getwindowsinfo Virus - Was ist zu tun?

alke84 · 01.11.2013, 20:32

Guten Abend!

Vermutlich ist das mittlerweile ein recht nerviger Post, aber ich benötige dringend Hilfe. Ich möchte bald meine Bachelorarbeit schreiben, jedoch kann ich dank des getwindowinfos-Virus nicht mehr auf meine Daten zurückgreifen. Beim Versuch des Öffnens einer Datei oder eines Programmes werde ich aufgefordert, eine CD einzulegen, die ich natürlich nicht besitze. Außerdem öffnet sich auch bei mir immer wieder der Internet Explorer mit der Seite hxxp://www_getwindowinfo/ .
Ich bin nicht sehr bewandert in diesen Virenangelegenheiten und bitte euch um eure Hilfe.
Mein Betriebssystem ist Windows Vista und ich ich benutze den Acer Aspire 7730G.

Liebe Grüße, Alexandra

schrauber · 02.11.2013, 00:33

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

alke84 · 02.11.2013, 00:40

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 31-10-2013
Ran by Alex (administrator) on ALEX-PC on 01-11-2013 20:42:00
Running from C:\Users\Alex\Desktop
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Agere Systems) C:\Windows\system32\agrsmsvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Preventon Technologies Limited) C:\Program Files\Common Files\Common Toolkit Suite\AVEngine\AVScanningService.exe
(Preventon Technologies Limited) C:\Program Files\Common Files\Common Toolkit Suite\AVEngine\AVWatchService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(NewTech Infosystems, Inc.) C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
() C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
(Egis Incorporated) C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
() C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
() C:\Program Files\ICQ6Toolbar\ICQ Service.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Acer\Mobility Center\MobilityService.exe
(NewTech InfoSystems, Inc.) C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
() C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
(SPAMfighter) C:\Program Files\Fighters\configservice.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Users\Alex\AppData\Roaming\OCS\SM\SearchAnonymizerHelper.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(SPAMfighter ApS) C:\Program Files\Fighters\FighterSuiteService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
() C:\Program Files\Verbindungsassistent\WTGService.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Acer Inc.) C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
(Egis Incorporated) C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(SPAMfighter) C:\Program Files\Fighters\licenseservice.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(SPAMfighter) C:\Program Files\Fighters\updateservice.exe
(SPAMfighter) C:\Program Files\Fighters\ScannerService.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\QtZgAcer.EXE
() C:\Windows\PLFSetI.exe
(CyberLink Corp.) C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
(Nuance Communications, Inc.) C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(CANON INC.) C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE
(Mindjet) C:\Program Files\Mindjet\MindManager 10\MmReminderService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(SPAMfighter ApS) C:\Program Files\Fighters\Tray\FightersTray.exe
(SPAMfighter) C:\Program Files\Fighters\Spywarefighter\swproTray.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Windows Net) C:\Users\Alex\AppData\Roaming\Windows Net Data\net.exe
(Realtek Semiconductor Corp.) C:\Users\Alex\AppData\Local\Temp\RtkBtMnt.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(TuneUp Software GmbH) C:\Program Files\TuneUp Utilities 2008\OneClick.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(TuneUp Software GmbH) C:\Program Files\TuneUp Utilities 2008\RegistryCleaner.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\system32\UI0Detect.exe
(Microsoft Corporation) C:\Windows\system32\wuauclt.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(TuneUp Software GmbH) C:\Program Files\TuneUp Utilities 2008\OneClick.exe
(TuneUp Software GmbH) C:\Program Files\TuneUp Utilities 2008\OneClick.exe
(TuneUp Software GmbH) C:\Program Files\TuneUp Utilities 2008\OneClick.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(TuneUp Software GmbH) C:\Program Files\TuneUp Utilities 2008\OneClick.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(TuneUp Software GmbH) C:\Program Files\TuneUp Utilities 2008\OneClick.exe
(Microsoft Corporation) C:\Windows\system32\Taskmgr.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [6111232 2008-04-28] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1033512 2008-01-18] (Synaptics, Inc.)
HKLM\...\Run: [ePower_DMC] - C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe [397312 2008-04-23] (Acer Inc.)
HKLM\...\Run: [eDataSecurity Loader] - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe [526896 2008-03-04] (Egis Incorporated)
HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe [182808 2008-07-20] (Intel Corporation)
HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [NvMediaCenter] - RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [LManager] - C:\Program Files\Launch Manager\QtZgAcer.EXE [821768 2008-07-02] (Dritek System Inc.)
HKLM\...\Run: [PLFSetI] - C:\Windows\PLFSetI.exe [200704 2007-10-23] ()
HKLM\...\Run: [ArcadeDeluxeAgent] - C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [147456 2008-05-12] (CyberLink Corp.)
HKLM\...\Run: [PaperPort PTD] - C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe [30248 2007-01-29] (Nuance Communications, Inc.)
HKLM\...\Run: [IndexSearch] - C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe [46632 2007-01-29] (Nuance Communications, Inc.)
HKLM\...\Run: [Ocs_SM] - C:\Users\Alex\AppData\Roaming\OCS\SM\SearchAnonymizer.exe [106496 2011-03-09] (OCS)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [AppleSyncNotifier] - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-10-06] (Apple Inc.)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE [2516296 2010-03-25] (CANON INC.)
HKLM\...\Run: [CanonSolutionMenuEx] - C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE [1185112 2010-04-02] (CANON INC.)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [MMReminderService] - C:\Program Files\Mindjet\MindManager 10\MmReminderService.exe [38248 2012-02-27] (Mindjet)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-02] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [CommonToolkitTray] - C:\Program Files\Fighters\Tray\FightersTray.exe [1659424 2013-09-05] (SPAMfighter ApS)
HKLM\...\Run: [SWPROguard] - C:\Program Files\Fighters\Spywarefighter\swproTray.exe [1260072 2013-09-05] (SPAMfighter)
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehtray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [Facebook Update] - C:\Users\Alex\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-07-11] (Facebook Inc.)
HKCU\...\Run: [iCloudServices] - C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-04-05] (Apple Inc.)
HKCU\...\RunOnce: [FlashPlayerUpdate] - C:\Windows\system32\Macromed\Flash\FlashUtil32_11_8_800_168_Plugin.exe -update plugin [815496 2013-09-11] (Adobe Systems Incorporated)
HKCU\...\Policies\system: [SetVisualStyle] C:\Windows\Resources\Themes\LeopardXP\LeopardXP.msstyles
MountPoints2: {02141672-00de-11e1-978f-806e6f6e6963} - F:\AutoRun.exe
MountPoints2: {03148b35-f8df-11e0-bcee-001e101fe5e1} - F:\AutoRun.exe
MountPoints2: {09b79876-3d0f-11e1-80a6-001e101fd318} - F:\AutoRun.exe
MountPoints2: {2fce6223-ffef-11e0-81ee-001e101faa49} - F:\AutoRun.exe
MountPoints2: {3da9af4a-c80e-11df-8227-001e101f82a0} - F:\AutoRun.exe
MountPoints2: {46abbcf6-38fd-11e0-9ad5-001e101f28bb} - F:\AutoRun.exe
MountPoints2: {47f029b6-fb4a-11e0-8c8a-00238b457b84} - F:\AutoRun.exe
MountPoints2: {47f029db-fb4a-11e0-8c8a-001e101f8924} - F:\AutoRun.exe
MountPoints2: {516e8001-ee02-11e0-a258-001e101fbcad} - F:\AutoRun.exe
MountPoints2: {516e800c-ee02-11e0-a258-001e101f1c31} - F:\AutoRun.exe
MountPoints2: {77dfa36a-b77d-11df-8683-00238b457b84} - F:\AutoRun.exe
MountPoints2: {77dfa379-b77d-11df-8683-001e101f6c46} - F:\AutoRun.exe
MountPoints2: {89f3b39e-08d8-11df-b2d9-00238b457b84} - F:\AutoRun.exe
MountPoints2: {89f3b3b1-08d8-11df-b2d9-00238b457b84} - F:\AutoRun.exe
MountPoints2: {89f3b3b4-08d8-11df-b2d9-00238b457b84} - F:\AutoRun.exe
MountPoints2: {89f3b3b5-08d8-11df-b2d9-00238b457b84} - F:\AutoRun.exe
MountPoints2: {8b6200b2-4b50-11e1-be24-806e6f6e6963} - F:\AutoRun.exe
MountPoints2: {92980d58-daba-11de-baf9-00238b457b84} - RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\ise.exe
MountPoints2: {aa42383d-d7fb-11e0-bbc8-00238b457b84} - F:\AutoRun.exe
MountPoints2: {aa42384a-d7fb-11e0-bbc8-001e101f6c46} - F:\AutoRun.exe
MountPoints2: {b472a84d-0d01-11e0-b426-00238b457b84} - F:\AutoRun.exe
MountPoints2: {b472a85c-0d01-11e0-b426-001e101f2500} - F:\AutoRun.exe
MountPoints2: {bf795ff7-41c3-11e1-a3ff-001e101f4c53} - F:\AutoRun.exe
MountPoints2: {bf796007-41c3-11e1-a3ff-001e101fdb29} - F:\AutoRun.exe
MountPoints2: {bf796032-41c3-11e1-a3ff-001e101f4ec0} - F:\AutoRun.exe
MountPoints2: {bf796053-41c3-11e1-a3ff-001e101faa12} - F:\AutoRun.exe
MountPoints2: {dd42a890-11b6-11e0-a735-001e101f4da1} - F:\AutoRun.exe
MountPoints2: {f9054dc7-03ba-11e1-a1f6-001e101f1c31} - F:\AutoRun.exe
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default\...\RunOnce: [AcerScrSav] - C:\Windows\ACER\run_NB.exe [ 2007-08-21] ()
HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default User\...\RunOnce: [AcerScrSav] - C:\Windows\ACER\run_NB.exe [ 2007-08-21] ()
HKU\Gast\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Laptopgast\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
AppInit_DLLs: c:\progra~1\google\google~1\goec62~1.dll  [ 2010-07-21] (Google)
Startup: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk
ShortcutTarget: net.lnk -> C:\Users\Alex\AppData\Roaming\Windows Net Data\net.exe (Windows Net)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=1108&m=aspire_7730g
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://global.acer.com
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
HKCU\Software\Microsoft\Internet Explorer\Main,Backup.Old.Start Page = hxxp://search.babylon.com/?affID=114347&tt=2912_2&babsrc=HP_ss&mntrId=5cb91d6700000000000000215d282acc
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.funmoods.com/?f=1&a=bndlr&chnl=bndlr&cd=2XzuyEtN2Y1L1QzutDtDtBtAzz0ByEyDyB0BzzyEtC0DyCyBtN0D0Tzu0CtBtDtCtN1L2XzutBtFtCtFtDtFtAtDtC&cr=1520158854
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=1108&m=aspire_7730g
URLSearchHook: HKLM - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
URLSearchHook: HKLM - ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ)
URLSearchHook: HKLM - Softonic Deutsch Toolbar - {8dbb6d8e-e4a6-4e3b-9753-af78b226441c} - C:\Program Files\Softonic_Deutsch\tbSof1.dll (Conduit Ltd.)
URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.
URLSearchHook: HKCU - ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ)
URLSearchHook: HKCU - Softonic Deutsch Toolbar - {8dbb6d8e-e4a6-4e3b-9753-af78b226441c} - C:\Program Files\Softonic_Deutsch\tbSof1.dll (Conduit Ltd.)
URLSearchHook: HKCU - (No Name) - {EEE6C35D-6118-11DC-9C72-001320C79847} -  No File
SearchScopes: HKLM - DefaultScope {8D7BCC95-4B3A-4597-B533-7B32EBE22488} URL = hxxp://start.funmoods.com/results.php?f=4&q={searchTerms}&a=bndlr&chnl=bndlr&cd=2XzuyEtN2Y1L1QzutDtDtBtAzz0ByEyDyB0BzzyEtC0DyCyBtN0D0Tzu0CtBtDtCtN1L2XzutBtFtCtFtDtFtAtDtC&cr=1520158854
SearchScopes: HKLM - Backup.Old.DefaultScope {8D7BCC95-4B3A-4597-B533-7B32EBE22488}
SearchScopes: HKLM - {2AE3BAEB-EC5F-1CBF-7560-21B45D413D4E} URL = hxxp://www.searchcanvas.com/web?ot=3&q={searchTerms}
SearchScopes: HKLM - {8D7BCC95-4B3A-4597-B533-7B32EBE22488} URL = hxxp://start.funmoods.com/results.php?f=4&q={searchTerms}&a=bndlr&chnl=bndlr&cd=2XzuyEtN2Y1L1QzutDtDtBtAzz0ByEyDyB0BzzyEtC0DyCyBtN0D0Tzu0CtBtDtCtN1L2XzutBtFtCtFtDtFtAtDtC&cr=1520158854
SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1351351
SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
SearchScopes: HKCU - Backup.Old.DefaultScope {54713C1F-D465-47F1-8382-176EAA1F3813}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E62696E672E636F6D2F7365617263683F713D7B7365617263685465726D737D26464F524D3D4945464D31267372633D49452D536561726368426F78&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&k=0
SearchScopes: HKCU - {0D7562AE-8EF6-416d-A838-AB665251703A} URL = hxxp://start.facemoods.com.anonymize-me.de/?anonymto=687474703A2F2F73746172742E666163656D6F6F64732E636F6D2F3F613D73746F6E6963646526733D7B7365617263685465726D737D26663D34&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&k=0
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
SearchScopes: HKCU - {27726C1C-CF69-47D9-BD1A-8DBB778AE9D2} URL = hxxp://www.amazon.de.anonymize-me.de/?to=616D617A6F6E2E6465&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&mode=bounce&k=0
SearchScopes: HKCU - {2AE3BAEB-EC5F-1CBF-7560-21B45D413D4E} URL = hxxp://suche.web.de.anonymize-me.de/?anonymto=687474703A2F2F73756368652E7765622E64652F7365617263682F7765622F3F73753D7B7365617263685465726D737D266F726967696E3D736561726368706C7567696E&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&k=0
SearchScopes: HKCU - {3AD490B8-D40F-4AB8-8725-7B6244459192} URL = hxxp://www.otto.de.anonymize-me.de/?to=6F74746F2E6465&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&mode=bounce&k=0
SearchScopes: HKCU - {3F59BD55-657C-4EAD-B813-2F0FA438AF2D} URL = hxxp://wa.ui-portal.de.anonymize-me.de/?anonymto=687474703A2F2F77612E75692D706F7274616C2E64652F77656264652F77656264652F733F70726F64756B74652E62726F777365722E6C696E6B2E65626179737563686526735F6272616E643D776562646526745F6C696E6B3D656261797375636865266E735F747970653D636C69636B696E266E735F75726C3D687474703A2F2F726F7665722E656261792E636F6D2F726F7665722F312F3730372D35323232322D33303034302D352F343F6D7072653D687474703A2F2F73686F702E656261792E64652F3F5F73616361743D5365652D416C6C2D43617465676F72696573265F6E6B773D7B7365617263685465726D737D&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&k=0
SearchScopes: HKCU - {450335E3-46CE-4631-9EEC-DC03C37E9996} URL = hxxp://search.ebay.de.anonymize-me.de/?to=656261792E6465&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&mode=bounce&k=0
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKCU - {4B78FF6C-CD95-4570-AFAE-6DC61503728C} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=&apn_dtid=OSJ000&apn_uid=B6520DDF-FBFE-4A6B-A3B7-13B74F73ED40&apn_sauid=BA135590-C441-4883-80A2-E5935B7EE17D
SearchScopes: HKCU - {54713C1F-D465-47F1-8382-176EAA1F3813} URL = hxxp://start.funmoods.com/results.php?f=4&q={searchTerms}&a=bndlr&chnl=bndlr&cd=2XzuyEtN2Y1L1QzutDtDtBtAzz0ByEyDyB0BzzyEtC0DyCyBtN0D0Tzu0CtBtDtCtN1L2XzutBtFtCtFtDtFtAtDtC&cr=1520158854
SearchScopes: HKCU - {650D5E8F-32EB-4FB5-B9DE-D94B04BC2A31} URL = hxxp://www.pricerunner.de.anonymize-me.de/?to=707269636572756E6E65722E6465&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&mode=bounce&k=0
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
SearchScopes: HKCU - {6677EF97-820F-4089-9D4B-2B07E787A1B1} URL = hxxp://www.myvideo.de.anonymize-me.de/?to=6D79766964656F2E6465&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&mode=bounce&k=0
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 
SearchScopes: HKCU - {6E205779-C388-4D4C-8A01-131B2298E770} URL = hxxp://go.web.de.anonymize-me.de/?anonymto=687474703A2F2F676F2E7765622E64652F73756368626F782F69655F616D617A6F6E2F3F6B6579776F7264733D7B7365617263685465726D737D&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&k=0
SearchScopes: HKCU - {BE8C0C72-CB24-4B08-A532-54ECB968995B} URL = hxxp://de.wikipedia.org.anonymize-me.de/?to=64652E77696B6970656469612E6F7267&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&mode=bounce&k=0
SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://mystart.incredibar.com/?a=6Oz2bEzhGZ&loc=skw&search={searchTerms}
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: CBAbzockschutz.InitToolbarBHO - {2e250b90-0e7a-42a3-9d65-e39f9f227fa4} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
BHO: IB Updater - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\IB Updater\Extension32.dll ()
BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
BHO: CmjBrowserHelperObject Object - {6FE6A929-59D1-4763-91AD-29B61CFFB35B} - C:\Program Files\Mindjet\MindManager 10\Mm8InternetExplorer.dll (Mindjet)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Softonic Deutsch Toolbar - {8dbb6d8e-e4a6-4e3b-9753-af78b226441c} - C:\Program Files\Softonic_Deutsch\tbSof1.dll (Conduit Ltd.)
BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
BHO: Loader Class - {F880A4A8-C436-4AC4-AFD1-AA0BDC9552DD} -  No File
Toolbar: HKLM - No Name - {0BF43445-2F28-4351-9252-17FE6E806AA0} -  No File
Toolbar: HKLM - Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)
Toolbar: HKLM - Softonic Deutsch Toolbar - {8dbb6d8e-e4a6-4e3b-9753-af78b226441c} - C:\Program Files\Softonic_Deutsch\tbSof1.dll (Conduit Ltd.)
Toolbar: HKLM - COMPUTERBILD-Abzockschutz - {353e2a48-6254-4bd3-88f4-3b51a0ca7870} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM - ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKCU - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} -  No File
Toolbar: HKCU - Softonic Deutsch Toolbar - {8DBB6D8E-E4A6-4E3B-9753-AF78B226441C} - C:\Program Files\Softonic_Deutsch\tbSof1.dll (Conduit Ltd.)
Toolbar: HKCU - No Name - {472734EA-242A-422B-ADF8-83D1E48CC825} -  No File
Toolbar: HKCU - &Address - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\System32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU - &Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\Windows\System32\shell32.dll (Microsoft Corporation)
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File
Toolbar: HKCU - No Name - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} -  No File
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @canon.com/EPPEX - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin: @ei.SmileyCentral_1v.com/Plugin - C:\Program Files\SmileyCentral_1vEI\Installr\2.bin\NP1vEISB.dll (SmileyCentral)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.3 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Alex\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\BrowserProtect.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\delta.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-1.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-10.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-11.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-12.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-13.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-2.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-3.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-4.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-5.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-6.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-7.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-8.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-9.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\MyStart Search.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\fcmdSrchstonicde.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Plus-HD-3.2 - C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\Extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com
FF Extension: pricealarm - C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM
FF Extension: Adblock Plus - C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: ICQ Toolbar - C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\IB Updater\Firefox
FF Extension: IB Updater - C:\Program Files\IB Updater\Firefox
FF HKLM\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff\
FF HKLM\...\Firefox\Extensions: [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}] - C:\Program Files\IB Updater\Firefox
FF Extension: IB Updater - C:\Program Files\IB Updater\Firefox

Chrome: 
=======
CHR Extension: (Docs) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0
CHR Extension: (Google Drive) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0
CHR Extension: (Funmoods) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbjciahceamgodcoidkjpchnokgfpphh\1.0_0
CHR Extension: (YouTube) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (SpeedDial) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\4.0_0
CHR Extension: (Google Search) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: (Delta Toolbar) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.4
CHR Extension: () - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmlgoencnlndpglbocajlimaikjohmab\background.html
CHR Extension: (Plus-HD-3.2) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.23.14_0
CHR Extension: (Gmail) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx
CHR HKLM\...\Chrome\Extension: [ihflimipbcaljfnojhhknppphnnciiif] - C:\Program Files\facemoods.com\facemoods\1.4.17.3\facemoods.crx

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-09-02] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-02] (Avira Operations GmbH & Co. KG)
R2 CLHNService; C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe [81504 2008-01-16] ()
R2 ETService; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [24576 2008-03-21] ()
S3 GoogleDesktopManager-051210-111108; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-07-21] (Google)
R2 ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [247608 2010-11-21] ()
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MobilityService; C:\Acer\Mobility Center\MobilityService.exe [110592 2007-12-06] ()
R2 NTISchedulerSvc; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [131072 2008-04-04] ()
R2 PTK License-FIGHTERS-297811811; C:\Program Files\Fighters\licenseservice.exe [283272 2008-11-18] (SPAMfighter)
R2 PTK Live Update-FIGHTERS-297811811; C:\Program Files\Fighters\updateservice.exe [307848 2008-11-18] (SPAMfighter)
R2 PTK Scanner-FIGHTERS-297811811; C:\Program Files\Fighters\ScannerService.exe [311944 2008-11-18] (SPAMfighter)
R2 PTK SharedAccess-FIGHTERS-297811811; C:\Program Files\Fighters\configservice.exe [139912 2008-11-18] (SPAMfighter)
R2 SearchAnonymizer; C:\Users\Alex\AppData\Roaming\OCS\SM\SearchAnonymizerHelper.exe [40960 2011-03-09] ()
R2 Suite Service; C:\Program Files\Fighters\FighterSuiteService.exe [1281568 2013-04-30] (SPAMfighter ApS)
S2 SystemStoreService; C:\Program Files\SoftwareUpdater\SystemStore.exe [296448 2013-09-17] ()
S3 TuneUp.Defrag; C:\Windows\System32\TuneUpDefragService.exe [361728 2013-11-01] (TuneUp Software GmbH)
S2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [1723744 2012-11-29] (TuneUp Software)
R2 WTGService; C:\Program Files\Verbindungsassistent\WTGService.exe [296400 2009-03-03] ()
R2 AV Engine Scanning Service; C:/Program Files/Common Files/Common Toolkit Suite/AVEngine/AVScanningService.exe [x]
R2 AV Watch Service; C:/Program Files/Common Files/Common Toolkit Suite/AVEngine/AVWatchService.exe [x]
S2 BrowserProtect; C:\ProgramData\BrowserProtect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe [x]

==================== Drivers (Whitelisted) ====================

S3 AVFSFilter; C:\Windows\System32\DRIVERS\avfsfilter.sys [10264 2013-09-05] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-09-02] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-09-02] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-04-02] (Avira Operations GmbH & Co. KG)
R2 int15; C:\Windows\system32\drivers\int15.sys [15392 2008-03-21] (Acer, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\mbamswissarmy.sys [40776 2013-11-01] (Malwarebytes Corporation)
R2 NTIPPKernel; C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\NTIPPKernel.sys [122368 2008-01-16] (Cyberlink Corp.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [10088 2012-11-16] (TuneUp Software)
R3 Vfscan; C:\Windows\System32\DRIVERS\vffilter.sys [15496 2008-11-18] ()
R3 winbondcir; C:\Windows\System32\DRIVERS\winbondcir.sys [43008 2007-03-28] (Winbond Electronics Corporation)
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files\Acer Arcade Deluxe\PlayMovie\000.fcl [61424 2008-05-09] (Cyberlink Corp.)
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-01 20:41 - 2013-11-01 20:41 - 00000000 ____D C:\FRST
2013-11-01 20:40 - 2013-11-01 20:40 - 01957098 _____ (Farbar) C:\Users\Alex\Desktop\FRST64.exe
2013-11-01 20:40 - 2013-11-01 20:40 - 01089445 _____ (Farbar) C:\Users\Alex\Desktop\FRST.exe
2013-11-01 20:12 - 2013-11-01 20:12 - 00000000 ____D C:\Users\Alex\AppData\Roaming\ParetoLogic
2013-11-01 20:12 - 2013-11-01 20:12 - 00000000 ____D C:\Users\Alex\AppData\Roaming\DriverCure
2013-11-01 20:11 - 2013-11-01 20:17 - 00000000 ____D C:\ProgramData\ParetoLogic
2013-11-01 20:10 - 2013-11-01 20:11 - 05249448 _____ (ParetoLogic Inc.) C:\Users\Alex\Desktop\ParetoLogic PC Health Advisor_de.exe
2013-11-01 19:52 - 2013-11-01 19:52 - 00018041 _____ C:\Users\Alex\Desktop\hijackthis.log
2013-11-01 19:50 - 2013-11-01 19:50 - 00388608 _____ (Trend Micro Inc.) C:\Users\Alex\Desktop\hijackthis_5833.exe
2013-11-01 19:43 - 2008-05-29 08:28 - 00028416 _____ (TuneUp Software GmbH) C:\Windows\system32\uxtuneup.dll
2013-11-01 19:43 - 2008-05-29 08:28 - 00016640 _____ (TuneUp Software GmbH) C:\Windows\system32\authuitu.dll
2013-11-01 19:25 - 2013-11-01 19:29 - 00040776 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamswissarmy.sys
2013-11-01 15:53 - 2013-11-01 15:53 - 104535026 _____ C:\Windows\system32\矨郤ဴ–
2013-11-01 15:33 - 2013-11-01 15:44 - 00000000 ____D C:\Users\Alex\Desktop\Bilder November 2013 iPhone

==================== One Month Modified Files and Folders =======

2013-11-01 20:43 - 2012-04-08 11:28 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-11-01 20:43 - 2012-04-08 11:28 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-01 20:43 - 2011-05-29 11:47 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-11-01 20:43 - 2010-04-17 08:55 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-01 20:41 - 2013-11-01 20:41 - 00000000 ____D C:\FRST
2013-11-01 20:40 - 2013-11-01 20:40 - 01957098 _____ (Farbar) C:\Users\Alex\Desktop\FRST64.exe
2013-11-01 20:40 - 2013-11-01 20:40 - 01089445 _____ (Farbar) C:\Users\Alex\Desktop\FRST.exe
2013-11-01 20:19 - 2012-03-06 01:05 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Skype
2013-11-01 20:17 - 2013-11-01 20:11 - 00000000 ____D C:\ProgramData\ParetoLogic
2013-11-01 20:12 - 2013-11-01 20:12 - 00000000 ____D C:\Users\Alex\AppData\Roaming\ParetoLogic
2013-11-01 20:12 - 2013-11-01 20:12 - 00000000 ____D C:\Users\Alex\AppData\Roaming\DriverCure
2013-11-01 20:11 - 2013-11-01 20:10 - 05249448 _____ (ParetoLogic Inc.) C:\Users\Alex\Desktop\ParetoLogic PC Health Advisor_de.exe
2013-11-01 19:52 - 2013-11-01 19:52 - 00018041 _____ C:\Users\Alex\Desktop\hijackthis.log
2013-11-01 19:50 - 2013-11-01 19:50 - 00388608 _____ (Trend Micro Inc.) C:\Users\Alex\Desktop\hijackthis_5833.exe
2013-11-01 19:47 - 2008-11-29 23:42 - 01196443 _____ C:\Windows\WindowsUpdate.log
2013-11-01 19:43 - 2009-11-16 18:15 - 00361728 _____ (TuneUp Software GmbH) C:\Windows\system32\TuneUpDefragService.exe
2013-11-01 19:29 - 2013-11-01 19:25 - 00040776 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamswissarmy.sys
2013-11-01 19:01 - 2011-09-04 21:57 - 00001134 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3113985616-2469985149-2520824957-1000UA.job
2013-11-01 18:59 - 2009-01-07 14:21 - 00138840 _____ C:\ProgramData\nvModes.001
2013-11-01 18:47 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-01 18:47 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-01 16:56 - 2010-04-17 08:55 - 00001090 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-01 16:40 - 2009-01-07 14:21 - 00138840 _____ C:\ProgramData\nvModes.dat
2013-11-01 15:53 - 2013-11-01 15:53 - 104535026 _____ C:\Windows\system32\矨郤ဴ–
2013-11-01 15:44 - 2013-11-01 15:33 - 00000000 ____D C:\Users\Alex\Desktop\Bilder November 2013 iPhone
2013-11-01 15:17 - 2013-09-07 00:11 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Video Downloader
2013-11-01 15:17 - 2013-05-03 21:21 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserProtect
2013-11-01 14:54 - 2008-01-21 08:16 - 01454146 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-01 14:49 - 2008-11-29 23:53 - 00000000 _____ C:\Windows\system32\LogConfigTemp.xml
2013-11-01 14:46 - 2013-09-26 17:53 - 00000000 ____D C:\ProgramData\clp
2013-11-01 14:46 - 2008-10-31 22:49 - 00000147 _____ C:\Windows\system32\agent.log
2013-11-01 14:46 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-01 14:45 - 2008-01-21 03:47 - 12954550 _____ C:\Windows\PFRO.log
2013-10-07 09:47 - 2006-11-02 14:01 - 00032516 _____ C:\Windows\Tasks\SCHEDLGU.TXT

Files to move or delete:
====================
C:\Users\Alex\any-video-converter-3.1.7.exe
C:\Users\Alex\avira_antivir_personal_de.exe
C:\Users\Alex\FacebookVideoCallSetup_v1.2.203.0.exe
C:\Users\Alex\Firefox Setup 3.6.13.exe
C:\Users\Alex\FreeStudio.exe
C:\Users\Alex\FreeYouTubeToiPhoneConverter.exe
C:\Users\Alex\gimp-2.6.11-i686-setup.exe
C:\Users\Alex\InstallPowerfulAffirmations.exe
C:\Users\Alex\InstallRarZilla.exe
C:\Users\Alex\install_flash_player.exe
C:\Users\Alex\SmileyCentral.exe
C:\Users\Alex\SoftonicDownloader_fuer_magix-xtreme-foto-grafik-designer.exe


Some content of TEMP:
====================
C:\Users\Alex\AppData\Local\Temp\GLB1A2B.EXE
C:\Users\Alex\AppData\Local\Temp\RtkBtMnt.exe
C:\Users\Alex\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Alex\AppData\Local\Temp\TUUUninstallHelper.exe
C:\Users\Gast\AppData\Local\Temp\AskSLib.dll
C:\Users\Gast\AppData\Local\Temp\RtkBtMnt.exe
C:\Users\Laptopgast\AppData\Local\Temp\RtkBtMnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-01 14:52

==================== End Of Log ============================

--- --- ---

--- --- ---

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 31-10-2013
Ran by Alex at 2013-11-01 20:46:55
Running from C:\Users\Alex\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

 Update for Microsoft Office 2007 (KB2508958)
Acer Arcade Deluxe (Version: 2.0.5315)
Acer Crystal Eye Webcam 2.0.8 (Version: 2.0.8)
Acer eAudio Management (Version: 3.0.3007)
Acer eDataSecurity Management (Version: 3.0.3060)
Acer Empowering Technology (Version: 3.0.3006)
Acer ePower Management (Version: 3.0.3008)
Acer eRecovery Management (Version: 3.0.3013)
Acer eSettings Management (Version: 3.0.3007)
Acer GridVista (Version: 2.72.317)
Acer Mobility Center Plug-In (Version: 3.0.3000)
Acer ScreenSaver (Version: 1.12.0506)
Acrobat.com (Version: 0.0.0)
Acrobat.com (Version: 1.1.377)
Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0)
Adobe AIR (Version: 1.0.4990)
Adobe AIR (Version: 1.0.8.4990)
Adobe Flash Player 11 ActiveX (Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (Version: 11.9.900.117)
Adobe Reader 9.5.5 (Version: 9.5.5)
Agere Systems HDA Modem
Apple Application Support (Version: 2.3.4)
Apple Application Support (Version: 2.3.6)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (Version: 2.1.3.127)
AVerMedia A310 (MiniCard, DVB-T) 1.1.0.27 (Version: 1.1.0.27)
Avira Free Antivirus (Version: 13.0.0.4052)
Bonjour (Version: 3.0.0.10)
Broadcom Gigabit Integrated Controller (Version: 11.11.03)
Brother MFL-Pro Suite (Version: 1.00)
Canon Easy-PhotoPrint EX
Canon Easy-WebPrint EX
Canon MG5100 series Benutzerregistrierung
Canon MG5100 series MP Drivers
Canon MP Navigator EX 4.0
Canon MP280 series Benutzerregistrierung
Canon My Printer
Canon Solution Menu EX
COMPUTERBILD-Abzockschutz (Version: 1.0.24)
CursorXP
Cyber Security
Dropbox (HKCU Version: 1.2.52)
eSobi v2 (Version: 2.0.3.000189)
Facebook Video Calling 1.2.0.287 (Version: 1.2.287)
Fighters (Version: 4.5.108)
Free M4a to MP3 Converter 6.2
Free YouTube to MP3 Converter version 3.12.12.827 (Version: 3.12.12.827)
Google Desktop (Version: 5.9.1005.12335)
Google Earth (Version: 7.1.1.1888)
Google Update Helper (Version: 1.3.21.165)
HUAWEI DataCard Driver 4.05.00.00 (Version: 4.05.00.00)
IB Updater 2.0.0.574 (Version: 2.0.0.574)
IB Updater Service (Version: 4.0.7.4)
iCloud (Version: 2.1.2.8)
iColorFolder
ICQ Toolbar (Version: 3.0.0)
ICQ7.5 (Version: 7.5)
Intel PROSet Wireless
Intel(R) PROSet/Wireless WiFi-Software (Version: 12.02.0000)
Intel® Matrix Storage Manager
iTunes (Version: 11.0.5.5)
Java 7 Update 25 (Version: 7.0.250)
Java Auto Updater (Version: 2.1.9.5)
JMicron JMB38X Flash Media Controller (Version: 1.00.10.04)
Junk Mail filter update (Version: 14.0.8089.726)
Kabel Deutschland Installations-Software (Version: 3.6.0.0)
Launch Manager
LightScribe  1.4.142.1 (Version: 1.4.142.1)
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)
McAfee Security Scan Plus (Version: 3.0.285.6)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Choice Guard (Version: 2.0.48.0)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Groove MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000)
Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Outlook Connector (Version: 12.0.6423.1000)
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Sync Framework Runtime Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Sync Framework Services Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Works (Version: 08.05.0822)
Mindjet MindManager 2012 (Version: 10.1.459)
MobileMe Control Panel (Version: 3.1.8.0)
Move Networks Media Player for Internet Explorer
Mozilla Firefox 23.0.1 (x86 de) (Version: 23.0.1)
Mozilla Maintenance Service (Version: 23.0.1)
MSVCRT (Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
NTI Backup Now 5 (Version: 5.1.2.503)
NTI Backup Now Standard (Version: 5.1.2.503)
NTI Media Maker 8 (Version: 8.0.2.6322)
NVIDIA Drivers
Orion (Version: 2.0.1)
PaperPort Image Printer (Version: 1.00.0000)
PDF-XChange 3
PhotoNow! (Version: 1.1.4619)
PhotoScape
QuickTime (Version: 7.74.80.86)
Rainbow Folders (Version: 2.05)
Realtek High Definition Audio Driver (Version: 6.0.1.5612)
Safari (Version: 5.34.57.2)
ScanSoft PaperPort 11 (Version: 11.1.0000)
SearchAnonymizer (Version: 1.0.1 (de))
Skype Click to Call (Version: 5.9.9216)
Skype™ 6.6 (Version: 6.6.106)
Softonic_Deutsch Toolbar (Version: )
Spelling Dictionaries Support For Adobe Reader 9 (Version: 9.0.0)
SPYWAREfighter (Version: 4.5.108)
Synaptics Pointing Device Driver (Version: 10.2.4.0)
TuneUp Utilities 2008 (Version: 7.0.8002)
TuneUp Utilities 2013 (Version: 13.0.3000.132)
TuneUp Utilities 2014 (de-DE) (Version: 14.0.1000.89)
TuneUp Utilities Language Pack (de-DE) (Version: 13.0.3000.132)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB2836940) (Version: 1)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2817642) 32-Bit Edition
Update für Microsoft Office Excel 2007 Help (KB963678)
Update für Microsoft Office Outlook 2007 Help (KB963677)
Update für Microsoft Office Powerpoint 2007 Help (KB963669)
Update für Microsoft Office Word 2007 Help (KB963665)
Verbindungsassistent (Version: 2.1)
VLC media player 0.9.8a (Version: 0.9.8a)
Winbond CIR Device Drivers (Version: 7.60.1012)
Windows Live Call (Version: 14.0.8064.0206)
Windows Live Communications Platform (Version: 14.0.8064.206)
Windows Live Essentials (Version: 14.0.8089.0726)
Windows Live Essentials (Version: 14.0.8089.726)
Windows Live Family Safety (Version: 14.0.8093.805)
Windows Live Fotogalerie (Version: 14.0.8081.709)
Windows Live ID-Anmelde-Assistent (Version: 6.500.3165.0)
Windows Live Mail (Version: 14.0.8089.0726)
Windows Live Movie Maker (Version: 14.0.8091.0730)
Windows Live Sync (Version: 14.0.8089.726)
Windows Live Writer (Version: 14.0.8089.0726)
Windows Live-Uploadtool (Version: 14.0.8014.1029)
Windows Media Player Firefox Plugin (Version: 1.0.0.8)
Windows Mobile-Gerätecenter (Version: 6.1.6965.0)
Windows Utils

==================== Restore Points  =========================

19-09-2013 11:45:22 Geplanter Prüfpunkt
22-09-2013 18:56:09 Microsoft Office Outlook MUI (German) 2007 wird installiert
22-09-2013 19:00:46 Windows Update
25-09-2013 08:42:20 Microsoft Office Outlook MUI (German) 2007 wird installiert
25-09-2013 08:43:58 Microsoft Office Outlook MUI (German) 2007 wird installiert
25-09-2013 08:46:19 Microsoft Office Outlook MUI (German) 2007 wird installiert
25-09-2013 08:46:38 Microsoft Office Outlook MUI (German) 2007 wird installiert
25-09-2013 14:41:10 Windows Update
25-09-2013 14:59:20 Windows Update
25-09-2013 19:01:27 Windows Update
25-09-2013 19:04:48 Windows Update
25-09-2013 19:07:07 Windows Update
26-09-2013 06:28:49 Windows Update
26-09-2013 06:29:29 Microsoft Office Enterprise 2007 wird installiert
26-09-2013 06:39:36 Microsoft Office Outlook MUI (German) 2007 wird installiert
26-09-2013 06:42:02 Microsoft Office Outlook MUI (German) 2007 wird installiert
26-09-2013 06:42:59 Microsoft Office Outlook MUI (German) 2007 wird installiert
26-09-2013 06:43:29 Microsoft Office Outlook MUI (German) 2007 wird installiert
26-09-2013 06:48:35 Microsoft Office Enterprise 2007 wird installiert
26-09-2013 06:50:02 Microsoft Office Enterprise 2007 wird installiert
26-09-2013 06:55:03 Microsoft Office Enterprise 2007 wird installiert
26-09-2013 06:56:23 Microsoft Office Enterprise 2007 wird installiert
26-09-2013 06:57:50 Microsoft Office Enterprise 2007 wird installiert
26-09-2013 15:50:33 Windows Update
26-09-2013 16:01:55 Microsoft Office Enterprise 2007 wird installiert
26-09-2013 16:03:44 Windows Update
26-09-2013 16:46:47 Microsoft Office Enterprise 2007 wird installiert
26-09-2013 16:49:22 Installed Fighters.
07-10-2013 08:39:26 Windows Update
01-11-2013 13:52:36 Windows Update
01-11-2013 18:32:33 Microsoft Office Enterprise 2007 wird installiert
01-11-2013 18:40:41 TuneUp Utilities 2008 wird entfernt
01-11-2013 19:06:43 Microsoft Office Enterprise 2007 wird installiert

==================== Hosts content: ==========================

2006-11-02 11:23 - 2006-09-18 22:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1             localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {1FF0F7F2-2ED0-4E4E-9CAF-B049E2066E73} - System32\Tasks\BrowserProtect => Sc.exe start BrowserProtect
Task: {30DE90FB-F705-4DD9-AECD-FD46C09B9BA5} - System32\Tasks\{52E75AC5-8CCE-411E-8FDD-CD2C16D41ADF} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1618
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {40DC83C6-66DE-4179-A91E-BC088B910A2C} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation)
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\System32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {4859EB80-ADDA-4E6A-829E-8BB73F188ADB} - System32\Tasks\{B732BB36-9DDF-469D-8E54-184FEDB47A70} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1618
Task: {4C1F571C-EEB1-42FA-94D8-A8C96A40D955} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-12] (Microsoft Corporation)
Task: {55E6E521-AB4C-445F-932D-D6DC02B3D892} - System32\Tasks\Automatische Wartung => C:\Program Files\TuneUp Utilities 2008\OneClickStarter.exe [2008-08-21] (TuneUp Software GmbH)
Task: {58DC7CD3-2264-4E57-96F0-4AFB7BEF7494} - System32\Tasks\{9883245D-3C9F-4CF5-AC09-83B51BED75BF} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1618
Task: {7199EFC8-01F8-45A0-B3B7-6E28FE71D9C0} - System32\Tasks\ScanSoft Background Update => C:\Program Files\Common Files\ScanSoft Shared\SSBkgdUpdate\SSBkgdUpdate.exe [2006-10-25] (Nuance Communications, Inc.)
Task: {785357C2-6BF0-4886-8430-50E2011D7EA4} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {895316DF-C6B7-40B1-9B57-1BE06C04A3E6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-04-17] (Google Inc.)
Task: {9BD39AD8-45F3-4E1B-9461-CAA766EB1BB1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-04-17] (Google Inc.)
Task: {A9C39857-99D4-41E9-8EBD-FB7781780EC5} - System32\Tasks\Software Updater => C:\Program Files\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe [2013-09-17] ()
Task: {C2896E6B-944D-45DD-BCDF-6F69C65A99B5} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files\TuneUp Utilities 2013\OneClick.exe [2012-11-29] (TuneUp Software)
Task: {CE4266A7-A4B2-4A87-9B88-2C3ACD01B1CF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-11-01] (Adobe Systems Incorporated)
Task: {DE7EC2F1-D941-42FA-AE5C-8FDCC7F655D2} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3113985616-2469985149-2520824957-1000Core => C:\Users\Alex\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-11] (Facebook Inc.)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\System32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: {E8C15835-A819-4AC6-83F1-E9EA7CCDBC18} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3113985616-2469985149-2520824957-1000UA => C:\Users\Alex\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-11] (Facebook Inc.)
Task: {F48E4FF4-20A0-4512-84EF-C72B9ACE1DB2} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {FFE0CCEA-9C34-4432-B240-D73EDA293B20} - System32\Tasks\Software Updater Ui => C:\Program Files\SoftwareUpdater\SoftwareUpdater.Ui.exe [2013-09-17] ()
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3113985616-2469985149-2520824957-1000Core.job => C:\Users\Alex\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3113985616-2469985149-2520824957-1000UA.job => C:\Users\Alex\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2008-10-31 22:28 - 2008-04-23 15:58 - 00204800 _____ () C:\Windows\System32\SysHook.dll
2008-10-31 22:13 - 2008-10-31 22:13 - 00036864 _____ () C:\Windows\assembly\GAC_MSIL\Framework.Utility\3.0.3006.0__4df5dcab8860d239\Framework.Utility.dll
2008-10-31 22:13 - 2008-10-31 22:13 - 00061440 _____ () C:\Windows\assembly\GAC_MSIL\Framework.Library\3.0.3006.0__3036420f80dd6947\Framework.Library.dll
2008-10-31 22:13 - 2008-10-31 22:13 - 00020480 _____ () C:\Windows\assembly\GAC_MSIL\Framework.Model.ControllerInterface\3.0.3006.0__d842b71b4d6ed079\Framework.Model.ControllerInterface.dll
2008-03-04 23:38 - 2008-03-04 23:38 - 00227888 _____ () C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ShowErrMsg.dll
2012-02-27 04:13 - 2012-02-27 04:13 - 00151376 _____ () C:\Program Files\Mindjet\MindManager 10\zlib.dll
2011-06-24 21:56 - 2011-06-24 21:56 - 00087328 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2011-06-24 21:56 - 2011-06-24 21:56 - 01241888 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2007-02-13 15:07 - 2007-02-13 15:07 - 00117760 _____ () C:\Program Files\TuneUp Utilities 2008\UNZDLL.DLL
2007-02-13 15:07 - 2007-02-13 15:07 - 00132096 _____ () C:\Program Files\TuneUp Utilities 2008\ZIPDLL.DLL
2012-11-03 19:23 - 2013-01-29 14:29 - 00170840 _____ () C:\Program Files\IB Updater\Extension32.dll
2013-04-18 11:30 - 2013-08-26 22:00 - 03551640 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2013-09-11 00:43 - 2013-09-11 00:43 - 16177544 ____N () C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:2B99FE60
AlternateDataStreams: C:\ProgramData\TEMP:3ED99525
AlternateDataStreams: C:\ProgramData\TEMP:4CF61E54
AlternateDataStreams: C:\ProgramData\TEMP:580E04D8
AlternateDataStreams: C:\ProgramData\TEMP:661DFA1C
AlternateDataStreams: C:\ProgramData\TEMP:793F316E
AlternateDataStreams: C:\ProgramData\TEMP:861A898F
AlternateDataStreams: C:\ProgramData\TEMP:8AB6C1D7
AlternateDataStreams: C:\ProgramData\TEMP:9E22BBE8
AlternateDataStreams: C:\ProgramData\TEMP:A8ADE5D8
AlternateDataStreams: C:\ProgramData\TEMP:B623B5B8
AlternateDataStreams: C:\ProgramData\TEMP:DFC5A2B2
AlternateDataStreams: C:\ProgramData\TEMP:FC420CE6
AlternateDataStreams: C:\ProgramData\TEMP:FEBEC560

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (11/01/2013 08:30:35 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ALEX\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\0GTVE0A5.DEFAULT\CACHE\1> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (11/01/2013 08:30:35 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ALEX\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\0GTVE0A5.DEFAULT\CACHE\0> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (11/01/2013 08:30:35 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ALEX\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\0GTVE0A5.DEFAULT\CACHE\0> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (11/01/2013 08:29:16 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ALEX\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\0GTVE0A5.DEFAULT\CACHE\C\1E> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (11/01/2013 08:29:16 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ALEX\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\0GTVE0A5.DEFAULT\CACHE\C\1E> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (11/01/2013 08:29:12 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ALEX\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\0GTVE0A5.DEFAULT\CACHE\9\39> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (11/01/2013 08:29:12 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ALEX\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\0GTVE0A5.DEFAULT\CACHE\9\39> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (11/01/2013 08:29:11 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ALEX\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\0GTVE0A5.DEFAULT\CACHE\D\8F> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (11/01/2013 08:29:11 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ALEX\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\0GTVE0A5.DEFAULT\CACHE\D\8F> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (11/01/2013 08:29:10 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ALEX\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\0GTVE0A5.DEFAULT\CACHE\6\06> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)


System errors:
=============
Error: (11/01/2013 08:49:00 PM) (Source: Service Control Manager) (User: )
Description: BrowserProtect%%2

Error: (11/01/2013 08:48:00 PM) (Source: Service Control Manager) (User: )
Description: BrowserProtect%%2

Error: (11/01/2013 08:47:00 PM) (Source: Service Control Manager) (User: )
Description: BrowserProtect%%2

Error: (11/01/2013 08:46:00 PM) (Source: Service Control Manager) (User: )
Description: BrowserProtect%%2

Error: (11/01/2013 08:45:00 PM) (Source: Service Control Manager) (User: )
Description: BrowserProtect%%2

Error: (11/01/2013 08:44:00 PM) (Source: Service Control Manager) (User: )
Description: BrowserProtect%%2

Error: (11/01/2013 08:43:00 PM) (Source: Service Control Manager) (User: )
Description: BrowserProtect%%2

Error: (11/01/2013 08:42:00 PM) (Source: Service Control Manager) (User: )
Description: BrowserProtect%%2

Error: (11/01/2013 08:41:00 PM) (Source: Service Control Manager) (User: )
Description: BrowserProtect%%2

Error: (11/01/2013 08:40:00 PM) (Source: Service Control Manager) (User: )
Description: BrowserProtect%%2


Microsoft Office Sessions:
=========================
Error: (05/20/2013 04:05:10 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.6600.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 54 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (03/13/2013 11:07:30 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 153783 seconds with 5340 seconds of active time.  This session ended with a crash.

Error: (11/05/2012 05:02:03 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6662.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 273397 seconds with 9300 seconds of active time.  This session ended with a crash.

Error: (10/16/2012 06:46:47 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 2919 seconds with 1140 seconds of active time.  This session ended with a crash.

Error: (10/08/2012 08:39:13 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 4 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (08/08/2010 02:05:52 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6535.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 338818 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (10/25/2009 01:48:24 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6504.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 6175 seconds with 60 seconds of active time.  This session ended with a crash.

Error: (10/13/2009 06:45:41 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6504.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 6 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (08/03/2009 06:53:15 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6504.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 25819 seconds with 180 seconds of active time.  This session ended with a crash.

Error: (02/24/2009 06:51:23 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6331.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 2744 seconds with 120 seconds of active time.  This session ended with a crash.


CodeIntegrity Errors:
===================================
  Date: 2013-11-01 18:09:03.396
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-01 18:09:02.732
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-01 18:09:02.062
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-01 18:09:01.509
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-01 18:09:00.925
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-01 18:09:00.326
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-01 18:08:59.574
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-01 18:08:58.984
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-01 18:08:58.441
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-01 18:08:57.880
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 72%
Total physical RAM: 3066.12 MB
Available physical RAM: 827.94 MB
Total Pagefile: 6338.5 MB
Available Pagefile: 3104.61 MB
Total Virtual: 2047.88 MB
Available Virtual: 1924.5 MB

==================== Drives ================================

Drive c: (ACER) (Fixed) (Total:111.44 GB) (Free:23.84 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (DATA) (Fixed) (Total:111.44 GB) (Free:47.73 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 233 GB) (Disk ID: 50A5B170)
Partition 1: (Not Active) - (Size=10 GB) - (Type=27)
Partition 2: (Active) - (Size=111 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=111 GB) - (Type=07 NTFS)

==================== End Of Log ============================

schrauber · 02.11.2013, 18:50

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

alke84 · 02.11.2013, 20:34

Ich habe in den Logdateien in Malwarebytes insgesamt sechs Einträge, da ich auf eigene Faust schon zwei mal gescannt habe. Soll ich alle hier posten?

Code:

ATTFilter

2013/09/26 19:09:47 +0200	ALEX-PC	Alex	MESSAGE	Starting protection
2013/09/26 19:09:47 +0200	ALEX-PC	Alex	MESSAGE	Protection started successfully
2013/09/26 19:09:47 +0200	ALEX-PC	Alex	MESSAGE	Starting IP protection
2013/09/26 19:10:38 +0200	ALEX-PC	Alex	MESSAGE	IP Protection started successfully
2013/09/26 19:10:38 +0200	ALEX-PC	Alex	MESSAGE	Starting database refresh
2013/09/26 19:10:38 +0200	ALEX-PC	Alex	MESSAGE	Stopping IP protection
2013/09/26 19:10:43 +0200	ALEX-PC	Alex	MESSAGE	IP Protection stopped successfully
2013/09/26 19:11:02 +0200	ALEX-PC	Alex	MESSAGE	Database refreshed successfully
2013/09/26 19:11:03 +0200	ALEX-PC	Alex	MESSAGE	Starting IP protection
2013/09/26 19:11:26 +0200	ALEX-PC	Alex	MESSAGE	IP Protection started successfully
2013/09/26 19:12:00 +0200	ALEX-PC	Alex	DETECTION	C:\ProgramData\BrowserProtect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe	PUP.Optional.PerformerSoft.A	QUARANTINE
2013/09/26 19:13:01 +0200	ALEX-PC	Alex	DETECTION	c:\programdata\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.exe	PUP.Optional.PerformerSoft.A	QUARANTINE
2013/09/26 19:13:01 +0200	ALEX-PC	Alex	ERROR	Quarantine failed:  SDKQuarantine failed with error code 2
2013/09/26 19:13:34 +0200	ALEX-PC	Alex	MESSAGE	Executing scheduled update:  Daily
2013/09/26 19:13:46 +0200	ALEX-PC	Alex	MESSAGE	Database already up-to-date
2013/09/26 19:14:00 +0200	ALEX-PC	Alex	DETECTION	c:\programdata\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.exe	PUP.Optional.PerformerSoft.A	QUARANTINE
2013/09/26 19:14:00 +0200	ALEX-PC	Alex	ERROR	Quarantine failed:  SDKQuarantine failed with error code 2
2013/09/26 19:15:00 +0200	ALEX-PC	Alex	DETECTION	c:\programdata\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.exe	PUP.Optional.PerformerSoft.A	QUARANTINE
2013/09/26 19:15:01 +0200	ALEX-PC	Alex	ERROR	Quarantine failed:  SDKQuarantine failed with error code 2
2013/09/26 19:15:50 +0200	ALEX-PC	Alex	DETECTION	C:\Program Files\Plus-HD-3.2\Plus-HD-3.2-bho.dll	PUP.Optional.PlusHD.A	QUARANTINE
2013/09/26 19:16:17 +0200	ALEX-PC	Alex	DETECTION	c:\programdata\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.exe	PUP.Optional.PerformerSoft.A	QUARANTINE
2013/09/26 19:16:17 +0200	ALEX-PC	Alex	ERROR	Quarantine failed:  SDKQuarantine failed with error code 2
2013/09/26 19:17:29 +0200	ALEX-PC	Alex	DETECTION	c:\programdata\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.exe	PUP.Optional.PerformerSoft.A	QUARANTINE
2013/09/26 19:17:29 +0200	ALEX-PC	Alex	ERROR	Quarantine failed:  SDKQuarantine failed with error code 2
2013/09/26 19:18:13 +0200	ALEX-PC	Alex	DETECTION	c:\programdata\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.exe	PUP.Optional.PerformerSoft.A	QUARANTINE
2013/09/26 19:18:13 +0200	ALEX-PC	Alex	ERROR	Quarantine failed:  SDKQuarantine failed with error code 2
2013/09/26 19:19:01 +0200	ALEX-PC	Alex	DETECTION	c:\programdata\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.exe	PUP.Optional.PerformerSoft.A	QUARANTINE
2013/09/26 19:19:01 +0200	ALEX-PC	Alex	ERROR	Quarantine failed:  SDKQuarantine failed with error code 2
2013/09/26 19:20:00 +0200	ALEX-PC	Alex	DETECTION	c:\programdata\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.exe	PUP.Optional.PerformerSoft.A	QUARANTINE
2013/09/26 19:20:00 +0200	ALEX-PC	Alex	ERROR	Quarantine failed:  SDKQuarantine failed with error code 2
2013/09/26 19:21:00 +0200	ALEX-PC	Alex	DETECTION	c:\programdata\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.exe	PUP.Optional.PerformerSoft.A	QUARANTINE
2013/09/26 19:21:00 +0200	ALEX-PC	Alex	ERROR	Quarantine failed:  SDKQuarantine failed with error code 2
2013/09/26 19:21:14 +0200	ALEX-PC	Alex	DETECTION	c:\programdata\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.exe	PUP.Optional.PerformerSoft.A	QUARANTINE
2013/09/26 19:21:14 +0200	ALEX-PC	Alex	ERROR	Quarantine failed:  SDKQuarantine failed with error code 2
2013/09/26 19:22:04 +0200	ALEX-PC	Alex	DETECTION	c:\programdata\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.exe	PUP.Optional.PerformerSoft.A	QUARANTINE
2013/09/26 19:22:04 +0200	ALEX-PC	Alex	ERROR	Quarantine failed:  SDKQuarantine failed with error code 2
2013/09/26 19:23:01 +0200	ALEX-PC	Alex	DETECTION	c:\programdata\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.exe	PUP.Optional.PerformerSoft.A	QUARANTINE
2013/09/26 19:23:01 +0200	ALEX-PC	Alex	ERROR	Quarantine failed:  SDKQuarantine failed with error code 2
2013/09/26 19:24:00 +0200	ALEX-PC	Alex	DETECTION	c:\programdata\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.exe	PUP.Optional.PerformerSoft.A	QUARANTINE
2013/09/26 19:24:00 +0200	ALEX-PC	Alex	ERROR	Quarantine failed:  SDKQuarantine failed with error code 2
2013/09/26 19:25:00 +0200	ALEX-PC	Alex	DETECTION	c:\programdata\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.exe	PUP.Optional.PerformerSoft.A	QUARANTINE
2013/09/26 19:25:00 +0200	ALEX-PC	Alex	ERROR	Quarantine failed:  SDKQuarantine failed with error code 2
2013/09/26 19:27:00 +0200	ALEX-PC	Alex	DETECTION	c:\programdata\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.exe	PUP.Optional.PerformerSoft.A	QUARANTINE
2013/09/26 19:27:00 +0200	ALEX-PC	Alex	ERROR	Quarantine failed:  SDKQuarantine failed with error code 2
2013/09/26 19:28:00 +0200	ALEX-PC	Alex	DETECTION	c:\programdata\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.exe	PUP.Optional.PerformerSoft.A	QUARANTINE
2013/09/26 19:28:00 +0200	ALEX-PC	Alex	ERROR	Quarantine failed:  SDKQuarantine failed with error code 2
2013/09/26 19:29:06 +0200	ALEX-PC	Alex	DETECTION	c:\programdata\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.exe	PUP.Optional.PerformerSoft.A	QUARANTINE
2013/09/26 19:29:06 +0200	ALEX-PC	Alex	ERROR	Quarantine failed:  SDKQuarantine failed with error code 2
2013/09/26 19:30:12 +0200	ALEX-PC	Alex	DETECTION	c:\programdata\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.exe	PUP.Optional.PerformerSoft.A	QUARANTINE
2013/09/26 19:30:12 +0200	ALEX-PC	Alex	ERROR	Quarantine failed:  SDKQuarantine failed with error code 2
2013/09/26 19:31:00 +0200	ALEX-PC	Alex	DETECTION	c:\programdata\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.exe	PUP.Optional.PerformerSoft.A	QUARANTINE
2013/09/26 19:31:00 +0200	ALEX-PC	Alex	ERROR	Quarantine failed:  SDKQuarantine failed with error code 2
2013/09/26 19:31:10 +0200	ALEX-PC	Alex	DETECTION	c:\programdata\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.exe	PUP.Optional.PerformerSoft.A	QUARANTINE
2013/09/26 19:31:10 +0200	ALEX-PC	Alex	ERROR	Quarantine failed:  SDKQuarantine failed with error code 2
2013/09/26 19:32:00 +0200	ALEX-PC	Alex	DETECTION	c:\programdata\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.exe	PUP.Optional.PerformerSoft.A	QUARANTINE
2013/09/26 19:32:00 +0200	ALEX-PC	Alex	ERROR	Quarantine failed:  SDKQuarantine failed with error code 2
2013/09/26 19:41:12 +0200	ALEX-PC	Alex	DETECTION	c:\programdata\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.exe	PUP.Optional.PerformerSoft.A	QUARANTINE
2013/09/26 19:41:12 +0200	ALEX-PC	Alex	ERROR	Quarantine failed:  SDKQuarantine failed with error code 2
2013/09/26 19:51:12 +0200	ALEX-PC	Alex	DETECTION	c:\programdata\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.exe	PUP.Optional.PerformerSoft.A	QUARANTINE
2013/09/26 19:51:12 +0200	ALEX-PC	Alex	ERROR	Quarantine failed:  SDKQuarantine failed with error code 2
2013/09/26 20:01:14 +0200	ALEX-PC	Alex	DETECTION	c:\programdata\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.exe	PUP.Optional.PerformerSoft.A	QUARANTINE
2013/09/26 20:01:15 +0200	ALEX-PC	Alex	ERROR	Quarantine failed:  SDKQuarantine failed with error code 2
2013/09/26 20:11:13 +0200	ALEX-PC	Alex	DETECTION	c:\programdata\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.exe	PUP.Optional.PerformerSoft.A	QUARANTINE
2013/09/26 20:11:14 +0200	ALEX-PC	Alex	ERROR	Quarantine failed:  SDKQuarantine failed with error code 2
2013/09/26 20:21:15 +0200	ALEX-PC	Alex	DETECTION	c:\programdata\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.exe	PUP.Optional.PerformerSoft.A	QUARANTINE
2013/09/26 20:21:15 +0200	ALEX-PC	Alex	ERROR	Quarantine failed:  SDKQuarantine failed with error code 2
2013/09/26 20:31:16 +0200	ALEX-PC	Alex	DETECTION	c:\programdata\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.exe	PUP.Optional.PerformerSoft.A	QUARANTINE
2013/09/26 20:31:16 +0200	ALEX-PC	Alex	ERROR	Quarantine failed:  SDKQuarantine failed with error code 2
2013/09/26 20:52:18 +0200	ALEX-PC	Alex	DETECTION	c:\programdata\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.exe	PUP.Optional.PerformerSoft.A	QUARANTINE
2013/09/26 20:52:19 +0200	ALEX-PC	Alex	ERROR	Quarantine failed:  SDKQuarantine failed with error code 2
2013/09/26 23:42:24 +0200	ALEX-PC	Alex	DETECTION	C:\Program Files\Plus-HD-3.2\Plus-HD-3.2-bg.exe	PUP.Optional.PlusHD.A	QUARANTINE
2013/09/26 23:43:24 +0200	ALEX-PC	Alex	DETECTION	c:\program files\plus-hd-3.2\plus-hd-3.2-bg.exe	PUP.Optional.PlusHD.A	QUARANTINE
2013/09/26 23:43:25 +0200	ALEX-PC	Alex	ERROR	Quarantine failed:  SDKQuarantine failed with error code 2

Code:

ATTFilter

# AdwCleaner v3.010 - Bericht erstellt am 02/11/2013 um 19:27:09
# Updated 20/10/2013 von Xplode
# Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Benutzername : Alex - ALEX-PC
# Gestartet von : C:\Users\Alex\Desktop\adwcleaner.exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Datei Gefunden : C:\Users\Alex\AppData\Local\funmoods-speeddial.crx
Datei Gefunden : C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk
Datei Gefunden : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\bProtector_extensions.rdf
Datei Gefunden : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\bprotector_extensions.sqlite
Datei Gefunden : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\bprotector_prefs.js
Datei Gefunden : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\invalidprefs.js
Datei Gefunden : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\Babylon.xml
Datei Gefunden : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\BrowserProtect.xml
Datei Gefunden : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\delta.xml
Datei Gefunden : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin.xml
Datei Gefunden : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-1.xml
Datei Gefunden : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-10.xml
Datei Gefunden : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-2.xml
Datei Gefunden : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-3.xml
Datei Gefunden : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-4.xml
Datei Gefunden : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-5.xml
Datei Gefunden : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-6.xml
Datei Gefunden : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-7.xml
Datei Gefunden : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-8.xml
Datei Gefunden : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-9.xml
Datei Gefunden : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\MyStart Search.xml
Datei Gefunden : C:\Windows\system32\ImhxxpComm.dll
Datei Gefunden : C:\Windows\System32\Tasks\BrowserProtect
Datei Gefunden : C:\Windows\System32\Tasks\Software Updater
Datei Gefunden : C:\Windows\System32\Tasks\Software Updater Ui
Ordner Gefunden : C:\Program Files\Mozilla Firefox\Extensions\{800B5000-A755-47E1-992B-48A1C1357F07}
Ordner Gefunden : C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbjciahceamgodcoidkjpchnokgfpphh
Ordner Gefunden : C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj
Ordner Gefunden : C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Ordner Gefunden : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM
Ordner Gefunden C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserProtect
Ordner Gefunden C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Video downloader
Ordner Gefunden C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\Conduit
Ordner Gefunden C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\ConduitCommon
Ordner Gefunden C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\ICQToolbarData
Ordner Gefunden C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\SweetIMToolbarData
Ordner Gefunden C:\Users\Alex\AppData\Roaming\OpenCandy
Ordner Gefunden C:\Users\Alex\AppData\Roaming\ParetoLogic
Ordner Gefunden C:\Users\Alex\AppData\Roaming\software4u
Ordner Gefunden C:\Users\Alex\AppData\Roaming\Windows Net Data

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : HKCU\Software\5e558cd0b568ea46
Schlüssel Gefunden : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\Conduit
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\Softonic_Deutsch
Schlüssel Gefunden : HKCU\Software\BabSolution
Schlüssel Gefunden : HKCU\Software\Delta
Schlüssel Gefunden : HKCU\Software\ICQ\ICQToolbar
Schlüssel Gefunden : HKCU\Software\IM
Schlüssel Gefunden : HKCU\Software\ImInstaller
Schlüssel Gefunden : HKCU\Software\installedbrowserextensions
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0D7562AE-8EF6-416D-A838-AB665251703A}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Funmoods
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ICQToolbar
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SearchAnonymizer
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Softonic_Deutsch Toolbar
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Video downloader
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\wnlt
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{336D0C35-8A85-403A-B9D2-65C292C39087}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{65771F5D-D18A-47EA-ABC7-D5A6655C7C4C}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8DBB6D8E-E4A6-4E3B-9753-AF78B226441C}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{336D0C35-8A85-403A-B9D2-65C292C39087}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{65771F5D-D18A-47EA-ABC7-D5A6655C7C4C}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8DBB6D8E-E4A6-4E3B-9753-AF78B226441C}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CA3EB689-8F09-4026-AA10-B9534C691CE0}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35D-6118-11DC-9C72-001320C79847}
Schlüssel Gefunden : HKCU\Software\OCS
Schlüssel Gefunden : HKCU\Software\ParetoLogic
Schlüssel Gefunden : HKCU\Software\Softonic
Schlüssel Gefunden : HKCU\Software\wnlt
Schlüssel Gefunden : HKCU\Software\YahooPartnerToolbar
Schlüssel Gefunden : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gefunden : HKLM\SOFTWARE\5e558cd0b568ea46
Schlüssel Gefunden : HKLM\Software\Babylon
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{5D723752-5899-47E8-99B4-62C824EF9E13}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\ICQ Service.exe
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{336D0C35-8A85-403A-B9D2-65C292C39087}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{64182481-4F71-486B-A045-B233BD0DA8FC}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{65771F5D-D18A-47EA-ABC7-D5A6655C7C4C}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{8DBB6D8E-E4A6-4E3B-9753-AF78B226441C}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{9AFB8248-617F-460D-9366-D71CDEDA3179}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{DDE2C74F-58CC-4D71-8CE1-09DEBB8CFB78}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\facemoods.facemoodsHlpr
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\facemoods.facemoodsHlpr.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\ICQToolBar.IEHook
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\ICQToolBar.IEHook.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\IMsiDe1egate.Application.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366436630}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{CA17D76B-F91D-4659-A7FD-A9F7ED375CDD}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\SWEETIE.SWEETIE
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}
Schlüssel Gefunden : HKLM\Software\Conduit
Schlüssel Gefunden : HKLM\Software\DataMngr
Schlüssel Gefunden : HKLM\Software\Delta
Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\ihflimipbcaljfnojhhknppphnnciiif
Schlüssel Gefunden : HKLM\Software\IB Updater
Schlüssel Gefunden : HKLM\Software\ICQ\ICQToolbar
Schlüssel Gefunden : HKLM\Software\Iminent
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\BrowserProtect
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\Software Updater
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\Software Updater Ui
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\BrowserProtect
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\Software Updater
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\Software Updater Ui
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BrowserProtect
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BrowserProtect
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Software Updater
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Software Updater Ui
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403A-B9D2-65C292C39087}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8DBB6D8E-E4A6-4E3B-9753-AF78B226441C}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ICQToolbar
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchAnonymizer
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Softonic_Deutsch Toolbar
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\wnlt
Schlüssel Gefunden : HKLM\Software\ParetoLogic
Schlüssel Gefunden : HKLM\Software\Softonic_Deutsch
Schlüssel Gefunden : HKLM\Software\wnlt
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [Backup.old.Start Page]
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{8DBB6D8E-E4A6-4E3B-9753-AF78B226441C}]
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{8DBB6D8E-E4A6-4E3B-9753-AF78B226441C}]
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{EEE6C35D-6118-11DC-9C72-001320C79847}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{8DBB6D8E-E4A6-4E3B-9753-AF78B226441C}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{8DBB6D8E-E4A6-4E3B-9753-AF78B226441C}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Ocs_SM]
Wert Gefunden : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{336D0C35-8A85-403A-B9D2-65C292C39087}]
Wert Gefunden : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}]
Wert Gefunden : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{FE1DEEEA-DB6D-44B8-83F0-34FC0F9D1052}]

***** [ Browser ] *****

-\\ Internet Explorer v9.0.8112.16514

Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search] - hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [Backup.Old.Start Page] - hxxp://search.babylon.com/?affID=114347&tt=2912_2&babsrc=HP_ss&mntrId=5cb91d6700000000000000215d282acc
Einstellung Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://start.funmoods.com/?f=1&a=bndlr&chnl=bndlr&cd=2XzuyEtN2Y1L1QzutDtDtBtAzz0ByEyDyB0BzzyEtC0DyCyBtN0D0Tzu0CtBtDtCtN1L2XzutBtFtCtFtDtFtAtDtC&cr=1520158854
Einstellung Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [SearchAssistant] - hxxp://start.facemoods.com/?a=stonicde&s={searchTerms}&f=4

-\\ Mozilla Firefox v23.0.1 (de)

[ Datei : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\prefs.js ]

Zeile gefunden : user_pref("CT2269050.UserID", "UN40615104017446870");
Zeile gefunden : user_pref("CT2269050.WeatherNetwork", "");
Zeile gefunden : user_pref("CT2269050.WeatherPollDate", "Mon Sep 27 2010 22:02:24 GMT+0200");
Zeile gefunden : user_pref("CT2269050.WeatherUnit", "C");
Zeile gefunden : user_pref("CT2269050.alertChannelId", "666138");
Zeile gefunden : user_pref("CT2269050.clientLogIsEnabled", true);
Zeile gefunden : user_pref("CT2269050.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Zeile gefunden : user_pref("CT2269050.myStuffEnabled", true);
Zeile gefunden : user_pref("CT2269050.myStuffPublihserMinWidth", 400);
Zeile gefunden : user_pref("CT2269050.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
Zeile gefunden : user_pref("CT2269050.myStuffServiceIntervalMM", 1440);
Zeile gefunden : user_pref("CT2269050.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
Zeile gefunden : user_pref("CT2269050.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Zeile gefunden : user_pref("CT3196716..clientLogIsEnabled", true);
Zeile gefunden : user_pref("CT3196716..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Zeile gefunden : user_pref("CT3196716..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Zeile gefunden : user_pref("CT3196716.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Zeile gefunden : user_pref("CT3196716.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Zeile gefunden : user_pref("CT3196716.BrowserCompStateIsOpen_129774122767598898", true);
Zeile gefunden : user_pref("CT3196716.BrowserCompStateIsOpen_2889679176695299247", true);
Zeile gefunden : user_pref("CT3196716.CT3196716", "CT3196716");
Zeile gefunden : user_pref("CT3196716.CurrentServerDate", "27-10-2012");
Zeile gefunden : user_pref("CT3196716.DSInstall", false);
Zeile gefunden : user_pref("CT3196716.DialogsAlignMode", "LTR");
Zeile gefunden : user_pref("CT3196716.DialogsGetterLastCheckTime", "Thu Oct 25 2012 21:26:43 GMT+0200");
Zeile gefunden : user_pref("CT3196716.DownloadReferralCookieData", "");
Zeile gefunden : user_pref("CT3196716.EMailNotifierPollDate", "Sun Jul 15 2012 22:20:23 GMT+0200");
Zeile gefunden : user_pref("CT3196716.ExternalComponentPollDate129844885932217004", "Sun Jul 15 2012 22:14:56 GMT+0200");
Zeile gefunden : user_pref("CT3196716.ExternalComponentPollDate129844885932373254", "Sun Jul 15 2012 22:14:56 GMT+0200");
Zeile gefunden : user_pref("CT3196716.FirstServerDate", "15-7-2012");
Zeile gefunden : user_pref("CT3196716.FirstTime", true);
Zeile gefunden : user_pref("CT3196716.FirstTimeFF3", true);
Zeile gefunden : user_pref("CT3196716.FirstTimeHiddenVer", true);
Zeile gefunden : user_pref("CT3196716.FixPageNotFoundErrors", true);
Zeile gefunden : user_pref("CT3196716.GroupingServerCheckInterval", 1440);
Zeile gefunden : user_pref("CT3196716.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Zeile gefunden : user_pref("CT3196716.HPInstall", false);
Zeile gefunden : user_pref("CT3196716.HasUserGlobalKeys", true);
Zeile gefunden : user_pref("CT3196716.HomePageProtectorEnabled", false);
Zeile gefunden : user_pref("CT3196716.HomepageBeforeUnload", "about:home");
Zeile gefunden : user_pref("CT3196716.Initialize", true);
Zeile gefunden : user_pref("CT3196716.InitializeCommonPrefs", true);
Zeile gefunden : user_pref("CT3196716.InstallationAndCookieDataSentCount", 3);
Zeile gefunden : user_pref("CT3196716.InstallationType", "Unknown");
Zeile gefunden : user_pref("CT3196716.InstalledDate", "Sun Jul 15 2012 22:15:02 GMT+0200");
Zeile gefunden : user_pref("CT3196716.InvalidateCache", false);
Zeile gefunden : user_pref("CT3196716.IsAlertDBUpdated", true);
Zeile gefunden : user_pref("CT3196716.IsGrouping", false);
Zeile gefunden : user_pref("CT3196716.IsInitSetupIni", true);
Zeile gefunden : user_pref("CT3196716.IsMulticommunity", false);
Zeile gefunden : user_pref("CT3196716.IsOpenThankYouPage", true);
Zeile gefunden : user_pref("CT3196716.IsOpenUninstallPage", true);
Zeile gefunden : user_pref("CT3196716.IsProtectorsInit", true);
Zeile gefunden : user_pref("CT3196716.LanguagePackLastCheckTime", "Sat Oct 27 2012 07:46:23 GMT+0200");
Zeile gefunden : user_pref("CT3196716.LanguagePackReloadIntervalMM", 1440);
Zeile gefunden : user_pref("CT3196716.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
Zeile gefunden : user_pref("CT3196716.LastLogin_3.13.0.6", "Mon Oct 29 2012 14:13:35 GMT+0100");
Zeile gefunden : user_pref("CT3196716.LatestVersion", "3.13.0.6");
Zeile gefunden : user_pref("CT3196716.Locale", "en");
Zeile gefunden : user_pref("CT3196716.MCDetectTooltipHeight", "83");
Zeile gefunden : user_pref("CT3196716.MCDetectTooltipShow", false);
Zeile gefunden : user_pref("CT3196716.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Zeile gefunden : user_pref("CT3196716.MCDetectTooltipWidth", "295");
Zeile gefunden : user_pref("CT3196716.MyStuffEnabledAtInstallation", true);
Zeile gefunden : user_pref("CT3196716.OriginalFirstVersion", "3.13.0.6");
Zeile gefunden : user_pref("CT3196716.RadioIsPodcast", false);
Zeile gefunden : user_pref("CT3196716.RadioLastUpdateIPServer", "3");
Zeile gefunden : user_pref("CT3196716.RadioLastUpdateServer", "3");
Zeile gefunden : user_pref("CT3196716.RadioMediaID", "9962");
Zeile gefunden : user_pref("CT3196716.RadioMediaType", "Media Player");
Zeile gefunden : user_pref("CT3196716.RadioMenuSelectedID", "EBRadioMenu_CT31967169962");
Zeile gefunden : user_pref("CT3196716.RadioShrinkedFromSetup", false);
Zeile gefunden : user_pref("CT3196716.RadioStationName", "California%20Rock");
Zeile gefunden : user_pref("CT3196716.RadioStationURL", "hxxp://feedlive.net/california.asx");
Zeile gefunden : user_pref("CT3196716.SHRINK_TOOLBAR", 1);
Zeile gefunden : user_pref("CT3196716.SearchBoxWidth", 100);
Zeile gefunden : user_pref("CT3196716.SearchCaption", "WiseConvert Customized Web Search");
Zeile gefunden : user_pref("CT3196716.SearchEngineBeforeUnload", "Google");
Zeile gefunden : user_pref("CT3196716.SearchFromAddressBarIsInit", true);
Zeile gefunden : user_pref("CT3196716.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3230026&SearchSource=2&q=");
Zeile gefunden : user_pref("CT3196716.SearchInNewTabEnabled", true);
Zeile gefunden : user_pref("CT3196716.SearchInNewTabIntervalMM", 1440);
Zeile gefunden : user_pref("CT3196716.SearchInNewTabLastCheckTime", "Mon Oct 29 2012 07:50:02 GMT+0100");
Zeile gefunden : user_pref("CT3196716.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
Zeile gefunden : user_pref("CT3196716.SearchProtectorEnabled", false);
Zeile gefunden : user_pref("CT3196716.SearchProtectorToolbarDisabled", false);
Zeile gefunden : user_pref("CT3196716.SendProtectorDataViaLogin", true);
Zeile gefunden : user_pref("CT3196716.ServiceMapLastCheckTime", "Thu Oct 25 2012 21:26:41 GMT+0200");
Zeile gefunden : user_pref("CT3196716.SettingsLastCheckTime", "Fri Oct 26 2012 18:37:49 GMT+0200");
Zeile gefunden : user_pref("CT3196716.SettingsLastUpdate", "1351096591");
Zeile gefunden : user_pref("CT3196716.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT3230026&SearchSource=13");
Zeile gefunden : user_pref("CT3196716.ThirdPartyComponentsInterval", 504);
Zeile gefunden : user_pref("CT3196716.ThirdPartyComponentsLastCheck", "Sun Jul 15 2012 22:14:54 GMT+0200");
Zeile gefunden : user_pref("CT3196716.ThirdPartyComponentsLastUpdate", "1331805997");
Zeile gefunden : user_pref("CT3196716.ToolbarShrinkedFromSetup", false);
Zeile gefunden : user_pref("CT3196716.TrusteLinkUrl", "hxxp://trust.conduit.com/CT3196716");
Zeile gefunden : user_pref("CT3196716.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
Zeile gefunden : user_pref("CT3196716.UserID", "UN47860936281559931");
Zeile gefunden : user_pref("CT3196716.ValidationData_Toolbar", 2);
Zeile gefunden : user_pref("CT3196716.WeatherNetwork", "");
Zeile gefunden : user_pref("CT3196716.WeatherPollDate", "Mon Jul 16 2012 12:11:17 GMT+0200");
Zeile gefunden : user_pref("CT3196716.WeatherUnit", "C");
Zeile gefunden : user_pref("CT3196716.alertChannelId", "1613210");
Zeile gefunden : user_pref("CT3196716.approveUntrustedApps", false);
Zeile gefunden : user_pref("CT3196716.backendstorage./9b+7e+x305", "247E27413334363379453A3D2A722C797A7E7A3128333B4D474549484C5952594B335E5356432C45333438334A414C546660576364676F6A5E4B766B6E5B445D4B4C504A6259646C787A2[...]
Zeile gefunden : user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.backgroundjs", "\n\n/*****************************************************************************[...]
Zeile gefunden : user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.internaldb.cache/2a71b3b28494cf1854d333288ccc18ba_DE.value", "%22var%20cat_2a71b3b28494cf1854d3332[...]
Zeile gefunden : user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.internaldb.cache/3518e1eac042730aa1274618984462b3_DE.value", "%22var%20cat_3518e1eac042730aa127461[...]
Zeile gefunden : user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.internaldb.cache/5cdf8a7ef2ec84abac286c67587b78d9.value", "%22function%20tcmMarkWindow%28a%29%7Bva[...]
Zeile gefunden : user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.internaldb.cache/d5baae4ef839769f8eb7e9f9d82d8a40_DE.value", "%22var%20cat_d5baae4ef839769f8eb7e9f[...]
Zeile gefunden : user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.js", "\n\n  /************************************************************************************\[...]
Zeile gefunden : user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_1.code", "appAPI._cr_config={appID:function(){var a=appAPI.appInfo;if(a){return app[...]
Zeile gefunden : user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_102.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]
Zeile gefunden : user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_104.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]
Zeile gefunden : user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_119.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]
Zeile gefunden : user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_120.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]
Zeile gefunden : user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_123.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]
Zeile gefunden : user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_13.name", "CrossriderAppUtils");
Zeile gefunden : user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_138.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]
Zeile gefunden : user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_14.name", "CrossriderUtils");
Zeile gefunden : user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_155.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]
Zeile gefunden : user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_16.code", "if((typeof isBackground===\"undefined\"||isBackground!==true)&&(typeof _[...]
Zeile gefunden : user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_17.code", "if(typeof window!==\"undefined\"){\n/*!\n * jQuery JavaScript Library v1[...]
Zeile gefunden : user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_21.code", "var CrossriderDebugManager=(function(h){var f={appId:appAPI._cr_config.a[...]
Zeile gefunden : user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_22.code", "(function(a){appAPI.queueManager={queue:[],register:function(b){this.que[...]
Zeile gefunden : user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_28.code", "var CrossriderInitializerPlugin=(function(e){var c={appId:appAPI._cr_con[...]
Zeile gefunden : user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_47.code", "(function(){appAPI.ready=function(a){appAPI.resources.isReady(a);};}());[...]
Zeile gefunden : user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_78.name", "CrossriderInfo");
Zeile gefunden : user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_87.code", "var CROSSRIDER_PLATFORM=true;var JQ=bbrsJQ=$jquery;if(appAPI.platform==\[...]
Zeile gefunden : user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_9.code", "appAPI.hooks.addHook(\"searchEngine\",(function(a){return function(){var [...]
Zeile gefunden : user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_91.code", "(function(h){var p=(function(){var R=0;var Z=\"\";function Q(ac){return [...]
Zeile gefunden : user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_92.code", "if(typeof appAPI.internal.monetization===\"undefined\"){appAPI.internal.[...]
Zeile gefunden : user_pref("extensions.crossrider.bic", "140f58599b5af439c21621dff21fc7d1");
Zeile gefunden : user_pref("extensions.delta.admin", false);
Zeile gefunden : user_pref("extensions.delta.aflt", "babsst");
Zeile gefunden : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Zeile gefunden : user_pref("extensions.delta.autoRvrt", "false");
Zeile gefunden : user_pref("extensions.delta.dfltLng", "de");
Zeile gefunden : user_pref("extensions.delta.excTlbr", false);
Zeile gefunden : user_pref("extensions.delta.ffxUnstlRst", true);
Zeile gefunden : user_pref("extensions.delta.id", "5cb91d6700000000000000215d282acc");
Zeile gefunden : user_pref("extensions.delta.instlDay", "15954");
Zeile gefunden : user_pref("extensions.delta.instlRef", "sst");
Zeile gefunden : user_pref("extensions.delta.newTab", false);
Zeile gefunden : user_pref("extensions.delta.prdct", "delta");
Zeile gefunden : user_pref("extensions.delta.prtnrId", "delta");
Zeile gefunden : user_pref("extensions.delta.rvrt", "false");
Zeile gefunden : user_pref("extensions.delta.smplGrp", "none");
Zeile gefunden : user_pref("extensions.delta.tlbrId", "base");
Zeile gefunden : user_pref("extensions.delta.tlbrSrchUrl", "");
Zeile gefunden : user_pref("extensions.delta.vrsn", "1.8.24.6");
Zeile gefunden : user_pref("extensions.delta.vrsnTs", "1.8.24.61:03:25");
Zeile gefunden : user_pref("extensions.delta.vrsni", "1.8.24.6");
Zeile gefunden : user_pref("extensions.delta_i.babExt", "");
Zeile gefunden : user_pref("extensions.delta_i.babTrack", "affID=121151&tsp=4997");
Zeile gefunden : user_pref("extensions.delta_i.srcExt", "ss");
Zeile gefunden : user_pref("extensions.incredibar.actvtyRptTime", "1363638476591");
Zeile gefunden : user_pref("extensions.incredibar.admin", false);
Zeile gefunden : user_pref("extensions.incredibar.aflt", "orgnl");
Zeile gefunden : user_pref("extensions.incredibar.afterInstallRpt", "sent");
Zeile gefunden : user_pref("extensions.incredibar.cntry", "DE");
Zeile gefunden : user_pref("extensions.incredibar.dfltlng", "EN");
Zeile gefunden : user_pref("extensions.incredibar.dfltsrch", "false");
Zeile gefunden : user_pref("extensions.incredibar.did", "10657");
Zeile gefunden : user_pref("extensions.incredibar.envrmnt", "production");
Zeile gefunden : user_pref("extensions.incredibar.excTlbr", false);
Zeile gefunden : user_pref("extensions.incredibar.hdrMd5", "BCFE973D14060367BED6CA4FCFF3BAFC");
Zeile gefunden : user_pref("extensions.incredibar.hmpg", false);
Zeile gefunden : user_pref("extensions.incredibar.hrdid", "5cb91d6700000000000000215d282acc");
Zeile gefunden : user_pref("extensions.incredibar.id", "5cb91d6700000000000000215d282acc");
Zeile gefunden : user_pref("extensions.incredibar.installerproductid", "26");
Zeile gefunden : user_pref("extensions.incredibar.instlday", "15647");
Zeile gefunden : user_pref("extensions.incredibar.instlref", "");
Zeile gefunden : user_pref("extensions.incredibar.isdcmntcmplt", "false");
Zeile gefunden : user_pref("extensions.incredibar.keywordurl", "");
Zeile gefunden : user_pref("extensions.incredibar.lastVrsnTs", "1.5.11.1419:23:53");
Zeile gefunden : user_pref("extensions.incredibar.mntrvrsn", "1.2.0");
Zeile gefunden : user_pref("extensions.incredibar.newtab", "false");
Zeile gefunden : user_pref("extensions.incredibar.newtaburl", "");
Zeile gefunden : user_pref("extensions.incredibar.noFFXTlbr", false);
Zeile gefunden : user_pref("extensions.incredibar.ppd", "");
Zeile gefunden : user_pref("extensions.incredibar.prdct", "incredibar");
Zeile gefunden : user_pref("extensions.incredibar.productid", "26");
Zeile gefunden : user_pref("extensions.incredibar.prtnrid", "Incredibar");
Zeile gefunden : user_pref("extensions.incredibar.sg", "none");
Zeile gefunden : user_pref("extensions.incredibar.smplgrp", "none");
Zeile gefunden : user_pref("extensions.incredibar.srch", "");
Zeile gefunden : user_pref("extensions.incredibar.srchprvdr", "");
Zeile gefunden : user_pref("extensions.incredibar.tlbrid", "base");
Zeile gefunden : user_pref("extensions.incredibar.tlbrsrchurl", "hxxp://mystart.Incredibar.com/?a=6OyT6du3R0&loc=IB_TB&i=26&search=");
Zeile gefunden : user_pref("extensions.incredibar.upn2", "6OyT6du3R0");
Zeile gefunden : user_pref("extensions.incredibar.upn2n", "92262389162448322");
Zeile gefunden : user_pref("extensions.incredibar.vrsn", "1.5.11.14");
Zeile gefunden : user_pref("extensions.incredibar.vrsni", "1.5.11.14");
Zeile gefunden : user_pref("extensions.incredibar.vrsnts", "1.5.11.1419:23:53");
Zeile gefunden : user_pref("extensions.incredibar_i.aflt", "orgnl");
Zeile gefunden : user_pref("extensions.incredibar_i.dfltLng", "");
Zeile gefunden : user_pref("extensions.incredibar_i.did", "10657");
Zeile gefunden : user_pref("extensions.incredibar_i.excTlbr", false);
Zeile gefunden : user_pref("extensions.incredibar_i.id", "5cb91d6700000000000000215d282acc");
Zeile gefunden : user_pref("extensions.incredibar_i.installerproductid", "26");
Zeile gefunden : user_pref("extensions.incredibar_i.instlDay", "15647");
Zeile gefunden : user_pref("extensions.incredibar_i.instlRef", "");
Zeile gefunden : user_pref("extensions.incredibar_i.ms_url_id", "");
Zeile gefunden : user_pref("extensions.incredibar_i.newTab", false);
Zeile gefunden : user_pref("extensions.incredibar_i.ppd", "");
Zeile gefunden : user_pref("extensions.incredibar_i.prdct", "incredibar");
Zeile gefunden : user_pref("extensions.incredibar_i.productid", "26");
Zeile gefunden : user_pref("extensions.incredibar_i.prtnrId", "Incredibar");
Zeile gefunden : user_pref("extensions.incredibar_i.smplGrp", "none");
Zeile gefunden : user_pref("extensions.incredibar_i.tlbrId", "base");
Zeile gefunden : user_pref("extensions.incredibar_i.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6OyT6du3R0&loc=IB_TB&i=26&search=");
Zeile gefunden : user_pref("extensions.incredibar_i.upn2", "6OyT6du3R0");
Zeile gefunden : user_pref("extensions.incredibar_i.upn2n", "92262389162448322");
Zeile gefunden : user_pref("extensions.incredibar_i.vrsn", "1.5.11.14");
Zeile gefunden : user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.1419:23:53");
Zeile gefunden : user_pref("extensions.incredibar_i.vrsni", "1.5.11.14");

-\\ Google Chrome v

[ Datei : C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gefunden : homepage
Gefunden : urls_to_restore_on_startup
Gefunden : homepage
Gefunden : urls_to_restore_on_startup

*************************

AdwCleaner[R0].txt - [42120 octets] - [02/11/2013 19:00:25]
AdwCleaner[R1].txt - [40676 octets] - [02/11/2013 19:18:19]
AdwCleaner[R2].txt - [40535 octets] - [02/11/2013 19:27:09]
AdwCleaner[S0].txt - [1861 octets] - [02/11/2013 19:11:20]
AdwCleaner[S1].txt - [352 octets] - [02/11/2013 19:20:37]

########## EOF - C:\AdwCleaner\AdwCleaner[R2].txt - [40715 octets] ##########

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.7 (10.15.2013:2)
OS: Windows Vista (TM) Home Premium x86
Ran by Alex on 02.11.2013 at 20:02:22,35
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services

Successfully stopped: [Service] suite service 
Successfully deleted: [Service] suite service 



~~~ Registry Values




~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\extension.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\icq service.exe
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{9AFB8248-617F-460D-9366-D71CDEDA3179}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{CA17D76B-F91D-4659-A7FD-A9F7ED375CDD}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\babsolution
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\delta
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\im
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\iminstaller
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\installedbrowserextensions
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\wnlt
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\yahoopartnertoolbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\conduit
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\crossrider
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3113985616-2469985149-2520824957-1000\Software\IB Updater
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3113985616-2469985149-2520824957-1000\Software\SweetIM
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\babylon
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\conduit
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\delta
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\ib updater
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\iminent
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\wnlt
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\bbylntlbr.bbylntlbrhlpr
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\bbylntlbr.bbylntlbrhlpr.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\extension.extensionhelperobject
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\extension.extensionhelperobject.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\facemoods.facemoodshlpr
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\facemoods.facemoodshlpr.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\icqtoolbar.iehook
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\icqtoolbar.iehook.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\imside1egate.application.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\prod.cap
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\sweetie.sweetie
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\icqtoolbar
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\searchanonymizer
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\wnlt
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{336d0c35-8a85-403a-b9d2-65c292c39087}_is1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220322432230}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660366436630}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660366436630}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{4B78FF6C-CD95-4570-AFAE-6DC61503728C}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{54713C1F-D465-47F1-8382-176EAA1F3813}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{2AE3BAEB-EC5F-1CBF-7560-21B45D413D4E}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{8D7BCC95-4B3A-4597-B533-7B32EBE22488}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403A-B9D2-65C292C39087}



~~~ Files

Successfully deleted: [File] "C:\Users\Alex\appdata\local\funmoods-speeddial.crx"
Successfully deleted: [File] "C:\Users\Alex\appdata\locallow\SkwConfig.bin"
Successfully deleted: [File] "C:\Windows\system32\imhttpcomm.dll"



~~~ Folders

Failed to delete: [Folder] "C:\ProgramData\fighters"
Failed to delete: [Folder] "C:\ProgramData\application data\fighters"
Successfully deleted: [Folder] "C:\Users\Alex\AppData\Roaming\big fish games"
Failed to delete: [Folder] "C:\Users\Alex\AppData\Roaming\fighters"
Successfully deleted: [Folder] "C:\Users\Alex\AppData\Roaming\opencandy"
Successfully deleted: [Folder] "C:\Users\Alex\AppData\Roaming\software4u"
Failed to delete: [Folder] "C:\Program Files\fighters"
Successfully deleted: [Folder] "C:\Users\Alex\AppData\Roaming\microsoft\windows\start menu\programs\browserprotect"
Successfully deleted: [Folder] "C:\Windows\system32\ai_recyclebin"



~~~ FireFox

Successfully deleted: [File] C:\user.js
Successfully deleted: [File] C:\Users\Alex\AppData\Roaming\mozilla\firefox\profiles\0gtve0a5.default\bprotector_extensions.sqlite
Successfully deleted: [File] C:\Users\Alex\AppData\Roaming\mozilla\firefox\profiles\0gtve0a5.default\bprotector_prefs.js
Successfully deleted: [File] C:\Users\Alex\AppData\Roaming\mozilla\firefox\profiles\0gtve0a5.default\invalidprefs.js
Successfully deleted: [File] C:\Users\Alex\AppData\Roaming\mozilla\firefox\profiles\0gtve0a5.default\searchplugins\babylon.xml
Successfully deleted: [File] C:\Users\Alex\AppData\Roaming\mozilla\firefox\profiles\0gtve0a5.default\searchplugins\browserprotect.xml
Successfully deleted: [File] C:\Users\Alex\AppData\Roaming\mozilla\firefox\profiles\0gtve0a5.default\searchplugins\delta.xml
Successfully deleted: [File] C:\Users\Alex\AppData\Roaming\mozilla\firefox\profiles\0gtve0a5.default\searchplugins\mystart search.xml
Successfully deleted: [Folder] C:\Users\Alex\AppData\Roaming\mozilla\firefox\profiles\0gtve0a5.default\conduitcommon
Successfully deleted: [Folder] C:\Users\Alex\AppData\Roaming\mozilla\firefox\profiles\0gtve0a5.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com
Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions\\{336d0c35-8a85-403a-b9d2-65c292c39087}
Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions\\{acaa314b-eeba-48e4-ad47-84e31c44796c}
Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions\\{fe1deeea-db6d-44b8-83f0-34fc0f9d1052}
Successfully deleted the following from C:\Users\Alex\AppData\Roaming\mozilla\firefox\profiles\0gtve0a5.default\prefs.js

user_pref("CT2269050.UserID", "UN40615104017446870");
user_pref("CT2269050.WeatherNetwork", "");
user_pref("CT2269050.WeatherPollDate", "Mon Sep 27 2010 22:02:24 GMT+0200");
user_pref("CT2269050.WeatherUnit", "C");
user_pref("CT2269050.alertChannelId", "666138");
user_pref("CT2269050.clientLogIsEnabled", true);
user_pref("CT2269050.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
user_pref("CT2269050.myStuffEnabled", true);
user_pref("CT2269050.myStuffPublihserMinWidth", 400);
user_pref("CT2269050.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
user_pref("CT2269050.myStuffServiceIntervalMM", 1440);
user_pref("CT2269050.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
user_pref("CT2269050.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
user_pref("CT3196716..clientLogIsEnabled", true);
user_pref("CT3196716..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
user_pref("CT3196716..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
user_pref("CT3196716.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
user_pref("CT3196716.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
user_pref("CT3196716.BrowserCompStateIsOpen_129774122767598898", true);
user_pref("CT3196716.BrowserCompStateIsOpen_2889679176695299247", true);
user_pref("CT3196716.CT3196716", "CT3196716");
user_pref("CT3196716.CurrentServerDate", "27-10-2012");
user_pref("CT3196716.DSInstall", false);
user_pref("CT3196716.DialogsAlignMode", "LTR");
user_pref("CT3196716.DialogsGetterLastCheckTime", "Thu Oct 25 2012 21:26:43 GMT+0200");
user_pref("CT3196716.DownloadReferralCookieData", "");
user_pref("CT3196716.EMailNotifierPollDate", "Sun Jul 15 2012 22:20:23 GMT+0200");
user_pref("CT3196716.ExternalComponentPollDate129844885932217004", "Sun Jul 15 2012 22:14:56 GMT+0200");
user_pref("CT3196716.ExternalComponentPollDate129844885932373254", "Sun Jul 15 2012 22:14:56 GMT+0200");
user_pref("CT3196716.FirstServerDate", "15-7-2012");
user_pref("CT3196716.FirstTime", true);
user_pref("CT3196716.FirstTimeFF3", true);
user_pref("CT3196716.FirstTimeHiddenVer", true);
user_pref("CT3196716.FixPageNotFoundErrors", true);
user_pref("CT3196716.GroupingServerCheckInterval", 1440);
user_pref("CT3196716.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
user_pref("CT3196716.HPInstall", false);
user_pref("CT3196716.HasUserGlobalKeys", true);
user_pref("CT3196716.HomePageProtectorEnabled", false);
user_pref("CT3196716.HomepageBeforeUnload", "about:home");
user_pref("CT3196716.Initialize", true);
user_pref("CT3196716.InitializeCommonPrefs", true);
user_pref("CT3196716.InstallationAndCookieDataSentCount", 3);
user_pref("CT3196716.InstallationType", "Unknown");
user_pref("CT3196716.InstalledDate", "Sun Jul 15 2012 22:15:02 GMT+0200");
user_pref("CT3196716.InvalidateCache", false);
user_pref("CT3196716.IsAlertDBUpdated", true);
user_pref("CT3196716.IsGrouping", false);
user_pref("CT3196716.IsInitSetupIni", true);
user_pref("CT3196716.IsMulticommunity", false);
user_pref("CT3196716.IsOpenThankYouPage", true);
user_pref("CT3196716.IsOpenUninstallPage", true);
user_pref("CT3196716.IsProtectorsInit", true);
user_pref("CT3196716.LanguagePackLastCheckTime", "Sat Oct 27 2012 07:46:23 GMT+0200");
user_pref("CT3196716.LanguagePackReloadIntervalMM", 1440);
user_pref("CT3196716.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
user_pref("CT3196716.LastLogin_3.13.0.6", "Mon Oct 29 2012 14:13:35 GMT+0100");
user_pref("CT3196716.LatestVersion", "3.13.0.6");
user_pref("CT3196716.Locale", "en");
user_pref("CT3196716.MCDetectTooltipHeight", "83");
user_pref("CT3196716.MCDetectTooltipShow", false);
user_pref("CT3196716.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
user_pref("CT3196716.MCDetectTooltipWidth", "295");
user_pref("CT3196716.MyStuffEnabledAtInstallation", true);
user_pref("CT3196716.OriginalFirstVersion", "3.13.0.6");
user_pref("CT3196716.RadioIsPodcast", false);
user_pref("CT3196716.RadioLastUpdateIPServer", "3");
user_pref("CT3196716.RadioLastUpdateServer", "3");
user_pref("CT3196716.RadioMediaID", "9962");
user_pref("CT3196716.RadioMediaType", "Media Player");
user_pref("CT3196716.RadioMenuSelectedID", "EBRadioMenu_CT31967169962");
user_pref("CT3196716.RadioShrinkedFromSetup", false);
user_pref("CT3196716.RadioStationName", "California%20Rock");
user_pref("CT3196716.RadioStationURL", "hxxp://feedlive.net/california.asx");
user_pref("CT3196716.SHRINK_TOOLBAR", 1);
user_pref("CT3196716.SearchBoxWidth", 100);
user_pref("CT3196716.SearchCaption", "WiseConvert Customized Web Search");
user_pref("CT3196716.SearchEngineBeforeUnload", "Google");
user_pref("CT3196716.SearchFromAddressBarIsInit", true);
user_pref("CT3196716.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3230026&SearchSource=2&q=");
user_pref("CT3196716.SearchInNewTabEnabled", true);
user_pref("CT3196716.SearchInNewTabIntervalMM", 1440);
user_pref("CT3196716.SearchInNewTabLastCheckTime", "Mon Oct 29 2012 07:50:02 GMT+0100");
user_pref("CT3196716.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
user_pref("CT3196716.SearchProtectorEnabled", false);
user_pref("CT3196716.SearchProtectorToolbarDisabled", false);
user_pref("CT3196716.SendProtectorDataViaLogin", true);
user_pref("CT3196716.ServiceMapLastCheckTime", "Thu Oct 25 2012 21:26:41 GMT+0200");
user_pref("CT3196716.SettingsLastCheckTime", "Fri Oct 26 2012 18:37:49 GMT+0200");
user_pref("CT3196716.SettingsLastUpdate", "1351096591");
user_pref("CT3196716.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT3230026&SearchSource=13");
user_pref("CT3196716.ThirdPartyComponentsInterval", 504);
user_pref("CT3196716.ThirdPartyComponentsLastCheck", "Sun Jul 15 2012 22:14:54 GMT+0200");
user_pref("CT3196716.ThirdPartyComponentsLastUpdate", "1331805997");
user_pref("CT3196716.ToolbarShrinkedFromSetup", false);
user_pref("CT3196716.TrusteLinkUrl", "hxxp://trust.conduit.com/CT3196716");
user_pref("CT3196716.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com
user_pref("CT3196716.UserID", "UN47860936281559931");
user_pref("CT3196716.ValidationData_Toolbar", 2);
user_pref("CT3196716.WeatherNetwork", "");
user_pref("CT3196716.WeatherPollDate", "Mon Jul 16 2012 12:11:17 GMT+0200");
user_pref("CT3196716.WeatherUnit", "C");
user_pref("CT3196716.alertChannelId", "1613210");
user_pref("CT3196716.approveUntrustedApps", false);
user_pref("CT3196716.backendstorage./9b+7e+x305", "247E27413334363379453A3D2A722C797A7E7A3128333B4D474549484C5952594B335E5356432C45333438334A414C546660576364676F6A5E4B766B6E5B
user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.backgroundjs", "\n\n/****************************************************
user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.internaldb.cache/530e52021dc20843b1aa62957edeb9f8.value", "%22var%20adsDe
user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.internaldb.cache/5cdf8a7ef2ec84abac286c67587b78d9.value", "%22function%20
user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.internaldb.cache/833447eaff04548ccb80787286a7cad9_DE.value", "%22var%20ca
user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.internaldb.cache/d5baae4ef839769f8eb7e9f9d82d8a40_DE.value", "%22var%20ca
user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.js", "\n\n  /************************************************************
user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_1.code", "appAPI._cr_config={appID:function(){var a=appAPI
user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_102.code", "if (typeof appAPI.internal.monetization === \"
user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_104.code", "if (typeof appAPI.internal.monetization === \"
user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_119.code", "if (typeof appAPI.internal.monetization === \"
user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_120.code", "if (typeof appAPI.internal.monetization === \"
user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_123.code", "if (typeof appAPI.internal.monetization === \"
user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_13.name", "CrossriderAppUtils");
user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_138.code", "if (typeof appAPI.internal.monetization === \"
user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_14.name", "CrossriderUtils");
user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_155.code", "if (typeof appAPI.internal.monetization === \"
user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_16.code", "if((typeof isBackground===\"undefined\"||isBack
user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_17.code", "if(typeof window!==\"undefined\"){\n/*!\n * jQu
user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_21.code", "var CrossriderDebugManager=(function(h){var f={
user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_22.code", "(function(a){appAPI.queueManager={queue:[],regi
user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_28.code", "var CrossriderInitializerPlugin=(function(e){va
user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_47.code", "(function(){appAPI.ready=function(a){appAPI.res
user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_78.name", "CrossriderInfo");
user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_87.code", "var CROSSRIDER_PLATFORM=true;var JQ=bbrsJQ=$jqu
user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_9.code", "appAPI.hooks.addHook(\"searchEngine\",(function(
user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_91.code", "(function(h){var p=(function(){var R=0;var Z=\"
user_pref("extensions.a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330.34330.plugins.plugin_92.code", "if(typeof appAPI.internal.monetization===\"unde
user_pref("extensions.crossrider.bic", "140f58599b5af439c21621dff21fc7d1");
user_pref("extensions.delta.admin", false);
user_pref("extensions.delta.aflt", "babsst");
user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
user_pref("extensions.delta.autoRvrt", "false");
user_pref("extensions.delta.dfltLng", "de");
user_pref("extensions.delta.excTlbr", false);
user_pref("extensions.delta.ffxUnstlRst", true);
user_pref("extensions.delta.id", "5cb91d6700000000000000215d282acc");
user_pref("extensions.delta.instlDay", "15954");
user_pref("extensions.delta.instlRef", "sst");
user_pref("extensions.delta.newTab", false);
user_pref("extensions.delta.prdct", "delta");
user_pref("extensions.delta.prtnrId", "delta");
user_pref("extensions.delta.rvrt", "false");
user_pref("extensions.delta.smplGrp", "none");
user_pref("extensions.delta.tlbrId", "base");
user_pref("extensions.delta.tlbrSrchUrl", "");
user_pref("extensions.delta.vrsn", "1.8.24.6");
user_pref("extensions.delta.vrsnTs", "1.8.24.61:03:25");
user_pref("extensions.delta.vrsni", "1.8.24.6");
user_pref("extensions.delta_i.babExt", "");
user_pref("extensions.delta_i.babTrack", "affID=121151&tsp=4997");
user_pref("extensions.delta_i.srcExt", "ss");
user_pref("extensions.incredibar.actvtyRptTime", "1363638476591");
user_pref("extensions.incredibar.admin", false);
user_pref("extensions.incredibar.aflt", "orgnl");
user_pref("extensions.incredibar.afterInstallRpt", "sent");
user_pref("extensions.incredibar.cntry", "DE");
user_pref("extensions.incredibar.dfltlng", "EN");
user_pref("extensions.incredibar.dfltsrch", "false");
user_pref("extensions.incredibar.did", "10657");
user_pref("extensions.incredibar.envrmnt", "production");
user_pref("extensions.incredibar.excTlbr", false);
user_pref("extensions.incredibar.hdrMd5", "BCFE973D14060367BED6CA4FCFF3BAFC");
user_pref("extensions.incredibar.hmpg", false);
user_pref("extensions.incredibar.hrdid", "5cb91d6700000000000000215d282acc");
user_pref("extensions.incredibar.id", "5cb91d6700000000000000215d282acc");
user_pref("extensions.incredibar.installerproductid", "26");
user_pref("extensions.incredibar.instlday", "15647");
user_pref("extensions.incredibar.instlref", "");
user_pref("extensions.incredibar.isdcmntcmplt", "false");
user_pref("extensions.incredibar.keywordurl", "");
user_pref("extensions.incredibar.lastVrsnTs", "1.5.11.1419:23:53");
user_pref("extensions.incredibar.mntrvrsn", "1.2.0");
user_pref("extensions.incredibar.newtab", "false");
user_pref("extensions.incredibar.newtaburl", "");
user_pref("extensions.incredibar.noFFXTlbr", false);
user_pref("extensions.incredibar.ppd", "");
user_pref("extensions.incredibar.prdct", "incredibar");
user_pref("extensions.incredibar.productid", "26");
user_pref("extensions.incredibar.prtnrid", "Incredibar");
user_pref("extensions.incredibar.sg", "none");
user_pref("extensions.incredibar.smplgrp", "none");
user_pref("extensions.incredibar.srch", "");
user_pref("extensions.incredibar.srchprvdr", "");
user_pref("extensions.incredibar.tlbrid", "base");
user_pref("extensions.incredibar.tlbrsrchurl", "hxxp://mystart.Incredibar.com/?a=6OyT6du3R0&loc=IB_TB&i=26&search=");
user_pref("extensions.incredibar.upn2", "6OyT6du3R0");
user_pref("extensions.incredibar.upn2n", "92262389162448322");
user_pref("extensions.incredibar.vrsn", "1.5.11.14");
user_pref("extensions.incredibar.vrsni", "1.5.11.14");
user_pref("extensions.incredibar.vrsnts", "1.5.11.1419:23:53");
user_pref("extensions.incredibar_i.aflt", "orgnl");
user_pref("extensions.incredibar_i.dfltLng", "");
user_pref("extensions.incredibar_i.did", "10657");
user_pref("extensions.incredibar_i.excTlbr", false);
user_pref("extensions.incredibar_i.id", "5cb91d6700000000000000215d282acc");
user_pref("extensions.incredibar_i.installerproductid", "26");
user_pref("extensions.incredibar_i.instlDay", "15647");
user_pref("extensions.incredibar_i.instlRef", "");
user_pref("extensions.incredibar_i.ms_url_id", "");
user_pref("extensions.incredibar_i.newTab", false);
user_pref("extensions.incredibar_i.ppd", "");
user_pref("extensions.incredibar_i.prdct", "incredibar");
user_pref("extensions.incredibar_i.productid", "26");
user_pref("extensions.incredibar_i.prtnrId", "Incredibar");
user_pref("extensions.incredibar_i.smplGrp", "none");
user_pref("extensions.incredibar_i.tlbrId", "base");
user_pref("extensions.incredibar_i.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6OyT6du3R0&loc=IB_TB&i=26&search=");
user_pref("extensions.incredibar_i.upn2", "6OyT6du3R0");
user_pref("extensions.incredibar_i.upn2n", "92262389162448322");
user_pref("extensions.incredibar_i.vrsn", "1.5.11.14");
user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.1419:23:53");
user_pref("extensions.incredibar_i.vrsni", "1.5.11.14");
Emptied folder: C:\Users\Alex\AppData\Roaming\mozilla\firefox\profiles\0gtve0a5.default\minidumps [42 files]



~~~ Chrome

Successfully deleted: [Folder] C:\Users\Alex\appdata\local\Google\Chrome\User Data\Default\Extensions\bbjciahceamgodcoidkjpchnokgfpphh
Successfully deleted: [Folder] C:\Users\Alex\appdata\local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj
Successfully deleted: [Folder] C:\Users\Alex\appdata\local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\ihflimipbcaljfnojhhknppphnnciiif



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 02.11.2013 at 20:12:16,91
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

alke84 · 02.11.2013, 20:35

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 31-10-2013
Ran by Alex (administrator) on ALEX-PC on 02-11-2013 20:30:19
Running from C:\Users\Alex\Desktop
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Agere Systems) C:\Windows\system32\agrsmsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Preventon Technologies Limited) C:\Program Files\Common Files\Common Toolkit Suite\AVEngine\AVScanningService.exe
(Preventon Technologies Limited) C:\Program Files\Common Files\Common Toolkit Suite\AVEngine\AVWatchService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(NewTech Infosystems, Inc.) C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
() C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
(Egis Incorporated) C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
() C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Acer\Mobility Center\MobilityService.exe
(NewTech InfoSystems, Inc.) C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
() C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
(SPAMfighter) C:\Program Files\Fighters\configservice.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Program Files\Verbindungsassistent\WTGService.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
(SPAMfighter) C:\Program Files\Fighters\licenseservice.exe
(SPAMfighter) C:\Program Files\Fighters\ScannerService.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Acer Inc.) C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
(Egis Incorporated) C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Realtek Semiconductor Corp.) C:\Users\Alex\AppData\Local\Temp\RtkBtMnt.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\QtZgAcer.EXE
() C:\Windows\PLFSetI.exe
(CyberLink Corp.) C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
(Nuance Communications, Inc.) C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(CANON INC.) C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE
(Mindjet) C:\Program Files\Mindjet\MindManager 10\MmReminderService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(SPAMfighter) C:\Program Files\Fighters\Spywarefighter\swproTray.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe
(Windows Net) C:\Users\Alex\AppData\Roaming\Windows Net Data\net.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Microsoft Corporation) C:\Windows\system32\wuauclt.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [6111232 2008-04-28] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1033512 2008-01-18] (Synaptics, Inc.)
HKLM\...\Run: [ePower_DMC] - C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe [397312 2008-04-23] (Acer Inc.)
HKLM\...\Run: [eDataSecurity Loader] - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe [526896 2008-03-04] (Egis Incorporated)
HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe [182808 2008-07-20] (Intel Corporation)
HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [NvMediaCenter] - RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [LManager] - C:\Program Files\Launch Manager\QtZgAcer.EXE [821768 2008-07-02] (Dritek System Inc.)
HKLM\...\Run: [PLFSetI] - C:\Windows\PLFSetI.exe [200704 2007-10-23] ()
HKLM\...\Run: [ArcadeDeluxeAgent] - C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [147456 2008-05-12] (CyberLink Corp.)
HKLM\...\Run: [PaperPort PTD] - C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe [30248 2007-01-29] (Nuance Communications, Inc.)
HKLM\...\Run: [IndexSearch] - C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe [46632 2007-01-29] (Nuance Communications, Inc.)
HKLM\...\Run: [Ocs_SM] - C:\Users\Alex\AppData\Roaming\OCS\SM\SearchAnonymizer.exe
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [AppleSyncNotifier] - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-10-06] (Apple Inc.)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE [2516296 2010-03-25] (CANON INC.)
HKLM\...\Run: [CanonSolutionMenuEx] - C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE [1185112 2010-04-02] (CANON INC.)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [MMReminderService] - C:\Program Files\Mindjet\MindManager 10\MmReminderService.exe [38248 2012-02-27] (Mindjet)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-02] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SWPROguard] - C:\Program Files\Fighters\Spywarefighter\swproTray.exe [1260072 2013-09-05] (SPAMfighter)
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehtray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [Facebook Update] - C:\Users\Alex\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-07-11] (Facebook Inc.)
HKCU\...\Run: [iCloudServices] - C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-04-05] (Apple Inc.)
HKCU\...\Policies\system: [SetVisualStyle] C:\Windows\Resources\Themes\LeopardXP\LeopardXP.msstyles
MountPoints2: {02141672-00de-11e1-978f-806e6f6e6963} - F:\AutoRun.exe
MountPoints2: {03148b35-f8df-11e0-bcee-001e101fe5e1} - F:\AutoRun.exe
MountPoints2: {09b79876-3d0f-11e1-80a6-001e101fd318} - F:\AutoRun.exe
MountPoints2: {2fce6223-ffef-11e0-81ee-001e101faa49} - F:\AutoRun.exe
MountPoints2: {3da9af4a-c80e-11df-8227-001e101f82a0} - F:\AutoRun.exe
MountPoints2: {46abbcf6-38fd-11e0-9ad5-001e101f28bb} - F:\AutoRun.exe
MountPoints2: {47f029b6-fb4a-11e0-8c8a-00238b457b84} - F:\AutoRun.exe
MountPoints2: {47f029db-fb4a-11e0-8c8a-001e101f8924} - F:\AutoRun.exe
MountPoints2: {516e8001-ee02-11e0-a258-001e101fbcad} - F:\AutoRun.exe
MountPoints2: {516e800c-ee02-11e0-a258-001e101f1c31} - F:\AutoRun.exe
MountPoints2: {77dfa36a-b77d-11df-8683-00238b457b84} - F:\AutoRun.exe
MountPoints2: {77dfa379-b77d-11df-8683-001e101f6c46} - F:\AutoRun.exe
MountPoints2: {89f3b39e-08d8-11df-b2d9-00238b457b84} - F:\AutoRun.exe
MountPoints2: {89f3b3b1-08d8-11df-b2d9-00238b457b84} - F:\AutoRun.exe
MountPoints2: {89f3b3b4-08d8-11df-b2d9-00238b457b84} - F:\AutoRun.exe
MountPoints2: {89f3b3b5-08d8-11df-b2d9-00238b457b84} - F:\AutoRun.exe
MountPoints2: {8b6200b2-4b50-11e1-be24-806e6f6e6963} - F:\AutoRun.exe
MountPoints2: {92980d58-daba-11de-baf9-00238b457b84} - RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\ise.exe
MountPoints2: {aa42383d-d7fb-11e0-bbc8-00238b457b84} - F:\AutoRun.exe
MountPoints2: {aa42384a-d7fb-11e0-bbc8-001e101f6c46} - F:\AutoRun.exe
MountPoints2: {b472a84d-0d01-11e0-b426-00238b457b84} - F:\AutoRun.exe
MountPoints2: {b472a85c-0d01-11e0-b426-001e101f2500} - F:\AutoRun.exe
MountPoints2: {bf795ff7-41c3-11e1-a3ff-001e101f4c53} - F:\AutoRun.exe
MountPoints2: {bf796007-41c3-11e1-a3ff-001e101fdb29} - F:\AutoRun.exe
MountPoints2: {bf796032-41c3-11e1-a3ff-001e101f4ec0} - F:\AutoRun.exe
MountPoints2: {bf796053-41c3-11e1-a3ff-001e101faa12} - F:\AutoRun.exe
MountPoints2: {dd42a890-11b6-11e0-a735-001e101f4da1} - F:\AutoRun.exe
MountPoints2: {f9054dc7-03ba-11e1-a1f6-001e101f1c31} - F:\AutoRun.exe
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default\...\RunOnce: [AcerScrSav] - C:\Windows\ACER\run_NB.exe [ 2007-08-21] ()
HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default User\...\RunOnce: [AcerScrSav] - C:\Windows\ACER\run_NB.exe [ 2007-08-21] ()
HKU\Gast\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Laptopgast\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
AppInit_DLLs: c:\progra~1\google\google~1\goec62~1.dll  [ 2010-07-21] (Google)
Startup: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk
ShortcutTarget: net.lnk -> C:\Users\Alex\AppData\Roaming\Windows Net Data\net.exe (Windows Net)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=1108&m=aspire_7730g
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://global.acer.com
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
HKCU\Software\Microsoft\Internet Explorer\Main,Backup.Old.Start Page = hxxp://search.babylon.com/?affID=114347&tt=2912_2&babsrc=HP_ss&mntrId=5cb91d6700000000000000215d282acc
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=1108&m=aspire_7730g
URLSearchHook: HKLM - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
URLSearchHook: HKLM - ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll No File
URLSearchHook: HKLM - Softonic Deutsch Toolbar - {8dbb6d8e-e4a6-4e3b-9753-af78b226441c} - C:\Program Files\Softonic_Deutsch\tbSof1.dll No File
URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.
URLSearchHook: HKCU - ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll No File
URLSearchHook: HKCU - Softonic Deutsch Toolbar - {8dbb6d8e-e4a6-4e3b-9753-af78b226441c} - C:\Program Files\Softonic_Deutsch\tbSof1.dll No File
URLSearchHook: HKCU - (No Name) - {EEE6C35D-6118-11DC-9C72-001320C79847} -  No File
SearchScopes: HKLM - DefaultScope {8D7BCC95-4B3A-4597-B533-7B32EBE22488} URL = 
SearchScopes: HKLM - Backup.Old.DefaultScope {8D7BCC95-4B3A-4597-B533-7B32EBE22488}
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E62696E672E636F6D2F7365617263683F713D7B7365617263685465726D737D26464F524D3D4945464D31267372633D49452D536561726368426F78&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&k=0
SearchScopes: HKCU - Backup.Old.DefaultScope {54713C1F-D465-47F1-8382-176EAA1F3813}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E62696E672E636F6D2F7365617263683F713D7B7365617263685465726D737D26464F524D3D4945464D31267372633D49452D536561726368426F78&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&k=0
SearchScopes: HKCU - {27726C1C-CF69-47D9-BD1A-8DBB778AE9D2} URL = hxxp://www.amazon.de.anonymize-me.de/?to=616D617A6F6E2E6465&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&mode=bounce&k=0
SearchScopes: HKCU - {2AE3BAEB-EC5F-1CBF-7560-21B45D413D4E} URL = hxxp://suche.web.de.anonymize-me.de/?anonymto=687474703A2F2F73756368652E7765622E64652F7365617263682F7765622F3F73753D7B7365617263685465726D737D266F726967696E3D736561726368706C7567696E&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&k=0
SearchScopes: HKCU - {3AD490B8-D40F-4AB8-8725-7B6244459192} URL = hxxp://www.otto.de.anonymize-me.de/?to=6F74746F2E6465&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&mode=bounce&k=0
SearchScopes: HKCU - {3F59BD55-657C-4EAD-B813-2F0FA438AF2D} URL = hxxp://wa.ui-portal.de.anonymize-me.de/?anonymto=687474703A2F2F77612E75692D706F7274616C2E64652F77656264652F77656264652F733F70726F64756B74652E62726F777365722E6C696E6B2E65626179737563686526735F6272616E643D776562646526745F6C696E6B3D656261797375636865266E735F747970653D636C69636B696E266E735F75726C3D687474703A2F2F726F7665722E656261792E636F6D2F726F7665722F312F3730372D35323232322D33303034302D352F343F6D7072653D687474703A2F2F73686F702E656261792E64652F3F5F73616361743D5365652D416C6C2D43617465676F72696573265F6E6B773D7B7365617263685465726D737D&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&k=0
SearchScopes: HKCU - {450335E3-46CE-4631-9EEC-DC03C37E9996} URL = hxxp://search.ebay.de.anonymize-me.de/?to=656261792E6465&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&mode=bounce&k=0
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKCU - {650D5E8F-32EB-4FB5-B9DE-D94B04BC2A31} URL = hxxp://www.pricerunner.de.anonymize-me.de/?to=707269636572756E6E65722E6465&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&mode=bounce&k=0
SearchScopes: HKCU - {6677EF97-820F-4089-9D4B-2B07E787A1B1} URL = hxxp://www.myvideo.de.anonymize-me.de/?to=6D79766964656F2E6465&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&mode=bounce&k=0
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 
SearchScopes: HKCU - {6E205779-C388-4D4C-8A01-131B2298E770} URL = hxxp://go.web.de.anonymize-me.de/?anonymto=687474703A2F2F676F2E7765622E64652F73756368626F782F69655F616D617A6F6E2F3F6B6579776F7264733D7B7365617263685465726D737D&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&k=0
SearchScopes: HKCU - {BE8C0C72-CB24-4B08-A532-54ECB968995B} URL = hxxp://de.wikipedia.org.anonymize-me.de/?to=64652E77696B6970656469612E6F7267&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&mode=bounce&k=0
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: CBAbzockschutz.InitToolbarBHO - {2e250b90-0e7a-42a3-9d65-e39f9f227fa4} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
BHO: CmjBrowserHelperObject Object - {6FE6A929-59D1-4763-91AD-29B61CFFB35B} - C:\Program Files\Mindjet\MindManager 10\Mm8InternetExplorer.dll (Mindjet)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Softonic Deutsch Toolbar - {8dbb6d8e-e4a6-4e3b-9753-af78b226441c} - C:\Program Files\Softonic_Deutsch\tbSof1.dll No File
BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
BHO: Loader Class - {F880A4A8-C436-4AC4-AFD1-AA0BDC9552DD} -  No File
Toolbar: HKLM - No Name - {0BF43445-2F28-4351-9252-17FE6E806AA0} -  No File
Toolbar: HKLM - Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)
Toolbar: HKLM - COMPUTERBILD-Abzockschutz - {353e2a48-6254-4bd3-88f4-3b51a0ca7870} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM - ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll No File
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKCU - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} -  No File
Toolbar: HKCU - Softonic Deutsch Toolbar - {8DBB6D8E-E4A6-4E3B-9753-AF78B226441C} - C:\Program Files\Softonic_Deutsch\tbSof1.dll No File
Toolbar: HKCU - No Name - {472734EA-242A-422B-ADF8-83D1E48CC825} -  No File
Toolbar: HKCU - &Address - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\System32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU - &Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\Windows\System32\shell32.dll (Microsoft Corporation)
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File
Toolbar: HKCU - No Name - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} -  No File
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @canon.com/EPPEX - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin: @ei.SmileyCentral_1v.com/Plugin - C:\Program Files\SmileyCentral_1vEI\Installr\2.bin\NP1vEISB.dll (SmileyCentral)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.3 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Alex\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-1.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-10.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-11.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-12.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-13.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-2.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-3.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-4.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-5.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-6.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-7.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-8.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-9.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\fcmdSrchstonicde.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: pricealarm - C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM
FF Extension: Adblock Plus - C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: ICQ Toolbar - C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

Chrome: 
=======
CHR Extension: (Docs) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0
CHR Extension: (Google Drive) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0
CHR Extension: (YouTube) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: () - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmlgoencnlndpglbocajlimaikjohmab\background.html
CHR Extension: (Plus-HD-3.2) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.23.14_0
CHR Extension: (Gmail) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-09-02] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-02] (Avira Operations GmbH & Co. KG)
R2 CLHNService; C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe [81504 2008-01-16] ()
R2 ETService; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [24576 2008-03-21] ()
S3 GoogleDesktopManager-051210-111108; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-07-21] (Google)
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MobilityService; C:\Acer\Mobility Center\MobilityService.exe [110592 2007-12-06] ()
R2 NTISchedulerSvc; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [131072 2008-04-04] ()
R2 PTK License-FIGHTERS-297811811; C:\Program Files\Fighters\licenseservice.exe [283272 2008-11-18] (SPAMfighter)
R2 PTK Scanner-FIGHTERS-297811811; C:\Program Files\Fighters\ScannerService.exe [311944 2008-11-18] (SPAMfighter)
R2 PTK SharedAccess-FIGHTERS-297811811; C:\Program Files\Fighters\configservice.exe [139912 2008-11-18] (SPAMfighter)
S3 TuneUp.Defrag; C:\Windows\System32\TuneUpDefragService.exe [361728 2013-11-01] (TuneUp Software GmbH)
S2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [1723744 2012-11-29] (TuneUp Software)
R2 WTGService; C:\Program Files\Verbindungsassistent\WTGService.exe [296400 2009-03-03] ()
R2 AV Engine Scanning Service; C:/Program Files/Common Files/Common Toolkit Suite/AVEngine/AVScanningService.exe [x]
R2 AV Watch Service; C:/Program Files/Common Files/Common Toolkit Suite/AVEngine/AVWatchService.exe [x]
S2 PTK Live Update-FIGHTERS-297811811; C:\Program Files\Fighters\updateservice.exe [x]

==================== Drivers (Whitelisted) ====================

S3 AVFSFilter; C:\Windows\System32\DRIVERS\avfsfilter.sys [10264 2013-09-05] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-09-02] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-09-02] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-04-02] (Avira Operations GmbH & Co. KG)
R2 int15; C:\Windows\system32\drivers\int15.sys [15392 2008-03-21] (Acer, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R2 NTIPPKernel; C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\NTIPPKernel.sys [122368 2008-01-16] (Cyberlink Corp.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
S3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [10088 2012-11-16] (TuneUp Software)
R3 Vfscan; C:\Windows\System32\DRIVERS\vffilter.sys [15496 2008-11-18] ()
R3 winbondcir; C:\Windows\System32\DRIVERS\winbondcir.sys [43008 2007-03-28] (Winbond Electronics Corporation)
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files\Acer Arcade Deluxe\PlayMovie\000.fcl [61424 2008-05-09] (Cyberlink Corp.)
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-02 20:31 - 2013-11-02 20:31 - 00040776 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamswissarmy.sys
2013-11-02 20:12 - 2013-11-02 20:12 - 00028265 _____ C:\Users\Alex\Desktop\JRT.txt
2013-11-02 19:43 - 2013-11-02 19:43 - 00000000 ____D C:\Windows\ERUNT
2013-11-02 19:42 - 2013-11-02 19:42 - 01033335 _____ (Thisisu) C:\Users\Alex\Desktop\JRT.exe
2013-11-02 19:28 - 2013-11-02 19:28 - 00040796 _____ C:\Users\Alex\Desktop\AdwCleaner[R2].txt
2013-11-02 18:59 - 2013-11-02 19:28 - 00000000 ____D C:\AdwCleaner
2013-11-02 18:58 - 2013-11-02 18:58 - 01060070 _____ C:\Users\Alex\Desktop\adwcleaner.exe
2013-11-02 10:15 - 2013-11-02 15:02 - 00001029 _____ C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2013-11-02 10:15 - 2013-11-02 10:15 - 00000000 ____D C:\Users\Alex\AppData\Local\VS Revo Group
2013-11-02 10:15 - 2013-11-02 10:15 - 00000000 ____D C:\ProgramData\VS Revo Group
2013-11-02 10:15 - 2013-11-02 10:15 - 00000000 ____D C:\Program Files\VS Revo Group
2013-11-02 10:15 - 2009-12-30 11:21 - 00027192 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys
2013-11-02 10:14 - 2013-11-02 10:14 - 10031224 _____ (VS Revo Group                                               ) C:\Users\Alex\Desktop\RevoUninProSetup.exe
2013-11-02 09:41 - 2013-09-22 11:29 - 12336128 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-02 09:41 - 2013-09-22 11:22 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-02 09:41 - 2013-09-22 11:22 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-02 09:41 - 2013-09-22 11:14 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-02 09:41 - 2013-09-22 11:13 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-02 09:41 - 2013-09-22 11:13 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-02 09:41 - 2013-09-22 11:12 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-02 09:41 - 2013-09-22 11:09 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-02 09:41 - 2013-09-22 11:08 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-02 09:41 - 2013-09-22 11:07 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-02 09:41 - 2013-09-22 11:06 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-02 09:41 - 2013-09-22 11:05 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-02 09:41 - 2013-09-22 11:03 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-02 09:41 - 2013-09-22 11:03 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-02 09:41 - 2013-09-22 11:03 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-02 09:41 - 2013-09-22 10:59 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-01 20:41 - 2013-11-01 20:41 - 00000000 ____D C:\FRST
2013-11-01 20:40 - 2013-11-01 20:40 - 01957098 _____ (Farbar) C:\Users\Alex\Desktop\FRST64.exe
2013-11-01 20:40 - 2013-11-01 20:40 - 01089445 _____ (Farbar) C:\Users\Alex\Desktop\FRST.exe
2013-11-01 20:12 - 2013-11-01 20:12 - 00000000 ____D C:\Users\Alex\AppData\Roaming\ParetoLogic
2013-11-01 20:10 - 2013-11-01 20:11 - 05249448 _____ (ParetoLogic Inc.) C:\Users\Alex\Desktop\ParetoLogic PC Health Advisor_de.exe
2013-11-01 19:52 - 2013-11-01 19:52 - 00018041 _____ C:\Users\Alex\Desktop\hijackthis.log
2013-11-01 19:50 - 2013-11-01 19:50 - 00388608 _____ (Trend Micro Inc.) C:\Users\Alex\Desktop\hijackthis_5833.exe
2013-11-01 19:43 - 2008-05-29 08:28 - 00028416 _____ (TuneUp Software GmbH) C:\Windows\system32\uxtuneup.dll
2013-11-01 19:43 - 2008-05-29 08:28 - 00016640 _____ (TuneUp Software GmbH) C:\Windows\system32\authuitu.dll
2013-11-01 16:10 - 2013-08-29 08:36 - 02050048 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-11-01 16:10 - 2013-07-12 10:04 - 00134272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-11-01 16:10 - 2013-07-04 05:21 - 00532480 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-11-01 16:10 - 2013-07-03 03:33 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2013-11-01 16:10 - 2013-07-03 03:10 - 00025472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-11-01 16:10 - 2013-06-29 03:07 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-11-01 16:10 - 2013-06-29 03:07 - 00197632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-11-01 16:10 - 2013-06-29 03:07 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-11-01 16:10 - 2013-06-29 03:06 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-11-01 16:10 - 2013-06-27 00:01 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-11-01 16:10 - 2013-06-04 05:16 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-11-01 16:10 - 2013-06-04 02:49 - 00293376 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-11-01 16:10 - 2011-05-05 14:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-11-01 16:10 - 2011-05-05 14:54 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-11-01 15:53 - 2013-11-01 15:53 - 104535026 _____ C:\Windows\system32\矨郤ဴ–
2013-11-01 15:33 - 2013-11-01 15:44 - 00000000 ____D C:\Users\Alex\Desktop\Bilder November 2013 iPhone

==================== One Month Modified Files and Folders =======

2013-11-02 20:31 - 2013-11-02 20:31 - 00040776 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamswissarmy.sys
2013-11-02 20:12 - 2013-11-02 20:12 - 00028265 _____ C:\Users\Alex\Desktop\JRT.txt
2013-11-02 20:06 - 2013-09-26 17:52 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Fighters
2013-11-02 20:06 - 2009-10-25 12:24 - 00000000 ____D C:\ProgramData\Fighters
2013-11-02 20:06 - 2009-10-25 12:24 - 00000000 ____D C:\Program Files\Fighters
2013-11-02 20:05 - 2008-11-29 23:42 - 01350599 _____ C:\Windows\WindowsUpdate.log
2013-11-02 20:05 - 2008-01-21 08:16 - 01454146 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-02 19:59 - 2010-04-17 08:55 - 00001090 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-02 19:59 - 2009-01-07 14:21 - 00138840 _____ C:\ProgramData\nvModes.001
2013-11-02 19:59 - 2008-11-29 23:53 - 00000000 _____ C:\Windows\system32\LogConfigTemp.xml
2013-11-02 19:59 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-02 19:59 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-02 19:58 - 2008-10-31 22:49 - 00000147 _____ C:\Windows\system32\agent.log
2013-11-02 19:58 - 2008-01-21 03:47 - 12981958 _____ C:\Windows\PFRO.log
2013-11-02 19:58 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-02 19:57 - 2006-11-02 14:01 - 00032516 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-11-02 19:47 - 2013-08-27 16:02 - 00000000 ____D C:\Program Files\TuneUp Utilities 2013
2013-11-02 19:43 - 2013-11-02 19:43 - 00000000 ____D C:\Windows\ERUNT
2013-11-02 19:43 - 2012-04-08 11:28 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-02 19:43 - 2010-04-17 08:55 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-02 19:42 - 2013-11-02 19:42 - 01033335 _____ (Thisisu) C:\Users\Alex\Desktop\JRT.exe
2013-11-02 19:28 - 2013-11-02 19:28 - 00040796 _____ C:\Users\Alex\Desktop\AdwCleaner[R2].txt
2013-11-02 19:28 - 2013-11-02 18:59 - 00000000 ____D C:\AdwCleaner
2013-11-02 19:11 - 2009-01-08 07:35 - 00000000 ____D C:\ProgramData\ICQ
2013-11-02 19:01 - 2011-09-04 21:57 - 00001134 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3113985616-2469985149-2520824957-1000UA.job
2013-11-02 18:58 - 2013-11-02 18:58 - 01060070 _____ C:\Users\Alex\Desktop\adwcleaner.exe
2013-11-02 15:02 - 2013-11-02 10:15 - 00001029 _____ C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2013-11-02 10:23 - 2011-09-04 21:57 - 00001112 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3113985616-2469985149-2520824957-1000Core.job
2013-11-02 10:22 - 2006-11-02 13:47 - 00455136 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-02 10:15 - 2013-11-02 10:15 - 00000000 ____D C:\Users\Alex\AppData\Local\VS Revo Group
2013-11-02 10:15 - 2013-11-02 10:15 - 00000000 ____D C:\ProgramData\VS Revo Group
2013-11-02 10:15 - 2013-11-02 10:15 - 00000000 ____D C:\Program Files\VS Revo Group
2013-11-02 10:14 - 2013-11-02 10:14 - 10031224 _____ (VS Revo Group                                               ) C:\Users\Alex\Desktop\RevoUninProSetup.exe
2013-11-02 09:51 - 2012-03-06 01:05 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Skype
2013-11-02 09:49 - 2013-08-27 17:09 - 00000000 ____D C:\Windows\system32\MRT
2013-11-02 09:44 - 2006-11-02 11:24 - 78106760 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-11-01 20:43 - 2012-04-08 11:28 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-11-01 20:43 - 2011-05-29 11:47 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-11-01 20:41 - 2013-11-01 20:41 - 00000000 ____D C:\FRST
2013-11-01 20:40 - 2013-11-01 20:40 - 01957098 _____ (Farbar) C:\Users\Alex\Desktop\FRST64.exe
2013-11-01 20:40 - 2013-11-01 20:40 - 01089445 _____ (Farbar) C:\Users\Alex\Desktop\FRST.exe
2013-11-01 20:12 - 2013-11-01 20:12 - 00000000 ____D C:\Users\Alex\AppData\Roaming\ParetoLogic
2013-11-01 20:11 - 2013-11-01 20:10 - 05249448 _____ (ParetoLogic Inc.) C:\Users\Alex\Desktop\ParetoLogic PC Health Advisor_de.exe
2013-11-01 19:52 - 2013-11-01 19:52 - 00018041 _____ C:\Users\Alex\Desktop\hijackthis.log
2013-11-01 19:50 - 2013-11-01 19:50 - 00388608 _____ (Trend Micro Inc.) C:\Users\Alex\Desktop\hijackthis_5833.exe
2013-11-01 19:43 - 2009-11-16 18:15 - 00361728 _____ (TuneUp Software GmbH) C:\Windows\system32\TuneUpDefragService.exe
2013-11-01 16:40 - 2009-01-07 14:21 - 00138840 _____ C:\ProgramData\nvModes.dat
2013-11-01 15:53 - 2013-11-01 15:53 - 104535026 _____ C:\Windows\system32\矨郤ဴ–
2013-11-01 15:44 - 2013-11-01 15:33 - 00000000 ____D C:\Users\Alex\Desktop\Bilder November 2013 iPhone
2013-11-01 15:17 - 2013-09-07 00:11 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Video Downloader
2013-11-01 14:46 - 2013-09-26 17:53 - 00000000 ____D C:\ProgramData\clp

Files to move or delete:
====================
C:\Users\Alex\any-video-converter-3.1.7.exe
C:\Users\Alex\avira_antivir_personal_de.exe
C:\Users\Alex\FacebookVideoCallSetup_v1.2.203.0.exe
C:\Users\Alex\Firefox Setup 3.6.13.exe
C:\Users\Alex\FreeStudio.exe
C:\Users\Alex\FreeYouTubeToiPhoneConverter.exe
C:\Users\Alex\gimp-2.6.11-i686-setup.exe
C:\Users\Alex\InstallPowerfulAffirmations.exe
C:\Users\Alex\InstallRarZilla.exe
C:\Users\Alex\install_flash_player.exe
C:\Users\Alex\SmileyCentral.exe
C:\Users\Alex\SoftonicDownloader_fuer_magix-xtreme-foto-grafik-designer.exe


Some content of TEMP:
====================
C:\Users\Alex\AppData\Local\Temp\Quarantine.exe
C:\Users\Alex\AppData\Local\Temp\RtkBtMnt.exe
C:\Users\Alex\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Gast\AppData\Local\Temp\AskSLib.dll
C:\Users\Gast\AppData\Local\Temp\RtkBtMnt.exe
C:\Users\Laptopgast\AppData\Local\Temp\RtkBtMnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-02 20:06

==================== End Of Log ============================

--- --- ---

schrauber · 03.11.2013, 08:08

Nee die brauch ich nit

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

alke84 · 03.11.2013, 17:51

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=09646fd35b95a14a9e81249a0cbadd92
# engine=15733
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-11-03 12:45:14
# local_time=2013-11-03 01:45:14 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=1799 16775165 100 97 85449 248902404 78182 0
# compatibility_mode=5892 16776573 100 100 103763 221015442 0 0
# scanned=260586
# found=0
# cleaned=0
# scan_time=12085

Code:

ATTFilter

 Results of screen317's Security Check version 0.99.74  
 Windows Vista Service Pack 2 x86 (UAC is enabled)  
 Internet Explorer 9  
 Internet Explorer 8  
``````````````Antivirus/Firewall Check:`````````````` 
Avira Desktop   
 Antivirus up to date!  (On Access scanning disabled!) 
`````````Anti-malware/Other Utilities Check:````````` 
 SPYWAREfighter     
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 TuneUp Utilities 2014 (de-DE)  
 TuneUp Utilities Language Pack (de-DE) 
 Java 7 Update 25  
 Java version out of Date! 
 Adobe Flash Player 	11.9.900.117  
 Adobe Reader 9 Adobe Reader out of Date! 
 Mozilla Firefox 23.0.1 Firefox out of Date!  
````````Process Check: objlist.exe by Laurent````````  
 Windows Defender MSASCui.exe 
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbamgui.exe  
 Avira Antivir avgnt.exe 
 Avira Antivir avguard.exe 
 Malwarebytes' Anti-Malware mbamscheduler.exe   
 Windows Defender MSASCui.exe   
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  % 
````````````````````End of Log``````````````````````

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 31-10-2013
Ran by Alex (administrator) on ALEX-PC on 03-11-2013 14:43:24
Running from C:\Users\Alex\Desktop
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Agere Systems) C:\Windows\system32\agrsmsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Preventon Technologies Limited) C:\Program Files\Common Files\Common Toolkit Suite\AVEngine\AVScanningService.exe
(Preventon Technologies Limited) C:\Program Files\Common Files\Common Toolkit Suite\AVEngine\AVWatchService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(NewTech Infosystems, Inc.) C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
() C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
(Egis Incorporated) C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
() C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Acer\Mobility Center\MobilityService.exe
(NewTech InfoSystems, Inc.) C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
() C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
(SPAMfighter) C:\Program Files\Fighters\configservice.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Program Files\Verbindungsassistent\WTGService.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
(SPAMfighter) C:\Program Files\Fighters\licenseservice.exe
(SPAMfighter) C:\Program Files\Fighters\ScannerService.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Acer Inc.) C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
(Egis Incorporated) C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
() C:\Windows\PLFSetI.exe
(CyberLink Corp.) C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
(Nuance Communications, Inc.) C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(CANON INC.) C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE
(Mindjet) C:\Program Files\Mindjet\MindManager 10\MmReminderService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe
(Windows Net) C:\Users\Alex\AppData\Roaming\Windows Net Data\net.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Realtek Semiconductor Corp.) C:\Users\Alex\AppData\Local\Temp\RtkBtMnt.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Microsoft Corporation) C:\Windows\system32\wuauclt.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [6111232 2008-04-28] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1033512 2008-01-18] (Synaptics, Inc.)
HKLM\...\Run: [ePower_DMC] - C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe [397312 2008-04-23] (Acer Inc.)
HKLM\...\Run: [eDataSecurity Loader] - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe [526896 2008-03-04] (Egis Incorporated)
HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe [182808 2008-07-20] (Intel Corporation)
HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [NvMediaCenter] - RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [LManager] - C:\Program Files\Launch Manager\QtZgAcer.EXE [821768 2008-07-02] (Dritek System Inc.)
HKLM\...\Run: [PLFSetI] - C:\Windows\PLFSetI.exe [200704 2007-10-23] ()
HKLM\...\Run: [ArcadeDeluxeAgent] - C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [147456 2008-05-12] (CyberLink Corp.)
HKLM\...\Run: [PaperPort PTD] - C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe [30248 2007-01-29] (Nuance Communications, Inc.)
HKLM\...\Run: [IndexSearch] - C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe [46632 2007-01-29] (Nuance Communications, Inc.)
HKLM\...\Run: [Ocs_SM] - C:\Users\Alex\AppData\Roaming\OCS\SM\SearchAnonymizer.exe
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [AppleSyncNotifier] - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-10-06] (Apple Inc.)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE [2516296 2010-03-25] (CANON INC.)
HKLM\...\Run: [CanonSolutionMenuEx] - C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE [1185112 2010-04-02] (CANON INC.)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [MMReminderService] - C:\Program Files\Mindjet\MindManager 10\MmReminderService.exe [38248 2012-02-27] (Mindjet)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-02] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SWPROguard] - C:\Program Files\Fighters\Spywarefighter\swproTray.exe [1260072 2013-09-05] (SPAMfighter)
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehtray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [Facebook Update] - C:\Users\Alex\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-07-11] (Facebook Inc.)
HKCU\...\Run: [iCloudServices] - C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-04-05] (Apple Inc.)
HKCU\...\Policies\system: [SetVisualStyle] C:\Windows\Resources\Themes\LeopardXP\LeopardXP.msstyles
MountPoints2: {02141672-00de-11e1-978f-806e6f6e6963} - F:\AutoRun.exe
MountPoints2: {03148b35-f8df-11e0-bcee-001e101fe5e1} - F:\AutoRun.exe
MountPoints2: {09b79876-3d0f-11e1-80a6-001e101fd318} - F:\AutoRun.exe
MountPoints2: {2fce6223-ffef-11e0-81ee-001e101faa49} - F:\AutoRun.exe
MountPoints2: {3da9af4a-c80e-11df-8227-001e101f82a0} - F:\AutoRun.exe
MountPoints2: {46abbcf6-38fd-11e0-9ad5-001e101f28bb} - F:\AutoRun.exe
MountPoints2: {47f029b6-fb4a-11e0-8c8a-00238b457b84} - F:\AutoRun.exe
MountPoints2: {47f029db-fb4a-11e0-8c8a-001e101f8924} - F:\AutoRun.exe
MountPoints2: {516e8001-ee02-11e0-a258-001e101fbcad} - F:\AutoRun.exe
MountPoints2: {516e800c-ee02-11e0-a258-001e101f1c31} - F:\AutoRun.exe
MountPoints2: {77dfa36a-b77d-11df-8683-00238b457b84} - F:\AutoRun.exe
MountPoints2: {77dfa379-b77d-11df-8683-001e101f6c46} - F:\AutoRun.exe
MountPoints2: {89f3b39e-08d8-11df-b2d9-00238b457b84} - F:\AutoRun.exe
MountPoints2: {89f3b3b1-08d8-11df-b2d9-00238b457b84} - F:\AutoRun.exe
MountPoints2: {89f3b3b4-08d8-11df-b2d9-00238b457b84} - F:\AutoRun.exe
MountPoints2: {89f3b3b5-08d8-11df-b2d9-00238b457b84} - F:\AutoRun.exe
MountPoints2: {8b6200b2-4b50-11e1-be24-806e6f6e6963} - F:\AutoRun.exe
MountPoints2: {92980d58-daba-11de-baf9-00238b457b84} - RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\ise.exe
MountPoints2: {aa42383d-d7fb-11e0-bbc8-00238b457b84} - F:\AutoRun.exe
MountPoints2: {aa42384a-d7fb-11e0-bbc8-001e101f6c46} - F:\AutoRun.exe
MountPoints2: {b472a84d-0d01-11e0-b426-00238b457b84} - F:\AutoRun.exe
MountPoints2: {b472a85c-0d01-11e0-b426-001e101f2500} - F:\AutoRun.exe
MountPoints2: {bf795ff7-41c3-11e1-a3ff-001e101f4c53} - F:\AutoRun.exe
MountPoints2: {bf796007-41c3-11e1-a3ff-001e101fdb29} - F:\AutoRun.exe
MountPoints2: {bf796032-41c3-11e1-a3ff-001e101f4ec0} - F:\AutoRun.exe
MountPoints2: {bf796053-41c3-11e1-a3ff-001e101faa12} - F:\AutoRun.exe
MountPoints2: {dd42a890-11b6-11e0-a735-001e101f4da1} - F:\AutoRun.exe
MountPoints2: {f9054dc7-03ba-11e1-a1f6-001e101f1c31} - F:\AutoRun.exe
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default\...\RunOnce: [AcerScrSav] - C:\Windows\ACER\run_NB.exe [ 2007-08-21] ()
HKU\Gast\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Laptopgast\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
AppInit_DLLs: c:\progra~1\google\google~1\goec62~1.dll  [ 2010-07-21] (Google)
Startup: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk
ShortcutTarget: net.lnk -> C:\Users\Alex\AppData\Roaming\Windows Net Data\net.exe (Windows Net)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=1108&m=aspire_7730g
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://global.acer.com
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
HKCU\Software\Microsoft\Internet Explorer\Main,Backup.Old.Start Page = hxxp://search.babylon.com/?affID=114347&tt=2912_2&babsrc=HP_ss&mntrId=5cb91d6700000000000000215d282acc
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=1108&m=aspire_7730g
URLSearchHook: HKLM - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
URLSearchHook: HKLM - ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll No File
URLSearchHook: HKLM - Softonic Deutsch Toolbar - {8dbb6d8e-e4a6-4e3b-9753-af78b226441c} - C:\Program Files\Softonic_Deutsch\tbSof1.dll No File
URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.
URLSearchHook: HKCU - ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll No File
URLSearchHook: HKCU - Softonic Deutsch Toolbar - {8dbb6d8e-e4a6-4e3b-9753-af78b226441c} - C:\Program Files\Softonic_Deutsch\tbSof1.dll No File
URLSearchHook: HKCU - (No Name) - {EEE6C35D-6118-11DC-9C72-001320C79847} -  No File
SearchScopes: HKLM - DefaultScope {8D7BCC95-4B3A-4597-B533-7B32EBE22488} URL = 
SearchScopes: HKLM - Backup.Old.DefaultScope {8D7BCC95-4B3A-4597-B533-7B32EBE22488}
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E62696E672E636F6D2F7365617263683F713D7B7365617263685465726D737D26464F524D3D4945464D31267372633D49452D536561726368426F78&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&k=0
SearchScopes: HKCU - Backup.Old.DefaultScope {54713C1F-D465-47F1-8382-176EAA1F3813}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E62696E672E636F6D2F7365617263683F713D7B7365617263685465726D737D26464F524D3D4945464D31267372633D49452D536561726368426F78&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&k=0
SearchScopes: HKCU - {27726C1C-CF69-47D9-BD1A-8DBB778AE9D2} URL = hxxp://www.amazon.de.anonymize-me.de/?to=616D617A6F6E2E6465&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&mode=bounce&k=0
SearchScopes: HKCU - {2AE3BAEB-EC5F-1CBF-7560-21B45D413D4E} URL = hxxp://suche.web.de.anonymize-me.de/?anonymto=687474703A2F2F73756368652E7765622E64652F7365617263682F7765622F3F73753D7B7365617263685465726D737D266F726967696E3D736561726368706C7567696E&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&k=0
SearchScopes: HKCU - {3AD490B8-D40F-4AB8-8725-7B6244459192} URL = hxxp://www.otto.de.anonymize-me.de/?to=6F74746F2E6465&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&mode=bounce&k=0
SearchScopes: HKCU - {3F59BD55-657C-4EAD-B813-2F0FA438AF2D} URL = hxxp://wa.ui-portal.de.anonymize-me.de/?anonymto=687474703A2F2F77612E75692D706F7274616C2E64652F77656264652F77656264652F733F70726F64756B74652E62726F777365722E6C696E6B2E65626179737563686526735F6272616E643D776562646526745F6C696E6B3D656261797375636865266E735F747970653D636C69636B696E266E735F75726C3D687474703A2F2F726F7665722E656261792E636F6D2F726F7665722F312F3730372D35323232322D33303034302D352F343F6D7072653D687474703A2F2F73686F702E656261792E64652F3F5F73616361743D5365652D416C6C2D43617465676F72696573265F6E6B773D7B7365617263685465726D737D&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&k=0
SearchScopes: HKCU - {450335E3-46CE-4631-9EEC-DC03C37E9996} URL = hxxp://search.ebay.de.anonymize-me.de/?to=656261792E6465&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&mode=bounce&k=0
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKCU - {650D5E8F-32EB-4FB5-B9DE-D94B04BC2A31} URL = hxxp://www.pricerunner.de.anonymize-me.de/?to=707269636572756E6E65722E6465&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&mode=bounce&k=0
SearchScopes: HKCU - {6677EF97-820F-4089-9D4B-2B07E787A1B1} URL = hxxp://www.myvideo.de.anonymize-me.de/?to=6D79766964656F2E6465&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&mode=bounce&k=0
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 
SearchScopes: HKCU - {6E205779-C388-4D4C-8A01-131B2298E770} URL = hxxp://go.web.de.anonymize-me.de/?anonymto=687474703A2F2F676F2E7765622E64652F73756368626F782F69655F616D617A6F6E2F3F6B6579776F7264733D7B7365617263685465726D737D&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&k=0
SearchScopes: HKCU - {BE8C0C72-CB24-4B08-A532-54ECB968995B} URL = hxxp://de.wikipedia.org.anonymize-me.de/?to=64652E77696B6970656469612E6F7267&st={searchTerms}&clid=d8d853c9-a084-4ba8-a4a8-ab11eeb728f4&pid=icqt&mode=bounce&k=0
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: CBAbzockschutz.InitToolbarBHO - {2e250b90-0e7a-42a3-9d65-e39f9f227fa4} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
BHO: CmjBrowserHelperObject Object - {6FE6A929-59D1-4763-91AD-29B61CFFB35B} - C:\Program Files\Mindjet\MindManager 10\Mm8InternetExplorer.dll (Mindjet)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Softonic Deutsch Toolbar - {8dbb6d8e-e4a6-4e3b-9753-af78b226441c} - C:\Program Files\Softonic_Deutsch\tbSof1.dll No File
BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
BHO: Loader Class - {F880A4A8-C436-4AC4-AFD1-AA0BDC9552DD} -  No File
Toolbar: HKLM - No Name - {0BF43445-2F28-4351-9252-17FE6E806AA0} -  No File
Toolbar: HKLM - Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)
Toolbar: HKLM - COMPUTERBILD-Abzockschutz - {353e2a48-6254-4bd3-88f4-3b51a0ca7870} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM - ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll No File
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKCU - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} -  No File
Toolbar: HKCU - Softonic Deutsch Toolbar - {8DBB6D8E-E4A6-4E3B-9753-AF78B226441C} - C:\Program Files\Softonic_Deutsch\tbSof1.dll No File
Toolbar: HKCU - No Name - {472734EA-242A-422B-ADF8-83D1E48CC825} -  No File
Toolbar: HKCU - &Address - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\System32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU - &Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\Windows\System32\shell32.dll (Microsoft Corporation)
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File
Toolbar: HKCU - No Name - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} -  No File
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @canon.com/EPPEX - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin: @ei.SmileyCentral_1v.com/Plugin - C:\Program Files\SmileyCentral_1vEI\Installr\2.bin\NP1vEISB.dll (SmileyCentral)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.3 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Alex\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-1.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-10.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-11.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-12.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-13.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-2.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-3.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-4.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-5.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-6.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-7.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-8.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin-9.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\icqplugin.xml
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\fcmdSrchstonicde.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: pricealarm - C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM
FF Extension: Adblock Plus - C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\0gtve0a5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: ICQ Toolbar - C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

Chrome: 
=======
CHR Extension: (Docs) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0
CHR Extension: (Google Drive) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0
CHR Extension: (YouTube) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: () - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmlgoencnlndpglbocajlimaikjohmab\background.html
CHR Extension: (Plus-HD-3.2) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.23.14_0
CHR Extension: (Gmail) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-09-02] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-02] (Avira Operations GmbH & Co. KG)
R2 CLHNService; C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe [81504 2008-01-16] ()
R2 ETService; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [24576 2008-03-21] ()
S3 GoogleDesktopManager-051210-111108; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-07-21] (Google)
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MobilityService; C:\Acer\Mobility Center\MobilityService.exe [110592 2007-12-06] ()
R2 NTISchedulerSvc; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [131072 2008-04-04] ()
R2 PTK License-FIGHTERS-297811811; C:\Program Files\Fighters\licenseservice.exe [283272 2008-11-18] (SPAMfighter)
R2 PTK Scanner-FIGHTERS-297811811; C:\Program Files\Fighters\ScannerService.exe [311944 2008-11-18] (SPAMfighter)
R2 PTK SharedAccess-FIGHTERS-297811811; C:\Program Files\Fighters\configservice.exe [139912 2008-11-18] (SPAMfighter)
S3 TuneUp.Defrag; C:\Windows\System32\TuneUpDefragService.exe [361728 2013-11-01] (TuneUp Software GmbH)
S2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [1723744 2012-11-29] (TuneUp Software)
R2 WTGService; C:\Program Files\Verbindungsassistent\WTGService.exe [296400 2009-03-03] ()
R2 AV Engine Scanning Service; C:/Program Files/Common Files/Common Toolkit Suite/AVEngine/AVScanningService.exe [x]
R2 AV Watch Service; C:/Program Files/Common Files/Common Toolkit Suite/AVEngine/AVWatchService.exe [x]
S2 PTK Live Update-FIGHTERS-297811811; C:\Program Files\Fighters\updateservice.exe [x]

==================== Drivers (Whitelisted) ====================

S3 AVFSFilter; C:\Windows\System32\DRIVERS\avfsfilter.sys [10264 2013-09-05] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-09-02] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-09-02] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-04-02] (Avira Operations GmbH & Co. KG)
R2 int15; C:\Windows\system32\drivers\int15.sys [15392 2008-03-21] (Acer, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R2 NTIPPKernel; C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\NTIPPKernel.sys [122368 2008-01-16] (Cyberlink Corp.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
S3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [10088 2012-11-16] (TuneUp Software)
R3 Vfscan; C:\Windows\System32\DRIVERS\vffilter.sys [15496 2008-11-18] ()
R3 winbondcir; C:\Windows\System32\DRIVERS\winbondcir.sys [43008 2007-03-28] (Winbond Electronics Corporation)
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files\Acer Arcade Deluxe\PlayMovie\000.fcl [61424 2008-05-09] (Cyberlink Corp.)
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-03 13:50 - 2013-11-03 13:50 - 00891167 _____ C:\Users\Alex\Desktop\SecurityCheck.exe
2013-11-03 10:00 - 2013-11-03 10:00 - 00000000 ____D C:\Program Files\ESET
2013-11-03 09:53 - 2013-11-03 09:53 - 02347384 _____ (ESET) C:\Users\Alex\Desktop\esetsmartinstaller_enu.exe
2013-11-02 20:12 - 2013-11-02 20:12 - 00028265 _____ C:\Users\Alex\Desktop\JRT.txt
2013-11-02 19:43 - 2013-11-02 19:43 - 00000000 ____D C:\Windows\ERUNT
2013-11-02 19:42 - 2013-11-02 19:42 - 01033335 _____ (Thisisu) C:\Users\Alex\Desktop\JRT.exe
2013-11-02 19:28 - 2013-11-02 19:28 - 00040796 _____ C:\Users\Alex\Desktop\AdwCleaner[R2].txt
2013-11-02 18:59 - 2013-11-02 19:28 - 00000000 ____D C:\AdwCleaner
2013-11-02 18:58 - 2013-11-02 18:58 - 01060070 _____ C:\Users\Alex\Desktop\adwcleaner.exe
2013-11-02 17:48 - 2013-08-27 03:47 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-11-02 17:48 - 2013-08-27 03:47 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-11-02 17:48 - 2013-08-27 03:47 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-11-02 17:48 - 2013-08-27 03:47 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-11-02 17:48 - 2013-08-27 02:52 - 01172480 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-11-02 17:48 - 2013-08-27 02:50 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-11-02 17:48 - 2013-08-27 02:32 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-11-02 17:48 - 2013-08-27 02:28 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-11-02 17:48 - 2013-08-27 02:28 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-11-02 17:48 - 2013-08-01 04:16 - 00638400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-11-02 17:48 - 2013-08-01 03:49 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2013-11-02 17:48 - 2013-07-20 11:44 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-11-02 10:15 - 2013-11-02 15:02 - 00001029 _____ C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2013-11-02 10:15 - 2013-11-02 10:15 - 00000000 ____D C:\Users\Alex\AppData\Local\VS Revo Group
2013-11-02 10:15 - 2013-11-02 10:15 - 00000000 ____D C:\ProgramData\VS Revo Group
2013-11-02 10:15 - 2013-11-02 10:15 - 00000000 ____D C:\Program Files\VS Revo Group
2013-11-02 10:15 - 2009-12-30 11:21 - 00027192 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys
2013-11-02 10:14 - 2013-11-02 10:14 - 10031224 _____ (VS Revo Group                                               ) C:\Users\Alex\Desktop\RevoUninProSetup.exe
2013-11-02 09:41 - 2013-09-22 11:29 - 12336128 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-02 09:41 - 2013-09-22 11:22 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-02 09:41 - 2013-09-22 11:22 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-02 09:41 - 2013-09-22 11:14 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-02 09:41 - 2013-09-22 11:13 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-02 09:41 - 2013-09-22 11:13 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-02 09:41 - 2013-09-22 11:12 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-02 09:41 - 2013-09-22 11:09 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-02 09:41 - 2013-09-22 11:08 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-02 09:41 - 2013-09-22 11:07 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-02 09:41 - 2013-09-22 11:06 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-02 09:41 - 2013-09-22 11:05 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-02 09:41 - 2013-09-22 11:03 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-02 09:41 - 2013-09-22 11:03 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-02 09:41 - 2013-09-22 11:03 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-02 09:41 - 2013-09-22 10:59 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-01 20:41 - 2013-11-01 20:41 - 00000000 ____D C:\FRST
2013-11-01 20:40 - 2013-11-01 20:40 - 01957098 _____ (Farbar) C:\Users\Alex\Desktop\FRST64.exe
2013-11-01 20:40 - 2013-11-01 20:40 - 01089445 _____ (Farbar) C:\Users\Alex\Desktop\FRST.exe
2013-11-01 20:12 - 2013-11-01 20:12 - 00000000 ____D C:\Users\Alex\AppData\Roaming\ParetoLogic
2013-11-01 20:10 - 2013-11-01 20:11 - 05249448 _____ (ParetoLogic Inc.) C:\Users\Alex\Desktop\ParetoLogic PC Health Advisor_de.exe
2013-11-01 19:52 - 2013-11-01 19:52 - 00018041 _____ C:\Users\Alex\Desktop\hijackthis.log
2013-11-01 19:50 - 2013-11-01 19:50 - 00388608 _____ (Trend Micro Inc.) C:\Users\Alex\Desktop\hijackthis_5833.exe
2013-11-01 19:43 - 2008-05-29 08:28 - 00028416 _____ (TuneUp Software GmbH) C:\Windows\system32\uxtuneup.dll
2013-11-01 19:43 - 2008-05-29 08:28 - 00016640 _____ (TuneUp Software GmbH) C:\Windows\system32\authuitu.dll
2013-11-01 16:10 - 2013-08-29 08:36 - 02050048 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-11-01 16:10 - 2013-07-12 10:04 - 00134272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-11-01 16:10 - 2013-07-04 05:21 - 00532480 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-11-01 16:10 - 2013-07-03 03:33 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2013-11-01 16:10 - 2013-07-03 03:10 - 00025472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-11-01 16:10 - 2013-06-29 03:07 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-11-01 16:10 - 2013-06-29 03:07 - 00197632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-11-01 16:10 - 2013-06-29 03:07 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-11-01 16:10 - 2013-06-29 03:06 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-11-01 16:10 - 2013-06-27 00:01 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-11-01 16:10 - 2013-06-04 05:16 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-11-01 16:10 - 2013-06-04 02:49 - 00293376 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-11-01 16:10 - 2011-05-05 14:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-11-01 16:10 - 2011-05-05 14:54 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-11-01 15:53 - 2013-11-01 15:53 - 104535026 _____ C:\Windows\system32\矨郤ဴ–
2013-11-01 15:33 - 2013-11-01 15:44 - 00000000 ____D C:\Users\Alex\Desktop\Bilder November 2013 iPhone

==================== One Month Modified Files and Folders =======

2013-11-03 14:43 - 2012-04-08 11:28 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-03 14:43 - 2010-04-17 08:55 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-03 14:13 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-03 14:13 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-03 13:50 - 2013-11-03 13:50 - 00891167 _____ C:\Users\Alex\Desktop\SecurityCheck.exe
2013-11-03 13:01 - 2011-09-04 21:57 - 00001134 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3113985616-2469985149-2520824957-1000UA.job
2013-11-03 11:47 - 2009-01-07 14:21 - 00138840 _____ C:\ProgramData\nvModes.001
2013-11-03 10:48 - 2008-11-29 23:42 - 01421525 _____ C:\Windows\WindowsUpdate.log
2013-11-03 10:22 - 2008-01-21 08:16 - 01454146 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-03 10:16 - 2010-04-17 08:55 - 00001090 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-03 10:16 - 2008-11-29 23:53 - 00000000 _____ C:\Windows\system32\LogConfigTemp.xml
2013-11-03 10:15 - 2008-10-31 22:49 - 00000147 _____ C:\Windows\system32\agent.log
2013-11-03 10:14 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-03 10:12 - 2008-01-21 03:47 - 12985464 _____ C:\Windows\PFRO.log
2013-11-03 10:11 - 2006-11-02 14:01 - 00032516 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-11-03 10:11 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-11-03 10:10 - 2009-10-25 12:24 - 00000000 ____D C:\ProgramData\Fighters
2013-11-03 10:00 - 2013-11-03 10:00 - 00000000 ____D C:\Program Files\ESET
2013-11-03 09:53 - 2013-11-03 09:53 - 02347384 _____ (ESET) C:\Users\Alex\Desktop\esetsmartinstaller_enu.exe
2013-11-02 20:12 - 2013-11-02 20:12 - 00028265 _____ C:\Users\Alex\Desktop\JRT.txt
2013-11-02 20:06 - 2013-09-26 17:52 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Fighters
2013-11-02 20:06 - 2009-10-25 12:24 - 00000000 ____D C:\Program Files\Fighters
2013-11-02 19:47 - 2013-08-27 16:02 - 00000000 ____D C:\Program Files\TuneUp Utilities 2013
2013-11-02 19:43 - 2013-11-02 19:43 - 00000000 ____D C:\Windows\ERUNT
2013-11-02 19:42 - 2013-11-02 19:42 - 01033335 _____ (Thisisu) C:\Users\Alex\Desktop\JRT.exe
2013-11-02 19:28 - 2013-11-02 19:28 - 00040796 _____ C:\Users\Alex\Desktop\AdwCleaner[R2].txt
2013-11-02 19:28 - 2013-11-02 18:59 - 00000000 ____D C:\AdwCleaner
2013-11-02 19:11 - 2009-01-08 07:35 - 00000000 ____D C:\ProgramData\ICQ
2013-11-02 18:58 - 2013-11-02 18:58 - 01060070 _____ C:\Users\Alex\Desktop\adwcleaner.exe
2013-11-02 15:02 - 2013-11-02 10:15 - 00001029 _____ C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2013-11-02 10:23 - 2011-09-04 21:57 - 00001112 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3113985616-2469985149-2520824957-1000Core.job
2013-11-02 10:22 - 2006-11-02 13:47 - 00455136 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-02 10:15 - 2013-11-02 10:15 - 00000000 ____D C:\Users\Alex\AppData\Local\VS Revo Group
2013-11-02 10:15 - 2013-11-02 10:15 - 00000000 ____D C:\ProgramData\VS Revo Group
2013-11-02 10:15 - 2013-11-02 10:15 - 00000000 ____D C:\Program Files\VS Revo Group
2013-11-02 10:14 - 2013-11-02 10:14 - 10031224 _____ (VS Revo Group                                               ) C:\Users\Alex\Desktop\RevoUninProSetup.exe
2013-11-02 09:51 - 2012-03-06 01:05 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Skype
2013-11-02 09:49 - 2013-08-27 17:09 - 00000000 ____D C:\Windows\system32\MRT
2013-11-02 09:44 - 2006-11-02 11:24 - 78106760 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-11-01 20:43 - 2012-04-08 11:28 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-11-01 20:43 - 2011-05-29 11:47 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-11-01 20:41 - 2013-11-01 20:41 - 00000000 ____D C:\FRST
2013-11-01 20:40 - 2013-11-01 20:40 - 01957098 _____ (Farbar) C:\Users\Alex\Desktop\FRST64.exe
2013-11-01 20:40 - 2013-11-01 20:40 - 01089445 _____ (Farbar) C:\Users\Alex\Desktop\FRST.exe
2013-11-01 20:12 - 2013-11-01 20:12 - 00000000 ____D C:\Users\Alex\AppData\Roaming\ParetoLogic
2013-11-01 20:11 - 2013-11-01 20:10 - 05249448 _____ (ParetoLogic Inc.) C:\Users\Alex\Desktop\ParetoLogic PC Health Advisor_de.exe
2013-11-01 19:52 - 2013-11-01 19:52 - 00018041 _____ C:\Users\Alex\Desktop\hijackthis.log
2013-11-01 19:50 - 2013-11-01 19:50 - 00388608 _____ (Trend Micro Inc.) C:\Users\Alex\Desktop\hijackthis_5833.exe
2013-11-01 19:43 - 2009-11-16 18:15 - 00361728 _____ (TuneUp Software GmbH) C:\Windows\system32\TuneUpDefragService.exe
2013-11-01 16:40 - 2009-01-07 14:21 - 00138840 _____ C:\ProgramData\nvModes.dat
2013-11-01 15:53 - 2013-11-01 15:53 - 104535026 _____ C:\Windows\system32\矨郤ဴ–
2013-11-01 15:44 - 2013-11-01 15:33 - 00000000 ____D C:\Users\Alex\Desktop\Bilder November 2013 iPhone
2013-11-01 15:17 - 2013-09-07 00:11 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Video Downloader
2013-11-01 14:46 - 2013-09-26 17:53 - 00000000 ____D C:\ProgramData\clp

Files to move or delete:
====================
C:\Users\Alex\any-video-converter-3.1.7.exe
C:\Users\Alex\avira_antivir_personal_de.exe
C:\Users\Alex\FacebookVideoCallSetup_v1.2.203.0.exe
C:\Users\Alex\Firefox Setup 3.6.13.exe
C:\Users\Alex\FreeStudio.exe
C:\Users\Alex\FreeYouTubeToiPhoneConverter.exe
C:\Users\Alex\gimp-2.6.11-i686-setup.exe
C:\Users\Alex\InstallPowerfulAffirmations.exe
C:\Users\Alex\InstallRarZilla.exe
C:\Users\Alex\install_flash_player.exe
C:\Users\Alex\SmileyCentral.exe
C:\Users\Alex\SoftonicDownloader_fuer_magix-xtreme-foto-grafik-designer.exe


Some content of TEMP:
====================
C:\Users\Alex\AppData\Local\Temp\Quarantine.exe
C:\Users\Alex\AppData\Local\Temp\RtkBtMnt.exe
C:\Users\Alex\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Gast\AppData\Local\Temp\AskSLib.dll
C:\Users\Gast\AppData\Local\Temp\RtkBtMnt.exe
C:\Users\Laptopgast\AppData\Local\Temp\RtkBtMnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-03 10:40

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---

Ich bin dir echt super dankbar, dass du dich meinem Problem angenommen hast! Dennoch hat sich nichts geändert. Nach wie vor öffnet sich der Windows Installer, wenn ich ein Programm öffnen möchte. Außerdem wird verlangt eine CD einzulegen.
Der Internet Explorer öffnet sich auch nach wie vor und zeigt die getwindowsinfo-Seite.

Ich lass einfach nochmal den Malwarebytes-Scan durchlaufen!
Obwohl er letztes mal angezeigt hat, dass er keine infizierten Objekte finden konnte, hat er jetzt in den ersten fünf min. schon 5 gefunden... Ich bin einfach ein Laie und check das nicht wirklich.

Hab das nochmal durchlaufen lassen. Ich hab die infizierten Objekte gelöscht, Systemneustart gemacht und direkt ging das Fenster wieder auf.

schrauber · 04.11.2013, 09:33

Java und Adobe updaten.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

Startup: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk
ShortcutTarget: net.lnk -> C:\Users\Alex\AppData\Roaming\Windows Net Data\net.exe (Windows Net)
C:\Users\Alex\AppData\Roaming\Windows Net Data

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Downloade dir bitte Windows Repair (All In One) von hier.

Installiere das Programm. Starte es, nachdem die Installation abgeschlossen wurde.
Klicke auf Step 2 und drücke unter Check Disk auf Do It.
Wenn der Vorgang abgeschlossen ist, klicke auf Step 3 und drücke unter System File Check auf Do It.
Nachdem der Vorgang abgeschlossen ist, klicke auf Start Repairs, wähle den Advanced Mode und drücke Start.
Gehe bitte sicher, dass die Kästchen wie unten zu sehen angehakt sind. Bitte hake zusätzlich noch Set Windows Services to Default Startup an.
Hake Restart System when Finished an.
Drücke Start.

alke84 · 04.11.2013, 16:30

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 31-10-2013
Ran by Alex at 2013-11-04 10:34:27 Run:3
Running from C:\Users\Alex\Desktop
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Startup: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk
ShortcutTarget: net.lnk -> C:\Users\Alex\AppData\Roaming\Windows Net Data\net.exe (Windows Net)
C:\Users\Alex\AppData\Roaming\Windows Net Data
         
*****************

C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk not found.
C:\Users\Alex\AppData\Roaming\Windows Net Data\net.exe not found.
C:\Users\Alex\AppData\Roaming\Windows Net Data => Moved successfully.

==== End of Fixlog ====

EIN WUNDER IST GESCHEHEN!
Vielen Dank für deine Hilfe!!!! "Es" ist weg.
Jetzt hab ich nur noch das Problem, dass ich kein Update mehr machen kann, da ständig Fehlermeldungen kommen, aber das gehört wohl nicht hier her.

Nochmal vielen Dank für alles. TOP!!!

schrauber · 05.11.2013, 11:56

Hast Du das Repair Tool laufen lassen? Wenn ja bitte genaue Fehlermeldung, und das hier:

Downloade dir bitte

Farbar Service Scanner

Starte das Tool mit Doppelklick auf die FSS.exe
Gehe sicher, dass folgende Optionen angehakt sind.
- Internet Services
- Windows Firewall
- System Restore
- Security Center/Action Center
- Windows Update
- Windows Defender
- Other Services
Klicke auf Scan.
Wenn das Tool fertig ist, wird es eine FSS.txt in dem Verzeichnis erstellen, wo das Tool gelaufen ist.

Poste bitte den Inhalt hier.

alke84 · 05.11.2013, 15:17

Code:

ATTFilter

Farbar Service Scanner Version: 24-10-2013
Ran by Alex (administrator) on 05-11-2013 at 15:12:44
Running from "C:\Users\Alex\Desktop"
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy: 
==================


System Restore:
============

System Restore Disabled Policy: 
========================


Security Center:
============


Windows Update:
============

Windows Autoupdate Disabled Policy: 
============================


Windows Defender:
==============

Other Services:
==============


File Check:
========
C:\Windows\system32\nsisvc.dll => MD5 is legit
C:\Windows\system32\Drivers\nsiproxy.sys => MD5 is legit
C:\Windows\system32\dhcpcsvc.dll => MD5 is legit
C:\Windows\system32\Drivers\afd.sys => MD5 is legit
C:\Windows\system32\Drivers\tdx.sys => MD5 is legit
C:\Windows\system32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\system32\dnsrslvr.dll => MD5 is legit
C:\Windows\system32\mpssvc.dll => MD5 is legit
C:\Windows\system32\bfe.dll => MD5 is legit
C:\Windows\system32\Drivers\mpsdrv.sys => MD5 is legit
C:\Windows\system32\SDRSVC.dll => MD5 is legit
C:\Windows\system32\vssvc.exe => MD5 is legit
C:\Windows\system32\wscsvc.dll => MD5 is legit
C:\Windows\system32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\system32\wuaueng.dll => MD5 is legit
C:\Windows\system32\qmgr.dll => MD5 is legit
C:\Windows\system32\es.dll => MD5 is legit
C:\Windows\system32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\system32\ipnathlp.dll => MD5 is legit
C:\Windows\system32\iphlpsvc.dll => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit


**** End of log ****

Falls du das Windows Repair meinst-das habe ich durchlaufen lassen. Welchen log brauchst du da? Kannst du mir sagen, wie der genau heißt? ich hab da im Ordner einige drin.

schrauber · 06.11.2013, 10:47

Logs brauche ich keine

Zitat:

Jetzt hab ich nur noch das Problem, dass ich kein Update mehr machen kann, da ständig Fehlermeldungen kommen,

Ich hätte gerne die genauen Fehlermeldungen.

alke84 · 07.11.2013, 10:41

Und schon versteh ich es wieder ;-)

Fehler:

Code 80070663
Code 8024002D

Das Update startet, dann wird die Windows Microsoft Live Add-in 1.5-CD ROM verlangt. Dann muss ich auf abbrechen drücken und danach kommt die besagte Fehlermeldung im Updateverlauf.
Ich habe das Problem bereits gegoogelt, aber keine der Antworten im Netz konnte mein Problem lösen.

schrauber · 07.11.2013, 14:33

Um welche Updates geht es? Die haben ne KB Nummer, die brauche ich auch

07.11.2013, 14:33	#15
schrauber /// the machine /// TB-Ausbilder	getwindowsinfo Virus - Was ist zu tun? Um welche Updates geht es? Die haben ne KB Nummer, die brauche ich auch __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

getwindowsinfo Virus - Was ist zu tun?

Plagegeister aller Art und deren Bekämpfung: getwindowsinfo Virus - Was ist zu tun?