Windows 7: do-search als Startseite im IE

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-11-2013
Ran by Gabi (administrator) on GABI-VAIO on 19-11-2013 15:11:25
Running from C:\Users\Gabi\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AuthenTec, Inc) C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Boot Manager\ActiveDelayDeviceService.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe
(AuthenTec Inc.) C:\Program Files\AuthenTec TrueSuite\TouchControl.exe
(AuthenTec Inc.) C:\Program Files\AuthenTec TrueSuite\BioMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(McAfee, Inc.) C:\Windows\system32\mfevtps.exe
(Sony Corporation) c:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Panasonic Corporation) C:\Program Files (x86)\Common Files\Panasonic\HD Writer AutoStart\HDWriterAutoStart.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe
(MyHeritage) C:\Program Files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAdmin.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1158248 2012-02-20] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1158248 2012-02-20] (Realtek Semiconductor)
HKLM\...\Run: [BTMTrayAgent] - rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2884880 2012-03-19] (Synaptics Incorporated)
HKLM\...\Run: [] - [x]
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1356240 2013-08-12] (Microsoft Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20549280 2013-10-21] (Skype Technologies S.A.)
MountPoints2: {d8552658-3259-11e3-b25b-806e6f6e6963} - D:\setup.exe
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2012-02-01] (Intel Corporation)
HKLM-x32\...\Run: [Dolby Home Theater v4] - C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [506712 2011-02-03] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-03-09] (Intel Corporation)
HKLM-x32\...\Run: [ISBMgr.exe] - C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [60552 2011-09-20] (Sony Corporation)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrobat_sl.exe [36760 2010-10-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe [821144 2010-10-25] (Adobe Systems Inc.)
HKLM-x32\...\Run: [Intel AT Service signup] - C:\Program Files (x86)\Intel Corporation\Intel AT Service signup\IntelATServiceSignup.exe [382976 2012-02-15] (Intel Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] - C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [693608 2012-02-21] (Sony Corporation)
HKLM-x32\...\Run: [Family Tree Builder Update] - C:\Program Files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe [2532352 2013-09-09] (MyHeritage)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [681032 2013-10-10] (Avira Operations GmbH & Co. KG)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll [260928 2012-03-13] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll [215360 2012-03-13] (NVIDIA Corporation)
BootExecute: autocheck autochk * 

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.de
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://sony.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://do-search.com/?type=sc&ts=1384614867&from=tugs&uid=TOSHIBAXMQ01ABD050_42NFF0GASXX42NFF0GAS
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-Q212&_nkw={searchTerms}
SearchScopes: HKCU - {07A54892-AB2C-4B39-A957-3B902EF44B62} URL = 
BHO: scriptproxy - ##TOOLBAR_DISABLED_##{7db2d5a0-7241-4e79-b68d-6309f01c5231} - C:\Program Files\Common Files\McAfee\systemcore\ScriptSn.20131011134740.dll (McAfee, Inc.)
BHO: TrueSuite Website Log On - ##TOOLBAR_DISABLED_##{8590886e-ec8c-43c1-a32c-e4c2b0b6395b} - C:\Program Files\AuthenTec TrueSuite\IEBHO.dll (AuthenTec Inc.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Bing Bar Helper - ##TOOLBAR_DISABLED_##{1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll No File
BHO-x32: scriptproxy - ##TOOLBAR_DISABLED_##{7db2d5a0-7241-4e79-b68d-6309f01c5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20131011134740.dll (McAfee, Inc.)
BHO-x32: TrueSuite Website Log On - ##TOOLBAR_DISABLED_##{8590886e-ec8c-43c1-a32c-e4c2b0b6395b} - C:\Program Files\AuthenTec TrueSuite\x86\IEBHO.dll (AuthenTec Inc.)
BHO-x32: SmartSelect Class - ##TOOLBAR_DISABLED_##{f4971ee7-daa0-4053-9964-665d8ee6a077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Bing Bar - ##TOOLBAR_DISABLED_##{eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll No File
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 78.42.43.62 192.168.0.1

Chrome: 
=======
CHR RestoreOnStartup: "hxxp://"
CHR Extension: (Google Docs) - C:\Users\Gabi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Gabi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Gabi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Gabi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Website Logon) - C:\Users\Gabi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nibgmhfiionbhpeidijmiildfjnbbkic\1.0_0
CHR Extension: (Google Wallet) - C:\Users\Gabi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (Gmail) - C:\Users\Gabi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [nibgmhfiionbhpeidijmiildfjnbbkic] - C:\Program Files\AuthenTec TrueSuite\x86\tschrome.crx

==================== Services (Whitelisted) =================

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 ActiveDelayDeviceService; C:\Program Files (x86)\Sony\VAIO Boot Manager\ActiveDelayDeviceService.exe [78472 2011-09-20] (Sony Corporation)
S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440392 2013-10-10] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440392 2013-10-10] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1164360 2013-10-10] (Avira Operations GmbH & Co. KG)
R2 FPLService; C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe [300360 2012-02-20] (AuthenTec, Inc)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [127320 2012-03-23] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [162648 2012-03-23] (Intel Corporation)
R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [199304 2012-05-25] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [210616 2012-05-25] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [162224 2012-05-25] (McAfee, Inc.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-08-12] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2011-12-08] ()
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366600 2013-08-12] (Microsoft Corporation)
R2 PMBDeviceInfoProvider; c:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [473960 2012-02-21] (Sony Corporation)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [260768 2011-11-30] (Sony Corporation)
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024 2011-02-23] (ArcSoft, Inc.)
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [960160 2011-12-29] (Sony Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [594704 2011-12-08] (Intel® Corporation)
S2 BBSvc; "C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BBSvc.exe" [x]
S3 BBUpdate; "C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe" [x]

==================== Drivers (Whitelisted) ====================

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105856 2013-10-10] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-10-10] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-10] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [83160 2013-10-10] (Avira Operations GmbH & Co. KG)
S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [65264 2012-02-22] (McAfee, Inc.)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [160792 2012-02-22] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [229528 2012-02-22] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [487296 2012-02-22] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [647208 2012-02-22] (McAfee, Inc.)
R1 mfenlfk; C:\Windows\System32\DRIVERS\mfenlfk.sys [75936 2012-02-22] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [100912 2012-02-22] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [289664 2012-02-22] (McAfee, Inc.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [247216 2013-06-18] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [139616 2013-06-18] (Microsoft Corporation)
S1 ckfscvdz; \??\C:\Windows\system32\drivers\ckfscvdz.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-19 15:07 - 2013-11-19 15:07 - 00891184 _____ C:\Users\Gabi\Downloads\SecurityCheck.exe
2013-11-19 15:01 - 2013-11-19 15:01 - 00006523 _____ C:\Users\Gabi\Desktop\JRT.txt
2013-11-19 14:55 - 2013-11-19 14:55 - 00000000 ____D C:\Windows\ERUNT
2013-11-19 14:54 - 2013-11-19 14:54 - 01034531 _____ (Thisisu) C:\Users\Gabi\Downloads\JRT.exe
2013-11-19 13:18 - 2013-11-19 13:19 - 00031179 _____ C:\Users\Gabi\Downloads\Addition.txt
2013-11-19 13:17 - 2013-11-19 15:11 - 00017881 _____ C:\Users\Gabi\Downloads\FRST.txt
2013-11-19 13:17 - 2013-11-19 13:17 - 00000000 ____D C:\FRST
2013-11-19 13:16 - 2013-11-19 13:16 - 01957964 _____ (Farbar) C:\Users\Gabi\Downloads\FRST64.exe
2013-11-16 22:16 - 2013-11-16 22:16 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-16 22:16 - 2013-11-16 22:16 - 00000000 ____D C:\Users\Gabi\AppData\Roaming\Malwarebytes
2013-11-16 22:16 - 2013-11-16 22:16 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-16 22:16 - 2013-11-16 22:16 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-16 22:16 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-11-16 22:12 - 2013-11-16 22:12 - 00614312 _____ C:\Users\Gabi\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe
2013-11-16 18:01 - 2013-11-19 14:44 - 00000000 ____D C:\AdwCleaner
2013-11-16 18:01 - 2013-11-16 18:01 - 01085542 _____ C:\Users\Gabi\Downloads\adwcleaner_3012.exe
2013-11-16 17:06 - 2013-11-16 17:06 - 00000000 ____D C:\Users\Gabi\AppData\Roaming\AVG2013
2013-11-16 17:05 - 2013-11-16 17:05 - 00003230 _____ C:\Windows\System32\Tasks\SidebarExecute
2013-11-16 17:05 - 2013-11-16 17:05 - 00000000 ____D C:\Users\Gabi\AppData\Roaming\TuneUp Software
2013-11-16 17:04 - 2013-11-16 17:21 - 00000000 ____D C:\ProgramData\AVG2013
2013-11-16 17:02 - 2013-11-16 17:02 - 00000000 ____D C:\ProgramData\CDB
2013-11-16 17:01 - 2013-11-16 17:22 - 00000000 ____D C:\ProgramData\MFAData
2013-11-16 17:01 - 2013-11-16 17:05 - 00000000 ____D C:\Users\Gabi\AppData\Local\Avg2013
2013-11-16 17:01 - 2013-11-16 17:01 - 00000000 ____D C:\Users\Gabi\AppData\Local\MFAData
2013-11-16 16:59 - 2013-11-16 16:59 - 00684488 _____ (Reimage®) C:\Users\Gabi\Downloads\AntiToolbar.exe
2013-11-16 16:49 - 2013-11-16 16:49 - 00002247 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-11-16 16:43 - 2013-11-19 14:53 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-16 16:43 - 2013-11-19 14:45 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-16 16:43 - 2013-11-16 17:48 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-11-16 16:43 - 2013-11-16 17:48 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-11-16 16:43 - 2013-11-16 16:43 - 00000000 ____D C:\Users\Gabi\AppData\Local\Deployment
2013-11-16 16:43 - 2013-11-16 16:43 - 00000000 ____D C:\Users\Gabi\AppData\Local\Apps\2.0
2013-11-16 16:14 - 2013-11-16 16:14 - 00000000 ____D C:\ProgramData\MGTEK
2013-11-16 16:05 - 2013-11-16 16:05 - 00129536 _____ C:\Users\Public\AlexaNSISPlugin.28004.dll
2013-11-15 15:04 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-15 15:04 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-15 15:04 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-15 15:04 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-15 15:04 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-15 15:03 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-15 15:03 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-15 15:03 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-15 15:03 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-15 15:03 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-15 15:03 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-15 15:03 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-15 15:03 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-15 15:03 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-15 15:03 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-15 15:03 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-15 15:03 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-15 15:03 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-15 15:03 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-15 15:03 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-15 15:03 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-15 15:03 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-15 15:03 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-15 15:03 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-15 15:03 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-15 15:03 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-15 15:03 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-15 15:03 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-15 15:03 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-15 15:03 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-13 19:53 - 2013-11-15 14:52 - 00010780 _____ C:\Windows\IE11_main.log
2013-11-04 10:38 - 2013-11-04 10:38 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-11-04 10:00 - 2013-11-04 10:00 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-11-04 09:59 - 2013-11-04 10:00 - 00001912 _____ C:\Windows\epplauncher.mif
2013-11-04 09:59 - 2013-11-04 10:00 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-10-29 19:26 - 2013-11-03 17:54 - 00000000 __RHD C:\MSOCache
2013-10-21 16:59 - 2013-10-21 16:59 - 00002206 _____ C:\Users\Gabi\Desktop\Was vom Leben bleibt - Verknüpfung.lnk
2013-10-21 16:58 - 2013-10-21 16:58 - 00001080 _____ C:\Users\Gabi\Desktop\Bilder - Verknüpfung.lnk
2013-10-21 12:42 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-21 12:42 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-21 12:42 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-21 12:42 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-21 12:42 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-21 12:42 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-10-21 12:42 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

==================== One Month Modified Files and Folders =======

2013-11-19 15:11 - 2013-11-19 13:17 - 00017881 _____ C:\Users\Gabi\Downloads\FRST.txt
2013-11-19 15:07 - 2013-11-19 15:07 - 00891184 _____ C:\Users\Gabi\Downloads\SecurityCheck.exe
2013-11-19 15:01 - 2013-11-19 15:01 - 00006523 _____ C:\Users\Gabi\Desktop\JRT.txt
2013-11-19 14:55 - 2013-11-19 14:55 - 00000000 ____D C:\Windows\ERUNT
2013-11-19 14:54 - 2013-11-19 14:54 - 01034531 _____ (Thisisu) C:\Users\Gabi\Downloads\JRT.exe
2013-11-19 14:54 - 2013-10-12 13:08 - 00000000 ____D C:\Users\Gabi\AppData\Roaming\Skype
2013-11-19 14:53 - 2013-11-16 16:43 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-19 14:52 - 2009-07-14 05:45 - 00020992 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-19 14:52 - 2009-07-14 05:45 - 00020992 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-19 14:49 - 2013-10-11 11:43 - 00697520 _____ C:\Windows\system32\perfh007.dat
2013-11-19 14:49 - 2013-10-11 11:43 - 00148526 _____ C:\Windows\system32\perfc007.dat
2013-11-19 14:49 - 2009-07-14 06:13 - 01614832 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-19 14:48 - 2013-10-11 10:48 - 01366160 _____ C:\Windows\WindowsUpdate.log
2013-11-19 14:45 - 2013-11-16 16:43 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-19 14:45 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-19 14:45 - 2009-07-14 05:51 - 00042528 _____ C:\Windows\setupact.log
2013-11-19 14:44 - 2013-11-16 18:01 - 00000000 ____D C:\AdwCleaner
2013-11-19 14:27 - 2013-10-11 11:26 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-19 14:03 - 2010-11-21 04:47 - 00120634 _____ C:\Windows\PFRO.log
2013-11-19 13:19 - 2013-11-19 13:18 - 00031179 _____ C:\Users\Gabi\Downloads\Addition.txt
2013-11-19 13:17 - 2013-11-19 13:17 - 00000000 ____D C:\FRST
2013-11-19 13:16 - 2013-11-19 13:16 - 01957964 _____ (Farbar) C:\Users\Gabi\Downloads\FRST64.exe
2013-11-19 10:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-18 11:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-11-17 10:53 - 2013-10-14 15:25 - 00000000 ____D C:\Windows\system32\MRT
2013-11-17 10:51 - 2013-10-14 15:25 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-16 22:16 - 2013-11-16 22:16 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-16 22:16 - 2013-11-16 22:16 - 00000000 ____D C:\Users\Gabi\AppData\Roaming\Malwarebytes
2013-11-16 22:16 - 2013-11-16 22:16 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-16 22:16 - 2013-11-16 22:16 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-16 22:12 - 2013-11-16 22:12 - 00614312 _____ C:\Users\Gabi\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe
2013-11-16 18:20 - 2013-10-11 12:14 - 00000000 ____D C:\Program Files (x86)\Evernote
2013-11-16 18:01 - 2013-11-16 18:01 - 01085542 _____ C:\Users\Gabi\Downloads\adwcleaner_3012.exe
2013-11-16 17:48 - 2013-11-16 16:43 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-11-16 17:48 - 2013-11-16 16:43 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-11-16 17:22 - 2013-11-16 17:01 - 00000000 ____D C:\ProgramData\MFAData
2013-11-16 17:21 - 2013-11-16 17:04 - 00000000 ____D C:\ProgramData\AVG2013
2013-11-16 17:06 - 2013-11-16 17:06 - 00000000 ____D C:\Users\Gabi\AppData\Roaming\AVG2013
2013-11-16 17:05 - 2013-11-16 17:05 - 00003230 _____ C:\Windows\System32\Tasks\SidebarExecute
2013-11-16 17:05 - 2013-11-16 17:05 - 00000000 ____D C:\Users\Gabi\AppData\Roaming\TuneUp Software
2013-11-16 17:05 - 2013-11-16 17:01 - 00000000 ____D C:\Users\Gabi\AppData\Local\Avg2013
2013-11-16 17:02 - 2013-11-16 17:02 - 00000000 ____D C:\ProgramData\CDB
2013-11-16 17:01 - 2013-11-16 17:01 - 00000000 ____D C:\Users\Gabi\AppData\Local\MFAData
2013-11-16 16:59 - 2013-11-16 16:59 - 00684488 _____ (Reimage®) C:\Users\Gabi\Downloads\AntiToolbar.exe
2013-11-16 16:49 - 2013-11-16 16:49 - 00002247 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-11-16 16:49 - 2013-10-12 13:32 - 00000000 ____D C:\Program Files (x86)\Google
2013-11-16 16:43 - 2013-11-16 16:43 - 00000000 ____D C:\Users\Gabi\AppData\Local\Deployment
2013-11-16 16:43 - 2013-11-16 16:43 - 00000000 ____D C:\Users\Gabi\AppData\Local\Apps\2.0
2013-11-16 16:43 - 2013-10-12 13:32 - 00000000 ____D C:\Users\Gabi\AppData\Local\Google
2013-11-16 16:33 - 2013-10-11 12:25 - 00000000 ____D C:\Users\Gabi
2013-11-16 16:32 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2013-11-16 16:14 - 2013-11-16 16:14 - 00000000 ____D C:\ProgramData\MGTEK
2013-11-16 16:14 - 2013-10-11 12:33 - 00001629 _____ C:\Users\Gabi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-16 16:08 - 2013-10-11 12:33 - 00000000 ___RD C:\Users\Gabi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-11-16 16:05 - 2013-11-16 16:05 - 00129536 _____ C:\Users\Public\AlexaNSISPlugin.28004.dll
2013-11-15 14:52 - 2013-11-13 19:53 - 00010780 _____ C:\Windows\IE11_main.log
2013-11-13 19:54 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-11-04 10:38 - 2013-11-04 10:38 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-11-04 10:38 - 2013-10-11 11:38 - 00000000 ____D C:\ProgramData\Skype
2013-11-04 10:00 - 2013-11-04 10:00 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-11-04 10:00 - 2013-11-04 09:59 - 00001912 _____ C:\Windows\epplauncher.mif
2013-11-04 10:00 - 2013-11-04 09:59 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-11-03 17:54 - 2013-10-29 19:26 - 00000000 __RHD C:\MSOCache
2013-11-03 17:54 - 2013-10-18 09:57 - 00000000 ____D C:\ProgramData\Avira
2013-11-03 17:54 - 2013-10-18 09:57 - 00000000 ____D C:\Program Files (x86)\Avira
2013-11-03 17:54 - 2013-10-12 13:10 - 00000000 ____D C:\Users\Gabi\AppData\Roaming\ArcSoft
2013-11-03 17:54 - 2013-10-11 12:34 - 00000000 ____D C:\Users\Gabi\AppData\Local\Intel_Corporation
2013-11-03 17:54 - 2013-10-11 11:44 - 00000000 ____D C:\ProgramData\Sony Corporation
2013-11-03 17:54 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\AppCompat
2013-11-03 17:52 - 2013-10-12 13:52 - 00000000 ____D C:\Users\Gabi\AppData\Roaming\SoftGrid Client
2013-11-03 17:52 - 2013-10-12 10:01 - 00000000 ____D C:\Users\Gabi\AppData\Roaming\iolo
2013-11-03 17:14 - 2013-10-16 10:36 - 00000000 ____D C:\ProgramData\tmp
2013-10-30 11:45 - 2013-10-16 10:36 - 00000000 ____D C:\ProgramData\hps
2013-10-27 17:15 - 2013-10-11 13:16 - 00000000 ____D C:\Users\Gabi\AppData\Local\Windows Live Writer
2013-10-21 16:59 - 2013-10-21 16:59 - 00002206 _____ C:\Users\Gabi\Desktop\Was vom Leben bleibt - Verknüpfung.lnk
2013-10-21 16:58 - 2013-10-21 16:58 - 00001080 _____ C:\Users\Gabi\Desktop\Bilder - Verknüpfung.lnk
2013-10-21 12:36 - 2013-10-11 12:09 - 00000000 ____D C:\ProgramData\iolo

Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.28004.dll


Some content of TEMP:
====================
C:\Users\Gabi\AppData\Local\Temp\adblock-ie.exe
C:\Users\Gabi\AppData\Local\Temp\AntiToolbarPackage.exe
C:\Users\Gabi\AppData\Local\Temp\avgnt.exe
C:\Users\Gabi\AppData\Local\Temp\AVG_AV_Setup.exe
C:\Users\Gabi\AppData\Local\Temp\BackupSetup.exe
C:\Users\Gabi\AppData\Local\Temp\Picasa.exe
C:\Users\Gabi\AppData\Local\Temp\Quarantine.exe
C:\Users\Gabi\AppData\Local\Temp\uninst1.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-19 10:39

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 18-11-2013
Ran by Gabi at 2013-11-19 13:18:47
Running from C:\Users\Gabi\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AV: Avira Desktop (Disabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Disabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

==================== Installed Programs ======================

ACID Music Studio 8.0 (x32 Version: 8.0.178)
ActiveX контрола на Windows Live Mesh за отдалечени връзки (x32 Version: 15.4.5722.2)
ActiveX-kontroll för fjärranslutningar för Windows Live Mesh (x32 Version: 15.4.5722.2)
Adobe Acrobat X Standard - English, Français, Deutsch (x32 Version: 10.0.0)
Adobe AIR (x32 Version: 2.7.0.19460)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)
Adobe Reader X (10.1.8) MUI (x32 Version: 10.1.8)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98)
Aloha TriPeaks (x32 Version: 2.2.0.98)
ArcSoft Magic-i Visual Effects 2 (x32 Version: 2.0.1.161)
ArcSoft WebCam Companion 4 (x32 Version: 4.0.21.457)
AuthenTec TrueSuite (Version: 5.2.0.675)
AuthenTec WinBio FingerPrint Software (Version: 3.2.1.1030)
Avira Free Antivirus (x32 Version: 14.0.0.411)
Bejeweled 3 (x32 Version: 2.2.0.98)
Bing Bar (x32 Version: 7.2.241.0)
Build-a-lot 2 (x32 Version: 2.2.0.98)
Cake Mania (x32 Version: 2.2.0.98)
Chuzzle Deluxe (x32 Version: 2.2.0.95)
Control ActiveX Windows Live Mesh pentru conexiuni la distanță (x32 Version: 15.4.5722.2)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2)
Controlo ActiveX do Windows Live Mesh para Ligações Remotas (x32 Version: 15.4.5722.2)
CyberLink PowerDVD (x32 Version: 9.0.5009.52)
D3DX10 (x32 Version: 15.4.2368.0902)
DMUninstaller (x32)
Dolby Home Theater v4 (x32 Version: 7.2.7000.4)
DVD Architect Studio 5.0 (x32 Version: 5.0.157)
FDUx86 (x32 Version: 1.0.0)
Fishdom (TM) 2 (x32 Version: 2.2.0.98)
Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (x32 Version: 15.4.5722.2)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922)
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)
Galerie foto Windows Live (x32 Version: 15.4.3502.0922)
Google Chrome (x32 Version: 31.0.1650.57)
Google Update Helper (x32 Version: 1.3.21.165)
HD Writer AE 4.0 (x32 Version: 4.00.022.1031)
Insaniquarium Deluxe (x32 Version: 2.2.0.97)
Intel PROSet Wireless
Intel(R) Management Engine Components (x32 Version: 8.0.4.1441)
Intel(R) OpenCL CPU Runtime (x32)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2712)
Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 15.0.0.0083)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (Version: 2.0.0.0086)
Intel(R) Rapid Storage Technology (x32 Version: 11.1.0.1006)
Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.4.220)
Intel(R) WiDi (Version: 3.1.26.0)
Intel(R) Wireless Display
Intel® AT Service signup (x32 Version: 2.0.0.3)
Intel® PROSet/Wireless WiFi-Software (Version: 15.00.0000.0708)
Intel® Trusted Connect Service Client (Version: 1.23.605.1)
Java Auto Updater (x32 Version: 2.1.5.1)
Java(TM) 7 Update 1 (64-bit) (Version: 7.0.10)
Java(TM) 7 Update 1 (x32 Version: 7.0.10)
Jewel Quest Solitaire 2 (x32 Version: 2.2.0.98)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave (x32 Version: 15.4.5722.2)
KUx86 (x32 Version: 1.0.0)
Mahjongg Artifacts (x32 Version: 2.2.0.95)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Media Gallery (Version: 2.1.0.13300)
Media Go (x32 Version: 2.0.317)
Mein CEWE FOTOBUCH (x32 Version: 5.0.6)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000)
Microsoft Security Client (Version: 4.3.0219.0)
Microsoft Security Essentials (Version: 4.3.219.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft SQL Server Compact 3.5 SP2 ENU (x32 Version: 3.5.8080.0)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (Version: 3.5.8080.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT Redists (x32 Version: 1.0)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)
MyHeritage Family Tree Builder (x32 Version: 7.0.0.7124)
Mystery of Mortlake Mansion (x32 Version: 2.2.0.98)
Mystery P.I. - The London Caper (x32 Version: 2.2.0.95)
NVIDIA Grafiktreiber 296.18 (Version: 296.18)
NVIDIA Install Application (Version: 2.1002.62.312)
NVIDIA Optimus 1.7.12 (Version: 1.7.12)
NVIDIA PhysX (x32 Version: 9.11.1111)
NVIDIA PhysX-Systemsoftware 9.11.1111 (Version: 9.11.1111)
NVIDIA Systemsteuerung 296.18 (Version: 296.18)
NVIDIA Update Components (Version: 1.7.12)
Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení (x32 Version: 15.4.5722.2)
Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia (x32 Version: 15.4.5722.2)
Picasa 3 (x32 Version: 3.9)
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98)
PlayMemories Home (x32 Version: 6.1.01.14210)
PlayStation(R)Network Downloader (x32 Version: 2.07.00849)
PlayStation(R)Store (x32 Version: 4.5.15.13232)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922)
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922)
Polar Bowler (x32 Version: 2.2.0.97)
Pošta Windows Live (x32 Version: 15.4.3502.0922)
PYV_x86 (x32 Version: 1.0.0)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)
Realtek Ethernet Controller Driver (x32 Version: 7.53.216.2012)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6570)
Realtek PCIE Card Reader (x32 Version: 6.1.7601.92)
Remote Keyboard (x32 Version: 1.2.0.09270)
Remote Play with PlayStation(R)3 (x32 Version: 1.1.0.21090)
Skype™ 6.10 (x32 Version: 6.10.104)
Sound Forge Audio Studio 10.0 (x32 Version: 10.0.176)
SSLx64 (Version: 1.0.0)
SSLx86 (x32 Version: 1.0.0)
Synaptics Pointing Device Driver (Version: 16.0.0.5)
The Hidden Object Game Show (x32 Version: 2.2.0.97)
TrackID(TM) with BRAVIA (x32 Version: 1.2.0.09270)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3)
Update Installer for WildTangent Games App (x32)
VAIO - Microsoft Visual C++ 2010 SP1 Runtime 10.0.40219.325 (Version: 1.0.00.01300)
VAIO - PlayMemories Home Plug-in (Version: 2.0.00.14200)
VAIO - Remote Play mit PlayStation®3 (x32 Version: 1.1.0.21090)
VAIO - Remote-Tastatur (x32 Version: 1.2.0.09270)
VAIO - Remote-Tastatur mit PlayStation®3 (x32 Version: 1.2.0.09210)
VAIO - TrackID™ mit BRAVIA (x32 Version: 1.2.0.09270)
VAIO Care (Version: 7.3.1.05290)
VAIO Control Center (x32 Version: 5.2.2.16060)
VAIO Data Restore Tool (x32 Version: 1.9.0.13190)
VAIO Easy Connect (x32 Version: 1.1.2.01120)
VAIO Gate (x32 Version: 2.4.1.09230)
VAIO Gate Default (x32 Version: 2.5.2.02090)
VAIO Gesture Control (x32 Version: 1.0.0.12300)
VAIO Improvement (x32 Version: 1.3.0.12280)
VAIO Improvement Validation (Version: 1.0.4.01190)
VAIO Sample Contents (x32 Version: 1.4.2.09010)
VAIO Smart Network (x32 Version: 3.11.1.15220)
VAIO*CPU-Lüfterdiagnose (x32 Version: 1.1.0.09200)
VAIO-Handbuch (x32 Version: 2.3.0.12300)
VAIO-Support für Übertragungen (x32 Version: 1.7.0.02231)
VBMx86 (x32 Version: 1.0.0)
VCCx64 (Version: 1.0.0)
VCCx86 (x32 Version: 1.0.0)
Vegas Movie Studio HD Platinum 11.0 (x32 Version: 11.0.256)
VHD (x32 Version: 1.0.0)
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.98)
VIx64 (Version: 1.0.0)
VIx86 (x32 Version: 1.0.0)
VMLx86 (x32 Version: 1.0.0)
VPMx64 (Version: 1.0.0)
VSNx64 (Version: 1.0.0)
VSNx86 (x32 Version: 1.0.0)
VSSTx64 (Version: 1.0.0)
VSSTx86 (x32 Version: 1.0.0)
VU5x64 (Version: 1.1.0)
VU5x86 (x32 Version: 1.0.0)
VU5x86 (x32 Version: 1.1.0)
VWSTx86 (x32 Version: 1.0.0)
WildTangent Games App (x32 Version: 4.0.5.36)
WildTangent-Spiele (x32 Version: 1.0.2.5)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3538.0513)
Windows Live Fotogaléria (x32 Version: 15.4.3502.0922)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live Fotogalleri (x32 Version: 15.4.3502.0922)
Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922)
Windows Live Fotótár (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3538.0513)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-kontroll for eksterne tilkoblinger (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-objekt til fjernforbindelser (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (x32 Version: 15.4.5722.2)
Windows Live Meshin etäyhteyksien ActiveX-komponentti (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922)
Windows Liven sähköposti (x32 Version: 15.4.3502.0922)
Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922)
Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (x32 Version: 15.4.5722.2)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922)
Елемент керування Windows Live Mesh ActiveX для віддалених підключень (x32 Version: 15.4.5722.2)
Основи Windows Live (x32 Version: 15.4.3502.0922)
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922)
Почта Windows Live (x32 Version: 15.4.3502.0922)
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922)
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922)
Фотоколекція Windows Live (x32 Version: 15.4.3502.0922)
Элемент управления Windows Live Mesh ActiveX для удаленных подключений (x32 Version: 15.4.5722.2)

==================== Restore Points  =========================

02-11-2013 07:16:46 Windows Update
03-11-2013 16:48:12 Wiederherstellungsvorgang
04-11-2013 09:01:42 Windows Update
08-11-2013 12:15:06 Windows Update
12-11-2013 08:28:30 Windows Update
13-11-2013 18:52:55 Windows Update
16-11-2013 15:14:28 Uniblue SpeedUpMyPC installation
16-11-2013 15:15:52 Installed Adblock IE 2.3
16-11-2013 15:29:40 Wiederherstellungsvorgang
16-11-2013 16:03:18 Installed AVG 2013
16-11-2013 16:03:53 Installed AVG 2013
16-11-2013 16:16:43 Removed AVG 2013
16-11-2013 16:21:07 Removed AVG 2013
16-11-2013 16:28:33 Removed Visual Studio 2010 x64 Redistributables
16-11-2013 16:29:26 Removed Visual Studio 2010 x64 Redistributables
16-11-2013 16:41:22 Removed Visual Studio 2010 x64 Redistributables
16-11-2013 16:43:13 Removed Visual Studio 2010 x64 Redistributables
16-11-2013 16:49:43 Removed Evernote v. 4.5.2
16-11-2013 17:19:00 Removed Evernote v. 4.5.2
17-11-2013 09:50:21 Windows Update
18-11-2013 09:53:16 Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení wird entfernt
18-11-2013 10:04:44 Windows Modules Installer

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {09AC2C53-FBB1-4F27-AC04-6686AC45EA7D} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Month => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2012-04-06] (Sony Corporation)
Task: {29B1B9D2-E980-43E5-A039-836CBA92F7B9} - System32\Tasks\Sony Corporation\VAIO Care\VCCheckIolo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-05-28] (Sony Corporation)
Task: {3535D66E-EE36-465C-AA33-F50D425DCD00} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-05-28] (Sony Corporation)
Task: {360ED1E4-7BF8-4014-8949-CE25C82324FB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-16] (Google Inc.)
Task: {37CC8E81-8AB7-401F-B582-3BD5411C344F} - System32\Tasks\Sony Corporation\VAIO Care\AutoCheckMessage => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-05-28] (Sony Corporation)
Task: {49C62313-8186-4C41-B1AD-B85224A2256D} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Daily => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2012-04-06] (Sony Corporation)
Task: {4B8CBFE7-B863-4482-8C2C-D3ECE0AB4B77} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-16] (Google Inc.)
Task: {5FCA3D48-B6B7-4E64-9673-B18896F0F0BA} - System32\Tasks\Sony Corporation\VAIO Smart Network\VSN Logon Start => C:\Windows\System32\net
Task: {68CBEDB1-E49C-4AAE-89A7-1F64C5F162C2} - System32\Tasks\Sony Corporation\VAIO Improvement Validation\VAIO Improvement Validation => C:\Program Files\Sony\VAIO Improvement Validation\viv.exe [2011-01-20] (Sony Corporation)
Task: {695D0464-F2E3-47CC-BC9B-F250B932480C} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {6E6B5A94-572E-4B56-9F55-4E021DB57031} - System32\Tasks\Sony Corporation\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2011-09-23] (Sony Corporation)
Task: {773D8BFB-71D8-4D3B-A267-D1110591BDA3} - System32\Tasks\Sony Corporation\VAIO Power Management\VPM Session Change => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2012-01-10] (Sony Corporation)
Task: {8F2A370C-A820-4B51-B1EF-389AB026FA91} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-05-28] (Sony Corporation)
Task: {90990780-F7FE-4761-B774-AACF0A240234} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementMonitorSystem => C:\Program Files\Sony\VAIO Improvement\vim.exe [2011-12-27] (Sony Corporation)
Task: {A3507A9A-958C-40E2-9E02-3DD53DEE07CA} - System32\Tasks\Sony Corporation\VAIO Care\CRMReminder => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-05-28] (Sony Corporation)
Task: {ABC4CDAB-14E1-4894-80F9-24E7820F4140} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementMonitorUser => C:\Program Files\Sony\VAIO Improvement\vim.exe [2011-12-27] (Sony Corporation)
Task: {B3D4AFBE-8E10-4B0C-9CA9-FA3B0A67AA87} - System32\Tasks\Sony Corporation\VAIO Power Management\VPM Unlock => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2012-01-10] (Sony Corporation)
Task: {B55391EB-C9EB-4B8C-A05C-F4DF062378B5} - System32\Tasks\Sony Corporation\VAIO Care\VCMetrics => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-05-28] (Sony Corporation)
Task: {B7944367-C999-49B9-82DF-D9C3E831863E} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2011-09-23] (Sony Corporation)
Task: {B8BE075E-BE74-4763-A510-0B5CBF6EB687} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-11] (Adobe Systems Incorporated)
Task: {BD243991-7C8D-401A-B784-0ECF5B24C9B7} - System32\Tasks\Sony Corporation\VAIO Care\VAU => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-05-28] (Sony Corporation)
Task: {C521FFF7-1F02-4027-AAA3-EFD3D1B357C8} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {CC4343F5-FEDF-4A74-9682-94204C11788C} - System32\Tasks\Sony Corporation\VAIO Gesture Control\VCGULogonTask => C:\Program Files (x86)\Sony\VAIO Camera Gesture Utility\VCGU.exe [2011-12-27] (Sony Corporation)
Task: {CC9E0A25-1AAF-4D0B-BE08-B787BB78C1E4} - System32\Tasks\Sony Corporation\VAIO Power Management\VPM Logon Start => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2012-01-10] (Sony Corporation)
Task: {D2D67E85-BB5F-474A-8E3C-A5FB6981FD8C} - System32\Tasks\VHDInformationCheck => C:\Program Files (x86)\Sony\VAIO Recovery\plugins\InformationCheck.exe [2012-02-24] (Sony Corporation)
Task: {DC021029-D067-48BE-93C6-9133090A8262} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementUploader => C:\Program Files\Sony\VAIO Improvement\viuploader.exe [2011-12-27] (Sony Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-02-20 03:57 - 2012-02-20 03:57 - 00087880 _____ () C:\Program Files\AuthenTec TrueSuite\ssutil.dll
2012-02-20 03:57 - 2012-02-20 03:57 - 00556360 _____ () C:\Program Files\AuthenTec TrueSuite\DataManager.dll
2012-04-05 03:04 - 2012-04-03 21:16 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-11-30 17:49 - 2011-11-30 17:49 - 00276992 _____ () C:\Program Files\Sony\VAIO Care\READ\RecoveryPartitionManagerREAD.dll
2013-10-11 11:21 - 2012-04-06 13:37 - 00021128 _____ () C:\Program Files (x86)\Sony\VAIO Control Center\VESBasePS.dll
2010-10-25 14:13 - 2010-10-25 14:13 - 00019968 _____ () C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Locale\de_DE\acrotray.deu
2013-10-14 02:46 - 2013-10-14 02:46 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\67f2d87ba056e1075fce76a8c50bb57e\IsdiInterop.ni.dll
2013-10-11 10:57 - 2012-02-01 15:25 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2013-10-11 11:04 - 2012-03-23 09:47 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-11-16 16:49 - 2013-11-14 12:28 - 00702416 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\libglesv2.dll
2013-11-16 16:49 - 2013-11-14 12:28 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\libegl.dll
2013-11-16 16:49 - 2013-11-14 12:29 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\pdf.dll
2013-11-16 16:49 - 2013-11-14 12:29 - 00399312 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll
2013-11-16 16:49 - 2013-11-14 12:28 - 01619408 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\ffmpegsumo.dll
2013-11-16 16:49 - 2013-11-14 12:29 - 13582800 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (11/19/2013 09:14:23 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/18/2013 11:07:48 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/17/2013 10:57:18 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/17/2013 10:46:44 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/16/2013 10:28:09 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/16/2013 09:53:12 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/16/2013 06:25:12 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/16/2013 06:05:54 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/16/2013 05:50:20 PM) (Source: MsiInstaller) (User: Gabi-VAIO)
Description: Produkt: Evernote v. 4.5.2 -- Fehler 1730. Um dieses Programm zu entfernen, müssen Sie sich als Administrator anmelden, oder wenden Sie sich an den technischen Support, um Unterstützung zu erhalten.

Error: (11/16/2013 05:24:28 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (11/19/2013 09:47:11 AM) (Source: Microsoft-Windows-HAL) (User: )
Description: Der Speicher wurde beim letzten Leistungsübergang des Systems von der Plattformfirmware beschädigt. Überprüfen Sie, ob für Ihr System aktualisierte Firmware verfügbar ist.

Error: (11/19/2013 09:14:11 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BingBar Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (11/19/2013 09:14:11 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Echtzeit-Scanner" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (11/19/2013 09:14:11 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Echtzeit-Scanner erreicht.

Error: (11/19/2013 09:13:59 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Planer" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (11/19/2013 09:13:59 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Planer erreicht.

Error: (11/18/2013 11:33:32 AM) (Source: DCOM) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}

Error: (11/18/2013 11:13:25 AM) (Source: Microsoft-Windows-HAL) (User: )
Description: Der Speicher wurde beim letzten Leistungsübergang des Systems von der Plattformfirmware beschädigt. Überprüfen Sie, ob für Ihr System aktualisierte Firmware verfügbar ist.

Error: (11/18/2013 11:07:36 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BingBar Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (11/18/2013 11:07:36 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Echtzeit-Scanner" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053


Microsoft Office Sessions:
=========================
Error: (11/19/2013 09:14:23 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/18/2013 11:07:48 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/17/2013 10:57:18 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/17/2013 10:46:44 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/16/2013 10:28:09 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/16/2013 09:53:12 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/16/2013 06:25:12 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/16/2013 06:05:54 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/16/2013 05:50:20 PM) (Source: MsiInstaller)(User: Gabi-VAIO)
Description: Produkt: Evernote v. 4.5.2 -- Fehler 1730. Um dieses Programm zu entfernen, müssen Sie sich als Administrator anmelden, oder wenden Sie sich an den technischen Support, um Unterstützung zu erhalten.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (11/16/2013 05:24:28 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Percentage of memory in use: 58%
Total physical RAM: 3995.28 MB
Available physical RAM: 1669.27 MB
Total Pagefile: 7988.73 MB
Available Pagefile: 4656.07 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:443.29 GB) (Free:378.76 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 5A320D4A)

Partition: GPT Partition Type
==================== End Of Log ============================
         

# AdwCleaner v3.012 - Bericht erstellt am 16/11/2013 um 18:01:38
# Updated 11/11/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Gabi - GABI-VAIO
# Gestartet von : C:\Users\Gabi\Downloads\adwcleaner_3012.exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Datei Gefunden : C:\Windows\System32\roboot64.exe
Ordner Gefunden C:\Program Files (x86)\Amazon Browser Bar
Ordner Gefunden C:\Program Files (x86)\BonanzaDeals
Ordner Gefunden C:\Program Files (x86)\BonanzaDealsLive
Ordner Gefunden C:\Program Files (x86)\MyPC Backup
Ordner Gefunden C:\Program Files (x86)\PC Speed Maximizer
Ordner Gefunden C:\ProgramData\Babylon
Ordner Gefunden C:\ProgramData\BonanzaDealsLive
Ordner Gefunden C:\ProgramData\DSearchLink
Ordner Gefunden C:\ProgramData\eSafe
Ordner Gefunden C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Speed Maximizer
Ordner Gefunden C:\Users\Gabi\AppData\Local\BonanzaDealsLive
Ordner Gefunden C:\Users\Gabi\AppData\LocalLow\Delta
Ordner Gefunden C:\Users\Gabi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
Ordner Gefunden C:\Users\Gabi\AppData\Roaming\PC Speed Maximizer
Ordner Gefunden C:\Users\Gabi\AppData\Roaming\Systweak
Ordner Gefunden C:\Users\Gabi\Documents\PC Speed Maximizer

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : HKCU\Software\a08d8fb13cb941
Schlüssel Gefunden : HKCU\Software\Alexa Internet
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gefunden : HKCU\Software\BabSolution
Schlüssel Gefunden : HKCU\Software\DataMngr
Schlüssel Gefunden : HKCU\Software\DataMngr_Toolbar
Schlüssel Gefunden : HKCU\Software\Delta
Schlüssel Gefunden : HKCU\Software\distromatic
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Schlüssel Gefunden : [x64] HKCU\Software\Alexa Internet
Schlüssel Gefunden : [x64] HKCU\Software\BabSolution
Schlüssel Gefunden : [x64] HKCU\Software\DataMngr
Schlüssel Gefunden : [x64] HKCU\Software\DataMngr_Toolbar
Schlüssel Gefunden : [x64] HKCU\Software\Delta
Schlüssel Gefunden : [x64] HKCU\Software\distromatic
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gefunden : HKLM\SOFTWARE\a08d8fb13cb941
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\##TOOLBAR_DISABLED_##{11111111-1111-1111-1111-110311851132}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{7D86A08B-0A8F-4BE0-B693-F05E6947E780}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\speedupmypc
Schlüssel Gefunden : HKLM\Software\DataMngr
Schlüssel Gefunden : HKLM\Software\Delta
Schlüssel Gefunden : HKLM\Software\eSafeSecControl
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\##TOOLBAR_DISABLED_##{11111111-1111-1111-1111-110311851132}
Schlüssel Gefunden : HKLM\Software\systweak
Schlüssel Gefunden : HKLM\Software\Uniblue
Schlüssel Gefunden : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\##TOOLBAR_DISABLED_##{11111111-1111-1111-1111-110311851132}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\DomaIQ
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\##TOOLBAR_DISABLED_##{11111111-1111-1111-1111-110311851132}
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Google Chrome v31.0.1650.57

[ Datei : C:\Users\Gabi\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [4676 octets] - [16/11/2013 18:01:38]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [4736 octets] ##########
         

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.11.16.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16428
Gabi :: GABI-VAIO [Administrator]

16.11.2013 22:18:18
mbam-log-2013-11-16 (22-18-18).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 227560
Laufzeit: 5 Minute(n), 23 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 23
C:\Users\Gabi\AppData\Local\Temp\2784.tmp (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Gabi\AppData\Local\Temp\913C.tmp (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Gabi\AppData\Local\Temp\A095.tmp (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Gabi\AppData\Local\Temp\FA85.tmp (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Gabi\AppData\Local\Temp\39CEF767-BAB0-7891-9792-C723D60627F7\Latest\BabMaint.exe (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Gabi\AppData\Local\Temp\39CEF767-BAB0-7891-9792-C723D60627F7\Latest\BExternal.dll (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Gabi\AppData\Local\Temp\39CEF767-BAB0-7891-9792-C723D60627F7\Latest\ccp.exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Gabi\AppData\Local\Temp\39CEF767-BAB0-7891-9792-C723D60627F7\Latest\CrxInstaller.dll (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Gabi\AppData\Local\Temp\39CEF767-BAB0-7891-9792-C723D60627F7\Latest\DSearchLink.exe (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Gabi\AppData\Local\Temp\39CEF767-BAB0-7891-9792-C723D60627F7\Latest\MntrDLLInstall.dll (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Gabi\AppData\Local\Temp\39CEF767-BAB0-7891-9792-C723D60627F7\Latest\MyDeltaTB.exe (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Gabi\AppData\Local\Temp\39CEF767-BAB0-7891-9792-C723D60627F7\Latest\Setup.exe (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Gabi\AppData\Local\Temp\adblock-ie.exe\1413d626324948408580489f83058328\adblock-ie.exe (PUP.Optional.BundleInstaller.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Gabi\AppData\Local\Temp\adblock-ie.exe\1413d626324948408580489f83058328\parent.txt (PUP.Optional.BundleInstaller.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Gabi\AppData\Local\Temp\adblock-ie.exe\1413d626324948408580489f83058328\software\Re-markit_2040-2081.exe (PUP.Optional.ReMarkIt.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Gabi\AppData\Local\Temp\OCS\ocs_v8.exe (PUP.Optional.DownloadSponsor.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Gabi\AppData\Local\Temp\Picasa.exe\9055d99fff1a487bb2b057d2230d5538\software\DeltaTB.exe (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Gabi\AppData\Local\Temp\Picasa.exe\9055d99fff1a487bb2b057d2230d5538\software\feven-1-5.exe (PUP.Optional.CrossRider) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\Temp\BonanzaDealsLive.exef78f6 (PUP.Optional.BonanzaDeals.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\Temp\goopdate.dllf78f6 (PUP.Optional.BonanzaDeals.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Gabi\Downloads\SoftonicDownloader_fuer_adblock-ie (1).exe (PUP.Optional.Softonic.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Gabi\Downloads\SoftonicDownloader_fuer_adblock-ie (2).exe (PUP.Optional.Softonic.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Gabi\Downloads\SoftonicDownloader_fuer_adblock-ie.exe (PUP.Optional.Softonic.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
         

Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Home Premium x64
Ran by Gabi on 19.11.2013 at 14:55:43,75
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-954069564-2892504304-3552436822-1002\Software\sweetim



~~~ Files



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{09A25390-C555-46E3-960F-42C0848ED63F}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{0D0D8ABC-4072-4E2E-B817-DFE9573FFAEE}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{0E0725A4-328E-4529-955B-2839457D0DE6}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{132A222D-D84E-4FD8-B0F8-F670D5670389}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{1964E85B-CBDB-4888-8779-BDECFAFE824A}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{1ADB3D79-2FBD-4D46-81E3-1E9FA8BDA2BB}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{213F43D7-98EE-4299-8ADC-D3182C4692A4}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{28B5C03D-C516-4E4B-85C1-2E7203A73D09}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{291902B4-A8E9-459A-A207-1E13DB4847EA}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{3511D458-78D1-44F0-86F3-59B48C6EDBB5}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{35E1B8B5-4E6B-491F-AC4E-159178FC7470}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{36E40B7A-1588-4B82-A5AE-3913A6AF324D}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{49751D2E-3AAA-4D2B-B70B-B6F960BFDE30}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{4FFBB40F-D089-4F63-B680-7C65745C076F}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{5F9CB7CF-BBFC-4F0B-86B4-6FD308A5E004}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{602360DD-DAF3-44B5-9DB7-BEC517D091EC}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{623352B5-7A45-42D6-B848-355692CE024A}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{6D2E81E5-9E19-473A-B10C-12B90D73DF3A}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{711108C1-AEC4-4B6D-9698-D4F34A43997A}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{71A865E0-57BB-411A-8176-2631B76687DD}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{754C67BA-983B-40FC-A546-6CAFAE770BFB}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{77501E52-4BDF-4336-AF13-B9EEC7E1CE44}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{86FB70EE-2149-4EBE-8DAA-C98F80FC5DC6}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{884A2A6E-66AD-438A-B0B6-FBC42DC7B297}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{8EC61CBC-077F-481E-B140-94D209EBE4E7}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{98EA0AD4-6A34-4D89-A56B-031458C59A7E}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{A0B86AF6-8480-4A52-89F7-A2CFDD83146A}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{A8888DAA-8D24-436A-983D-E47A3A699F23}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{AA52A9CD-1D9F-426A-A33D-1AC1EDAB1C28}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{AAC9AD51-D09D-4C09-845A-6F78A2F46165}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{AFEA07F0-5AC6-49B1-8B9B-3EC94286AE80}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{B3766D5A-C80F-4794-97B3-193D139B495C}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{B88BCFE0-7905-4C7A-9976-9148B9C8858E}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{B95BD5E3-D7CD-4173-BAD9-FC3300DE0E40}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{BCDE2688-DD71-4771-A83D-2FA6CA9A03D7}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{C19A9345-7B09-401F-83ED-EA4D58EC3CA6}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{C4CD4D51-F444-49A3-A8BA-D768546306B5}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{CB5C9FF6-C3A7-4DAD-A2AD-7BF39F880BD6}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{CD1ABB6C-C745-46E4-8376-463937375C13}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{D157628E-B2F3-4E70-A30D-21D09670791D}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{D6DCB602-500A-4FD3-A8EF-89EC9990472F}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{D6E644DA-76D8-4E73-962A-6482561290F5}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{D98991A9-6A72-4C89-82F6-B442F002523D}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{DB2F0EAE-5CAE-47C2-B96D-58D77A61471A}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{DB8750ED-F8B3-44DF-9345-1FDF4A44C4C3}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{DCB9EF23-C142-49C9-8AF9-0A42FD53AF8F}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{E8EFD694-7C47-4BD9-9C19-57CEFCA74803}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{ECC0C552-57B2-460B-8A1D-6C2938CE929F}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{EF1326C1-83EE-4C41-AF6D-BE7E9FC39ECB}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{F46EEF12-0195-42DD-9DC8-3A02105BAD23}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{F72CBE26-AAED-47D4-9DC5-76708CAA7692}
Successfully deleted: [Empty Folder] C:\Users\Gabi\appdata\local\{FED74EED-2509-4614-8C32-49BB6DBA5447}



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 19.11.2013 at 15:01:56,30
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~