 2013-09-04 12:11 99840 ----a-w- c:\windows\system32\drivers\usbccgp.sys 2013-10-11 17:30 . 2013-09-04 12:11 52736 ----a-w- c:\windows\system32\drivers\usbehci.sys 2013-10-11 17:30 . 2013-09-04 12:11 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys 2013-10-11 17:30 . 2013-09-04 12:11 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys 2013-10-11 17:30 . 2013-09-04 12:11 7808 ----a-w- c:\windows\system32\drivers\usbd.sys 2013-10-11 12:26 . 2013-07-04 11:50 530432 ----a-w- c:\windows\SysWow64\comctl32.dll 2013-10-11 12:26 . 2013-07-04 12:50 633856 ----a-w- c:\windows\system32\comctl32.dll 2013-10-11 12:26 . 2013-06-06 05:50 41472 ----a-w- c:\windows\system32\lpk.dll 2013-10-11 12:26 . 2013-06-06 05:49 100864 ----a-w- c:\windows\system32\fontsub.dll 2013-10-11 12:26 . 2013-06-06 05:49 14336 ----a-w- c:\windows\system32\dciman32.dll 2013-10-11 12:26 . 2013-06-06 05:47 46080 ----a-w- c:\windows\system32\atmlib.dll 2013-10-11 12:26 . 2013-06-06 04:57 25600 ----a-w- c:\windows\SysWow64\lpk.dll 2013-10-11 12:26 . 2013-06-06 04:51 70656 ----a-w- c:\windows\SysWow64\fontsub.dll 2013-10-11 12:26 . 2013-06-06 04:50 10240 ----a-w- c:\windows\SysWow64\dciman32.dll 2013-10-11 12:26 . 2013-06-06 03:30 368128 ----a-w- c:\windows\system32\atmfd.dll 2013-10-11 12:26 . 2013-06-06 03:01 295424 ----a-w- c:\windows\SysWow64\atmfd.dll 2013-10-11 12:26 . 2013-06-06 03:01 34304 ----a-w- c:\windows\SysWow64\atmlib.dll 2013-10-11 06:26 . 2013-06-25 22:55 785624 ----a-w- c:\windows\system32\drivers\Wdf01000.sys 2013-10-09 06:44 . 2013-10-09 06:44 -------- d-----w- c:\users\*****\AppData\Local\LogMeIn 2013-10-08 10:49 . 2013-10-08 10:49 -------- d-----w- C:\found.004 2013-10-05 16:40 . 2013-10-05 16:40 -------- d-----w- c:\users\********\AppData\Local\NVIDIA 2013-10-05 16:38 . 2013-09-27 23:01 29984 ----a-w- c:\windows\system32\nvaudcap64v.dll 2013-10-04 12:53 . 2013-10-04 12:53 -------- d-----w- c:\programdata\AskPartnerNetwork 2013-10-04 12:53 . 2013-10-04 12:53 -------- d-----w- c:\program files (x86)\AskPartnerNetwork 2013-10-04 12:53 . 2013-10-04 12:53 -------- d-----w- c:\programdata\APN 2013-10-04 12:42 . 2013-10-04 12:42 -------- d-s---w- c:\windows\SysWow64\Microsoft . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-10-31 13:02 . 2013-05-26 15:51 18960 ----a-w- c:\windows\system32\drivers\LNonPnP.sys 2013-10-24 12:16 . 2013-02-17 13:51 334648 ----a-w- c:\windows\system32\aswBoot.exe 2013-10-23 10:30 . 2013-09-17 20:22 18286416 ----a-w- c:\windows\system32\nvwgf2umx.dll 2013-10-23 10:30 . 2013-09-17 20:22 15855568 ----a-w- c:\windows\SysWow64\nvwgf2um.dll 2013-10-23 10:30 . 2013-09-17 20:22 2695200 ----a-w- c:\windows\SysWow64\nvapi.dll 2013-10-23 10:30 . 2012-10-20 17:46 15212336 ----a-w- c:\windows\SysWow64\nvd3dum.dll 2013-10-23 10:30 . 2012-10-07 19:45 1435504 ----a-w- c:\windows\system32\nvumdshimx.dll 2013-10-23 10:30 . 2009-09-17 21:58 3067560 ----a-w- c:\windows\system32\nvapi64.dll 2013-10-23 08:20 . 2010-07-09 14:27 6669600 ----a-w- c:\windows\system32\nvcpl.dll 2013-10-23 08:20 . 2010-07-09 14:27 3489568 ----a-w- c:\windows\system32\nvsvc64.dll 2013-10-23 08:20 . 2010-07-09 14:27 922912 ----a-w- c:\windows\system32\nvvsvc.exe 2013-10-23 08:20 . 2010-07-09 14:27 219424 ----a-w- c:\windows\system32\nvmctray.dll 2013-10-23 08:20 . 2009-07-14 07:51 63776 ----a-w- c:\windows\system32\nvshext.dll 2013-10-23 08:20 . 2009-07-14 07:51 2559776 ----a-w- c:\windows\system32\nvsvcr.dll 2013-10-23 08:20 . 2012-10-18 06:12 3426956 ----a-w- c:\windows\system32\nvcoproc.bin 2013-10-11 17:33 . 2010-06-04 05:57 80541720 ----a-w- c:\windows\system32\MRT.exe 2013-10-10 16:37 . 2012-04-01 12:24 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-10-10 16:37 . 2011-05-16 18:21 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-09-27 15:37 . 2013-09-27 15:38 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll 2013-09-27 15:37 . 2012-07-13 17:28 868264 ----a-w- c:\windows\SysWow64\npDeployJava1.dll 2013-09-27 15:37 . 2010-08-19 13:46 790440 ----a-w- c:\windows\SysWow64\deployJava1.dll 2013-09-17 20:22 . 2013-09-17 20:22 31520 ----a-w- c:\windows\system32\nvhdap64.dll 2013-09-17 20:22 . 2013-09-17 20:22 196384 ----a-w- c:\windows\system32\drivers\nvhda64v.sys 2013-09-17 20:22 . 2013-09-17 20:22 1884448 ----a-w- c:\windows\system32\nvdispco6432723.dll 2013-09-17 20:22 . 2013-09-17 20:22 1511712 ----a-w- c:\windows\system32\nvdispgenco6432723.dll 2013-09-17 20:22 . 2013-09-17 20:22 1510176 ----a-w- c:\windows\system32\nvhdagenco6420103.dll 2013-09-11 20:21 . 2013-09-11 20:21 863344 ----a-w- c:\windows\SysWow64\msvcr110_clr0400.dll 2013-09-11 20:21 . 2013-09-11 20:21 501872 ----a-w- c:\windows\SysWow64\msvcp110_clr0400.dll 2013-09-11 20:21 . 2013-09-11 20:21 28776 ----a-w- c:\windows\SysWow64\aspnet_counters.dll 2013-09-11 20:21 . 2013-09-11 20:21 18000 ----a-w- c:\windows\SysWow64\msvcr100_clr0400.dll 2013-09-11 18:39 . 2013-09-11 18:39 855664 ----a-w- c:\windows\system32\msvcr110_clr0400.dll 2013-09-11 18:39 . 2013-09-11 18:39 614000 ----a-w- c:\windows\system32\msvcp110_clr0400.dll 2013-09-11 18:39 . 2013-09-11 18:39 30312 ----a-w- c:\windows\system32\aspnet_counters.dll 2013-09-11 18:39 . 2013-09-11 18:39 18000 ----a-w- c:\windows\system32\msvcr100_clr0400.dll 2013-09-03 12:35 . 2010-06-03 17:37 278800 ------w- c:\windows\system32\MpSigStub.exe 2013-08-29 01:48 . 2013-10-11 06:26 44032 ----a-w- c:\windows\apppatch\acwow64.dll 2013-08-05 02:25 . 2013-09-11 14:12 155584 ----a-w- c:\windows\system32\drivers\ataport.sys . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{fe063412-bea4-4d76-8ed3-183be6220d17}] 2013-08-21 17:36 100336 ----a-w- c:\program files (x86)\BonanzaDeals\BonanzaDealsIE.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "icq"="c:\users\********\AppData\Roaming\ICQM\icq.exe" [2012-12-30 26606072] "Akamai NetSession Interface"="c:\users\********\AppData\Local\Akamai\netsession_win.exe" [2013-06-04 4489472] "Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-10-02 20473504] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2007-03-20 36864] "FixCamera"="c:\windows\FixCamera.exe" [2007-02-12 20480] "tsnp2std"="c:\windows\tsnp2std.exe" [2007-05-12 270336] "AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2013-10-24 3567800] . c:\users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ tbhcn.lnk - c:\users\********\AppData\Roaming\BrowserCompanion\tbhcn.exe -interval=10 -IEhome=0 -IEsearch=0 -FFhome=0 -FFsearch=0 -CHhome=0 -CHsearch=0 -pubId=ginyas_377 -affId=g377_sfexp_de [2012-7-2 695448] Xfire.lnk - c:\program files (x86)\Xfire\Xfire.exe [2005-9-28 3088520] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-] "BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k "Hotkey Utility"=c:\program files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe "ArcadeDeluxeAgent"="c:\program files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe" "SMSTray"=c:\program files (x86)\Samsung\Samsung Media Studio 5\SMSTray.exe "MAAgent"=c:\program files (x86)\MarkAny\ContentSafer\MAAgent.exe "vspdfprsrv.exe"=c:\program files (x86)\Avanquest\PDF Experte 7 Ultimate\vspdfprsrv.exe --background "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" "TkBellExe"="c:\program files (x86)\real\realplayer\Update\realsched.exe" -osboot "LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start "ApnTBMon"="c:\program files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" . R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};Power Control [2009/10/12 22:42];c:\program files (x86)\Acer Arcade Deluxe\PlayMovie\000.fcl;c:\program files (x86)\Acer Arcade Deluxe\PlayMovie\000.fcl [x] R2 bonanzadealslive;BonanzaDealsLive-Dienst (bonanzadealslive);c:\program files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe;c:\program files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe [x] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 LicCtrlService;LicCtrl Service;c:\windows\runservice.exe;c:\windows\runservice.exe [x] R3 AF9035HB;AF9035 Hybrid Device;c:\windows\system32\Drivers\AF9035HB.sys;c:\windows\SYSNATIVE\Drivers\AF9035HB.sys [x] R3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys;c:\windows\SYSNATIVE\DRIVERS\ArcSoftKsUFilter.sys [x] R3 bonanzadealslivem;BonanzaDealsLive-Dienst (bonanzadealslivem);c:\program files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe;c:\program files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe [x] R3 CEDRIVER55;CEDRIVER55;c:\program files (x86)\Cheat Engine\dbk64.sys;c:\program files (x86)\Cheat Engine\dbk64.sys [x] R3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys;c:\windows\SYSNATIVE\DRIVERS\dc3d.sys [x] R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x] R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x] R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x] R3 netr28x;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28x.sys;c:\windows\SYSNATIVE\DRIVERS\netr28x.sys [x] R3 Point64;Microsoft IntelliPoint Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x] R3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\DRIVERS\teamviewervpn.sys;c:\windows\SYSNATIVE\DRIVERS\teamviewervpn.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R4 Fabs;FABS - Helping agent for MAGIX media database;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [x] R4 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x] R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x] S0 aswRvrt;avast! Revert; [x] S0 aswVmm;avast! VM Monitor; [x] S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x] S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x] S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDFilter.sys [x] S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDNServ.sys [x] S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDVDisk.sys [x] S2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys;c:\windows\SYSNATIVE\drivers\aswFsBlk.sys [x] S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x] S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x] S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [x] S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [x] S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x] S2 WajamUpdaterV3;WajamUpdaterV3;c:\program files (x86)\Wajam\Updater\WajamUpdaterV3.exe;c:\program files (x86)\Wajam\Updater\WajamUpdaterV3.exe [x] S3 e1kexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver K;c:\windows\system32\DRIVERS\e1k62x64.sys;c:\windows\SYSNATIVE\DRIVERS\e1k62x64.sys [x] S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x] S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [x] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost] hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc . Inhalt des "geplante Tasks" Ordners . 2013-11-02 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-01 16:37] . 2013-11-02 c:\windows\Tasks\BonanzaDealsLiveUpdateTaskMachineCore.job - c:\program files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe [2013-11-01 20:19] . 2013-11-02 c:\windows\Tasks\BonanzaDealsLiveUpdateTaskMachineUA.job - c:\program files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe [2013-11-01 20:19] . 2013-11-02 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1583400021-3288482790-2347783300-1005Core.job - c:\users\*****\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-02-16 09:25] . 2013-11-02 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1583400021-3288482790-2347783300-1005UA.job - c:\users\*****\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-02-16 09:25] . 2013-11-02 c:\windows\Tasks\FoxTab.job - c:\users\********\AppData\Roaming\FoxTab\UpdateProc\UpdateTask.exe [2013-04-12 14:10] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}] 2013-10-24 12:16 326944 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "snp2std"="c:\windows\vsnp2std.exe" [2007-05-10 344064] "IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2011-04-13 2399632] "Start WingMan Profiler"="c:\program files\Logitech\Gaming Software\LWEMon.exe" [2010-06-14 190536] "EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2013-02-21 2991856] "ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2013-10-18 1063200] . HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp . ------- Zusätzlicher Suchlauf ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://www.google.de/ mLocal Page = c:\windows\SysWOW64\blank.htm mSearch Page = ${URL_SEARCHPAGE} uInternet Settings,ProxyOverride = <local> uSearchAssistant = hxxp://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=DE&userid=52316e1f-a8ab-45be-a924-d8e1eecc9e54&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms} IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000 IE: Free YouTube Download - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html IE: {{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - c:\program files (x86)\ICQ7.7\ICQ.exe IE: {{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game.zylom.com/activex/zylomgamesplayer.cab FF - ProfilePath - c:\users\********\AppData\Roaming\Mozilla\Firefox\Profiles\p91ni8wb.default\ FF - prefs.js: browser.search.selectedEngine - AVG Secure Search FF - prefs.js: browser.startup.homepage - hxxps://www.google.de/ FF - ExtSQL: 2013-09-24 03:19; toolbar_AVIRA-V7@apn.ask.com; c:\users\********\AppData\Roaming\Mozilla\Firefox\Profiles\p91ni8wb.default\extensions\toolbar_AVIRA-V7@apn.ask.com.xpi FF - ExtSQL: 2013-10-12 09:45; wrc@avast.com; c:\program files\AVAST Software\Avast\WebRep\FF FF - ExtSQL: 2013-10-24 14:09; {5ebdca98-43b3-45bb-87e0-716029fb42ab}; c:\users\********\AppData\Roaming\Mozilla\Firefox\Profiles\p91ni8wb.default\extensions\{5ebdca98-43b3-45bb-87e0-716029fb42ab} FF - ExtSQL: 2013-11-01 21:19; {f9d03c26-0575-497e-821d-f7956d23e0ca}; c:\users\********\AppData\Roaming\Mozilla\Firefox\Profiles\p91ni8wb.default\extensions\{f9d03c26-0575-497e-821d-f7956d23e0ca} FF - user.js: content.max.tokenizing.time - 1800000 FF - user.js: content.notify.interval - 600000 FF - user.js: content.switch.threshold - 600000 FF - user.js: extensions.autoDisableScopes - 14 FF - user.js: extentions.y2layers.defaultEnableAppsList - DropDownDeals,BestVideoDownloader,EzLooker,TwitTube,TopRelatedTopics,Buzzdock, FF - user.js: extentions.y2layers.installId - d7ca7d74-f66b-4655-b482-0ab18f576f60 FF - user.js: network.http.max-connections-per-server - 8 FF - user.js: network.http.max-persistent-connections-per-server - 4 FF - user.js: nglayout.initialpaint.delay - 600 FF - user.js: security.csp.enable - false FF - user.js: extensions.irspeeddial.aflt - fxntbd FF - user.js: extensions.irspeeddial.instlRef - FF - user.js: extensions.irspeeddial.cr - 925689866 FF - user.js: extensions.irspeeddial.cd - 2XzuyEtN2Y1L1QzuyB0AyBzytCzytD0CzztDzztCtCtAzy0EtN0D0Tzu0CyCyCtAtN1L2XzutBtFtBtFyBtFtCtBtDtCtN1L1Czu1G2Z1S . - - - - Entfernte verwaiste Registrierungseinträge - - - - . BHO-{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - (no file) BHO-{0766C1B9-B2DC-46E5-8934-4F3D6B42B1BD} - (no file) BHO-{22e03916-85c5-44b0-8dc9-1830c11238d9} - (no file) BHO-{38542454-dfb6-44f5-b052-d4e071a3d073} - (no file) BHO-{41564952-412D-5637-00A7-7A786E7484D7} - (no file) BHO-{7846ae31-bea2-438a-8f5e-2d899361656c} - (no file) BHO-{872b5b88-9db5-4310-bdd0-ac189557e5f5} - (no file) BHO-{942cd1d4-9cc1-4d31-876a-ea8f489f7a59} - (no file) BHO-{c9508125-4747-4733-b048-e4b82dc9716d} - (no file) BHO-{e8de9422-3b2c-4243-bf6f-235da84d8ef8} - (no file) Toolbar-Locked - (no file) Toolbar-{872b5b88-9db5-4310-bdd0-ac189557e5f5} - (no file) Toolbar-{c9508125-4747-4733-b048-e4b82dc9716d} - (no file) Toolbar-{e8de9422-3b2c-4243-bf6f-235da84d8ef8} - (no file) Toolbar-{7846ae31-bea2-438a-8f5e-2d899361656c} - (no file) Toolbar-{22e03916-85c5-44b0-8dc9-1830c11238d9} - (no file) Toolbar-{38542454-dfb6-44f5-b052-d4e071a3d073} - (no file) Toolbar-{DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - (no file) Toolbar-{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - (no file) Toolbar-{942cd1d4-9cc1-4d31-876a-ea8f489f7a59} - (no file) Toolbar-{41564952-412D-5637-00A7-7A786E7484D7} - (no file) ShellIconOverlayIdentifiers-{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} - c:\program files (x86)\EgisTec\MyWinLocker 3\x86\psdprotect.dll Wow6432Node-HKLM-Run-<NO NAME> - (no file) c:\users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe ShellExecuteHooks-{88485281-8b4b-4f8d-9ede-82e29a064277} - (no file) BHO-{41564952-412D-5637-00A7-7A786E7484D7} - (no file) Toolbar-Locked - (no file) Toolbar-{41564952-412D-5637-00A7-7A786E7484D7} - (no file) WebBrowser-{872B5B88-9DB5-4310-BDD0-AC189557E5F5} - (no file) WebBrowser-{C9508125-4747-4733-B048-E4B82DC9716D} - (no file) WebBrowser-{E8DE9422-3B2C-4243-BF6F-235DA84D8EF8} - (no file) WebBrowser-{A057A204-BACC-4D26-9C92-30A187E26996} - (no file) WebBrowser-{7846AE31-BEA2-438A-8F5E-2D899361656C} - (no file) WebBrowser-{22E03916-85C5-44B0-8DC9-1830C11238D9} - (no file) WebBrowser-{38542454-DFB6-44F5-B052-D4E071A3D073} - (no file) WebBrowser-{5E7F9DB2-3507-467D-AA2F-DCCB5971B5AF} - (no file) ShellIconOverlayIdentifiers-{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} - (no file) ShellIconOverlayIdentifiers-{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} - (no file) ShellIconOverlayIdentifiers-{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} - (no file) ShellIconOverlayIdentifiers-{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} - (no file) ShellIconOverlayIdentifiers-{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} - (no file) ShellIconOverlayIdentifiers-{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} - (no file) ShellIconOverlayIdentifiers-{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} - (no file) AddRemove-NVIDIAStereo - c:\program files (x86)\NVIDIA Corporation\3D Vision\nvStInst.exe AddRemove-{2637C347-9DAD-11D6-9EA2-00055D0CA761} - c:\program files (x86)\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.exe AddRemove-{30075A70-B5D2-440B-AFA3-FB2021740121} - c:\program files (x86)\InstallShield Installation Information\{30075A70-B5D2-440B-AFA3-FB2021740121}\setup.exe AddRemove-{980A182F-E0A2-4A40-94C1-AE0C1235902E} - c:\program files (x86)\Pando Networks\Media Booster\uninst.exe AddRemove-{CB099890-1D5F-11D5-9EA9-0050BAE317E1} - c:\program files (x86)\InstallShield Installation Information\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}\setup.exe . . . [HKEY_LOCAL_MACHINE\system\ControlSet001\services\{49DE1C67-83F8-4102-99E0-C16DCC7EEC796}] "ImagePath"="\??\c:\program files (x86)\Acer Arcade Deluxe\PlayMovie\000.fcl" . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_USERS\S-1-5-21-1583400021-3288482790-2347783300-1003\Software\SecuROM\License information*] "datasecu"=hex:23,e3,72,ef,55,60,a2,34,fc,9b,f4,4a,05,f1,1a,7e,25,4d,e2,57,57, fe,a5,41,1a,bf,86,5a,9c,96,2a,a5,63,58,87,91,6d,c3,39,1d,47,20,b6,59,d1,13,\ "rkeysecu"=hex:40,1a,8b,e9,ab,04,8b,f2,b6,ab,7d,ab,27,d0,ed,fa . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{BCA821CD-4A5D-ABF7-7317F5EBFF711061}\{A8AD8BCF-CB94-6A01-1BDB64CAD4C7BA22}\{6360A729-06A7-39D5-91DA34CCB8512CF9}*] "5IKKD5C2P51J4KPDX1YQS6YJSH1"=hex:01,00,01,00,00,00,00,00,99,a4,b4,55,39,e3,1c, 2b,35,81,92,71,e8,29,5a,84,14,35,16,70,d8,6e,ff,61 . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{E8569B02-E577-013D-C3A3C50EF410F5FE}\{D07ADE0E-79DB-2CFB-D413AB0F0F722520}\{6AF39A39-D459-97F6-AE29B5DA7826690D}*] "5IKKD5C2P51J4KPDX1YQS6YJSH1"=hex:01,00,01,00,00,00,00,00,99,a4,b4,55,39,e3,1c, 2b,35,81,92,71,e8,29,5a,84,14,35,16,70,d8,6e,ff,61 . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Zeit der Fertigstellung: 2013-11-02 11:42:22 ComboFix-quarantined-files.txt 2013-11-02 10:42 . Vor Suchlauf: 21 Verzeichnis(se), 569.490.362.368 Bytes frei Nach Suchlauf: 35 Verzeichnis(se), 571.890.102.272 Bytes frei . - - End Of File - - 5E39198B25F03E96CFA65A9FB23A541B A36C5E4F47E84449FF07ED3517B43A31 |
03.11.2013, 00:44 | #9 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Programme lassen sich nicht mehr öffnen Adware/Junkware/Toolbars entfernen 1. Schritt: adwCleaner Downloade Dir bitte AdwCleaner auf deinen Desktop.
2. Schritt: JRT - Junkware Removal Tool Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
3. Schritt: Frisches Log mit FRST Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ Logfiles bitte immer in CODE-Tags posten |
03.11.2013, 12:24 | #10 |
| Programme lassen sich nicht mehr öffnen 1. adw cleaner AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v3.010 - Bericht erstellt am 03/11/2013 um 11:31:07 # Updated 20/10/2013 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzername : ******** - ******-PC # Gestartet von : C:\Users\********\Downloads\adwcleaner.exe # Option : Löschen ***** [ Dienste ] ***** [#] Dienst Gelöscht : bonanzadealslive [#] Dienst Gelöscht : bonanzadealslivem ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\ProgramData\apn Ordner Gelöscht : C:\ProgramData\AskPartnerNetwork Ordner Gelöscht : C:\ProgramData\BonanzaDealsLive Ordner Gelöscht : C:\ProgramData\ICQ\ICQToolbar Ordner Gelöscht : C:\ProgramData\Partner Ordner Gelöscht : C:\ProgramData\Tarma Installer Ordner Gelöscht : C:\ProgramData\Trymedia Ordner Gelöscht : C:\ProgramData\Uniblue\DriverScanner Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\software4u Ordner Gelöscht : C:\Program Files (x86)\AskPartnerNetwork Ordner Gelöscht : C:\Program Files (x86)\BonanzaDeals Ordner Gelöscht : C:\Program Files (x86)\BonanzaDealsLive Ordner Gelöscht : C:\Program Files (x86)\Wajam Ordner Gelöscht : C:\Program Files (x86)\Yontoo Ordner Gelöscht : C:\Users\********\AppData\Local\BonanzaDealsLive Ordner Gelöscht : C:\Users\********\AppData\Local\Brothersoft Ordner Gelöscht : C:\Users\********\AppData\Local\Conduit Ordner Gelöscht : C:\Users\********\AppData\Local\ConduitEngine Ordner Gelöscht : C:\Users\********\AppData\Local\OpenCandy Ordner Gelöscht : C:\Users\********\AppData\LocalLow\BabylonToolbar Ordner Gelöscht : C:\Users\********\AppData\LocalLow\bbrs_002.tb Ordner Gelöscht : C:\Users\********\AppData\LocalLow\Brothersoft Ordner Gelöscht : C:\Users\********\AppData\LocalLow\Conduit Ordner Gelöscht : C:\Users\********\AppData\LocalLow\Dealio Ordner Gelöscht : C:\Users\********\AppData\LocalLow\DVDVideoSoftTB Ordner Gelöscht : C:\Users\********\AppData\LocalLow\facemoods.com Ordner Gelöscht : C:\Users\********\AppData\LocalLow\Search Settings Ordner Gelöscht : C:\Users\********\AppData\LocalLow\Elf_1 Ordner Gelöscht : C:\Users\********\AppData\LocalLow\Elf_1.12 Ordner Gelöscht : C:\Users\********\AppData\LocalLow\Game_Master_1.1 Ordner Gelöscht : C:\Users\********\AppData\LocalLow\InnoGames_International Ordner Gelöscht : C:\Users\********\AppData\LocalLow\PHPNukeDE Ordner Gelöscht : C:\Users\********\AppData\Roaming\BrowserCompanion Ordner Gelöscht : C:\Users\********\AppData\Roaming\dvdvideosoftiehelpers Ordner Gelöscht : C:\Users\********\AppData\Roaming\OpenCandy Ordner Gelöscht : C:\Users\********\AppData\Roaming\registry mechanic Ordner Gelöscht : C:\Users\********\AppData\Roaming\Systweak Ordner Gelöscht : C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BonanzaDeals Ordner Gelöscht : C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam Ordner Gelöscht : C:\Users\*****\AppData\Local\Conduit Ordner Gelöscht : C:\Users\*****\AppData\Local\ConduitEngine Ordner Gelöscht : C:\Users\*****\AppData\LocalLow\AskToolbar Ordner Gelöscht : C:\Users\*****\AppData\LocalLow\BabylonToolbar Ordner Gelöscht : C:\Users\*****\AppData\LocalLow\bbrs_002.tb Ordner Gelöscht : C:\Users\*****\AppData\LocalLow\boost_interprocess Ordner Gelöscht : C:\Users\*****\AppData\LocalLow\Brothersoft Ordner Gelöscht : C:\Users\*****\AppData\LocalLow\Conduit Ordner Gelöscht : C:\Users\*****\AppData\LocalLow\ConduitEngine Ordner Gelöscht : C:\Users\*****\AppData\LocalLow\Dealio Ordner Gelöscht : C:\Users\*****\AppData\LocalLow\DVDVideoSoftTB Ordner Gelöscht : C:\Users\*****\AppData\LocalLow\facemoods.com Ordner Gelöscht : C:\Users\*****\AppData\LocalLow\PriceGong Ordner Gelöscht : C:\Users\*****\AppData\LocalLow\Search Settings Ordner Gelöscht : C:\Users\*****\AppData\LocalLow\softonic-de3 Ordner Gelöscht : C:\Users\*****\AppData\LocalLow\SweetIM Ordner Gelöscht : C:\Users\*****\AppData\LocalLow\Elf_1 Ordner Gelöscht : C:\Users\*****\AppData\LocalLow\Elf_1.12 Ordner Gelöscht : C:\Users\*****\AppData\LocalLow\Game_Master_1.1 Ordner Gelöscht : C:\Users\*****\AppData\LocalLow\PHPNukeDE Ordner Gelöscht : C:\Users\************\AppData\LocalLow\AskToolbar Ordner Gelöscht : C:\Users\************\AppData\LocalLow\BabylonToolbar Ordner Gelöscht : C:\Users\************\AppData\LocalLow\bbrs_002.tb Ordner Gelöscht : C:\Users\************\AppData\LocalLow\Brothersoft Ordner Gelöscht : C:\Users\************\AppData\LocalLow\Conduit Ordner Gelöscht : C:\Users\************\AppData\LocalLow\Dealio Ordner Gelöscht : C:\Users\************\AppData\LocalLow\DVDVideoSoftTB Ordner Gelöscht : C:\Users\************\AppData\LocalLow\facemoods.com Ordner Gelöscht : C:\Users\************\AppData\LocalLow\PriceGong Ordner Gelöscht : C:\Users\************\AppData\LocalLow\SweetIM Ordner Gelöscht : C:\Users\************\AppData\LocalLow\Elf_1 Ordner Gelöscht : C:\Users\************\AppData\LocalLow\Elf_1.12 Ordner Gelöscht : C:\Users\************\AppData\LocalLow\Game_Master_1.1 Ordner Gelöscht : C:\Users\************\AppData\LocalLow\InnoGames_International Ordner Gelöscht : C:\Users\************\AppData\LocalLow\PHPNukeDE Ordner Gelöscht : C:\Users\Gast\AppData\LocalLow\Search Settings Ordner Gelöscht : C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\p91ni8wb.default\Conduit Ordner Gelöscht : C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\p91ni8wb.default\ConduitCommon Ordner Gelöscht : C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\p91ni8wb.default\SweetIMToolbarData Ordner Gelöscht : C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\p91ni8wb.default\Extensions\{5EBDCA98-43B3-45BB-87E0-716029FB42AB} Ordner Gelöscht : C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\0p2ht927.default\Extensions\{5EBDCA98-43B3-45BB-87E0-716029FB42AB} Ordner Gelöscht : C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\p91ni8wb.default\Extensions\{f9d03c26-0575-497e-821d-f7956d23e0ca} Ordner Gelöscht : C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\p91ni8wb.default\Extensions\bbrs_002@blabbers.com Ordner Gelöscht : C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok Ordner Gelöscht : C:\Users\************\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok Ordner Gelöscht : C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\bodddioamolcibagionmmobehnbhiakf Ordner Gelöscht : C:\Users\************\AppData\Local\Google\Chrome\User Data\Default\Extensions\bodddioamolcibagionmmobehnbhiakf Ordner Gelöscht : C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb Ordner Gelöscht : C:\Users\************\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb Ordner Gelöscht : C:\Users\********\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieadcoanfjloocmfafkebdnfefmohngj Ordner Gelöscht : C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihflimipbcaljfnojhhknppphnnciiif Ordner Gelöscht : C:\Users\************\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihflimipbcaljfnojhhknppphnnciiif Ordner Gelöscht : C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof Ordner Gelöscht : C:\Users\************\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof Datei Gelöscht : C:\Windows\System32\roboot64.exe Datei Gelöscht : C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tbhcn.lnk Datei Gelöscht : C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\0p2ht927.default\invalidprefs.js Datei Gelöscht : C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\p91ni8wb.default\searchplugins\icqplugin.xml Datei Gelöscht : C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\p91ni8wb.default\searchplugins\plasmoo.xml Datei Gelöscht : C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\p91ni8wb.default\searchplugins\Plusnetwork.xml Datei Gelöscht : C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\p91ni8wb.default\searchplugins\SweetIM Search.xml Datei Gelöscht : C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\p91ni8wb.default\searchplugins\SweetIm.xml Datei Gelöscht : C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\p91ni8wb.default\searchplugins\Web Search.xml Datei Gelöscht : C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\1wqvfvqi.default-1382616403429\user.js Datei Gelöscht : C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\p91ni8wb.default\user.js Datei Gelöscht : C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\0p2ht927.default\user.js Datei Gelöscht : C:\Users\************\AppData\Roaming\Mozilla\Firefox\Profiles\uxlt4r1m.default\user.js Datei Gelöscht : C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineCore.job Datei Gelöscht : C:\Windows\System32\Tasks\BonanzaDealsLiveUpdateTaskMachineCore Datei Gelöscht : C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineUA.job Datei Gelöscht : C:\Windows\System32\Tasks\BonanzaDealsLiveUpdateTaskMachineUA Datei Gelöscht : C:\Windows\System32\Tasks\BonanzaDealsUpdate ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}] Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}] Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\bodddioamolcibagionmmobehnbhiakf Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\ihflimipbcaljfnojhhknppphnnciiif Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Search Settings Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search] Schlüssel Gelöscht : HKCU\Toolbar Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\BonanzaDealsLive.exe Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escort.DLL Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\ICQ Service.exe Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\priam_bho.DLL Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\tdataprotocol.DLL Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\wit4ie.DLL Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\WMHelper.DLL Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BonanzaDealsLive.OneClickCtrl.9 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BonanzaDealsLive.OneClickProcessLauncherMachine Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BonanzaDealsLive.OneClickProcessLauncherMachine.1.0 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BonanzaDealsLive.Update3WebControl.3 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.CoCreateAsync Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.CoCreateAsync.1.0 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.CoreClass Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.CoreClass.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.CoreMachineClass Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.CoreMachineClass.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.CredentialDialogMachine Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.CredentialDialogMachine.1.0 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.OnDemandCOMClassMachine Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.OnDemandCOMClassMachine.1.0 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.OnDemandCOMClassMachineFallback Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.OnDemandCOMClassMachineFallback.1.0 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.OnDemandCOMClassSvc Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.OnDemandCOMClassSvc.1.0 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.ProcessLauncher Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.ProcessLauncher.1.0 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.Update3COMClassService Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.Update3COMClassService.1.0 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.Update3WebMachine Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.Update3WebMachine.1.0 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.Update3WebMachineFallback Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.Update3WebMachineFallback.1.0 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.Update3WebSvc Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.Update3WebSvc.1.0 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.escrtSrvc Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.escrtSrvc.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\facemoods.xtrnl Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\facemoods.xtrnl.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\facemoodsApp.appCore Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\facemoodsApp.appCore.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ICQToolBar.IEHook Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\base64 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\chrome Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\prox Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wajam.WajamBHO Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wajam.WajamBHO.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wajam.WajamDownloader Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wajam.WajamDownloader.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BabylonToolbarsrv_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BabylonToolbarsrv_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_1_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_1_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasapi32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasmancs Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetimsetup_rasapi32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetimsetup_rasmancs Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@tools.bdupdater.com/BonanzaDealsLive Update;version=3 Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@tools.bdupdater.com/BonanzaDealsLive Update;version=9 Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader22363_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader22363_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader28745_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader28745_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader32619[1]_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader32619[1]_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader32619_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader32619_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader35707_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader35707_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader35795[1]_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader35795[1]_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader36948_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader36948_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader40073[1]_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader40073[1]_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader48413_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader48413_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader48960[1]_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader48960[1]_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader49199[1]_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader49199[1]_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader53143[1]_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader53143[1]_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader65917[1]_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader65917[1]_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader65917[2]_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader65917[2]_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader67362[1]_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader67362[1]_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader89768[1]_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader89768[1]_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader91188[1]_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader91188[1]_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_battlestations-midway_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_battlestations-midway_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_sumotori-dreams_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_sumotori-dreams_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_super-mario-xp_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_super-mario-xp_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_surgeon-simulator-2013_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_surgeon-simulator-2013_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_adobe-reader-x[1]_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_adobe-reader-x[1]_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_adobe-reader-x_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_adobe-reader-x_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_ap-tuner_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_ap-tuner_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_av-music-morpher_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_av-music-morpher_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_cube_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_cube_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_electronic-piano_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_electronic-piano_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_fl-studio_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_fl-studio_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_guitar-pro_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_guitar-pro_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_hydrogen_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_hydrogen_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_logiccircuit_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_logiccircuit_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_metronome_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_metronome_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_minecraft_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_minecraft_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_monopoly-3_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_monopoly-3_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_realplayer-sp_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_realplayer-sp_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_ship-simulator_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_ship-simulator_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_star-wars-battlefront-patch_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_star-wars-battlefront-patch_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_supertux_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_supertux_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_vokabeltrainer[1]_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_vokabeltrainer[1]_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{20EDC024-43C5-423E-B7F5-FD93523E0D9F} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{5D723752-5899-47E8-99B4-62C824EF9E13} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{9EA8702C-EEDB-4731-BE68-E9A167DD3597} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{A7DDCBDE-5C86-415C-8A37-763AE183E7E4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{AD25754E-D76C-42B3-A335-2F81478B722F} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D34F391D-4CB7-467F-A543-F583857C63B0} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{ED6535E7-F778-48A5-A060-549D30024511} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{118E1BF6-6279-432F-A285-373A77B90C7A} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{14CEEA2F-3D21-46ED-A7D2-89056C520E5E} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1CC8D970-F626-4F19-815F-890032BB6606} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{29494049-211F-4F5C-8545-7DA8BF7A6CF8} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{33BAF587-9647-4281-A34F-F4830CDC1B9F} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5B5E5D0E-7C83-4A32-ADD2-E5F488DD6783} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5D64294B-1341-4FE7-B6D8-7C36828D4DD5} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6802463D-636F-41FE-9924-4CAD56906590} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{7E84186E-B5DE-4226-8A66-6E49C6B511B4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{806785D0-375F-4C2C-92E3-B8EE65D28E83} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{944661E7-67B9-4DF7-BFF2-05388C166D34} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{99066096-8989-4612-841F-621A01D54AD7} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{9EA8702C-EEDB-4731-BE68-E9A167DD3597} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A5B99E41-E157-4209-8AAC-DB003A816079} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A7CF66EF-4F0D-46B1-AF71-A500378D6C34} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AD20D01C-C939-4DD2-8C55-56935A48987E} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B71934E5-6B93-448D-9D32-CBAA5150C5D8} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C4BEF720-313C-420A-ACF6-77DD95D8F553} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D34F391D-4CB7-467F-A543-F583857C63B0} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DB4E9724-F518-4DFD-9C7C-78B52103CAB9} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DDE2C74F-58CC-4D71-8CE1-09DEBB8CFB78} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E95EAD3F-18C6-4304-9DC6-BD6FD8E11D37} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E970727E-0508-4BEB-8B72-BBA9D0D047C7} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EBF1F869-D2F0-4D31-A877-386C853A9C3D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F3CF4912-CF0A-451B-AF3B-C4F216C715E4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F904AC50-215C-42AB-A532-77E9FDBA9B19} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FE063412-BEA4-4D76-8ED3-183BE6220D17} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{542FA950-C57A-4E17-B3E1-D935DFE15DEE} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5B035F86-41B5-40F1-AAAD-3D219F30244E} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6365AC7B-9920-4D8B-AF5D-3BDFEAC340A8} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6A934270-717F-4BC3-BA59-BC9BED47A8D2} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{79B13431-CCAC-4097-8889-D0289E5E924F} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8B8558F6-DC26-4F39-8417-34B8934AA459} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C8D5C57-3CAD-4CF9-BCAD-F873678DA883} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{981334CB-7B8B-431F-B86D-67B7426B125B} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E393F82-2644-4AB6-B994-1AD39D6C59EE} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A3A2A5C0-1306-4D1A-A093-9CECA4230002} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C1C2FC43-F042-4F17-AEDB-C5ABF3B42E4B} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F7EC6286-297C-4981-9DCC-FD7F57BC24C9} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{095BFD3C-4602-4FE1-96F1-AEFAFBFD067D} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FE063412-BEA4-4D76-8ED3-183BE6220D17} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7854F00C-DC77-477E-A10E-603F48442D3B} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FE063412-BEA4-4D76-8ED3-183BE6220D17} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4E046F53-22FC-4C89-9B75-DD50DCF6091F} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{58275C71-6CC8-47FC-93E0-B91379D40A80} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FE063412-BEA4-4D76-8ED3-183BE6220D17} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{29494049-211F-4F5C-8545-7DA8BF7A6CF8} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C4BEF720-313C-420A-ACF6-77DD95D8F553} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4E046F53-22FC-4C89-9B75-DD50DCF6091F} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{824B1C51-48E0-4870-B4DF-0F806EBB098B} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DAC71C53-9AED-447F-8BE8-4509186FCBD2} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{581FA55E-2001-4FD4-B033-198BBF394A2F} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CC773EBD-ECE8-46C1-B972-AB8F7D19655C} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{58275C71-6CC8-47FC-93E0-B91379D40A80} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DD7CCBF7-8D02-4E10-91BE-16BBD92BF878} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{855F3B16-6D32-4FE6-8A56-BBB695989046} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{29494049-211F-4F5C-8545-7DA8BF7A6CF8} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{33BAF587-9647-4281-A34F-F4830CDC1B9F} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4250488A-CB24-0893-C066-B1AEA57BCFF2} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C4BEF720-313C-420A-ACF6-77DD95D8F553} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FFDF9EF3-3C3A-4F05-9A6E-5D3B778EC567} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6161D3B5-BC14-426F-A92E-AD1889D3365C} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1C76508F-4C93-413C-9F09-7B8FB2DD8B91} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{55793F25-48D3-4B7E-B3F1-99CC0F987521} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D48B4E74-90E7-4EF8-87C7-AE12610D5F2A} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5425A123-4EFA-4510-AD47-99888AC9A619} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0F1D846B-5A57-4863-A54D-AAC9C22085F6} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CB6CEAE4-20BB-4CFA-9C0B-66A801F138E7} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B9AC094D-FCBF-4CC6-9C80-A3CD6D370279} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{4327FABE-3C22-4689-8DBF-D226CF777FE9} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{FFEBBF0A-C22C-4172-89FF-45215A135AC7} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{41564952-412D-5637-00A7-7A786E7484D7}] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{855F3B16-6D32-4FE6-8A56-BBB695989046}] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{DB4E9724-F518-4DFD-9C7C-78B52103CAB9}] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{E8DE9422-3B2C-4243-BF6F-235DA84D8EF8}] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{22E03916-85C5-44B0-8DC9-1830C11238D9}] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{38542454-DFB6-44F5-B052-D4E071A3D073}] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{7846AE31-BEA2-438A-8F5E-2D899361656C}] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{942CD1D4-9CC1-4D31-876A-EA8F489F7A59}] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{C9508125-4747-4733-B048-E4B82DC9716D}] Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{32099AAC-C132-4136-9E9A-4E364A424E17}] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{E8DE9422-3B2C-4243-BF6F-235DA84D8EF8}] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{22E03916-85C5-44B0-8DC9-1830C11238D9}] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{38542454-DFB6-44F5-B052-D4E071A3D073}] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{7846AE31-BEA2-438A-8F5E-2D899361656C}] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{942CD1D4-9CC1-4D31-876A-EA8F489F7A59}] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{C9508125-4747-4733-B048-E4B82DC9716D}] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{542FA950-C57A-4E17-B3E1-D935DFE15DEE} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5B035F86-41B5-40F1-AAAD-3D219F30244E} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{6365AC7B-9920-4D8B-AF5D-3BDFEAC340A8} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{6A934270-717F-4BC3-BA59-BC9BED47A8D2} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{74C012C4-00FB-4F04-9AFB-4AD5449D2018} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{78888F8B-D5E4-43CE-89F5-C8C18223AF64} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{79B13431-CCAC-4097-8889-D0289E5E924F} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{817923CB-4744-4216-B250-CF7EDA8F1767} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8B8558F6-DC26-4F39-8417-34B8934AA459} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8C8D5C57-3CAD-4CF9-BCAD-F873678DA883} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{981334CB-7B8B-431F-B86D-67B7426B125B} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9E393F82-2644-4AB6-B994-1AD39D6C59EE} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A3A2A5C0-1306-4D1A-A093-9CECA4230002} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C1C2FC43-F042-4F17-AEDB-C5ABF3B42E4B} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D5A1EF9A-7948-435D-8B87-D6A598317288} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F7EC6286-297C-4981-9DCC-FD7F57BC24C9} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7} Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{32099AAC-C132-4136-9E9A-4E364A424E17}] Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}] Schlüssel Gelöscht : HKCU\Software\APN PIP Schlüssel Gelöscht : HKCU\Software\AskPartnerNetwork Schlüssel Gelöscht : HKCU\Software\BabylonToolbar Schlüssel Gelöscht : HKCU\Software\BonanzaDealsLive Schlüssel Gelöscht : HKCU\Software\Brothersoft Schlüssel Gelöscht : HKCU\Software\Conduit Schlüssel Gelöscht : HKCU\Software\facemoods.com Schlüssel Gelöscht : HKCU\Software\ICQ\ICQToolbar Schlüssel Gelöscht : HKCU\Software\IGearSettings Schlüssel Gelöscht : HKCU\Software\Iminent Schlüssel Gelöscht : HKCU\Software\InstallCore Schlüssel Gelöscht : HKCU\Software\OCS Schlüssel Gelöscht : HKCU\Software\Softonic Schlüssel Gelöscht : HKCU\Software\Wajam Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar Schlüssel Gelöscht : HKCU\Software\AppDataLow\Toolbar Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Brothersoft Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\conduitEngine Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\ConduitSearchScopes Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Dealio Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\DVDVideoSoftTB Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Elf_1 Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\PriceGong Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\smartbar Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Toolbar Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Elf_1.12 Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Game_Master_1.1 Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\InnoGames_International Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\PHPNukeDE Schlüssel Gelöscht : HKLM\Software\Application Updater Schlüssel Gelöscht : HKLM\Software\AskPartnerNetwork Schlüssel Gelöscht : HKLM\Software\BabylonToolbar Schlüssel Gelöscht : HKLM\Software\BonanzaDealsLive Schlüssel Gelöscht : HKLM\Software\Brothersoft Schlüssel Gelöscht : HKLM\Software\BrowserCompanion Schlüssel Gelöscht : HKLM\Software\Conduit Schlüssel Gelöscht : HKLM\Software\Dealio Schlüssel Gelöscht : HKLM\Software\DVDVideoSoftTB Schlüssel Gelöscht : HKLM\Software\Elf_1 Schlüssel Gelöscht : HKLM\Software\facemoods.com Schlüssel Gelöscht : HKLM\Software\ICQ\ICQToolbar Schlüssel Gelöscht : HKLM\Software\Iminent Schlüssel Gelöscht : HKLM\Software\InstallCore Schlüssel Gelöscht : HKLM\Software\PIP Schlüssel Gelöscht : HKLM\Software\systweak Schlüssel Gelöscht : HKLM\Software\Toolbar Schlüssel Gelöscht : HKLM\Software\Vittalia Schlüssel Gelöscht : HKLM\Software\Wajam Schlüssel Gelöscht : HKLM\Software\Elf_1.12 Schlüssel Gelöscht : HKLM\Software\Game_Master_1.1 Schlüssel Gelöscht : HKLM\Software\InnoGames_International Schlüssel Gelöscht : HKLM\Software\PHPNukeDE Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Bonanza Deals Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Wajam Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\AskPartnerNetwork Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B} ***** [ Browser ] ***** -\\ Internet Explorer v10.0.9200.16720 Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search] Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL] Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant] Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default] -\\ Mozilla Firefox v25.0 (de) [ Datei : C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\1wqvfvqi.default-1382616403429\prefs.js ] Zeile gelöscht : user_pref("browser.search.defaultenginename", "AVG Secure Search"); Zeile gelöscht : user_pref("browser.search.selectedEngine", "AVG Secure Search"); [ Datei : C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\p91ni8wb.default\prefs.js ] Zeile gelöscht : user_pref("CT2431245.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Zeile gelöscht : user_pref("CT2431245.CTID", "CT2431245"); Zeile gelöscht : user_pref("CT2431245.CurrentServerDate", "26-10-2010"); Zeile gelöscht : user_pref("CT2431245.DialogsAlignMode", "LTR"); Zeile gelöscht : user_pref("CT2431245.DownloadReferralCookieData", ""); Zeile gelöscht : user_pref("CT2431245.EMailNotifierPollDate", "Tue Oct 26 2010 20:33:19 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.FeedLastCount129009402595187825", 562); Zeile gelöscht : user_pref("CT2431245.FeedPollDate7470634014180506963", "Tue Oct 26 2010 20:33:21 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.FeedPollDate7470634014269327586", "Tue Oct 26 2010 20:33:20 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.FeedPollDate7470634014329599698", "Tue Oct 26 2010 20:33:20 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.FeedPollDate7470634014537505092", "Tue Oct 26 2010 20:33:20 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.FeedPollDate7470634014970726540", "Tue Oct 26 2010 20:33:20 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.FeedPollDate7470634015410831318", "Tue Oct 26 2010 20:33:21 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.FeedPollDate7470634015483395460", "Tue Oct 26 2010 20:33:21 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.FeedPollDate7470634015636754705", "Tue Oct 26 2010 20:33:20 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.FeedPollDate7470634015768347545", "Tue Oct 26 2010 20:33:20 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.FeedPollDate7470634015855543602", "Tue Oct 26 2010 20:33:20 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.FeedPollDate7470634016030710453", "Tue Oct 26 2010 20:33:20 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.FeedPollDate7470634016114705611", "Tue Oct 26 2010 20:33:21 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.FeedPollDate7470634016129205152", "Tue Oct 26 2010 20:33:21 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.FeedPollDate7470634016143724791", "Tue Oct 26 2010 20:33:21 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.FeedPollDate7470634016271239162", "Tue Oct 26 2010 20:33:21 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.FeedPollDate7470634016568520719", "Tue Oct 26 2010 20:33:21 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.FeedPollDate7470634016726993788", "Tue Oct 26 2010 20:33:20 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.FeedPollDate7470634017109031809", "Tue Oct 26 2010 20:33:20 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.FeedPollDate7470634017132743740", "Tue Oct 26 2010 20:33:20 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.FeedPollDate7470634017299547668", "Tue Oct 26 2010 20:33:21 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.FeedPollDate7470634017302327846", "Tue Oct 26 2010 20:33:20 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.FeedPollDate7470634017344111490", "Tue Oct 26 2010 20:33:20 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.FeedPollDate7470634017478360748", "Tue Oct 26 2010 20:33:22 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.FeedPollDate7470634017732797593", "Tue Oct 26 2010 20:33:20 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.FeedPollDate7470634017821686064", "Tue Oct 26 2010 20:33:21 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.FeedPollDate7470634018090228721", "Tue Oct 26 2010 20:33:21 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.FeedTTL7470634014269327586", 5); Zeile gelöscht : user_pref("CT2431245.FeedTTL7470634014537505092", 5); Zeile gelöscht : user_pref("CT2431245.FeedTTL7470634015636754705", 5); Zeile gelöscht : user_pref("CT2431245.FeedTTL7470634016568520719", 30); Zeile gelöscht : user_pref("CT2431245.FirstServerDate", "26-8-2010"); Zeile gelöscht : user_pref("CT2431245.FirstTime", true); Zeile gelöscht : user_pref("CT2431245.FirstTimeFF3", true); Zeile gelöscht : user_pref("CT2431245.FirstTimeSettingsDone", true); Zeile gelöscht : user_pref("CT2431245.FixPageNotFoundErrors", true); Zeile gelöscht : user_pref("CT2431245.GroupingServerCheckInterval", 1440); Zeile gelöscht : user_pref("CT2431245.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Zeile gelöscht : user_pref("CT2431245.Initialize", true); Zeile gelöscht : user_pref("CT2431245.InitializeCommonPrefs", true); Zeile gelöscht : user_pref("CT2431245.InstallationAndCookieDataSentCount", 2); Zeile gelöscht : user_pref("CT2431245.InstallationType", "UnknownIntegration"); Zeile gelöscht : user_pref("CT2431245.InstalledDate", "Thu Aug 26 2010 23:01:41 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.InvalidateCache", false); Zeile gelöscht : user_pref("CT2431245.IsGrouping", false); Zeile gelöscht : user_pref("CT2431245.IsMulticommunity", false); Zeile gelöscht : user_pref("CT2431245.IsOpenThankYouPage", false); Zeile gelöscht : user_pref("CT2431245.IsOpenUninstallPage", true); Zeile gelöscht : user_pref("CT2431245.LanguagePackLastCheckTime", "Tue Oct 26 2010 20:33:21 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.LanguagePackReloadIntervalMM", 1440); Zeile gelöscht : user_pref("CT2431245.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx"); Zeile gelöscht : user_pref("CT2431245.LastLogin_2.7.1.3", "Tue Oct 26 2010 20:33:19 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.LatestVersion", "2.7.2.0"); Zeile gelöscht : user_pref("CT2431245.Locale", "de-de"); Zeile gelöscht : user_pref("CT2431245.LoginCache", 4); Zeile gelöscht : user_pref("CT2431245.MCDetectTooltipHeight", "83"); Zeile gelöscht : user_pref("CT2431245.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Zeile gelöscht : user_pref("CT2431245.MCDetectTooltipWidth", "295"); Zeile gelöscht : user_pref("CT2431245.RadioIsPodcast", false); Zeile gelöscht : user_pref("CT2431245.RadioLastCheckTime", "Tue Oct 26 2010 20:33:19 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.RadioLastUpdateIPServer", "3"); Zeile gelöscht : user_pref("CT2431245.RadioLastUpdateServer", "129167771525870000"); Zeile gelöscht : user_pref("CT2431245.RadioMediaID", "20503672"); Zeile gelöscht : user_pref("CT2431245.RadioMediaType", "Media Player"); Zeile gelöscht : user_pref("CT2431245.RadioMenuSelectedID", "EBRadioMenu_CT243124520503672"); Zeile gelöscht : user_pref("CT2431245.RadioStationName", "Team%20Radio%20Deutschland"); Zeile gelöscht : user_pref("CT2431245.RadioStationURL", "hxxp://trd.stream.w-u-s.org:6666/dsl.m3u"); Zeile gelöscht : user_pref("CT2431245.SearchEngine", "Suchen||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2431245&octid=EB_ORIGINAL_CTID&SearchSource=1"); Zeile gelöscht : user_pref("CT2431245.SearchFromAddressBarIsInit", true); Zeile gelöscht : user_pref("CT2431245.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2431245&q="); Zeile gelöscht : user_pref("CT2431245.SearchInNewTabEnabled", true); Zeile gelöscht : user_pref("CT2431245.SearchInNewTabIntervalMM", 1440); Zeile gelöscht : user_pref("CT2431245.SearchInNewTabLastCheckTime", "Tue Oct 26 2010 20:33:19 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID"); Zeile gelöscht : user_pref("CT2431245.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID"); Zeile gelöscht : user_pref("CT2431245.SettingsCheckIntervalMin", 120); Zeile gelöscht : user_pref("CT2431245.SettingsLastCheckTime", "Tue Oct 26 2010 20:33:18 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.SettingsLastUpdate", "1286818167"); Zeile gelöscht : user_pref("CT2431245.ThirdPartyComponentsInterval", 504); Zeile gelöscht : user_pref("CT2431245.ThirdPartyComponentsLastCheck", "Tue Oct 26 2010 20:33:18 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.ThirdPartyComponentsLastUpdate", "1255348257"); Zeile gelöscht : user_pref("CT2431245.TrusteLinkUrl", "hxxp://www.truste.org/pvr.php?page=validate&softwareProgramId=101&sealid=112"); Zeile gelöscht : user_pref("CT2431245.UserID", "UN76355363653685994"); Zeile gelöscht : user_pref("CT2431245.WeatherNetwork", ""); Zeile gelöscht : user_pref("CT2431245.WeatherPollDate", "Tue Oct 26 2010 20:33:19 GMT+0200"); Zeile gelöscht : user_pref("CT2431245.WeatherUnit", "C"); Zeile gelöscht : user_pref("CT2431245.alertChannelId", "825452"); Zeile gelöscht : user_pref("CT2431245.backendstorage.hxxp://cmg1_conduit-widgets_com/pitsi.state", "4F50454E"); Zeile gelöscht : user_pref("CT2431245.clientLogIsEnabled", true); Zeile gelöscht : user_pref("CT2431245.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent"); Zeile gelöscht : user_pref("CT2431245.myStuffEnabled", true); Zeile gelöscht : user_pref("CT2431245.myStuffPublihserMinWidth", 400); Zeile gelöscht : user_pref("CT2431245.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"); Zeile gelöscht : user_pref("CT2431245.myStuffServiceIntervalMM", 1440); Zeile gelöscht : user_pref("CT2431245.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT"); Zeile gelöscht : user_pref("CT2431245.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation"); Zeile gelöscht : user_pref("CT3067892_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1382632386004,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]"); Zeile gelöscht : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://plasmoo.com/index.htm?SearchMashine=true&q="); Zeile gelöscht : user_pref("CommunityToolbar.ToolbarsList", "CT2431245"); Zeile gelöscht : user_pref("CommunityToolbar.ToolbarsList2", "CT2431245"); Zeile gelöscht : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Tue Oct 26 2010 20:33:24 GMT+0200"); Zeile gelöscht : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "&q="); Zeile gelöscht : user_pref("browser.search.defaultenginename", "AVG Secure Search"); Zeile gelöscht : user_pref("browser.search.defaultthis.engineName", "Plasmoo"); Zeile gelöscht : user_pref("browser.search.selectedEngine", "AVG Secure Search"); Zeile gelöscht : user_pref("extensions.AVIRA-V7.com.avira.dnt.rules", "\"{\\\"Version\\\":39,\\\"Companies\\\":[{\\\"company\\\":\\\"Google Inc\\\",\\\"rules\\\":[{\\\"name\\\":\\\"Google Analytics\\\",\\\"category\\\[...] Zeile gelöscht : user_pref("extensions.AVIRA-V7.domain", "\"avira.search.ask.com\""); Zeile gelöscht : user_pref("extensions.enabledAddons", "wrc%40avast.com:9.0.2006.53,toolbar_AVIRA-V7%40apn.ask.com:25.62074,%7Bf9d03c26-0575-497e-821d-f7956d23e0ca%7D:3.0,bbrs_002%40blabbers.com:1.0.5,%7B972ce4c6-7e08[...] Zeile gelöscht : user_pref("extensions.enabledItems", "helperbar@helperbar.com:1.0,{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20,{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21,{23fcfd51-4958-4f00-80a3-ae97e717ed8b}:2.1[...] Zeile gelöscht : user_pref("extensions.facemoods.aflt", "_#stonicde"); Zeile gelöscht : user_pref("extensions.facemoods.firstRun", false); Zeile gelöscht : user_pref("extensions.facemoods.lastActv", "2"); Zeile gelöscht : user_pref("extensions.helperbar.DockingPositionDown", true); Zeile gelöscht : user_pref("extensions.helperbar.LastHiddenTime", 22446562); Zeile gelöscht : user_pref("extensions.helperbar.SmartbarDisabled", true); Zeile gelöscht : user_pref("extensions.helperbar.SmartbarStateMinimaized", false); Zeile gelöscht : user_pref("extentions.y2layers.defaultEnableAppsList", "DropDownDeals,BestVideoDownloader,EzLooker,TwitTube,TopRelatedTopics,Buzzdock,"); Zeile gelöscht : user_pref("extentions.y2layers.installId", "d7ca7d74-f66b-4655-b482-0ab18f576f60"); Zeile gelöscht : user_pref("icqtoolbar.installsource", "1"); Zeile gelöscht : user_pref("icqtoolbar.showPc", false); Zeile gelöscht : user_pref("icqtoolbar.skip_default_search", "yes"); Zeile gelöscht : user_pref("plasmoo.search.engine.prevkeywordurl", "hxxp://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=DE&userid=52316e1f-a8ab-45be-a924-d8e1eecc9e54&affid=111583&searchtype=ds&babsr[...] Zeile gelöscht : user_pref("plasmoo.search.engine.prevsearchdefaultenginename", "ICQ Search"); Zeile gelöscht : user_pref("plasmoo.search.engine.prevsearchdefaulturl", ""); Zeile gelöscht : user_pref("plasmoo.search.engine.prevsearchselectedengine", "ICQ Search"); Zeile gelöscht : user_pref("plasmoo.search.engine.prevstartuphomepage", "hxxp://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=DE&userid=52316e1f-a8ab-45be-a924-d8e1eecc9e54&affid=111583&searchtype=hp&[...] Zeile gelöscht : user_pref("plasmoo.search.engine.status", "INSTALLED"); Zeile gelöscht : user_pref("plugin.state.npconduitfirefoxplugin", 2); Zeile gelöscht : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3067892&CUI=UN17417695124323217&UM=1&SearchSource=13"); Zeile gelöscht : user_pref("smartbar.conduitSearchAddressUrlList", "&q="); Zeile gelöscht : user_pref("smartbar.machineId", "I5WKOSQY8IROO0NOI8ROLDQYB5U9GZPQ/BX+TO4V5MSJ6JEXJNUDAT6GYXE0JSOAUSWUGYQMEDDVROSIAVXDDW"); Zeile gelöscht : user_pref("smartbar.originalHomepage", "google.de"); Zeile gelöscht : user_pref("smartbar.originalSearchAddressUrl", "&q="); Zeile gelöscht : user_pref("smartbar.originalSearchEngine", "AVG Secure Search"); Zeile gelöscht : user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0"); Zeile gelöscht : user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7"); Zeile gelöscht : user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log"); Zeile gelöscht : user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000"); Zeile gelöscht : user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7"); Zeile gelöscht : user_pref("sweetim.toolbar.mode.debug", "false"); Zeile gelöscht : user_pref("sweetim.toolbar.previous.browser.search.defaulturl", ""); Zeile gelöscht : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "hxxp://start.icq.com/sm"); Zeile gelöscht : user_pref("sweetim.toolbar.search.history.capacity", "10"); Zeile gelöscht : user_pref("sweetim.toolbar.simapp_id", "{32FD956B-8923-4336-84C4-B2AF5134DD4C}"); Zeile gelöscht : user_pref("sweetim.toolbar.urls.homepage", "hxxp://home.sweetim.com/?barid={32FD956B-8923-4336-84C4-B2AF5134DD4C}"); Zeile gelöscht : user_pref("sweetim.toolbar.version", "1.1.0.0"); [ Datei : C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\0p2ht927.default\prefs.js ] [ Datei : C:\Users\************\AppData\Roaming\Mozilla\Firefox\Profiles\uxlt4r1m.default\prefs.js ] ************************* AdwCleaner[R0].txt - [73297 octets] - [03/11/2013 11:29:23] AdwCleaner[S0].txt - [69747 octets] - [03/11/2013 11:31:07] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [69808 octets] ########## [CODE] 2. JRT Datei JRT Logfile: Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.0.7 (10.15.2013:3) OS: Windows 7 Home Premium x64 Ran by ******** on 03.11.2013 at 11:41:49,04 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1583400021-3288482790-2347783300-1003\Software\SweetIM Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1583400021-3288482790-2347783300-1003\Software\Wajam Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sweetim Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\products\646404015c7770f449e7855eaf878aeb Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\DealioKit1-stub-0_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\DealioKit1-stub-0_RASMANCS Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\pricepeep_270002_0102_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\pricepeep_270002_0102_RASMANCS Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\softonic-de3ToolbarHelper_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\softonic-de3ToolbarHelper_RASMANCS Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\DealioKit1-stub-0_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\DealioKit1-stub-0_RASMANCS Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\pricepeep_270002_0102_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\pricepeep_270002_0102_RASMANCS Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\softonic-de3ToolbarHelper_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\softonic-de3ToolbarHelper_RASMANCS Successfully deleted: [Registry Key] "hkey_current_user\software\askpartnernetwork" Successfully deleted: [Registry Key] "hkey_local_machine\software\classes\clsid\{44cbc005-6243-4502-8a02-3a096a282664}" Successfully deleted: [Registry Key] "hkey_local_machine\software\classes\clsid\{f297534d-7b06-459d-bc19-2dd8ef69297b}" Successfully deleted: [Registry Key] "hkey_local_machine\software\microsoft\internet explorer\low rights\elevationpolicy\{6978f29a-3493-40b2-8cdc-9c13a02f85a4}" Successfully deleted: [Registry Key] "hkey_local_machine\software\microsoft\internet explorer\low rights\elevationpolicy\{d7949a66-d936-4028-9552-14f7dc50f38d}" ~~~ Files ~~~ Folders Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{0016D520-0BD5-49BC-8C02-FC8A269A7D26} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{06D2951B-E055-4582-A57F-D6689511C87C} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{08113BF8-D08F-404B-8BA9-7E7CFA997612} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{0AA11671-40CD-415A-A2EE-5D20333AEE34} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{0B1465B9-5B4C-4FBB-A45A-A2C398280239} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{0D45B8A5-85A5-4941-939B-FAE11094608E} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{0DC41293-13FC-4A36-8FCF-98040369DD3A} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{0F54A600-3BAC-4BE1-AA67-C28935F15A4F} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{0FBE7C3D-2E18-4C8A-9F4F-82D181BBD188} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{1017F4B2-4ABB-4C7A-AAE1-F3130B892D3F} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{13ED7212-953F-4325-8FC5-20E7F4E91F08} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{165505DE-3D01-4AEB-B52C-1BF9DB35556A} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{18EEE8E1-229E-45AB-AC45-51081905CADD} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{195766B5-50E2-4315-BA61-6DE0C775F87B} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{2483C633-ABDE-4565-8395-9148B3C21FD9} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{249742F2-2C51-4325-80CB-3A934F49032B} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{267F3454-EE87-40A9-A572-C6DAB3935AC4} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{2A0AE568-8CC1-42EF-939B-7A6443A34B06} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{2E6618D4-81F1-4044-B4E1-29D3E10F4049} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{2F82300B-B772-4E23-838E-3DE233DE1FF5} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{3231F767-4C63-442D-81E4-86EFFF6BE0ED} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{34516F5C-F008-4D52-8081-D49F2A87F856} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{37973B6C-F9D8-4DE4-9A2B-D29941DB4F72} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{37D10742-8386-4D5E-9A86-A4D8FD173904} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{41319E5F-1F00-4DB7-A82E-59C1E4A20D76} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{45EAE824-E947-4A84-A5AB-0E90ADE9C83F} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{497BBB90-8F66-4494-A41A-3734553D02A6} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{4D2FB65B-E473-41FA-8389-1A3641357349} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{508336A2-D341-4186-B46F-AF8540D9719E} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{5348539A-6D98-4405-B86F-8F6B145A37FB} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{55D33DEA-B64F-4F4A-88CD-CC7B20C35DE2} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{566698DC-136D-43F5-96C2-6521FACE7293} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{5824CED5-B9B4-4167-A703-950AB4449A1C} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{583B966C-E3D2-43FD-A0AB-607931BE39BA} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{5A9D5880-8C9D-4347-B841-4C68EC5C40BC} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{5CFD24CF-F926-43DF-9C05-D3B8ECBCA85B} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{5D2A1875-CC8E-49EE-8267-197B2323DBA3} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{5E12977B-0CF7-4740-BAFC-127CF03A1D9A} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{5EB0078B-B0BA-4A2C-9B4E-0AB85C0F3E65} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{5EB1AF65-ABEB-4075-8962-B755BBF7F64A} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{5FBBFA1B-8B64-4062-BEA5-FB1B9EA1E534} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{635D247A-1211-4DD7-83DD-D4DB910CA879} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{647007F7-0946-4E9E-9ADC-FE2520B90499} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{64C61F2D-A4F3-41E8-8027-BE8309F77C6C} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{6533FF30-D768-465A-ABA2-B92A24C091A6} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{690DE6B6-EAA2-4583-8745-9FC0773EEEF6} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{69ADF2E3-4658-4975-A4DA-ED2ED2096D50} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{6EB3953A-D2DF-4594-847B-4EBFBD075A8D} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{721FE76C-51B7-4788-A294-FD836365D44E} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{729A11B5-6235-4A79-963D-CFDC91D8C402} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{73471614-8C6D-496B-B6E6-8BBA1E1331ED} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{7423A118-BCDF-4078-A1E0-2BC7560002A5} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{7A1CA856-A062-4EF5-BD28-76626F40983C} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{7C3DEC9E-140B-4E85-B77B-0BFC587DF35E} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{7D002E24-BBF3-446D-9895-02E005FAB558} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{80377BCD-86F0-433B-973E-76C247F7CE82} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{814BD580-F999-4F25-8DBD-A3AFBF1AAF29} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{82EAB0CE-81C1-4DBA-AD35-787362226D92} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{85556DD1-FA71-4C50-81E9-671CD7B742F8} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{8603DE28-03DF-4619-9ADE-2950A4BC47DD} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{8C6E4324-3256-4B29-918C-9FB7BDB38FB0} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{93DAACCC-4572-4B81-ADA8-082A71455BEB} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{94B5BDDE-E78B-4508-A4F0-8E72B36E4A27} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{9882EEC1-C20D-4CF7-A53A-2D2E763B9695} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{9AC2C4D1-AE43-4CAE-8597-5897DE24370E} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{9B195CD6-2EC5-410C-8BC6-157D2AA48AC5} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{9F509576-EABF-4A4B-9F47-50C7F82CA0ED} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{A1A3C9A1-7096-4CBC-B34A-5DE32069AD92} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{A2C1DBD6-553D-4B1A-8AF1-BA05690D09AC} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{A5F33265-6215-4E94-AC53-D168FB82BD74} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{A7D31A51-7617-4256-9C01-BC63784F97D2} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{AEC3D806-7E8D-4468-BC08-4877CF627CCC} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{AFD10440-FEAF-4BD3-ABAE-7B9D0AACE94F} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{B19EC8F4-8D3F-4003-AF78-3408A71F4001} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{B8CBB8B7-5D1F-40C7-A396-8DA9BDA1B1FD} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{BA8716D0-204C-4C3D-ACF6-187D36D49F7D} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{C1DE8DA5-FB4E-40A2-BFAD-A27A05FC2E6C} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{C36FF329-3CA1-4E29-90E8-39678E0F4C2A} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{C45ABF9B-D68F-4BB9-9412-C9EED8394917} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{C8327EF9-74B0-4255-9F0C-FCFBC7D37EBD} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{D132EA9A-80D0-4C64-B552-CC9059818285} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{D30B4F2E-D179-4299-8C7F-28F7993A6469} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{D5A66651-76E3-4DC7-8E00-8CAD676808B4} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{DDBF4B6C-186C-4E5F-9C86-31ABA6BF822E} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{E048EF8F-18FB-4B00-9EBB-5DE2B2C251A8} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{E096D4C1-7D9C-4962-B967-EF89C51F6DCD} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{E30AC2C2-2A85-4050-A6DA-44E8D7077062} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{E4265B79-2602-44E8-A617-2D76B62C8FD6} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{E5C9E85E-014E-4C9A-A03E-AA640675E150} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{F1F20C10-87F6-451F-8DB1-05FC0F21A6F1} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{F24A8F82-07B3-43FD-8FC4-EE4854A3F4B0} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{F645BECA-0071-43C9-9218-F2442C1E8338} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{F90B67F4-6AD9-4790-86CC-106853DF9BAB} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{FA7B31BD-1A49-4DAA-9973-39DBD0D7EBE1} Successfully deleted: [Empty Folder] C:\Users\********\appdata\local\{FEDC2DA6-5782-4250-9DF8-9F473BDA421E} ~~~ FireFox Successfully deleted: [File] C:\Users\********\AppData\Roaming\mozilla\firefox\profiles\p91ni8wb.default\extensions\toolbar_avira-v7@apn.ask.com.xpi Successfully deleted: [Folder] C:\Users\********\AppData\Roaming\mozilla\firefox\profiles\1wqvfvqi.default-1382616403429\extensions\staged Successfully deleted the following from C:\Users\********\AppData\Roaming\mozilla\firefox\profiles\p91ni8wb.default\prefs.js user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent134", "1361019954107"); user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent100", "1361019778269"); user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent109", "1361030999642"); user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent111", "1361030999646"); user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent112", "1361031003423"); user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent122", "1361030999650"); Emptied folder: C:\Users\********\AppData\Roaming\mozilla\firefox\profiles\p91ni8wb.default\minidumps [590 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 03.11.2013 at 11:46:31,58 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
03.11.2013, 13:21 | #11 |
| Programme lassen sich nicht mehr öffnen 3. FRST FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-10-2013 Ran by ******** (administrator) on ******-PC on 03-11-2013 11:52:30 Running from C:\Users\********\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe () C:\Windows\runservice.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe (Sonix) C:\Windows\vsnp2std.exe (Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe (ICQ) C:\Users\********\AppData\Roaming\ICQM\icq.exe (Akamai Technologies, Inc.) C:\Users\********\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.) C:\Users\********\AppData\Local\Akamai\netsession_win.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe () C:\Windows\FixCamera.exe () C:\Windows\tsnp2std.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [snp2std] - C:\Windows\vsnp2std.exe [344064 2007-05-10] (Sonix) HKLM\...\Run: [IntelliPoint] - C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2399632 2011-04-13] (Microsoft Corporation) HKLM\...\Run: [Start WingMan Profiler] - C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-14] (Logitech Inc.) HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [2991856 2013-02-21] (Logitech, Inc.) HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart Winlogon\Notify\LBTWlgn: C:\Program Files\Common Files\LogiShrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.) HKCU\...\Run: [icq] - C:\Users\********\AppData\Roaming\ICQM\icq.exe [26606072 2012-12-30] (ICQ) HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\********\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.) HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20473504 2013-10-02] (Skype Technologies S.A.) HKCU\...\Policies\system: [LogonHoursAction] 2 HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1 HKCU\...\Policies\Explorer: [NoInstrumentation] 1 HKLM-x32\...\Run: [JMB36X IDE Setup] - C:\Windows\RaidTool\xInsIDE.exe [36864 2007-03-20] () HKLM-x32\...\Run: [FixCamera] - C:\Windows\FixCamera.exe [20480 2007-02-12] () HKLM-x32\...\Run: [tsnp2std] - C:\Windows\tsnp2std.exe [270336 2007-05-12] () HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\avastui.exe [3567800 2013-10-24] (AVAST Software) HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe /default HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe /default HKU\Gast\...\Run: [swg] - "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" HKU\Gast\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe HKU\Gast\...\Run: [uTorrent] - "C:\Program Files (x86)\uTorrent\uTorrent.exe" HKU\*****\...\Run: [msnmsgr] - "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background HKU\*****\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe HKU\*****\...\Run: [uTorrent] - "C:\Program Files (x86)\uTorrent\uTorrent.exe" HKU\*****\...\Run: [ROC_JAN2013_TB] - "C:\Program Files (x86)\AVG Secure Search\ROC_JAN2013_TB.exe" /PROMPT /CMPID=JAN2013_TB HKU\*****\...\Run: [Facebook Update] - C:\Users\*****\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-02-16] (Facebook Inc.) HKU\*****\...\Run: [swg] - "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" HKU\*****\...\Policies\system: [LogonHoursAction] 2 HKU\*****\...\Policies\system: [DontDisplayLogonHoursWarnings] 1 HKU\************\...\Run: [ROC_JAN2013_TB] - "C:\Program Files (x86)\AVG Secure Search\ROC_JAN2013_TB.exe" /PROMPT /CMPID=JAN2013_TB HKU\************\...\Policies\system: [LogonHoursAction] 2 HKU\************\...\Policies\system: [DontDisplayLogonHoursWarnings] 1 HKU\UpdatusUser\...\Run: [swg] - "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" HKU\UpdatusUser\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe HKU\UpdatusUser\...\Run: [uTorrent] - "C:\Program Files (x86)\uTorrent\uTorrent.exe" HKU\UpdatusUser\...\Run: [ROC_JAN2013_TB] - "C:\Program Files (x86)\AVG Secure Search\ROC_JAN2013_TB.exe" /PROMPT /CMPID=JAN2013_TB HKU\UpdatusUser\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe /default Startup: C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Xfire.lnk ShortcutTarget: Xfire.lnk -> C:\Program Files (x86)\Xfire\Xfire.exe (Xfire Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.google.de/ URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046} StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - No File BHO-x32: ICQ Sparberater - {0766C1B9-B2DC-46E5-8934-4F3D6B42B1BD} - No File BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.) BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll No File BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll No File BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation) BHO-x32: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll No File Toolbar: HKLM - No Name - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - No File Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM-x32 - No Name - {8dcb7100-df86-4384-8842-8fa844297b3f} - No File Toolbar: HKLM-x32 - No Name - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - No File Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File Toolbar: HKCU - No Name - {A057A204-BACC-4D26-9C92-30A187E26996} - No File Toolbar: HKCU - No Name - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - No File Toolbar: HKCU - No Name - {5E7F9DB2-3507-467D-AA2F-DCCB5971B5AF} - No File DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: HKLM-x32 {5D6F45B3-9043-443D-A792-115447494D24} hxxp://messenger.zone.msn.com/MessengerGamesContent/GameContent/de/uno1/GAME_UNO1.cab DPF: HKLM-x32 {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} hxxp://game.zylom.com/activex/zylomgamesplayer.cab DPF: HKLM-x32 {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx DPF: HKLM-x32 {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab DPF: HKLM-x32 {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} https://battlefield.play4free.com/static/updater/BP4FUpdater_1.0.80.2.cab DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) ShellExecuteHooks-x32: ShellHook Class - {88485281-8b4b-4f8d-9ede-82e29a064277} - No File [ ] Winsock: Catalog5 07 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File Not found () Winsock: Catalog5 08 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File Not found () FireFox: ======== FF ProfilePath: C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\1wqvfvqi.default-1382616403429 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll () FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/VirtualEarth3D,version=4.0 - C:\Program Files (x86)\Virtual Earth 3D\ () FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll No File FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll No File FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll No File FF Plugin-x32: @microsoft.com/VirtualEarth3D,version=4.0 - C:\Program Files (x86)\Virtual Earth 3D\ () FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameeu.dll No File FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll No File FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll No File FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: @real.com/nppl3260;version=16.0.2.32 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll No File FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpplugin;version=16.0.2.32 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll No File FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll No File FF Plugin-x32: @virtools.com/3DviaPlayer - C:\Program Files (x86)\Virtools\3D Life Player\npvirtools.dll (Dassault Systèmes) FF Plugin HKCU: @nsroblox.roblox.com/launcher - C:\Users\********\AppData\Local\Roblox\Versions\version-221a4807685c44e7\\NPRobloxProxy.dll ( Roblox Corporation) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\********\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt FF HKLM-x32\...\Firefox\Extensions: [{FCE04E1F-9378-4f39-96F6-5689A9159E45}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 Chrome: ======= Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION CHR HKLM-x32\...\Chrome\Extension: [edaibbiobngpbmeonadpbfafbkimjbdd] - C:\ProgramData\Logitech\LogiSmoothChromeExt.crx CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx ==================== Services (Whitelisted) ================= R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-10-24] (AVAST Software) R2 LicCtrlService; C:\Windows\runservice.exe [2560 2011-03-20] () S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15122208 2013-10-18] (NVIDIA Corporation) R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-02-08] () R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2099512 2013-10-08] (TuneUp Software) S4 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe /DisableUI [x] S3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [x] S2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [x] S2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [x] S2 WajamUpdaterV3; "C:\Program Files (x86)\Wajam\Updater\WajamUpdaterV3.exe" [x] ==================== Drivers (Whitelisted) ==================== S3 AF9035HB; C:\Windows\System32\Drivers\AF9035HB.sys [907904 2010-05-15] (ITE Technologies ) S3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [18688 2007-05-30] (ArcSoft, Inc.) R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-10-24] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-10-24] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-10-24] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-10-24] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-10-24] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-10-24] (AVAST Software) R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2013-10-24] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-10-24] () S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-09-28] (NVIDIA Corporation) S1 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) S3 SNP2STD; C:\Windows\System32\DRIVERS\snp2sxp.sys [12484736 2007-05-10] () S3 SNP2STD; C:\Windows\SysWow64\DRIVERS\snp2sxp.sys [12179584 2007-05-10] () R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-09-18] (TuneUp Software) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [x] S3 CEDRIVER55; \??\C:\Program Files (x86)\Cheat Engine\dbk64.sys [x] S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x] S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x] S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [x] S4 sptd; \SystemRoot\\SystemRoot\System32\Drivers\sptd.sys [x] S2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; \??\C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\000.fcl [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-11-03 11:51 - 2013-11-03 11:51 - 00074023 _____ C:\Users\********\Downloads\FRST2.txt 2013-11-03 11:50 - 2013-11-03 11:50 - 01957098 _____ (Farbar) C:\Users\********\Downloads\FRST64.exe 2013-11-03 11:46 - 2013-11-03 11:46 - 00014779 _____ C:\Users\********\Desktop\JRT.txt 2013-11-03 11:41 - 2013-11-03 11:41 - 00000000 ____D C:\Windows\ERUNT 2013-11-03 11:40 - 2013-11-03 11:40 - 01033335 _____ (Thisisu) C:\Users\********\Downloads\JRT.exe 2013-11-03 11:28 - 2013-11-03 11:39 - 00000000 ____D C:\AdwCleaner 2013-11-03 11:28 - 2013-11-03 11:28 - 01060070 _____ C:\Users\********\Downloads\adwcleaner.exe 2013-11-03 08:36 - 2013-11-03 08:36 - 00001134 _____ C:\Windows\PFRO.log 2013-11-02 20:58 - 2013-11-02 20:59 - 00290776 _____ C:\Windows\Minidump\110213-24585-01.dmp 2013-11-02 20:58 - 2013-11-02 20:58 - 617118599 _____ C:\Windows\MEMORY.DMP 2013-11-02 18:53 - 2013-11-03 11:33 - 00000840 _____ C:\Windows\setupact.log 2013-11-02 18:53 - 2013-11-02 18:53 - 00000000 _____ C:\Windows\setuperr.log 2013-11-02 13:45 - 2013-11-02 13:45 - 00000000 ____D C:\Program Files\McAfee Security Scan 2013-11-02 13:14 - 2013-11-02 13:45 - 00001935 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2013-11-02 13:14 - 2013-11-02 13:45 - 00000000 ____D C:\Program Files (x86)\McAfee Security Scan 2013-11-02 13:14 - 2013-11-02 13:14 - 00000000 ____D C:\ProgramData\McAfee Security Scan 2013-11-02 11:42 - 2013-11-02 12:07 - 00037306 _____ C:\Users\********\Desktop\Combofix.txt 2013-11-02 11:42 - 2013-11-02 11:42 - 00037308 _____ C:\ComboFix.txt 2013-11-02 11:21 - 2013-11-02 11:42 - 00000000 ____D C:\Qoobox 2013-11-02 11:21 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe 2013-11-02 11:21 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe 2013-11-02 11:21 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2013-11-02 11:21 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2013-11-02 11:21 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2013-11-02 11:21 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe 2013-11-02 11:21 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe 2013-11-02 11:21 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe 2013-11-02 11:20 - 2013-11-02 11:40 - 00000000 ____D C:\Windows\erdnt 2013-11-01 21:20 - 2013-11-01 21:20 - 00001121 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-11-01 21:20 - 2013-11-01 21:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-11-01 21:19 - 2013-11-01 21:18 - 22404568 _____ (Mozilla) C:\Users\********\Downloads\Firefox_Setup [1].exe 2013-11-01 18:50 - 2013-11-01 19:15 - 00044493 _____ C:\Users\********\Desktop\Addition.txt 2013-11-01 18:50 - 2013-11-01 19:07 - 00079163 _____ C:\Users\********\Desktop\FRST.txt 2013-11-01 18:35 - 2013-11-01 18:35 - 00000000 ____D C:\FRST 2013-11-01 15:59 - 2013-11-01 15:59 - 00000000 ____D C:\found.008 2013-11-01 15:12 - 2013-11-03 11:31 - 00000000 ____D C:\ProgramData\Uniblue 2013-11-01 14:56 - 2013-11-01 14:56 - 00050477 _____ C:\Users\********\Downloads\Defogger.exe 2013-11-01 14:56 - 2013-11-01 14:56 - 00000588 _____ C:\Users\********\Downloads\defogger_disable.log 2013-11-01 14:56 - 2013-11-01 14:56 - 00000020 _____ C:\Users\********\defogger_reenable 2013-11-01 14:51 - 2013-11-01 14:51 - 00000000 ____D C:\Users\********\AppData\Local\Avg2014 2013-11-01 11:19 - 2013-11-01 11:19 - 00000000 ____D C:\Program Files (x86)\Skype 2013-11-01 11:03 - 2013-11-01 11:03 - 00003110 _____ C:\Windows\System32\Tasks\{4FF0AB96-0F13-4927-ACD4-DD413A89DAEE} 2013-10-31 22:57 - 2013-10-31 22:57 - 00000000 ____D C:\Users\********\AppData\Roaming\Malwarebytes 2013-10-31 22:57 - 2013-10-31 22:57 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-10-31 22:56 - 2013-11-01 10:58 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-10-31 22:56 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-10-31 22:41 - 2013-10-31 22:52 - 00000000 ____D C:\63b9d940cd5dd60b0f760919 2013-10-31 22:40 - 2013-10-31 22:40 - 01021432 _____ (Microsoft Corporation) C:\Users\********\Downloads\NDP451-KB2859818-Web.exe 2013-10-31 21:47 - 2013-10-31 21:47 - 00614816 _____ C:\Users\********\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe 2013-10-31 21:28 - 2013-10-31 21:28 - 00003340 _____ C:\Windows\System32\Tasks\SpyHunter4Startup 2013-10-31 21:28 - 2013-10-31 21:28 - 00000000 ____D C:\Program Files\Enigma Software Group 2013-10-31 21:28 - 2013-10-31 21:28 - 00000000 _____ C:\autoexec.bat 2013-10-31 21:27 - 2013-10-31 21:46 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP 2013-10-31 09:53 - 2013-10-23 11:30 - 30344480 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 22933792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 18199872 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 12572960 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-10-31 09:53 - 2013-10-23 11:30 - 11426568 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 11374520 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 09524088 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 09480328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 03131680 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 03124512 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 02946848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 02747168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433165.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433165.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 01241376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 00696096 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 00655136 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 00560416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-10-31 09:53 - 2013-10-23 11:30 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-10-31 09:53 - 2013-01-29 09:35 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll 2013-10-31 09:49 - 2013-10-18 02:36 - 01063200 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2013-10-31 09:49 - 2013-10-18 02:36 - 00955168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2013-10-31 09:46 - 2013-09-28 00:01 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2013-10-31 09:46 - 2013-09-28 00:01 - 00028960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2013-10-30 17:10 - 2013-10-30 17:10 - 00093239 _____ C:\Windows\SysWOW64\_m.dmp 2013-10-30 17:10 - 2013-10-08 12:29 - 00043320 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll 2013-10-30 17:10 - 2013-10-08 12:29 - 00040760 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe 2013-10-30 17:10 - 2013-10-08 12:29 - 00036152 _____ (TuneUp Software) C:\Windows\SysWOW64\uxtuneup.dll 2013-10-30 17:10 - 2013-10-08 12:29 - 00029496 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll 2013-10-30 17:09 - 2013-10-30 17:10 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014 2013-10-30 17:09 - 2013-10-30 17:09 - 00002229 _____ C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk 2013-10-30 17:09 - 2013-10-08 12:29 - 00025400 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll 2013-10-30 10:00 - 2013-10-30 10:00 - 00013400 ____N C:\bootsqm.dat 2013-10-30 09:58 - 2013-10-30 09:58 - 00000000 ____D C:\found.007 2013-10-28 12:50 - 2013-10-28 12:50 - 00692869 _____ (UltraDefrag Development Team) C:\Users\********\Downloads\ultradefrag-6.0.2.bin.amd64.exe 2013-10-28 11:59 - 2013-11-01 21:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-10-28 11:53 - 2013-10-28 11:53 - 00003152 _____ C:\Windows\System32\Tasks\{79D02415-8C0D-4959-8F68-EE618CE9C037} 2013-10-28 11:52 - 2013-10-28 11:52 - 01735492 _____ C:\Users\********\Downloads\ROSetup20102.exe 2013-10-25 21:05 - 2013-10-25 21:05 - 20273928 _____ C:\Users\********\Downloads\260-04 ケープ・ホーン(Cape Horn).m4a 2013-10-25 21:05 - 2013-10-25 21:05 - 10036995 _____ C:\Users\********\Downloads\259-01 Candide Suite (arr. C. Grundman) - Candide_ Overture (arr. C. Grundman for band).m4a 2013-10-25 21:05 - 2013-10-25 21:05 - 02425015 _____ C:\Users\********\Downloads\167-03 Yiddish Dances_ Terkische.m4a 2013-10-25 12:48 - 2013-10-25 12:48 - 18080872 _____ (Adobe Systems Inc.) C:\Users\********\Downloads\AdobeAIRInstaller.exe 2013-10-24 17:46 - 2013-10-24 17:46 - 00000000 ____D C:\Users\*****\AppData\Roaming\AVAST Software 2013-10-24 13:20 - 2013-10-24 13:20 - 00000000 ____D C:\Users\********\AppData\Roaming\AVAST Software 2013-10-24 13:11 - 2013-10-24 13:13 - 24285184 _____ C:\Users\********\Downloads\SkypeSetup6932.msi 2013-10-24 13:09 - 2013-11-03 09:09 - 00000308 _____ C:\Windows\Tasks\FoxTab.job 2013-10-24 13:09 - 2013-10-24 13:09 - 00003256 _____ C:\Windows\System32\Tasks\FoxTab 2013-10-24 13:09 - 2013-10-24 13:09 - 00000000 ____D C:\Users\********\AppData\Roaming\FoxTab 2013-10-24 13:08 - 2013-10-24 13:08 - 20586496 _____ C:\Users\********\Downloads\SkypeSetup [1].exe 2013-10-24 13:07 - 2013-10-24 13:08 - 00683016 _____ C:\Users\********\Downloads\SkypeSetup.exe 2013-10-24 12:47 - 2013-10-24 12:47 - 00002962 _____ C:\Windows\System32\Tasks\{F329FDF7-6D9E-4D7F-B1DB-BEDABE94FC46} 2013-10-23 03:02 - 2013-10-23 03:02 - 00589600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2013-10-22 18:05 - 2013-10-22 18:05 - 00001068 _____ C:\Users\*****\Desktop\Star Wars Battlefront II spielen.lnk 2013-10-21 09:35 - 2013-10-21 09:35 - 00078848 _____ C:\Users\*****\Desktop\Deutsch_Türk.Club_Konsolos.wps 2013-10-21 05:24 - 2013-10-30 17:36 - 00000000 ____D C:\Users\************\Desktop\Neuer Ordner (5) 2013-10-20 20:04 - 2013-10-20 20:04 - 00000000 ____D C:\found.006 2013-10-20 11:02 - 2013-10-20 11:02 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2013-10-20 11:02 - 2013-10-20 11:02 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2013-10-20 11:02 - 2013-10-20 11:02 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2013-10-20 11:02 - 2013-10-20 11:02 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2013-10-20 11:02 - 2013-10-20 11:02 - 00000000 ____D C:\Program Files\Java 2013-10-20 10:57 - 2013-10-20 10:59 - 30694824 _____ (Oracle Corporation) C:\Users\********\Downloads\jre-7u45-windows-x64.exe 2013-10-16 19:01 - 2013-10-16 19:01 - 00000000 ____D C:\Users\*****\Documents\FFOutput 2013-10-16 18:51 - 2013-10-16 18:51 - 00000000 ____D C:\Users\*****\AppData\Local\{27B0E517-4676-4C72-9512-EE5F7FDBD983} 2013-10-16 18:50 - 2013-10-16 18:50 - 00000000 ____D C:\Users\*****\AppData\Local\{8D7758A3-7FCD-47A5-BCEB-37BF718C2331} 2013-10-16 18:49 - 2013-10-16 18:49 - 00000000 ____D C:\Users\*****\AppData\Local\{3A5337BC-9A3B-440B-8733-8FEA0BF27B4B} 2013-10-14 14:33 - 2013-10-14 14:33 - 00000219 _____ C:\Users\********\Desktop\Dota 2.url 2013-10-13 08:10 - 2013-10-13 08:16 - 00000000 ____D C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TuxGuitar 1.2 2013-10-13 08:10 - 2013-10-13 08:10 - 00001095 _____ C:\Users\********\Desktop\tuxguitar.lnk 2013-10-13 08:10 - 2013-10-13 08:10 - 00000000 ____D C:\Program Files (x86)\TuxGuitar-Jet 2013-10-13 08:08 - 2013-10-13 08:08 - 16495636 _____ C:\Users\********\Downloads\tuxguitar-1.2-windows-x86-jet.exe 2013-10-12 10:56 - 2013-10-13 08:00 - 00000000 ____D C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Power Tab Software 2013-10-12 10:56 - 2013-10-12 10:56 - 05917258 _____ C:\Users\********\Downloads\powertab1.7.zip 2013-10-12 09:55 - 2013-10-12 09:54 - 07715210 _____ (Herac) C:\Users\********\Downloads\tuxguitar-1.2-windows-x86-installer(1).exe 2013-10-12 08:56 - 2013-10-12 08:56 - 00000211 _____ C:\fraglist.luar 2013-10-12 08:46 - 2013-11-02 18:54 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2013-10-12 08:46 - 2013-10-31 13:53 - 00002222 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-10-12 08:46 - 2013-10-24 13:16 - 01032416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2013-10-12 08:46 - 2013-10-24 13:16 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2013-10-12 08:46 - 2013-10-24 13:16 - 00205320 _____ C:\Windows\system32\Drivers\aswVmm.sys 2013-10-12 08:46 - 2013-10-24 13:16 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2013-10-12 08:46 - 2013-10-24 13:16 - 00084328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2013-10-12 08:46 - 2013-10-24 13:16 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys 2013-10-12 08:46 - 2013-10-24 13:16 - 00065264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys 2013-10-12 08:46 - 2013-10-24 13:16 - 00038984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys 2013-10-12 08:45 - 2013-10-24 13:16 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2013-10-12 08:35 - 2013-10-12 08:35 - 131918888 _____ C:\Users\********\Downloads\avast_free_antivirus_setup_8.0.1497.376.exe 2013-10-12 08:15 - 2013-10-12 08:15 - 00000000 ____D C:\found.005 2013-10-11 19:27 - 2013-10-11 19:34 - 30669224 _____ (Oracle Corporation) C:\Users\********\Downloads\jre-7u40-windows-x64.exe 2013-10-11 18:30 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2013-10-11 18:30 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2013-10-11 18:30 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2013-10-11 18:30 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2013-10-11 18:30 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2013-10-11 18:30 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2013-10-11 18:30 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2013-10-11 13:26 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2013-10-11 13:26 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2013-10-11 13:26 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2013-10-11 13:26 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2013-10-11 13:26 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2013-10-11 13:26 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2013-10-11 13:26 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2013-10-11 13:26 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2013-10-11 13:26 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2013-10-11 13:26 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2013-10-11 13:26 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2013-10-11 13:26 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2013-10-11 07:34 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-10-11 07:34 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-10-11 07:34 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-10-11 07:34 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-10-11 07:34 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-10-11 07:34 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-10-11 07:34 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-10-11 07:34 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-10-11 07:34 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-10-11 07:34 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-10-11 07:34 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-10-11 07:34 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-10-11 07:34 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-10-11 07:34 - 2013-09-22 23:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-10-11 07:34 - 2013-09-22 23:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-10-11 07:34 - 2013-09-22 23:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-10-11 07:34 - 2013-09-22 23:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-10-11 07:34 - 2013-09-22 23:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-10-11 07:34 - 2013-09-22 23:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-10-11 07:34 - 2013-09-22 23:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-10-11 07:34 - 2013-09-22 23:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-10-11 07:34 - 2013-09-22 23:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-10-11 07:34 - 2013-09-22 23:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-10-11 07:34 - 2013-09-22 23:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-10-11 07:34 - 2013-09-22 23:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-10-11 07:34 - 2013-09-22 23:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-10-11 07:34 - 2013-09-22 23:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-10-11 07:34 - 2013-09-21 04:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-10-11 07:34 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-10-11 07:34 - 2013-09-21 03:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-10-11 07:34 - 2013-09-21 03:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-10-11 07:26 - 2013-09-14 02:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-10-11 07:26 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-10-11 07:26 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2013-10-11 07:26 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2013-10-11 07:26 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-10-11 07:26 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-10-11 07:26 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2013-10-11 07:26 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-10-11 07:26 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2013-10-11 07:26 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-10-11 07:26 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-10-11 07:26 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-10-11 07:26 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2013-10-11 07:26 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-10-11 07:26 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2013-10-11 07:26 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-10-11 07:26 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-10-11 07:26 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-10-11 07:26 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-10-11 07:26 - 2013-08-28 02:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-10-11 07:26 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2013-10-11 07:26 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2013-10-11 07:26 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2013-10-11 07:26 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2013-10-11 07:26 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2013-10-11 07:26 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2013-10-11 07:26 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2013-10-11 07:26 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2013-10-11 07:26 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2013-10-11 07:26 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2013-10-11 07:26 - 2013-07-03 05:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys 2013-10-11 07:26 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2013-10-11 07:26 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2013-10-11 07:26 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2013-10-09 07:44 - 2013-10-09 07:44 - 00000000 ____D C:\Users\*****\AppData\Local\LogMeIn 2013-10-08 17:46 - 2013-10-08 17:46 - 00008046 _____ C:\Users\********\Documents\Unbenannt 1.odt 2013-10-08 11:49 - 2013-10-08 11:49 - 00000000 ____D C:\found.004 2013-10-07 19:01 - 2013-10-07 19:01 - 00015872 _____ C:\Users\*****\Desktop\tülay.wps 2013-10-07 15:42 - 2013-11-01 10:24 - 00000011 _____ C:\Users\********\Desktop\Neues Textdokument.TXT 2013-10-05 17:40 - 2013-10-05 17:40 - 00000000 ____D C:\Users\********\AppData\Local\NVIDIA 2013-10-05 17:38 - 2013-10-05 17:38 - 22321072 _____ (NVIDIA Corporation) C:\Users\********\Downloads\GeForce_Experience_v1.6.1.0.exe 2013-10-05 17:38 - 2013-09-28 00:01 - 00029984 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll ==================== One Month Modified Files and Folders ======= 2013-11-03 11:51 - 2013-11-03 11:51 - 00074023 _____ C:\Users\********\Downloads\FRST2.txt 2013-11-03 11:50 - 2013-11-03 11:50 - 01957098 _____ (Farbar) C:\Users\********\Downloads\FRST64.exe 2013-11-03 11:46 - 2013-11-03 11:46 - 00014779 _____ C:\Users\********\Desktop\JRT.txt 2013-11-03 11:41 - 2013-11-03 11:41 - 00000000 ____D C:\Windows\ERUNT 2013-11-03 11:41 - 2011-04-07 16:31 - 00000000 ____D C:\Users\********\AppData\Roaming\Skype 2013-11-03 11:40 - 2013-11-03 11:40 - 01033335 _____ (Thisisu) C:\Users\********\Downloads\JRT.exe 2013-11-03 11:40 - 2009-07-14 05:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-11-03 11:40 - 2009-07-14 05:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-11-03 11:39 - 2013-11-03 11:28 - 00000000 ____D C:\AdwCleaner 2013-11-03 11:37 - 2012-07-23 12:00 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-11-03 11:36 - 2009-10-12 21:35 - 01623389 _____ C:\Windows\WindowsUpdate.log 2013-11-03 11:33 - 2013-11-02 18:53 - 00000840 _____ C:\Windows\setupact.log 2013-11-03 11:33 - 2011-03-20 19:34 - 00001225 ___SH C:\Windows\SysWOW64\mmf.sys 2013-11-03 11:33 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-11-03 11:31 - 2013-11-01 15:12 - 00000000 ____D C:\ProgramData\Uniblue 2013-11-03 11:31 - 2010-07-16 15:56 - 00000000 ____D C:\ProgramData\ICQ 2013-11-03 11:31 - 2010-06-26 17:04 - 00000000 ___RD C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-11-03 11:28 - 2013-11-03 11:28 - 01060070 _____ C:\Users\********\Downloads\adwcleaner.exe 2013-11-03 09:09 - 2013-10-24 13:09 - 00000308 _____ C:\Windows\Tasks\FoxTab.job 2013-11-03 08:36 - 2013-11-03 08:36 - 00001134 _____ C:\Windows\PFRO.log 2013-11-02 23:20 - 2013-01-23 16:27 - 00000000 ____D C:\Program Files (x86)\Steam 2013-11-02 22:30 - 2013-02-16 10:25 - 00000928 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1583400021-3288482790-2347783300-1005UA.job 2013-11-02 20:59 - 2013-11-02 20:58 - 00290776 _____ C:\Windows\Minidump\110213-24585-01.dmp 2013-11-02 20:58 - 2013-11-02 20:58 - 617118599 _____ C:\Windows\MEMORY.DMP 2013-11-02 20:58 - 2010-06-30 08:10 - 00000000 ____D C:\Windows\Minidump 2013-11-02 18:54 - 2013-10-12 08:46 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2013-11-02 18:53 - 2013-11-02 18:53 - 00000000 _____ C:\Windows\setuperr.log 2013-11-02 13:45 - 2013-11-02 13:45 - 00000000 ____D C:\Program Files\McAfee Security Scan 2013-11-02 13:45 - 2013-11-02 13:14 - 00001935 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2013-11-02 13:45 - 2013-11-02 13:14 - 00000000 ____D C:\Program Files (x86)\McAfee Security Scan 2013-11-02 13:14 - 2013-11-02 13:14 - 00000000 ____D C:\ProgramData\McAfee Security Scan 2013-11-02 13:14 - 2012-07-23 12:00 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-11-02 13:14 - 2012-04-01 13:24 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-11-02 13:14 - 2011-05-16 19:21 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-11-02 13:14 - 2010-08-02 10:54 - 00000000 ____D C:\Users\********\AppData\Local\Adobe 2013-11-02 12:07 - 2013-11-02 11:42 - 00037306 _____ C:\Users\********\Desktop\Combofix.txt 2013-11-02 11:42 - 2013-11-02 11:42 - 00037308 _____ C:\ComboFix.txt 2013-11-02 11:42 - 2013-11-02 11:21 - 00000000 ____D C:\Qoobox 2013-11-02 11:42 - 2013-03-16 20:16 - 00000000 ____D C:\Users\****** 2013-11-02 11:41 - 2011-02-20 17:33 - 00000000 ___RD C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-11-02 11:40 - 2013-11-02 11:20 - 00000000 ____D C:\Windows\erdnt 2013-11-02 11:40 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini 2013-11-02 11:38 - 2011-02-20 17:33 - 00000000 ____D C:\Users\***** 2013-11-02 11:17 - 2013-04-01 09:32 - 00003934 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{72521656-C096-4BA5-AF31-0D14653F5896} 2013-11-02 10:30 - 2013-02-16 10:25 - 00000906 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1583400021-3288482790-2347783300-1005Core.job 2013-11-01 21:20 - 2013-11-01 21:20 - 00001121 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-11-01 21:20 - 2013-11-01 21:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-11-01 21:20 - 2013-10-28 11:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-11-01 21:18 - 2013-11-01 21:19 - 22404568 _____ (Mozilla) C:\Users\********\Downloads\Firefox_Setup [1].exe 2013-11-01 19:15 - 2013-11-01 18:50 - 00044493 _____ C:\Users\********\Desktop\Addition.txt 2013-11-01 19:07 - 2013-11-01 18:50 - 00079163 _____ C:\Users\********\Desktop\FRST.txt 2013-11-01 18:35 - 2013-11-01 18:35 - 00000000 ____D C:\FRST 2013-11-01 18:30 - 2013-01-15 15:32 - 00125864 _____ C:\Users\********\AppData\Local\GDIPFONTCACHEV1.DAT 2013-11-01 18:06 - 2011-03-04 12:41 - 00125864 _____ C:\Users\*****\AppData\Local\GDIPFONTCACHEV1.DAT 2013-11-01 16:17 - 2013-01-15 15:29 - 00537992 _____ C:\Windows\system32\FNTCACHE.DAT 2013-11-01 15:59 - 2013-11-01 15:59 - 00000000 ____D C:\found.008 2013-11-01 14:56 - 2013-11-01 14:56 - 00050477 _____ C:\Users\********\Downloads\Defogger.exe 2013-11-01 14:56 - 2013-11-01 14:56 - 00000588 _____ C:\Users\********\Downloads\defogger_disable.log 2013-11-01 14:56 - 2013-11-01 14:56 - 00000020 _____ C:\Users\********\defogger_reenable 2013-11-01 14:56 - 2010-06-26 17:03 - 00000000 ____D C:\Users\******** 2013-11-01 14:51 - 2013-11-01 14:51 - 00000000 ____D C:\Users\********\AppData\Local\Avg2014 2013-11-01 14:31 - 2009-07-14 03:34 - 95944704 _____ C:\Windows\system32\config\SOFTWARE_tureg_old 2013-11-01 14:31 - 2009-07-14 03:34 - 26214400 _____ C:\Windows\system32\config\SYSTEM_tureg_old 2013-11-01 14:31 - 2009-07-14 03:34 - 00262144 _____ C:\Windows\system32\config\SECURITY_tureg_old 2013-11-01 14:27 - 2009-07-14 03:34 - 00524288 _____ C:\Windows\system32\config\DEFAULT_tureg_old 2013-11-01 14:27 - 2009-07-14 03:34 - 00172032 _____ C:\Windows\system32\config\SAM_tureg_old 2013-11-01 11:20 - 2011-04-07 16:31 - 00000000 ____D C:\ProgramData\Skype 2013-11-01 11:19 - 2013-11-01 11:19 - 00000000 ____D C:\Program Files (x86)\Skype 2013-11-01 11:19 - 2013-09-27 15:11 - 00002545 _____ C:\Users\Public\Desktop\Skype.lnk 2013-11-01 11:17 - 2011-01-19 16:23 - 00787696 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2013-11-01 11:17 - 2009-09-25 17:34 - 03895000 _____ C:\Windows\system32\perfh007.dat 2013-11-01 11:17 - 2009-09-25 17:34 - 01201570 _____ C:\Windows\system32\perfc007.dat 2013-11-01 11:16 - 2009-07-14 06:13 - 00787696 _____ C:\Windows\system32\PerfStringBackup.INI 2013-11-01 11:03 - 2013-11-01 11:03 - 00003110 _____ C:\Windows\System32\Tasks\{4FF0AB96-0F13-4927-ACD4-DD413A89DAEE} 2013-11-01 10:58 - 2013-10-31 22:56 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-11-01 10:58 - 2012-10-20 18:42 - 00000000 ____D C:\Program Files (x86)\EXPERTool 2013-11-01 10:46 - 2013-07-25 10:55 - 00000000 ____D C:\Program Files (x86)\RealNetworks 2013-11-01 10:46 - 2013-03-07 17:36 - 00000000 ____D C:\Program Files (x86)\QuickTime 2013-11-01 10:46 - 2011-03-07 17:03 - 00000000 ____D C:\Program Files (x86)\Real 2013-11-01 10:46 - 2010-08-19 14:47 - 00000000 ____D C:\Program Files (x86)\OpenOffice.org 3 2013-11-01 10:46 - 2009-10-12 21:40 - 00000000 ____D C:\ProgramData\NVIDIA 2013-11-01 10:45 - 2011-04-26 16:07 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-11-01 10:42 - 2009-09-17 22:04 - 00000000 ____D C:\Program Files (x86)\Intel 2013-11-01 10:41 - 2012-03-04 17:14 - 00000000 ____D C:\Program Files (x86)\icq 2013-11-01 10:41 - 2011-01-18 14:04 - 00000000 ____D C:\Program Files (x86)\HP 2013-11-01 10:41 - 2009-09-17 22:42 - 00000000 ____D C:\Program Files (x86)\Google 2013-11-01 10:40 - 2009-10-12 21:42 - 00000000 ____D C:\Program Files (x86)\Cyberlink 2013-11-01 10:39 - 2009-10-12 21:40 - 00000000 ____D C:\Program Files (x86)\Acer Arcade Deluxe 2013-11-01 10:38 - 2012-10-28 13:12 - 00000000 ____D C:\Program Files (x86)\Xfire 2013-11-01 10:38 - 2009-09-17 22:39 - 00000000 ____D C:\Program Files (x86)\Acer 2013-11-01 10:37 - 2013-07-07 19:57 - 00000000 ____D C:\Program Files (x86)\TransportGigant Demo 2013-11-01 10:37 - 2010-09-10 13:52 - 00000000 ____D C:\Program Files (x86)\Ubisoft 2013-11-01 10:24 - 2013-10-07 15:42 - 00000011 _____ C:\Users\********\Desktop\Neues Textdokument.TXT 2013-10-31 22:57 - 2013-10-31 22:57 - 00000000 ____D C:\Users\********\AppData\Roaming\Malwarebytes 2013-10-31 22:57 - 2013-10-31 22:57 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-10-31 22:52 - 2013-10-31 22:41 - 00000000 ____D C:\63b9d940cd5dd60b0f760919 2013-10-31 22:40 - 2013-10-31 22:40 - 01021432 _____ (Microsoft Corporation) C:\Users\********\Downloads\NDP451-KB2859818-Web.exe 2013-10-31 22:33 - 2009-09-17 22:29 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-10-31 22:31 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2013-10-31 22:28 - 2009-07-14 08:45 - 00000000 ____D C:\Windows\ShellNew 2013-10-31 22:28 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\MSBuild 2013-10-31 22:26 - 2009-07-14 03:34 - 00000695 _____ C:\Windows\win.ini 2013-10-31 21:47 - 2013-10-31 21:47 - 00614816 _____ C:\Users\********\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe 2013-10-31 21:46 - 2013-10-31 21:27 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP 2013-10-31 21:28 - 2013-10-31 21:28 - 00003340 _____ C:\Windows\System32\Tasks\SpyHunter4Startup 2013-10-31 21:28 - 2013-10-31 21:28 - 00000000 ____D C:\Program Files\Enigma Software Group 2013-10-31 21:28 - 2013-10-31 21:28 - 00000000 _____ C:\autoexec.bat 2013-10-31 19:53 - 2011-12-07 16:53 - 00000000 ____D C:\Users\*****\AppData\Local\PMB Files 2013-10-31 17:54 - 2010-10-03 10:50 - 00000000 ____D C:\Users\********\Documents\My Games 2013-10-31 17:42 - 2012-11-23 13:51 - 00002936 _____ C:\Windows\System32\Tasks\{0BC71482-B65A-4EC9-92AD-6F5CFB239B55} 2013-10-31 17:42 - 2012-11-23 13:50 - 00002936 _____ C:\Windows\System32\Tasks\{C41B7DF7-D76F-48C7-9709-DA7576062ED7} 2013-10-31 17:42 - 2012-11-23 13:50 - 00002936 _____ C:\Windows\System32\Tasks\{3D68952B-40CF-4E46-8156-203BCAC0BA5D} 2013-10-31 17:42 - 2012-11-23 13:49 - 00002936 _____ C:\Windows\System32\Tasks\{B3A3CF68-6DE7-432F-AA03-3CBDA910C1E7} 2013-10-31 17:42 - 2012-06-14 17:46 - 00003044 _____ C:\Windows\System32\Tasks\{7A282231-4C61-4AF0-8E8C-2458843988FF} 2013-10-31 17:42 - 2012-06-14 17:45 - 00003044 _____ C:\Windows\System32\Tasks\{7A26E76B-F7DE-4DF7-9AFF-29500E94A4B1} 2013-10-31 14:30 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-10-31 14:02 - 2013-05-26 16:51 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys 2013-10-31 13:53 - 2013-10-12 08:46 - 00002222 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-10-31 09:57 - 2010-09-13 13:33 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-10-31 09:49 - 2010-06-04 07:12 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-10-31 08:49 - 2011-03-20 08:34 - 00000000 ____D C:\Users\*****\AppData\Roaming\TuneUp Software 2013-10-30 17:54 - 2009-07-14 03:34 - 40108032 _____ C:\Windows\system32\config\COMPONENTS_tureg_old 2013-10-30 17:36 - 2013-10-21 05:24 - 00000000 ____D C:\Users\************\Desktop\Neuer Ordner (5) 2013-10-30 17:36 - 2010-12-20 17:13 - 00000000 ____D C:\Users\********\Desktop\musik 2013-10-30 17:33 - 2012-04-09 12:41 - 00000000 ____D C:\Download 2013-10-30 17:22 - 2013-07-07 14:20 - 00002976 _____ C:\Windows\System32\Tasks\{2B9A10E4-AB62-4551-B7D8-3EF0321B19B4} 2013-10-30 17:22 - 2013-07-07 10:59 - 00002976 _____ C:\Windows\System32\Tasks\{83C074D9-5AC0-463C-B3CD-CCBFD83F8ECA} 2013-10-30 17:22 - 2013-07-06 15:59 - 00002976 _____ C:\Windows\System32\Tasks\{CFE76113-585E-40AF-B2A3-63DD523C7DFE} 2013-10-30 17:22 - 2013-07-06 15:54 - 00002976 _____ C:\Windows\System32\Tasks\{6F5827DC-8AC7-47F8-B931-DF4FDDE04EE5} 2013-10-30 17:15 - 2012-02-20 10:06 - 00000000 ____D C:\Users\********\AppData\Roaming\HpUpdate 2013-10-30 17:15 - 2010-07-03 23:15 - 00000000 ____D C:\Users\********\AppData\Roaming\Nero 2013-10-30 17:15 - 2010-06-26 17:03 - 00000000 ____D C:\Users\********\AppData\Local\Microsoft Help 2013-10-30 17:11 - 2011-10-21 16:17 - 00000000 ____D C:\Users\********\AppData\Local\LogMeIn Hamachi 2013-10-30 17:11 - 2010-11-26 21:59 - 00000000 ____D C:\ProgramData\TuneUp Software 2013-10-30 17:10 - 2013-10-30 17:10 - 00093239 _____ C:\Windows\SysWOW64\_m.dmp 2013-10-30 17:10 - 2013-10-30 17:09 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014 2013-10-30 17:09 - 2013-10-30 17:09 - 00002229 _____ C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk 2013-10-30 17:09 - 2012-02-19 08:46 - 00000000 ____D C:\Users\********\AppData\Roaming\TuneUp Software 2013-10-30 17:03 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\Help 2013-10-30 16:14 - 2011-05-24 16:30 - 00000000 ____D C:\Users\*****\AppData\Local\LogMeIn Hamachi 2013-10-30 10:00 - 2013-10-30 10:00 - 00013400 ____N C:\bootsqm.dat 2013-10-30 09:58 - 2013-10-30 09:58 - 00000000 ____D C:\found.007 2013-10-28 12:50 - 2013-10-28 12:50 - 00692869 _____ (UltraDefrag Development Team) C:\Users\********\Downloads\ultradefrag-6.0.2.bin.amd64.exe 2013-10-28 12:50 - 2012-12-31 20:27 - 00000000 ____D C:\Program Files\UltraDefrag 2013-10-28 11:53 - 2013-10-28 11:53 - 00003152 _____ C:\Windows\System32\Tasks\{79D02415-8C0D-4959-8F68-EE618CE9C037} 2013-10-28 11:52 - 2013-10-28 11:52 - 01735492 _____ C:\Users\********\Downloads\ROSetup20102.exe 2013-10-27 12:30 - 2013-03-28 19:59 - 00000000 ____D C:\Users\********\Documents\cc regstri datei 2013-10-25 21:05 - 2013-10-25 21:05 - 20273928 _____ C:\Users\********\Downloads\260-04 ケープ・ホーン(Cape Horn).m4a 2013-10-25 21:05 - 2013-10-25 21:05 - 10036995 _____ C:\Users\********\Downloads\259-01 Candide Suite (arr. C. Grundman) - Candide_ Overture (arr. C. Grundman for band).m4a 2013-10-25 21:05 - 2013-10-25 21:05 - 02425015 _____ C:\Users\********\Downloads\167-03 Yiddish Dances_ Terkische.m4a 2013-10-25 12:48 - 2013-10-25 12:48 - 18080872 _____ (Adobe Systems Inc.) C:\Users\********\Downloads\AdobeAIRInstaller.exe 2013-10-24 17:46 - 2013-10-24 17:46 - 00000000 ____D C:\Users\*****\AppData\Roaming\AVAST Software 2013-10-24 13:20 - 2013-10-24 13:20 - 00000000 ____D C:\Users\********\AppData\Roaming\AVAST Software 2013-10-24 13:16 - 2013-10-12 08:46 - 01032416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2013-10-24 13:16 - 2013-10-12 08:46 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2013-10-24 13:16 - 2013-10-12 08:46 - 00205320 _____ C:\Windows\system32\Drivers\aswVmm.sys 2013-10-24 13:16 - 2013-10-12 08:46 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2013-10-24 13:16 - 2013-10-12 08:46 - 00084328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2013-10-24 13:16 - 2013-10-12 08:46 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys 2013-10-24 13:16 - 2013-10-12 08:46 - 00065264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys 2013-10-24 13:16 - 2013-10-12 08:46 - 00038984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys 2013-10-24 13:16 - 2013-10-12 08:45 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2013-10-24 13:16 - 2013-02-17 14:51 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2013-10-24 13:15 - 2013-02-17 14:44 - 00000000 ____D C:\ProgramData\AVAST Software 2013-10-24 13:14 - 2013-02-17 14:51 - 00000000 _____ C:\Windows\SysWOW64\config.nt 2013-10-24 13:13 - 2013-10-24 13:11 - 24285184 _____ C:\Users\********\Downloads\SkypeSetup6932.msi 2013-10-24 13:09 - 2013-10-24 13:09 - 00003256 _____ C:\Windows\System32\Tasks\FoxTab 2013-10-24 13:09 - 2013-10-24 13:09 - 00000000 ____D C:\Users\********\AppData\Roaming\FoxTab 2013-10-24 13:08 - 2013-10-24 13:08 - 20586496 _____ C:\Users\********\Downloads\SkypeSetup [1].exe 2013-10-24 13:08 - 2013-10-24 13:07 - 00683016 _____ C:\Users\********\Downloads\SkypeSetup.exe 2013-10-24 12:50 - 2012-05-02 18:15 - 00000000 ____D C:\Users\************\AppData\Roaming\Skype 2013-10-24 12:47 - 2013-10-24 12:47 - 00002962 _____ C:\Windows\System32\Tasks\{F329FDF7-6D9E-4D7F-B1DB-BEDABE94FC46} 2013-10-23 11:30 - 2013-10-31 09:53 - 30344480 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 22933792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 18199872 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 12572960 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-10-23 11:30 - 2013-10-31 09:53 - 11426568 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 11374520 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 09524088 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 09480328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 03131680 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 03124512 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 02946848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 02747168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433165.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433165.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 01241376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 00696096 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 00655136 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 00560416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-10-23 11:30 - 2013-10-31 09:53 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-10-23 11:30 - 2013-09-17 21:22 - 18286416 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2013-10-23 11:30 - 2013-09-17 21:22 - 15855568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-10-23 11:30 - 2013-09-17 21:22 - 02695200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2013-10-23 11:30 - 2012-10-20 18:46 - 15212336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2013-10-23 11:30 - 2012-10-07 20:45 - 01435504 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2013-10-23 11:30 - 2010-04-03 21:55 - 00023287 _____ C:\Windows\system32\nvinfo.pb 2013-10-23 11:30 - 2009-09-17 22:58 - 03067560 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2013-10-23 09:20 - 2012-10-18 07:12 - 03426956 _____ C:\Windows\system32\nvcoproc.bin 2013-10-23 09:20 - 2010-07-09 15:27 - 06669600 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2013-10-23 09:20 - 2010-07-09 15:27 - 03489568 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2013-10-23 09:20 - 2010-07-09 15:27 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2013-10-23 09:20 - 2010-07-09 15:27 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2013-10-23 09:20 - 2009-07-14 08:51 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2013-10-23 09:20 - 2009-07-14 08:51 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2013-10-23 03:02 - 2013-10-23 03:02 - 00589600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2013-10-22 18:07 - 2010-06-03 15:40 - 00000000 ____D C:\Users\Public\Documents\Acer 2013-10-22 18:06 - 2011-03-11 15:07 - 00000000 ____D C:\Users\*****\Documents\DVDVideoSoft 2013-10-22 18:05 - 2013-10-22 18:05 - 00001068 _____ C:\Users\*****\Desktop\Star Wars Battlefront II spielen.lnk 2013-10-22 17:55 - 2013-09-15 19:34 - 00003342 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1583400021-3288482790-2347783300-1005 2013-10-22 17:55 - 2013-09-15 19:34 - 00003208 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1583400021-3288482790-2347783300-1005 2013-10-21 14:50 - 2011-12-24 18:41 - 00002878 _____ C:\Users\*****\AppData\Roaming\wklnhst.dat 2013-10-21 14:43 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\FxsTmp 2013-10-21 09:35 - 2013-10-21 09:35 - 00078848 _____ C:\Users\*****\Desktop\Deutsch_Türk.Club_Konsolos.wps 2013-10-20 20:04 - 2013-10-20 20:04 - 00000000 ____D C:\found.006 2013-10-20 19:18 - 2012-07-01 21:01 - 00062464 _____ C:\Users\*****\Desktop\Deutsch_Türk.Club_Stadtführung (1).wps 2013-10-20 11:03 - 2013-09-27 16:38 - 00000000 ____D C:\ProgramData\Oracle 2013-10-20 11:02 - 2013-10-20 11:02 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2013-10-20 11:02 - 2013-10-20 11:02 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2013-10-20 11:02 - 2013-10-20 11:02 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2013-10-20 11:02 - 2013-10-20 11:02 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2013-10-20 11:02 - 2013-10-20 11:02 - 00000000 ____D C:\Program Files\Java 2013-10-20 10:59 - 2013-10-20 10:57 - 30694824 _____ (Oracle Corporation) C:\Users\********\Downloads\jre-7u45-windows-x64.exe 2013-10-18 02:36 - 2013-10-31 09:49 - 01063200 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2013-10-18 02:36 - 2013-10-31 09:49 - 00955168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2013-10-16 19:01 - 2013-10-16 19:01 - 00000000 ____D C:\Users\*****\Documents\FFOutput 2013-10-16 18:51 - 2013-10-16 18:51 - 00000000 ____D C:\Users\*****\AppData\Local\{27B0E517-4676-4C72-9512-EE5F7FDBD983} 2013-10-16 18:50 - 2013-10-16 18:50 - 00000000 ____D C:\Users\*****\AppData\Local\{8D7758A3-7FCD-47A5-BCEB-37BF718C2331} 2013-10-16 18:49 - 2013-10-16 18:49 - 00000000 ____D C:\Users\*****\AppData\Local\{3A5337BC-9A3B-440B-8733-8FEA0BF27B4B} 2013-10-16 18:49 - 2011-03-08 20:30 - 00000000 ____D C:\Users\*****\AppData\Local\Windows Live 2013-10-14 14:33 - 2013-10-14 14:33 - 00000219 _____ C:\Users\********\Desktop\Dota 2.url 2013-10-14 14:33 - 2010-08-10 10:34 - 00000000 ____D C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2013-10-13 18:21 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF 2013-10-13 18:19 - 2012-04-29 16:16 - 00127568 _____ C:\Users\************\AppData\Local\GDIPFONTCACHEV1.DAT 2013-10-13 10:59 - 2007-07-12 02:49 - 00000000 ____D C:\Windows\Panther 2013-10-13 10:00 - 2012-10-20 20:53 - 00000000 ____D C:\Users\********\Desktop\gP5 2013-10-13 08:16 - 2013-10-13 08:10 - 00000000 ____D C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TuxGuitar 1.2 2013-10-13 08:10 - 2013-10-13 08:10 - 00001095 _____ C:\Users\********\Desktop\tuxguitar.lnk 2013-10-13 08:10 - 2013-10-13 08:10 - 00000000 ____D C:\Program Files (x86)\TuxGuitar-Jet 2013-10-13 08:08 - 2013-10-13 08:08 - 16495636 _____ C:\Users\********\Downloads\tuxguitar-1.2-windows-x86-jet.exe 2013-10-13 08:00 - 2013-10-12 10:56 - 00000000 ____D C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Power Tab Software 2013-10-12 10:56 - 2013-10-12 10:56 - 05917258 _____ C:\Users\********\Downloads\powertab1.7.zip 2013-10-12 09:54 - 2013-10-12 09:55 - 07715210 _____ (Herac) C:\Users\********\Downloads\tuxguitar-1.2-windows-x86-installer(1).exe 2013-10-12 08:56 - 2013-10-12 08:56 - 00000211 _____ C:\fraglist.luar 2013-10-12 08:50 - 2010-06-03 18:49 - 00000000 ____D C:\ProgramData\Avira 2013-10-12 08:45 - 2013-02-17 14:44 - 00000000 ____D C:\Program Files\AVAST Software 2013-10-12 08:35 - 2013-10-12 08:35 - 131918888 _____ C:\Users\********\Downloads\avast_free_antivirus_setup_8.0.1497.376.exe 2013-10-12 08:15 - 2013-10-12 08:15 - 00000000 ____D C:\found.005 2013-10-11 19:42 - 2010-07-19 12:04 - 00000000 ____D C:\Users\********\AppData\Roaming\ICQ 2013-10-11 19:34 - 2013-10-11 19:27 - 30669224 _____ (Oracle Corporation) C:\Users\********\Downloads\jre-7u40-windows-x64.exe 2013-10-11 18:33 - 2013-07-29 22:13 - 00000000 ____D C:\Windows\system32\MRT 2013-10-11 18:33 - 2010-06-04 06:57 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-10-11 15:01 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-10-11 09:45 - 2012-05-21 14:04 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-10-09 07:44 - 2013-10-09 07:44 - 00000000 ____D C:\Users\*****\AppData\Local\LogMeIn 2013-10-08 17:46 - 2013-10-08 17:46 - 00008046 _____ C:\Users\********\Documents\Unbenannt 1.odt 2013-10-08 12:29 - 2013-10-30 17:10 - 00043320 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll 2013-10-08 12:29 - 2013-10-30 17:10 - 00040760 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe 2013-10-08 12:29 - 2013-10-30 17:10 - 00036152 _____ (TuneUp Software) C:\Windows\SysWOW64\uxtuneup.dll 2013-10-08 12:29 - 2013-10-30 17:10 - 00029496 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll 2013-10-08 12:29 - 2013-10-30 17:09 - 00025400 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll 2013-10-08 11:49 - 2013-10-08 11:49 - 00000000 ____D C:\found.004 2013-10-07 20:27 - 2012-04-29 12:05 - 00016896 _____ C:\Users\*****\Desktop\********** Bewerbung.wps 2013-10-07 19:01 - 2013-10-07 19:01 - 00015872 _____ C:\Users\*****\Desktop\****.wps 2013-10-05 17:40 - 2013-10-05 17:40 - 00000000 ____D C:\Users\********\AppData\Local\NVIDIA 2013-10-05 17:38 - 2013-10-05 17:38 - 22321072 _____ (NVIDIA Corporation) C:\Users\********\Downloads\GeForce_Experience_v1.6.1.0.exe Files to move or delete: ==================== C:\ProgramData\hash.dat C:\Users\********\xobglu16.dll C:\Users\********\xobglu32.dll Some content of TEMP: ==================== C:\Users\********\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-11-02 23:20 ==================== End Of Log ============================ --- --- --- --- --- --- 4. Addition Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-10-2013 Ran by ******** at 2013-11-03 11:52:57 Running from C:\Users\********\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== 1310 (x32 Version: 130.0.365.000) 1310_Help (x32 Version: 82.0.58.000) 1310Trb (x32 Version: 82.0.242.000) 3DVIA player 5.0 (x32 Version: 5.0.0.15) 64 Bit HP CIO Components Installer (Version: 7.2.8) 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0) Acer Arcade Deluxe (x32 Version: 3.1.6731) Acrobat.com (x32 Version: 1.6.65) Adobe AIR (x32 Version: 3.9.0.1030) Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117) Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117) Adobe Shockwave Player 12.0 (x32 Version: 12.0.2.122) Advertising Center (x32 Version: 0.0.0.2) AIO_CDB_ProductContext (x32 Version: 130.0.365.000) AIO_CDB_Software (x32 Version: 130.0.365.000) AIO_Scan (x32 Version: 130.0.421.000) Akamai NetSession Interface (HKCU) Animation Shop 3 Try And Buy (x32 Version: 3.0.4.0000) Apple Application Support (x32 Version: 2.3.4) Apple Software Update (x32 Version: 2.1.3.127) Audiograbber 1.83 SE (x32 Version: 1.83 SE) avast! Free Antivirus (x32 Version: 9.0.2006) Avira SearchFree Toolbar (x32 Version: 12.6.0.1898) Backup Manager Advance (x32 Version: 2.0.2.19) Bing Bar (x32 Version: 7.0.601.0) Bing Maps 3D (Version: 4.0.903.16005) BufferChm (x32 Version: 130.0.331.000) Compatibility Pack für 2007 Office System (x32 Version: 12.0.6612.1000) Copy (x32 Version: 130.0.428.000) Counter-Strike 2D 0.1.2.0 (x32) CyberLink PowerDirector (x32 Version: 7.0.3003) D3DX10 (x32 Version: 15.4.2368.0902) Dealio Toolbar v4.6 (x32 Version: 4.6) Destinations (x32 Version: 140.0.77.000) DeviceDiscovery (x32 Version: 130.0.465.000) DocProc (x32 Version: 13.0.0.0) Dota 2 (x32) EasyBits GO (HKCU) eBay Worldwide (x32 Version: 2.1.0703) Empire: Total War (x32) eReg (x32 Version: 1.20.138.34) Facebook Video Calling 1.2.0.287 (x32 Version: 1.2.287) Fax (x32 Version: 130.0.418.000) File Splitter and Joiner (FFSJ v3.2) (x32) Firebird SQL Server - MAGIX Edition (x32 Version: 2.1.31.0) FRANKIE - LUSTIGE WELTREISE (x32) FreeCAD 0.13 (x32 Version: 0.13.1828) GameShadow (x32 Version: 2.02.0000) GeForce Experience NvStream Client Components (Version: 1.6.28) Google Drive (x32 Version: 1.12.5329.1887) Google Earth Plug-in (x32 Version: 7.1.1.1888) Google Toolbar for Internet Explorer (x32 Version: 1.0.0) Google Update Helper (x32 Version: 1.3.21.165) Gothic II Datenbank (HKCU Version: 5.0 Beta) GPBaseService2 (x32 Version: 130.0.371.000) Hewlett-Packard ACLM.NET v1.1.0.0 (x32 Version: 1.00.0000) HP Product Detection (x32 Version: 11.14.0001) HP Update (x32 Version: 5.005.000.001) HPDiagnosticAlert (x32 Version: 1.00.0000) HPPhotoGadget (x32 Version: 130.0.282.000) HPPhotosmartEssential (x32 Version: 2.04.0000) HPProductAssistant (x32 Version: 130.0.371.000) HPSSupply (x32 Version: 130.0.371.000) ICQ 8.0 (build 5981, für aktuellen Benutzer) (HKCU Version: 8.0.5981.0) ICQ Sparberater (x32 Version: 1.3.671) Icy Tower v1.5 (x32) ImagXpress (x32 Version: 7.0.74.0) Java 7 Update 40 (x32 Version: 7.0.400) Java 7 Update 45 (64-bit) (Version: 7.0.450) Java Auto Updater (x32 Version: 2.1.9.8) Java(TM) 6 Update 22 (x32 Version: 6.0.220) JavaFX 2.1.1 (x32 Version: 2.1.1) Junk Mail filter update (x32 Version: 15.4.3502.0922) L&H TTS3000 Deutsch (x32) Left 4 Dead 2 (x32) LogicCircuit (x32 Version: 1.9.0803) Logitech Gaming Software 5.10 (Version: 5.10.127) Logitech SetPoint 6.52 (Version: 6.52.74) LogMeIn Hamachi (x32 Version: 2.2.0.58) MarketResearch (x32 Version: 130.0.374.000) McAfee Security Scan Plus (Version: 3.8.130.8) Mesh Runtime (x32 Version: 15.4.5722.2) Messenger Companion (x32 Version: 15.4.3502.0922) Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938) Microsoft .NET Framework 4.5.1 (Deutsch) (Version: 4.5.50938) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938) Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft IntelliPoint 8.1 (Version: 8.15.406.0) Microsoft Mathematics (64-Bit) (Version: 4.0) Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0) Microsoft Silverlight (Version: 5.1.20913.0) Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0) Mozilla Firefox 25.0 (x86 de) (x32 Version: 25.0) Mozilla Maintenance Service (x32 Version: 25.0) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT_amd64 (x32 Version: 15.4.2862.0708) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) MSXML 4.0 SP2 Parser und SDK (x32 Version: 4.20.9818.0) mufin player 2.5 (x32 Version: 2.5.1.248) MyWinLocker (x32 Version: 3.1.72.0) Nero ControlCenter (x32 Version: 9.0.0.1) Nero DiscSpeed (x32 Version: 5.4.7.201) Nero DiscSpeed Help (x32 Version: 5.4.4.100) Nero DriveSpeed (x32 Version: 4.4.7.201) Nero DriveSpeed Help (x32 Version: 4.4.4.100) Nero Express Help (x32 Version: 9.4.9.100) Nero InfoTool (x32 Version: 6.4.7.201) Nero InfoTool Help (x32 Version: 6.4.4.100) Nero Installer (x32 Version: 4.4.8.1) Nero Online Upgrade (x32 Version: 1.3.0.0) Nero StartSmart (x32 Version: 9.4.11.209) Nero StartSmart Help (x32 Version: 9.4.1.100) Nero StartSmart OEM (x32 Version: 9.16.0.100) NeroExpress (x32 Version: 9.4.10.505) neroxml (x32 Version: 1.0.0) Network64 (Version: 130.0.572.000) Network64 (Version: 140.0.221.000) NVIDIA 3D Vision Controller-Treiber 331.65 (Version: 331.65) NVIDIA 3D Vision Treiber 331.65 (Version: 331.65) NVIDIA Display Control Panel (Version: 6.14.12.5896) NVIDIA GeForce Experience 1.7 (Version: 1.7) NVIDIA Grafiktreiber 331.65 (Version: 331.65) NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4) NVIDIA Install Application (Version: 2.1002.140.952) NVIDIA LED Visualizer 1.0 (Version: 1.0) NVIDIA PhysX (x32 Version: 9.13.0725) NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725) NVIDIA ShadowPlay 9.3.16 (Version: 9.3.16) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3165) NVIDIA Systemsteuerung 331.65 (Version: 331.65) NVIDIA Update 9.3.16 (Version: 9.3.16) NVIDIA Update Components (Version: 9.3.16) NVIDIA Virtual Audio 1.2.9 (Version: 1.2.9) OpenOffice.org 3.3 (x32 Version: 3.3.9567) Pando Media Booster (x32 Version: 2.6.0.8) Parmen (x32) Pizza Syndicate (x32) PVSonyDll (Version: 1.00.0001) QuickTime (x32 Version: 7.74.80.86) RealDownloader (x32 Version: 1.3.2) RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0) RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0) RealUpgrade 1.1 (x32 Version: 1.1.0) Roblox for ******** (HKCU) Rome - Total War(TM) (x32 Version: 1.0) Scan (x32 Version: 140.0.80.000) SHIELD Streaming (Version: 1.6.34) Skype™ 6.9 (x32 Version: 6.9.106) SmartWebPrinting (x32 Version: 130.0.457.000) SolutionCenter (x32 Version: 130.0.373.000) Status (x32 Version: 130.0.469.000) Steam (x32 Version: 1.0.0.0) swMSM (x32 Version: 12.0.0.1) TeamViewer 7 (x32 Version: 7.0.12979) Toolbox (x32 Version: 130.0.648.000) TrackMania Nations Forever (x32) TrayApp (x32 Version: 130.0.422.000) TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.141) TuneUp Utilities 2014 (x32 Version: 14.0.1000.141) TuneUp Utilities 2014 (x32 Version: 14.0.1000.55) TuneUp Utilities Language Pack (de-DE) (x32 Version: 12.0.3500.13) TuxGuitar 1.2 (x32) UE3Redist (HKCU Version: 1.00.0000) Unity Web Player (HKCU Version: ) UnloadSupport (x32 Version: 11.0.0) VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0) VirtualDJ Home FREE (x32 Version: 7.4) Vokabel Trainer 5 (x32) WebReg (x32 Version: 130.0.132.017) Windows Live Communications Platform (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3555.0308) Windows Live Family Safety (Version: 15.4.3555.0308) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922) Windows Live ID Sign-in Assistant (Version: 7.250.4232.0) Windows Live Installer (x32 Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3555.0308) Windows Live Mail (x32 Version: 15.4.3502.0922) Windows Live Mesh (x32 Version: 15.4.3502.0922) Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2) Windows Live Messenger (x32 Version: 15.4.3538.0513) Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922) Windows Live MIME IFilter (Version: 15.4.3502.0922) Windows Live Movie Maker (x32 Version: 15.4.3502.0922) Windows Live Photo Common (x32 Version: 15.4.3502.0922) Windows Live Photo Gallery (x32 Version: 15.4.3502.0922) Windows Live PIMT Platform (x32 Version: 15.4.3508.1109) Windows Live Remote Client (Version: 15.4.5722.2) Windows Live Remote Client Resources (Version: 15.4.5722.2) Windows Live Remote Service (Version: 15.4.5722.2) Windows Live Remote Service Resources (Version: 15.4.5722.2) Windows Live SOXE (x32 Version: 15.4.3502.0922) Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922) Windows Live Sync (x32 Version: 14.0.8117.416) Windows Live UX Platform (x32 Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109) Windows Live Writer (x32 Version: 15.4.3502.0922) Windows Live Writer Resources (x32 Version: 15.4.3502.0922) WinRAR (x32) Xfire (remove only) (x32) XP-Games JRE (x32) XviD MPEG-4 Video Codec (x32 Version: XviD-1.0.3-20122004) Zip Motion Block Video codec (Remove Only) (x32) ==================== Restore Points ========================= 31-10-2013 20:56:05 Removed Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 31-10-2013 20:56:19 Removed Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 31-10-2013 20:57:14 Microsoft Visual C++ 2005 Redistributable wird entfernt 31-10-2013 20:59:29 Microsoft Visual C++ 2005 Redistributable wird entfernt 31-10-2013 21:01:37 Microsoft Visual C++ 2005 Redistributable wird entfernt 31-10-2013 21:02:07 Microsoft Visual C++ 2005 Redistributable (x64) wird entfernt 31-10-2013 21:03:27 Removed Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 31-10-2013 21:04:51 Removed Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 31-10-2013 21:05:07 Microsoft Visual C++ 2005 Redistributable (x64) wird entfernt 31-10-2013 21:06:56 Removed Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 31-10-2013 21:07:18 Removed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 31-10-2013 21:09:12 Removed Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 31-10-2013 21:10:10 Removed Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 31-10-2013 21:10:32 Removed Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 31-10-2013 21:14:01 Removed Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 31-10-2013 21:14:36 Removed Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 31-10-2013 21:15:40 Removed Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 31-10-2013 21:16:08 Removed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 31-10-2013 21:17:00 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 wurde entfernt. 31-10-2013 21:18:12 Removed Microsoft Visual J# .NET Redistributable Package 1.1 31-10-2013 21:19:04 Removed Microsoft Visual J# .NET Redistributable Package 1.1 31-10-2013 21:20:12 Removed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 31-10-2013 21:21:12 Removed Microsoft Office Suite Activation Assistant. 31-10-2013 21:23:28 Removed Microsoft Office Language Pack 2007 - German/Deutsch 31-10-2013 21:24:53 Removed Microsoft Office Enterprise 2007 31-10-2013 21:30:42 Removed Microsoft Office Home and Student 2007 31-10-2013 21:35:21 Microsoft Office Live Add-in 1.5 wird entfernt 31-10-2013 21:36:09 Microsoft Office Outlook Connector wurde entfernt. 31-10-2013 21:37:18 Microsoft Office PowerPoint Viewer 2007 (German) wird entfernt 31-10-2013 21:39:01 Removed Microsoft SQL Server 2005 Compact Edition [ENU] 31-10-2013 21:39:45 Microsoft Office File Validation Add-In wird entfernt 31-10-2013 21:52:38 Microsoft Works wird entfernt 31-10-2013 22:49:34 Windows Update 01-11-2013 09:14:29 Windows Update 01-11-2013 09:50:41 Removed Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 01-11-2013 10:04:24 Removed Guitar Hero Three Control Panel 01-11-2013 10:05:38 Removed Sibelius 7 OpenType Fonts 01-11-2013 10:14:51 Windows Update 01-11-2013 14:12:54 Uniblue DriverScanner installation ==================== Hosts content: ========================== 2009-07-14 03:34 - 2013-11-02 11:40 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {07989B3B-454C-4918-A70E-EE192A5FFD2F} - System32\Tasks\{9AFA3371-7006-4221-8666-354C9AD5F4E5} => E:\Setup.exe Task: {0B3C13F1-6F2F-4F63-9490-59BF376FF187} - System32\Tasks\{2341DB95-2831-4D12-991F-36B9A53D141E} => C:\Users\********\Desktop\Neuer Ordner (3)\akws 1025\AKW-Simulator.exe Task: {1337546E-3962-46CF-9213-2E87CB6201F5} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2011-04-13] (Microsoft Corporation) Task: {169FF95B-2FE1-4C94-8AE1-486035A436BB} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1583400021-3288482790-2347783300-1003 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {16AFC3C8-047D-4C79-BB74-AE5C0CCD2EC4} - System32\Tasks\{09B29C9E-0691-451A-B9B2-60D242EF2062} => C:\Program Files (x86)\LucasArts\Star Wars Empire at War Forces of Corruption\swfoc.exe Task: {179A571C-F727-41D7-97ED-39DED54F53DD} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1583400021-3288482790-2347783300-1003 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {1B351627-CEA7-4D5A-A030-1A497F7D80EC} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-10-24] (AVAST Software) Task: {1B4FCC5F-FFCB-4E76-8AB9-A2173A9A488C} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation) Task: {1B62C4FE-D028-426C-B3C6-B58259043E9B} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe Task: {1B67CE64-CAFD-4274-854A-68E635502F2E} - System32\Tasks\{8E6935CE-3E53-42A4-B757-3C92E22DCF51} => C:\Users\********\Desktop\GuitarPro6-r7840.exe Task: {1B7486DB-1FD9-449D-9886-20711D51767B} - System32\Tasks\{B3A3CF68-6DE7-432F-AA03-3CBDA910C1E7} => C:\Pizza Syndicate\autorun.exe [1999-02-18] () Task: {24D08894-5F40-4309-9E8B-F81952E4A623} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled Task: {2C8D13B5-97F5-49E9-A8CD-6DF61AA23F62} - System32\Tasks\{EAFA96F6-EC23-4412-9DC8-AD7367E87996} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2013-10-02] (Skype Technologies S.A.) Task: {2D100437-5219-43AB-92FA-67A610FB5721} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1583400021-3288482790-2347783300-1005Core => C:\Users\*****\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-02-16] (Facebook Inc.) Task: {2FE96321-8772-4961-BA3F-597BA2FDBB6A} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1583400021-3288482790-2347783300-1010 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {363A5405-BF54-4BFF-9171-A05783C9CB23} - System32\Tasks\{2081B64B-3DBB-4955-9450-ABF4B9DAFFBA} => C:\Program Files (x86)\Sicherheitspaket\FSGUI\fscuif.exe Task: {3AF38C63-0A2F-4841-A098-64D21392AAB4} - \BonanzaDealsLiveUpdateTaskMachineCore No Task File Task: {43201502-53C6-468F-B03E-87992BBD9726} - System32\Tasks\{69230F70-8360-4772-92CD-C0F674FA0165} => C:\Users\********\Desktop\battlelog-web-plugins-1.122.0-retail-prod.exe Task: {433026CC-7EB8-461F-8925-A50195F256BB} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1583400021-3288482790-2347783300-1005 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {44A783B8-0455-41E9-9841-B1C72BF5C391} - System32\Tasks\{ABFA1C77-5864-4B1B-B2E1-AF6D2D7E725A} => C:\Program Files (x86)\Steam\Steam.exe [2013-10-30] (Valve Corporation) Task: {4624D37A-5089-4CB5-BA4E-B0D524901FC6} - System32\Tasks\{BD290309-21DB-43AB-BD24-9B8781A11957} => E:\Setup.exe Task: {47783148-F707-4D9C-BD45-EB7CB0DF7C20} - System32\Tasks\{3D68952B-40CF-4E46-8156-203BCAC0BA5D} => C:\Pizza Syndicate\autorun.exe [1999-02-18] () Task: {482F9BB8-6FD4-4DE4-9E9C-F0AE568D144F} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1583400021-3288482790-2347783300-1005 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {5049D56F-3D2B-48F3-8D6D-CB89B7EC0B03} - System32\Tasks\{665413B6-FE01-4E68-8AD4-D0EAF6A5F6F0} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-10-02] (Skype Technologies S.A.) Task: {52AFEEF3-F5B4-44F6-804D-279DD6E95E06} - System32\Tasks\FoxTab => C:\Users\********\AppData\Roaming\FoxTab\UpdateProc\UpdateTask.exe [2013-04-12] () Task: {5CD8DD51-8AA5-4591-9711-D89BD5514983} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1583400021-3288482790-2347783300-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {636C597B-B223-424F-89D4-6A13A37E3417} - System32\Tasks\{AB5B5496-A7C0-4B81-BD2A-8A5FAC65D77D} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-10-02] (Skype Technologies S.A.) Task: {6813A7A1-4E02-44D8-9CB4-0BDAEA16EF3E} - System32\Tasks\Egis technology-Online-Aktualisierungsprogramm => C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe Task: {6C517702-696F-4E87-B837-DCDE5CD5797C} - System32\Tasks\{83C074D9-5AC0-463C-B3CD-CCBFD83F8ECA} => C:\Program Files (x86)\JoWooD\Gothic II\UNWISE.EXE Task: {6DCDE9E4-2660-4BBE-BA21-EB33D8ADF64E} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe Task: {6E1206B0-4FDE-4953-BCA6-2622209AFDB8} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1583400021-3288482790-2347783300-1005UA => C:\Users\*****\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-02-16] (Facebook Inc.) Task: {6E260654-D4AE-463B-8E35-EE47976EDFFC} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1583400021-3288482790-2347783300-1005 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {6E7813F9-6B9B-4C84-8206-C3B7FCDCBB58} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1583400021-3288482790-2347783300-1010 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {6FE2E12F-B06B-4942-8169-66DBA72BBBEF} - System32\Tasks\{7A26E76B-F7DE-4DF7-9AFF-29500E94A4B1} => C:\Program Files (x86)\LucasArts\Star Wars Battlefront II\GameData\BattlefrontII.exe Task: {70CB140F-498E-4502-BD49-E0C99BBE0F35} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-20] (Microsoft Corporation) Task: {72A8C807-5AAF-4D8B-B69B-307A5C8EA3E7} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2013\OneClick.exe Task: {7ACE2E5D-C9A5-4D79-8ADA-8D04B561FF2E} - System32\Tasks\{6F5827DC-8AC7-47F8-B931-DF4FDDE04EE5} => C:\Program Files (x86)\JoWooD\Gothic II\UNWISE.EXE Task: {7BAD55EA-9D7B-4EF0-B367-F55A30BAF0D8} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1583400021-3288482790-2347783300-1005 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {7BE7E921-FB49-4E73-813C-B393E29092B3} - System32\Tasks\{F329FDF7-6D9E-4D7F-B1DB-BEDABE94FC46} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-10-02] (Skype Technologies S.A.) Task: {7DE5AC8E-421E-4A48-BAAD-3F10ED6CE1B9} - System32\Tasks\{84B2EB19-0089-4F2D-983A-AF8C2FFB9D4F} => C:\Users\********\Desktop\battlelog-web-plugins-1.122.0-retail-prod.exe Task: {80045386-EC5E-4BB4-8153-385A9848135B} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1583400021-3288482790-2347783300-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {81CDD7E3-096F-4962-99BA-FB11713F7C9C} - System32\Tasks\{512E8505-8AF6-403C-80E8-E49317558DE2} => C:\Users\********\Desktop\Neuer Ordner (3)\akws 1025\AKW-Simulator.exe Task: {89868ABC-071A-4E9A-B524-D398709F7A28} - System32\Tasks\{C41B7DF7-D76F-48C7-9709-DA7576062ED7} => C:\Pizza Syndicate\autorun.exe [1999-02-18] () Task: {8BCAFD64-261D-48B5-BDA1-023F27630D3C} - System32\Tasks\{A7738D04-25CC-4B81-AF10-AB0740DCDF23} => E:\Setup.exe Task: {991DEB80-DB37-41B7-BDA3-365F04EB4D03} - System32\Tasks\{7A282231-4C61-4AF0-8E8C-2458843988FF} => C:\Program Files (x86)\LucasArts\Star Wars Battlefront II\GameData\BattlefrontII.exe Task: {9924B34A-612A-4B73-978D-7860BD012E59} - System32\Tasks\{2B9A10E4-AB62-4551-B7D8-3EF0321B19B4} => C:\Program Files (x86)\JoWooD\Gothic II\UNWISE.EXE Task: {9B7EA1DD-5D67-4D19-BE68-CCA4822C50FE} - System32\Tasks\{D58120BE-C6C8-441B-A834-1A9B0EA3640E} => C:\Users\********\Desktop\battlelog-web-plugins-1.122.0-retail-prod.exe Task: {9DA46253-3CAC-4075-B63C-7CBCAC643166} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1583400021-3288482790-2347783300-1010 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {A1876BB7-BEDB-4CF7-AE6F-AA87C1E9592C} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1583400021-3288482790-2347783300-1003 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {A1BC0B6F-7B1D-4CFA-A658-7D8C0E8F82F9} - System32\Tasks\{0BC71482-B65A-4EC9-92AD-6F5CFB239B55} => C:\Pizza Syndicate\autorun.exe [1999-02-18] () Task: {A9B0769B-899A-44EF-B1F5-9945B9495602} - \BonanzaDealsLiveUpdateTaskMachineUA No Task File Task: {B240EFEF-4E55-4192-B4DC-3320ED4B8F54} - System32\Tasks\{EF90139E-C1FA-4110-B844-DCB852AA3EA6} => C:\Program Files (x86)\Sicherheitspaket\FSGUI\fscuif.exe Task: {B5D7F5A9-4643-4E91-8680-A839A610F58D} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks Task: {BB9FD87C-0AE0-471D-84C7-32AF084EC4DD} - System32\Tasks\{9F097E94-7591-49F9-B973-86A9F7DD0287} => E:\Setup.exe Task: {BE087926-0E7F-4E6E-A476-D343340B5E7D} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe Task: {C0DF413E-D5D7-46CC-B3DC-7DEB8FE56FDA} - \BonanzaDealsUpdate No Task File Task: {C120983C-DB10-4F5F-B54B-8FE0999FE79A} - System32\Tasks\{E2A37C1F-6C2D-4E67-9C5F-24174B7C4DD2} => E:\The Broken Land.exe Task: {C174BC81-49C6-4BB5-8984-915B3976B646} - System32\Tasks\Real Player online update program => C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe Task: {C3D805A8-1FD4-4778-946F-DAF909C61E7A} - System32\Tasks\{C373329E-70CF-456E-8B8B-F0D97EDDAD3E} => C:\Users\********\Desktop\battlelog-web-plugins-1.122.0-retail-prod.exe Task: {C8844DEC-E72E-46EE-AAE9-F13316A8CEE0} - System32\Tasks\HP online update program => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe Task: {C887286F-443D-4538-BCA4-45C02D67CE2D} - System32\Tasks\{C138E7D2-A31B-4CB9-B64F-6A396DB85818} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-10-02] (Skype Technologies S.A.) Task: {CCC08A68-02C2-4D8C-9E6E-3EF09AAF5400} - System32\Tasks\{D6A11FA9-E643-4258-9EA9-22FC3F1E2A8E} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-10-02] (Skype Technologies S.A.) Task: {CE408FE3-7CDC-46FC-BED5-AE105704D890} - System32\Tasks\{1A4F3D1C-2B90-43BB-AC5D-3A2A466C1018} => E:\The Broken Land.exe Task: {E0AAEECA-EB8B-436A-A669-B6D93B26C235} - System32\Tasks\{6FFA4839-DB18-48CD-855F-466D47280053} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-10-02] (Skype Technologies S.A.) Task: {E166C363-36FF-4231-9174-E9EA68167CDD} - System32\Tasks\Divx online update program => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe Task: {E3016692-E259-4613-9B2B-E81DF645F23E} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1583400021-3288482790-2347783300-1010 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {E919EF1C-3E8B-4FEC-87B7-19CB2A5B06ED} - System32\Tasks\SpyHunter4Startup => C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe Task: {EB207000-60B3-4F27-AFF6-14F6015D83D7} - System32\Tasks\{93911B9C-E818-4F28-9D2E-57CFF8CEA8D6} => C:\Program Files (x86)\LucasArts\Star Wars Empire at War Forces of Corruption\swfoc.exe Task: {EBE2A4F6-618F-4831-9D89-6FF03CD79B32} - System32\Tasks\{62E8A66C-D59C-4ED1-A0ED-E68D94694E36} => C:\Program Files (x86)\Steam\Steam.exe [2013-10-30] (Valve Corporation) Task: {F3CB480D-45F4-4C29-84F1-C6073CC48CB1} - System32\Tasks\{1C974E19-1231-43CF-8AF6-DD70544CFB1C} => C:\Program Files (x86)\Activision\Modern Warfare 2\iw4sp.exe Task: {F5752BBF-8A98-4370-9F81-9D46B24F6D8A} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1583400021-3288482790-2347783300-1003 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {F6C7FFBF-1E55-4CA6-8E96-AF8D429FF834} - System32\Tasks\ArcSoft Connect Daemon => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe Task: {F711A952-D26C-4E5C-868D-AD0C94AC0975} - System32\Tasks\{CFE76113-585E-40AF-B2A3-63DD523C7DFE} => C:\Program Files (x86)\JoWooD\Gothic II\UNWISE.EXE Task: {FB692F23-8C0B-4AB4-B788-39327C14FFB9} - System32\Tasks\{2E8832F1-1F55-45E4-ACD9-351D0305B561} => C:\Users\********\Desktop\battlelog-web-plugins-1.122.0-retail-prod.exe Task: {FC1C5DA1-14F2-467E-BB4B-5BB0F98CD433} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-11-02] (Adobe Systems Incorporated) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1583400021-3288482790-2347783300-1005Core.job => C:\Users\*****\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1583400021-3288482790-2347783300-1005UA.job => C:\Users\*****\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\FoxTab.job => C:\Users\********\AppData\Roaming\FoxTab\UpdateProc\UpdateTask.exe ==================== Loaded Modules (whitelisted) ============= 2012-10-07 20:47 - 2013-10-23 09:20 - 00102176 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2013-10-08 12:29 - 2013-10-08 12:29 - 00757048 _____ () C:\Program Files (x86)\TuneUp Utilities 2014\avgrepliba.dll 2010-07-24 18:56 - 2010-03-15 10:28 - 00052224 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll 2013-11-02 18:54 - 2013-11-02 18:14 - 02137088 _____ () C:\Program Files\AVAST Software\Avast\defs\13110201\algo.dll 2011-03-20 19:34 - 2011-03-20 19:34 - 00048640 _____ () C:\Windows\mmfs.dll 2012-12-30 20:13 - 2012-12-30 20:13 - 00851456 _____ () C:\Users\********\AppData\Roaming\ICQM\ICQ\dll\YLUSBTEL.dll 2013-10-24 13:16 - 2013-10-24 13:16 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\ProgramData\Temp:0B9176C0 AlternateDataStreams: C:\ProgramData\Temp:1D32EC29 AlternateDataStreams: C:\ProgramData\Temp:4CF61E54 AlternateDataStreams: C:\ProgramData\Temp:4D066AD2 AlternateDataStreams: C:\ProgramData\Temp:5D7E5A8F AlternateDataStreams: C:\ProgramData\Temp:93DE1838 AlternateDataStreams: C:\ProgramData\Temp:AB689DEA AlternateDataStreams: C:\ProgramData\Temp:ABE89FFE AlternateDataStreams: C:\ProgramData\Temp:D1B5B4F1 AlternateDataStreams: C:\ProgramData\Temp:E1F04E8D AlternateDataStreams: C:\ProgramData\Temp:E3C56885 AlternateDataStreams: C:\ProgramData\Temp:F3176E45 ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service" ==================== Faulty Device Manager Devices ============= Name: PS/2 Mouse Description: PS/2 Mouse Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318} Manufacturer: Logitech Service: i8042prt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: PS/2 Keyboard Description: PS/2 Keyboard Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318} Manufacturer: Logitech Service: i8042prt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: Power Control [2009/10/12 22:42:43] Description: Power Control [2009/10/12 22:42:43] Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: {49DE1C67-83F8-4102-99E0-C16DCC7EEC796} Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== System errors: ============= Microsoft Office Sessions: ========================= CodeIntegrity Errors: =================================== Date: 2013-11-02 11:37:57.943 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-11-02 11:37:57.756 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-10-21 15:25:36.458 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\spsys.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-10-21 15:25:36.299 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\spsys.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-01-30 14:13:52.118 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00176_004\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-01-30 13:39:19.913 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00176_004\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-01-30 13:26:40.753 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00176_004\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-01-30 13:18:29.210 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00175_003\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-01-30 08:03:26.642 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00175_003\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-01-30 07:45:21.585 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00175_003\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 20% Total physical RAM: 8183.08 MB Available physical RAM: 6494.36 MB Total Pagefile: 16364.34 MB Available Pagefile: 14639.6 MB Total Virtual: 8192 MB Available Virtual: 8191.81 MB ==================== Drives ================================ Drive c: (Acer) (Fixed) (Total:690.95 GB) (Free:532.39 GB) NTFS Drive d: (DATA) (Fixed) (Total:691.21 GB) (Free:358.59 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1397 GB) (Disk ID: B03163E9) Partition 1: (Not Active) - (Size=15 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=691 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=691 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Irgendwie fehlt der Graikkartentreiber.Als ich eins instalieren wolte ist auch java bei mir nicht instaliert,zuminds sag es mir mein Computer und ich kann weder Java noch nvideagraiktreiber auf mein PC instalieren. Ist gelöst. Geändert von sevenfour (03.11.2013 um 13:35 Uhr) |
03.11.2013, 15:14 | #12 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Programme lassen sich nicht mehr öffnen SpyHunter entfernen Die folgende Datei hilft dir das Programm restlos zu deinstallieren:
__________________ Logfiles bitte immer in CODE-Tags posten |
03.11.2013, 15:20 | #13 |
| Programme lassen sich nicht mehr öffnen Nein keine reste von spy hunter |
03.11.2013, 15:29 | #14 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Programme lassen sich nicht mehr öffnen Hm, Log dazu? Ich seh in FRST nämlich das hier: Code:
ATTFilter 2013-10-31 21:28 - 2013-10-31 21:28 - 00003340 _____ C:\Windows\System32\Tasks\SpyHunter4Startup 2013-10-31 21:28 - 2013-10-31 21:28 - 00000000 ____D C:\Program Files\Enigma Software Group
__________________ Logfiles bitte immer in CODE-Tags posten |
03.11.2013, 15:37 | #15 |
| Programme lassen sich nicht mehr öffnen kam keins da seheht: der prozess "spyhunter4.exe " wurde nicht gefunden. Ich hab es komplett gelöscht sogar mit tune up danach gesucht und gelöscht. Geändert von sevenfour (03.11.2013 um 15:48 Uhr) |
Themen zu Programme lassen sich nicht mehr öffnen |
anderem, angezeigt, entferne, entfernen, erscheint, fenster, hoffe, klick, meldung, mozilla, nicht mehr, original, problem, programme, tagen, troja, umgewandelt, verknüpfungen, versuch, versucht, win, öffnen |