| |
| |||||||
Log-Analyse und Auswertung: SpywarebefallWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
09.12.2013, 09:36
| #9 |
 |  Spywarebefall Hi Rechner läuft gut bzw. viel besser hab ich das Gefühl, keine Malware so weit ich sehen kann. FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 08-12-2013 02
Ran by Riehmer (administrator) on RIEHMER-PC on 08-12-2013 14:49:20
Running from C:\Users\Riehmer\Desktop
Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Acronis) C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
(Acronis) C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
(Acronis) C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgui.exe
(Packard Bell BV) C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Acronis) C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
() C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
(Google Inc.) C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgwdsvc.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
() C:\Program Files\PACKARD BELL\Packard Bell Recovery Management\Service\ETService.exe
(Samsung) C:\Program Files\Samsung\Kies\Kies.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Teruten) C:\Windows\System32\FsUsbExService.Exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(ArcSoft, Inc.) C:\Program Files\MSI\TotalMedia 3.5\TMMonitor.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\VS7DEBUG\mdm.exe
(O2Micro International) C:\Windows\System32\drivers\o2flash.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
() C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe
(TuneUp Software) C:\Windows\System32\TUProgSt.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgnsx.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\tv_w32.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Desktop.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil32_11_9_900_117_ActiveX.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe [178712 2008-04-15] (Intel Corporation)
HKLM\...\Run: [SmpcSys] - C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe [1038136 2008-07-07] (Packard Bell BV)
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [6294048 2008-09-18] (Realtek Semiconductor)
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2008-01-21] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM\...\Run: [TrueImageMonitor.exe] - C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe [2622296 2008-04-21] (Acronis)
HKLM\...\Run: [AcronisTimounterMonitor] - C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe [911168 2008-04-21] (Acronis)
HKLM\...\Run: [Acronis Scheduler2 Service] - C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe [136472 2008-04-21] (Acronis)
HKLM\...\Run: [Skytel] - C:\Windows\SkyTel.exe [1833504 2008-09-18] (Realtek Semiconductor Corp.)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59240 2012-02-20] (Apple Inc.)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [AVG_UI] - C:\Program Files\AVG\AVG2014\avgui.exe [4956176 2013-11-07] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)
HKCU\...\Run: [SmpcSys] - C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe [1038136 2008-07-07] (Packard Bell BV)
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [23975720 2009-02-04] (Skype Technologies S.A.)
HKCU\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [68856 2009-02-10] (Google Inc.)
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehtray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [KiesPreload] - C:\Program Files\Samsung\Kies\Kies.exe [1564528 2013-09-04] (Samsung)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\wmpnscfg.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
Lsa: [Authentication Packages] msv1_0 relog_ap
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.homburg.de/content/pages/home.htm
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {7001AD53-F5C5-4239-9B99-7F1F57A0D82D} URL = hxxp://www.google.de/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7GGLL_de
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll (Google Inc.)
Toolbar: HKCU - &Links - {F2CF5485-4E02-4F68-819C-B92DE9277049} - C:\Windows\System32\ieframe.dll (Microsoft Corporation)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - No File
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
ShellExecuteHooks: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\System32\ezUPBHook.dll [49152 2009-02-10] (EasyBits Software Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.6.1
FireFox:
========
FF ProfilePath: C:\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default
FF NewTab: hxxp://www.google.com/
FF DefaultSearchEngine: Google
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll No File
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @pack.google.com/Google Updater;version=14 - C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF Extension: No Name - C:\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
FF Extension: No Name - C:\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
FF Extension: No Name - C:\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\{af6ac4f2-9825-4fb6-a600-92bc5361f209}
FF Extension: No Name - C:\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}
FF Extension: Adblock Plus - C:\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
FF Extension: No Name - C:\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
========================== Services (Whitelisted) =================
R2 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 AcrSch2Svc; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [431384 2008-04-21] (Acronis)
R2 AdobeActiveFileMonitor6.0; C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe [124832 2007-09-11] ()
S3 AVG Security Toolbar Service; C:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe [167264 2011-11-10] ()
R2 AVGIDSAgent; C:\Program Files\AVG\AVG2014\avgidsagent.exe [3478544 2013-11-11] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
R2 ETService; C:\Program Files\Packard Bell\Packard Bell Recovery Management\Service\ETService.exe [24576 2008-07-16] ()
S2 gupdate1c9c80b5178f9c0; C:\Program Files\Google\Update\GoogleUpdate.exe [133104 2009-04-28] (Google Inc.)
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 o2flash; C:\Windows\system32\DRIVERS\o2flash.exe [71512 2008-08-22] (O2Micro International)
R2 TryAndDecideService; C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe [498952 2008-04-21] ()
S3 TuneUp.Defrag; C:\Windows\System32\TuneUpDefragService.exe [361288 2010-04-13] (TuneUp Software)
R2 TuneUp.ProgramStatisticsSvc; C:\Windows\System32\TUProgSt.exe [604488 2010-04-13] (TuneUp Software)
==================== Drivers (Whitelisted) ====================
S3 AF15BDA; C:\Windows\System32\DRIVERS\AF15BDA.sys [327296 2008-01-24] (AfaTech )
R3 Afc; C:\Windows\System32\drivers\Afc.sys [18688 2006-11-10] (Arcsoft, Inc.)
R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [120600 2013-11-05] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [209176 2013-11-04] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [147768 2013-10-24] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [22840 2013-09-17] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [176952 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [222520 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [102712 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [27448 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [193848 2013-08-01] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [37664 2013-11-12] (AVG Technologies)
R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-07-18] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R3 RTHDMIAzAudService; C:\Windows\System32\drivers\RtHDMIV.sys [147168 2008-06-18] (Realtek Semiconductor Corp.)
R0 tdrpman; C:\Windows\System32\DRIVERS\tdrpman.sys [368480 2009-02-10] (Acronis)
R2 tifsfilter; C:\Windows\System32\DRIVERS\tifsfilt.sys [44384 2009-02-10] (Acronis)
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
S3 catchme; \??\C:\Users\Riehmer\AppData\Local\Temp\catchme.sys [x]
S3 hwusbfake; system32\DRIVERS\ewusbfake.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-08 14:49 - 2013-12-08 14:49 - 00015294 _____ C:\Users\Riehmer\Desktop\FRST.txt
2013-12-08 14:49 - 2013-12-08 14:49 - 00000000 ____D C:\FRST
2013-12-08 14:48 - 2013-12-08 14:48 - 01060441 _____ (Farbar) C:\Users\Riehmer\Desktop\FRST.exe
2013-12-06 10:42 - 2013-10-18 01:11 - 00024064 _____ C:\Windows\zoek-delete.exe
2013-12-06 10:25 - 2013-12-06 10:48 - 00010294 _____ C:\zoek-results.log
2013-12-06 10:24 - 2013-12-06 10:38 - 00000000 ____D C:\zoek_backup
2013-12-06 10:21 - 2013-12-06 10:21 - 04186953 _____ C:\Users\Riehmer\Downloads\zoek.rar
2013-12-06 10:21 - 2013-12-06 10:21 - 00000000 ____D C:\Users\Riehmer\Downloads\zoek
2013-12-06 10:00 - 2013-12-06 10:00 - 00000868 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-06 10:00 - 2013-12-06 10:00 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-12-06 10:00 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-06 09:59 - 2013-12-06 09:59 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Riehmer\Downloads\mbam-setup-1.75.0.1300 (2).exe
2013-12-05 10:09 - 2013-12-05 10:09 - 00001141 _____ C:\Users\Riehmer\Desktop\JRT.txt
2013-12-05 10:04 - 2013-12-05 10:04 - 00000000 ____D C:\Windows\ERUNT
2013-12-05 09:56 - 2013-12-05 09:56 - 01034531 _____ (Thisisu) C:\Users\Riehmer\Desktop\JRT.exe
2013-12-05 09:55 - 2013-12-05 09:55 - 01110034 _____ C:\Users\Riehmer\Desktop\adwcleaner.exe
2013-12-05 09:22 - 2013-12-05 09:22 - 00014251 _____ C:\ComboFix.txt
2013-12-05 09:10 - 2013-12-05 09:22 - 00000000 ____D C:\ComboFix
2013-12-05 09:10 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2013-12-05 09:10 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2013-12-05 09:10 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-12-05 09:10 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-12-05 09:10 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-12-05 09:10 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2013-12-05 09:10 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2013-12-05 09:10 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2013-12-05 09:09 - 2013-12-05 09:22 - 00000000 ____D C:\Qoobox
2013-12-05 09:09 - 2013-12-05 09:20 - 00000000 ____D C:\Windows\erdnt
2013-12-05 09:07 - 2013-12-05 09:07 - 05152313 ____R (Swearware) C:\Users\Riehmer\Desktop\ComboFix.exe
2013-12-03 20:41 - 2013-12-03 20:41 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-11-29 15:35 - 2013-11-29 15:35 - 00869456 _____ C:\Users\Riehmer\Downloads\Norton_Removal_Tool.exe
2013-11-29 12:14 - 2013-11-29 12:14 - 00069146 _____ C:\Users\Riehmer\Desktop\Extras.Txt
2013-11-29 12:12 - 2013-11-29 12:12 - 00116862 _____ C:\Users\Riehmer\Desktop\OTL.Txt
2013-11-29 11:23 - 2013-12-05 10:00 - 00000000 ____D C:\AdwCleaner
2013-11-29 11:20 - 2013-11-29 11:20 - 00602112 _____ (OldTimer Tools) C:\Users\Riehmer\Desktop\OTL.exe
2013-11-29 09:20 - 2013-11-29 09:20 - 00000000 ____D C:\Users\Riehmer\AppData\Roaming\Malwarebytes
2013-11-29 09:20 - 2013-11-29 09:20 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-29 09:19 - 2013-11-29 09:20 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Riehmer\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-11-29 09:16 - 2013-11-29 09:16 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Riehmer\Downloads\mbam-setup-1.75.0.1300.exe
2013-11-12 22:56 - 2013-10-13 11:42 - 12344832 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-12 22:56 - 2013-10-13 11:08 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-12 22:56 - 2013-10-13 10:48 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-12 22:56 - 2013-10-13 10:37 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-12 22:56 - 2013-10-13 10:35 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-12 22:56 - 2013-10-13 10:35 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-12 22:56 - 2013-10-13 10:33 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-12 22:56 - 2013-10-13 10:32 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-12 22:56 - 2013-10-13 10:30 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-12 22:56 - 2013-10-13 10:30 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-12 22:56 - 2013-10-13 10:29 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-12 22:56 - 2013-10-13 10:27 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-12 22:56 - 2013-10-13 10:27 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-12 22:56 - 2013-10-13 10:26 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-12 22:56 - 2013-10-13 10:25 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-12 22:56 - 2013-10-13 10:20 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-12 22:37 - 2013-10-11 03:08 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-12 22:37 - 2013-10-11 03:07 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-12 22:37 - 2013-10-11 01:39 - 00218228 _____ C:\Windows\system32\WFP.TMF
2013-11-12 22:37 - 2013-10-03 13:45 - 00993792 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-12 22:37 - 2013-10-03 13:45 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
==================== One Month Modified Files and Folders =======
2013-12-08 14:49 - 2013-12-08 14:49 - 00015294 _____ C:\Users\Riehmer\Desktop\FRST.txt
2013-12-08 14:49 - 2013-12-08 14:49 - 00000000 ____D C:\FRST
2013-12-08 14:48 - 2013-12-08 14:48 - 01060441 _____ (Farbar) C:\Users\Riehmer\Desktop\FRST.exe
2013-12-08 14:46 - 2011-02-12 21:38 - 00000000 ____D C:\ProgramData\MFAData
2013-12-08 14:46 - 2009-01-15 11:13 - 02030054 _____ C:\Windows\WindowsUpdate.log
2013-12-08 14:41 - 2010-06-14 17:13 - 00000522 _____ C:\Windows\Tasks\1-Klick-Wartung.job
2013-12-08 14:41 - 2009-07-05 18:47 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-08 14:41 - 2009-01-15 11:22 - 00000000 _____ C:\Windows\system32\LogConfigTemp.xml
2013-12-08 14:40 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-08 14:40 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-08 14:40 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-06 17:13 - 2008-01-21 08:16 - 00005760 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-06 10:48 - 2013-12-06 10:25 - 00010294 _____ C:\zoek-results.log
2013-12-06 10:48 - 2013-08-15 17:43 - 00006772 _____ C:\Windows\PFRO.log
2013-12-06 10:45 - 2006-11-02 14:01 - 00032512 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-12-06 10:38 - 2013-12-06 10:24 - 00000000 ____D C:\zoek_backup
2013-12-06 10:21 - 2013-12-06 10:21 - 04186953 _____ C:\Users\Riehmer\Downloads\zoek.rar
2013-12-06 10:21 - 2013-12-06 10:21 - 00000000 ____D C:\Users\Riehmer\Downloads\zoek
2013-12-06 10:00 - 2013-12-06 10:00 - 00000868 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-06 10:00 - 2013-12-06 10:00 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-12-06 09:59 - 2013-12-06 09:59 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Riehmer\Downloads\mbam-setup-1.75.0.1300 (2).exe
2013-12-05 20:01 - 2009-07-23 14:56 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-05 10:09 - 2013-12-05 10:09 - 00001141 _____ C:\Users\Riehmer\Desktop\JRT.txt
2013-12-05 10:04 - 2013-12-05 10:04 - 00000000 ____D C:\Windows\ERUNT
2013-12-05 10:00 - 2013-11-29 11:23 - 00000000 ____D C:\AdwCleaner
2013-12-05 09:56 - 2013-12-05 09:56 - 01034531 _____ (Thisisu) C:\Users\Riehmer\Desktop\JRT.exe
2013-12-05 09:55 - 2013-12-05 09:55 - 01110034 _____ C:\Users\Riehmer\Desktop\adwcleaner.exe
2013-12-05 09:22 - 2013-12-05 09:22 - 00014251 _____ C:\ComboFix.txt
2013-12-05 09:22 - 2013-12-05 09:10 - 00000000 ____D C:\ComboFix
2013-12-05 09:22 - 2013-12-05 09:09 - 00000000 ____D C:\Qoobox
2013-12-05 09:22 - 2006-11-02 12:18 - 00000000 __RHD C:\Users\Default
2013-12-05 09:22 - 2006-11-02 12:18 - 00000000 ___RD C:\Users\Public
2013-12-05 09:20 - 2013-12-05 09:09 - 00000000 ____D C:\Windows\erdnt
2013-12-05 09:20 - 2006-11-02 11:23 - 00000215 _____ C:\Windows\system.ini
2013-12-05 09:07 - 2013-12-05 09:07 - 05152313 ____R (Swearware) C:\Users\Riehmer\Desktop\ComboFix.exe
2013-12-03 21:54 - 2009-02-11 10:45 - 00000000 ____D C:\Users\Riehmer\Documents\Patrick
2013-12-03 20:41 - 2013-12-03 20:41 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-11-29 17:16 - 2009-02-10 13:42 - 00000000 ___RD C:\Users\Riehmer\Desktop\xyz
2013-11-29 15:35 - 2013-11-29 15:35 - 00869456 _____ C:\Users\Riehmer\Downloads\Norton_Removal_Tool.exe
2013-11-29 12:14 - 2013-11-29 12:14 - 00069146 _____ C:\Users\Riehmer\Desktop\Extras.Txt
2013-11-29 12:12 - 2013-11-29 12:12 - 00116862 _____ C:\Users\Riehmer\Desktop\OTL.Txt
2013-11-29 11:54 - 2008-11-13 12:12 - 00000000 ____D C:\Program Files\PACKARD BELL
2013-11-29 11:54 - 2008-11-13 04:22 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2013-11-29 11:37 - 2012-07-03 15:07 - 00001849 _____ C:\Users\Public\Desktop\Adobe Reader 9.lnk
2013-11-29 11:33 - 2008-01-21 08:15 - 00000000 ____D C:\Windows\WindowsMobile
2013-11-29 11:30 - 2011-07-16 14:01 - 00000000 ____D C:\ProgramData\Uniblue
2013-11-29 11:30 - 2011-07-16 13:58 - 00000000 ____D C:\Program Files\Uniblue
2013-11-29 11:26 - 2009-07-05 18:47 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-29 11:20 - 2013-11-29 11:20 - 00602112 _____ (OldTimer Tools) C:\Users\Riehmer\Desktop\OTL.exe
2013-11-29 10:55 - 2009-04-28 15:08 - 00001052 _____ C:\Windows\Tasks\Google Software Updater.job
2013-11-29 10:44 - 2012-07-16 10:38 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-29 09:20 - 2013-11-29 09:20 - 00000000 ____D C:\Users\Riehmer\AppData\Roaming\Malwarebytes
2013-11-29 09:20 - 2013-11-29 09:20 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-29 09:20 - 2013-11-29 09:19 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Riehmer\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-11-29 09:16 - 2013-11-29 09:16 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Riehmer\Downloads\mbam-setup-1.75.0.1300.exe
2013-11-26 17:40 - 2013-10-12 19:40 - 00000820 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2013-11-26 17:39 - 2011-12-20 22:07 - 00000000 ____D C:\$AVG
2013-11-19 20:43 - 2009-04-28 15:15 - 00001925 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-11-15 21:53 - 2009-02-10 16:11 - 00000000 ____D C:\Users\Riehmer\AppData\Local\Paint.NET
2013-11-14 11:37 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\rescache
2013-11-14 11:04 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\system32\de-DE
2013-11-12 22:55 - 2013-07-26 18:09 - 00000000 ____D C:\Windows\system32\MRT
2013-11-12 22:53 - 2006-11-02 11:24 - 80340640 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-11-12 22:22 - 2012-11-12 21:14 - 00037664 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx86.sys
Files to move or delete:
====================
C:\Users\Riehmer\AppData\Roaming\desktop.ini
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-08 14:46
==================== End Of Log ============================
--- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 08-12-2013 02
Ran by Riehmer at 2013-12-08 14:49:53
Running from C:\Users\Riehmer\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: AVG AntiVirus Free Edition 2014 (Disabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2014 (Disabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
==================== Installed Programs ======================
2007 Microsoft Office Suite Service Pack 1 (SP1)
32 Bit HP CIO Components Installer (Version: 6.1.1)
Acronis*True*Image*Home (Version: 11.0.8105)
Adobe Flash Player 11 ActiveX (Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (Version: 11.9.900.117)
Adobe Photoshop Elements 6.0 (Version: 6.0)
Adobe Reader 9.5.5 - Deutsch (Version: 9.5.5)
Apple Application Support (Version: 2.1.7)
ArcSoft TotalMedia 3.5
ATI Catalyst Install Manager (Version: 3.0.682.0)
AVG 2014 (Version: 14.0.3658)
AVG 2014 (Version: 14.0.4259)
AVG 2014 (Version: 2014.0.4259)
Catalyst Control Center Core Implementation (Version: 2008.0703.2236.38526)
Catalyst Control Center Graphics Full Existing (Version: 2008.0703.2236.38526)
Catalyst Control Center Graphics Full New (Version: 2008.0703.2236.38526)
Catalyst Control Center Graphics Light (Version: 2008.0703.2236.38526)
Catalyst Control Center Graphics Previews Vista (Version: 2008.0703.2236.38526)
Catalyst Control Center InstallProxy (Version: 2008.0703.2236.38526)
Catalyst Control Center Localization Chinese Standard (Version: 2008.0703.2236.38526)
Catalyst Control Center Localization Chinese Traditional (Version: 2008.0703.2236.38526)
Catalyst Control Center Localization Czech (Version: 2008.0703.2236.38526)
Catalyst Control Center Localization Danish (Version: 2008.0703.2236.38526)
Catalyst Control Center Localization Dutch (Version: 2008.0703.2236.38526)
Catalyst Control Center Localization Finnish (Version: 2008.0703.2236.38526)
Catalyst Control Center Localization French (Version: 2008.0703.2236.38526)
Catalyst Control Center Localization German (Version: 2008.0703.2236.38526)
Catalyst Control Center Localization Greek (Version: 2008.0703.2236.38526)
Catalyst Control Center Localization Hungarian (Version: 2008.0703.2236.38526)
Catalyst Control Center Localization Italian (Version: 2008.0703.2236.38526)
Catalyst Control Center Localization Japanese (Version: 2008.0703.2236.38526)
Catalyst Control Center Localization Korean (Version: 2008.0703.2236.38526)
Catalyst Control Center Localization Norwegian (Version: 2008.0703.2236.38526)
Catalyst Control Center Localization Polish (Version: 2008.0703.2236.38526)
Catalyst Control Center Localization Portuguese (Version: 2008.0703.2236.38526)
Catalyst Control Center Localization Russian (Version: 2008.0703.2236.38526)
Catalyst Control Center Localization Spanish (Version: 2008.0703.2236.38526)
Catalyst Control Center Localization Swedish (Version: 2008.0703.2236.38526)
Catalyst Control Center Localization Thai (Version: 2008.0703.2236.38526)
Catalyst Control Center Localization Turkish (Version: 2008.0703.2236.38526)
CCC Help Chinese Standard (Version: 2008.0703.2235.38526)
CCC Help Chinese Traditional (Version: 2008.0703.2235.38526)
CCC Help Czech (Version: 2008.0703.2235.38526)
CCC Help Danish (Version: 2008.0703.2235.38526)
CCC Help Dutch (Version: 2008.0703.2235.38526)
CCC Help English (Version: 2008.0703.2235.38526)
CCC Help Finnish (Version: 2008.0703.2235.38526)
CCC Help French (Version: 2008.0703.2235.38526)
CCC Help German (Version: 2008.0703.2235.38526)
CCC Help Greek (Version: 2008.0703.2235.38526)
CCC Help Hungarian (Version: 2008.0703.2235.38526)
CCC Help Italian (Version: 2008.0703.2235.38526)
CCC Help Japanese (Version: 2008.0703.2235.38526)
CCC Help Korean (Version: 2008.0703.2235.38526)
CCC Help Norwegian (Version: 2008.0703.2235.38526)
CCC Help Polish (Version: 2008.0703.2235.38526)
CCC Help Portuguese (Version: 2008.0703.2235.38526)
CCC Help Russian (Version: 2008.0703.2235.38526)
CCC Help Spanish (Version: 2008.0703.2235.38526)
CCC Help Swedish (Version: 2008.0703.2235.38526)
CCC Help Thai (Version: 2008.0703.2235.38526)
CCC Help Turkish (Version: 2008.0703.2235.38526)
ccc-core-static (Version: 2008.0703.2236.38526)
ccc-utility (Version: 2008.0703.2236.38526)
Compatibility Pack für 2007 Office System (Version: 12.0.4518.1014)
DJ_AIO_06_F2400_SW_Min (Version: 130.0.373.000)
DreamBoxEdit -- The one and only settings editor for your Dreambox
EasyBits Magic Desktop
FoxTab PDF Creator
Google Chrome (Version: 31.0.1650.57)
Google Earth (Version: 7.1.1.1888)
Google Update Helper (Version: 1.3.21.165)
Google Updater (Version: 2.4.2432.1652)
HDRegDE (Version: 2.0.0)
HP Deskjet F2400 All-In-One Driver 13.0 Rel .6 (Version: 13.0)
Intel(R) Matrix Storage Manager
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)
MediaMonkey 3.0 (Version: 3.0)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320)
Microsoft Office Access MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Enterprise 2007 (Version: 12.0.4518.1014)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6215.1000)
Microsoft Office Groove MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Home and Student 2007 (Version: 12.0.6215.1000)
Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6215.1000)
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6215.1000)
Microsoft Office PowerPoint Viewer 2007 (German) (Version: 12.0.4518.1014)
Microsoft Office Proof (English) 2007 (Version: 12.0.6213.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6213.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6213.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6213.1000)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6215.1000)
Microsoft Office Suite Activation Assistant (Version: 2.9)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6215.1000)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Works (Version: 9.7.0621)
Microsoft Works 9.0 SE
Microsoft_VC100_CRT_SP1_x86 (Version: 10.0.40219.1)
Mobile Partner (Version: 16.002.03.01.40)
Move Networks Media Player for Internet Explorer
Mozilla Firefox (3.6.28) (Version: 3.6.28 (de))
MSVC80_x86_v2 (Version: 1.0.3.0)
MSVC90_x86 (Version: 1.0.1.2)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
neroxml (Version: 1.0.0)
Nokia Connectivity Cable Driver (Version: 7.1.69.0)
Notepad++ (Version: 5.9.3)
O2Micro Flash Memory Card Reader Driver (x86) (Version: 3.28)
Packard Bell ImageWriter (Version: 1.00.0000)
Packard Bell Recovery Management (Version: 3.1.3005)
Packard Bell Updator (Version: 3.00.0000)
Paint.NET v3.36 (Version: 3.36.0)
PC Connectivity Solution (Version: 11.5.29.0)
Realtek 8169 8168 8101E 8102E Ethernet Driver (Version: 1.00.0000)
Realtek High Definition Audio Driver (Version: 6.0.1.5704)
Samsung Kies (Version: 2.3.3.12085_7)
Samsung Story Album Viewer (Version: 1.0.0.13054_1)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.27.0)
Scan (Version: 13.0.0.0)
Setup My PC (Version: 3.00.0000)
Skins (Version: 2008.0703.2236.38526)
Skype™ 4.0 (Version: 4.0.206)
TeamViewer 8 (Version: 8.0.22298)
Toolbox (Version: 130.0.648.000)
TuneUp Utilities 2009 (Version: 8.0.3310.3)
Ulead DVD PictureShow 2 (Version: 2.00.0000)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3)
Update for Office 2007 (KB946691)
Visual Studio 2012 x86 Redistributables (Version: 14.0.0.1)
VLC media player 1.1.5 (Version: 1.1.5)
WinRAR
==================== Restore Points =========================
16-10-2013 19:39:22 Windows Update
16-10-2013 20:40:55 Gerätetreiber-Paketinstallation: SAMSUNG Electronics Co., Ltd. USB-Controller
16-10-2013 20:41:20 Gerätetreiber-Paketinstallation: SAMSUNG Electronics Co., Ltd. Anschlüsse (COM & LPT)
16-10-2013 20:41:45 Gerätetreiber-Paketinstallation: SAMSUNG Electronics Co., Ltd. Modems
16-10-2013 20:42:25 Gerätetreiber-Paketinstallation: SAMSUNG Electronics Co., Ltd. USB-Controller
16-10-2013 20:42:48 Gerätetreiber-Paketinstallation: SAMSUNG Electronics Co., Ltd. Modems
16-10-2013 20:43:19 Gerätetreiber-Paketinstallation: SAMSUNG Electronics Co., Ltd. Anschlüsse (COM & LPT)
16-10-2013 20:44:02 Gerätetreiber-Paketinstallation: SAMSUNG Electronics Co., Ltd. USB-Controller
16-10-2013 20:44:24 Gerätetreiber-Paketinstallation: SAMSUNG Electronics Co., Ltd. ADB Interface
16-10-2013 20:44:50 Gerätetreiber-Paketinstallation: SAMSUNG Electronics Co., Ltd. Modems
16-10-2013 20:45:14 Gerätetreiber-Paketinstallation: SAMSUNG Electronics Co., Ltd. Netzwerkadapter
16-10-2013 20:45:43 Gerätetreiber-Paketinstallation: SAMSUNG Electronics Co., Ltd. Anschlüsse (COM & LPT)
16-10-2013 20:46:54 Gerätetreiber-Paketinstallation: SAMSUNG Electronics Co., Ltd.
16-10-2013 20:47:13 Gerätetreiber-Paketinstallation: SAMSUNG Electronics Co., Ltd. USB-Controller
16-10-2013 20:47:43 Gerätetreiber-Paketinstallation: SAMSUNG Electronics Co., Ltd. Anschlüsse (COM & LPT)
16-10-2013 20:48:06 Gerätetreiber-Paketinstallation: SAMSUNG Electronics Co., Ltd. Modems
16-10-2013 20:48:30 Gerätetreiber-Paketinstallation: SAMSUNG Electronics Co., Ltd. Tragbare Geräte
16-10-2013 20:48:56 Gerätetreiber-Paketinstallation: SAMSUNG Electronics Co., Ltd. Netzwerkadapter
16-10-2013 20:49:21 Gerätetreiber-Paketinstallation: SAMSUNG Electronics Co., Ltd. Anschlüsse (COM & LPT)
16-10-2013 20:49:47 Gerätetreiber-Paketinstallation: SAMSUNG Electronics Co., Ltd. Netzwerkadapter
16-10-2013 20:50:19 Gerätetreiber-Paketinstallation: SAMSUNG Electronics Co., Ltd. Anschlüsse (COM & LPT)
16-10-2013 20:50:47 Gerätetreiber-Paketinstallation: SAMSUNG Electronics Co., Ltd. ADB Interface
16-10-2013 20:51:14 Gerätetreiber-Paketinstallation: SAMSUNG Electronics Co., Ltd. USB-Controller
16-10-2013 20:51:42 Gerätetreiber-Paketinstallation: SAMSUNG Electronics Co., Ltd. Netzwerkadapter
16-10-2013 20:52:09 Gerätetreiber-Paketinstallation: SAMSUNG Electronics Co., Ltd. USB-Controller
16-10-2013 20:52:35 Gerätetreiber-Paketinstallation: SAMSUNG Electronics Co., Ltd. USB-Controller
16-10-2013 20:54:32 Installiert Samsung Story Album Viewer
22-10-2013 08:26:54 Windows Update
25-10-2013 16:32:11 Windows Update
28-10-2013 22:02:04 Geplanter Prüfpunkt
07-11-2013 17:10:06 Geplanter Prüfpunkt
12-11-2013 21:52:18 Windows Update
18-11-2013 19:34:22 Geplanter Prüfpunkt
19-11-2013 20:18:14 Geplanter Prüfpunkt
29-11-2013 07:10:00 Geplanter Prüfpunkt
29-11-2013 10:53:37 Entfernt MetaBoli
04-12-2013 17:08:33 Geplanter Prüfpunkt
05-12-2013 06:55:26 Geplanter Prüfpunkt
06-12-2013 09:25:04 zoek.exe restore point
==================== Hosts content: ==========================
2006-11-02 11:23 - 2013-12-05 09:20 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {27CA55EE-7D43-4C51-B4EE-5DB32E0B2BEE} - System32\Tasks\Microsoft\Windows\WindowsCalendar\Reminders - Riehmer => C:\Program Files\Windows Calendar\WinCal.exe [2009-04-10] (Microsoft Corporation)
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {35AC561E-EF7B-4B4B-B920-E083C6D76C90} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2009-04-28] (Google Inc.)
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {3C9AE84C-7637-40F3-9DC2-25A3033C10B5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-10] (Adobe Systems Incorporated)
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\System32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {94A41BD4-AAFD-4C48-B3BE-CD4EAA752313} - System32\Tasks\HDReg => C:\Program Files\HDReg\HDRegApp.exe [2008-02-01] (Altwood Systems Ltd)
Task: {9E8C609C-8A13-4424-BF01-17BDBCE77E82} - System32\Tasks\1-Klick-Wartung => C:\Program Files\TuneUp Utilities 2009\OneClickStarter.exe [2009-11-16] (TuneUp Software GmbH)
Task: {AFA11038-6A07-49C0-A896-9B2FC05AB794} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2009-04-28] (Google Inc.)
Task: {B2656CF8-270E-4287-A65B-D3101E1777B7} - System32\Tasks\ArcSoft Connect Daemon => C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2010-10-27] (ArcSoft Inc.)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\System32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: C:\Windows\Tasks\1-Klick-Wartung.job => C:\Program Files\TuneUp Utilities 2009\OneClickStarter.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Google Software Updater.job => C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2009-02-10 14:16 - 2007-05-22 10:59 - 00128512 _____ () C:\Program Files\WinRAR\rarext.dll
2011-07-18 22:04 - 2011-07-18 22:04 - 00296448 _____ () C:\Program Files\Notepad++\NppShell_04.dll
2008-04-21 22:43 - 2008-04-21 22:43 - 01336600 _____ () C:\Program Files\Acronis\TrueImageHome\fox.dll
2008-11-13 12:09 - 2008-07-04 04:37 - 00159744 _____ () C:\Windows\system32\atitmmxx.dll
2013-10-16 22:02 - 2013-10-16 22:02 - 01931264 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.UI\dda7fe74dac6ecd178928032a7737f47\Kies.UI.ni.dll
2013-10-16 22:02 - 2013-10-16 22:02 - 00079360 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.MVVM\e3ed6d800bc802eb464df3d6edbe262d\Kies.MVVM.ni.dll
2013-10-16 22:02 - 2013-10-16 22:02 - 00189952 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\897b793626102d13fe581f59a1009f0e\Kies.Common.DeviceServiceLib.Interface.ni.dll
2013-10-16 22:03 - 2013-10-16 22:03 - 00367104 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\DevicePhoto\864ed58a5d0dad29d91694a47148b417\DevicePhoto.ni.dll
2013-10-16 22:03 - 2013-10-16 22:03 - 00301568 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\DeviceVideo\184c708c2aff187c0282217ed5d6aff9\DeviceVideo.ni.dll
2013-10-16 22:03 - 2013-10-16 22:03 - 00616448 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\DevicePodcast\6be1468e9e409a8704c5c5e895eea29e\DevicePodcast.ni.dll
2013-10-16 22:03 - 2013-10-16 22:03 - 00307200 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\DummyStorePlugin\6577f6dfb5a450d0bbe907f4ac5c7ca6\DummyStorePlugin.ni.dll
2013-10-16 22:03 - 2013-10-16 22:03 - 14972928 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Theme\fbaadafecb211c0faea42e24cb927249\Kies.Theme.ni.dll
2013-10-16 22:02 - 2013-10-16 22:02 - 00581632 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\0479897f82c81e0c5c2f23951882c07e\Kies.Common.DeviceServiceLib.FileService.ni.dll
2013-10-16 22:02 - 2013-10-16 22:02 - 00046592 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\edc38c2279bb5fcb9741cd2fdf10e20a\Kies.Common.DeviceServiceLib.FirmwareUpdate.FirmwareUpdateAgentHelper.ni.dll
2013-10-16 22:02 - 2013-10-16 22:02 - 01002496 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\DeviceCommonLib\2f8e060dcb222f52e78034fb0185c26f\DeviceCommonLib.ni.dll
2013-08-16 16:10 - 2013-08-16 16:10 - 00232960 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\ASF_cSharpAPI\c5efe841e2998c266e0f5e29bed04b55\ASF_cSharpAPI.ni.dll
2009-10-17 19:38 - 2007-04-19 08:39 - 00436992 _____ () C:\Program Files\MSI\TotalMedia 3.5\fpxlib.dll
2009-10-17 19:38 - 2007-04-19 08:29 - 00273216 _____ () C:\Program Files\MSI\TotalMedia 3.5\magengin.dll
2009-10-17 19:38 - 2007-04-19 08:29 - 00187136 _____ () C:\Program Files\MSI\TotalMedia 3.5\kgl.dll
2009-07-17 15:05 - 2009-04-10 22:28 - 00368640 _____ () C:\Windows\system32\msjetoledb40.dll
2009-01-15 11:14 - 2009-01-15 11:14 - 00014848 _____ () C:\Windows\assembly\GAC_MSIL\AxInterop.WBOCXLib\1.0.0.0__90ba9c70f846762e\AxInterop.WBOCXLib.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (12/08/2013 02:42:01 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/06/2013 05:13:26 PM) (Source: LoadPerf) (User: )
Description: WmiApRplWmiApRpl8
Error: (12/06/2013 05:13:26 PM) (Source: LoadPerf) (User: )
Description: Performance16
Error: (12/06/2013 05:13:26 PM) (Source: LoadPerf) (User: )
Description: Performance16
Error: (12/06/2013 10:48:36 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/06/2013 09:52:16 AM) (Source: RasClient) (User: )
Description: CoID={941A78F6-BF38-4173-A5B8-9E56380E3782}: Der Benutzer "Riehmer-PC\Riehmer" hat eine Verbindung mit dem Namen "T-Mobile D" gewählt, die Verbindung konnte jedoch nicht hergestellt werden. Der durch den Fehler zurückgegebene Ursachencode lautet: 797.
System errors:
=============
Error: (12/08/2013 02:42:01 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058
Error: (12/08/2013 02:40:53 PM) (Source: Microsoft-Windows-TaskScheduler) (User: NT-AUTORITÄT)
Description: 2147942402
Error: (12/08/2013 02:40:50 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 06.12.2013 um 17:22:49 unerwartet heruntergefahren.
Error: (12/06/2013 10:48:37 AM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058
Error: (12/06/2013 10:48:12 AM) (Source: Microsoft-Windows-TaskScheduler) (User: NT-AUTORITÄT)
Description: 2147942402
Error: (12/06/2013 10:46:56 AM) (Source: ACPI) (User: )
Description: : Der eingebettete Controller (EC) hat nicht innerhalb des angegebenen Zeitlimits reagiert. Dies deutet auf einen Fehler in der EC-Hardware oder -Firmware hin bzw. darauf, dass das BIOS auf falsche Art auf den EC zugreift. Fragen Sie den Computerhersteller nach einem aktualisierten BIOS. Dieser Fehler kann in einigen Situationen zur Folge haben, dass der Computer fehlerhaft läuft.
Error: (12/06/2013 10:38:02 AM) (Source: Service Control Manager) (User: )
Description: PEVSystemStart
Error: (12/06/2013 10:38:02 AM) (Source: Service Control Manager) (User: )
Description: PEVSystemStart
Error: (12/06/2013 10:38:01 AM) (Source: Service Control Manager) (User: )
Description: PEVSystemStart
Error: (12/06/2013 10:38:01 AM) (Source: Service Control Manager) (User: )
Description: PEVSystemStart
Microsoft Office Sessions:
=========================
Error: (03/28/2009 09:12:38 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.6215.1000. This session lasted 10 seconds with 0 seconds of active time. This session ended with a crash.
CodeIntegrity Errors:
===================================
Date: 2013-12-08 14:49:26.813
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-12-08 14:49:26.201
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-12-08 14:49:25.583
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-12-08 14:49:24.931
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-12-06 10:08:35.122
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-12-06 10:08:34.396
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-12-06 10:08:33.672
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-12-06 10:08:32.948
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-12-06 10:08:32.224
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-12-06 10:08:31.447
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 45%
Total physical RAM: 3321.68 MB
Available physical RAM: 1817.58 MB
Total Pagefile: 6861.36 MB
Available Pagefile: 5255.41 MB
Total Virtual: 2047.88 MB
Available Virtual: 1906 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:285.09 GB) (Free:120.59 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (AUF_ACHSE_STAFFEL2_2_DVD3) (CDROM) (Total:7.44 GB) (Free:0 GB) UDF
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 298 GB) (Disk ID: 424EF47C)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=285 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Code:
ATTFilter SystemLook 30.07.11 by jpshortstuff
Log created at 14:54 on 08/12/2013 by Riehmer
Administrator - Elevation successful
========== filefind ==========
Searching for "*AVG Secure Search*"
C:\AdwCleaner\Quarantine\C\Program Files\AVG Secure Search\AVG Secure Search.vir --a---- 18456 bytes [18:40 12/10/2013] [21:22 12/11/2013] 5CF2E7217CBB72E0D19ED207C6E23F73
C:\AdwCleaner\Quarantine\C\Program Files\AVG Secure Search\17.0.0.12\AVG Secure Search_toolbar.dll.vir --a---- 3353624 bytes [18:40 12/10/2013] [18:40 12/10/2013] 7B9E75EE7B4A3DF5238F8A074118F453
C:\AdwCleaner\Quarantine\C\Program Files\AVG Secure Search\17.0.1.12\AVG Secure Search_toolbar.dll.vir --a---- 3353624 bytes [19:34 16/10/2013] [19:33 16/10/2013] AA806DC28AB82B49B65C31ADCC3E7FBA
C:\AdwCleaner\Quarantine\C\Program Files\AVG Secure Search\17.1.2.1\AVG Secure Search_toolbar.dll.vir --a---- 3353624 bytes [21:22 12/11/2013] [21:22 12/11/2013] FF51726D743F17A7D15AEA1937482A36
Searching for "*AVG Security Toolbar*"
No files found.
Searching for "*DriverCure*"
C:\Users\Riehmer\Downloads\DriverCure Installer.exe --a---- 3518896 bytes [18:58 01/11/2009] [18:58 01/11/2009] 4BCCBB6C1D0D96688B2225A941354FBB
Searching for "*IBUpdater*"
No files found.
Searching for "*ParetoLogic*"
C:\AdwCleaner\Quarantine\C\Program Files\Common Files\ParetoLogic\UUS2\ParetoLogicUpdate.chm.vir --a---- 156039 bytes [14:59 13/01/2009] [14:59 13/01/2009] ACE1B15E90FA039C1FCD1A05F996BF4A
Searching for "*DriverScanner*"
C:\AdwCleaner\Quarantine\C\Program Files\Uniblue\DriverScanner\driverscanner.exe.vir --a---- 326504 bytes [12:58 16/07/2011] [09:22 16/05/2011] 2A4A70EA7630BE93758A5A328102D139
Searching for "*Complitly*"
C:\AdwCleaner\Quarantine\C\Program Files\Complitly\chrome\ComplitlyChrome.crx.vir --a---- 18457 bytes [10:00 16/02/2012] [12:10 20/07/2011] F44000E1B9BA37FEF07AEB87B7CE2F00
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Complitly\Complitly.dll.vir --a---- 139768 bytes [10:00 16/02/2012] [12:10 20/07/2011] C169935059169C46D7D1BC7F447A9066
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Complitly\64\Complitly64.dll.vir --a---- 167416 bytes [10:00 16/02/2012] [12:10 20/07/2011] 1AA68977C0F589D741AED1D0B860CE8B
Searching for "*Conduit*"
C:\AdwCleaner\Quarantine\C\Program Files\Common Files\DVDVideoSoft\TB\ConduitInstaller.exe.vir --a---- 73080 bytes [19:53 01/10/2012] [15:26 20/08/2012] 9A5E999C90861CE9B7906DBF429D4238
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_50_226_CT2269050_Images_633780109207875000_png.png.vir --a---- 398 bytes [07:43 13/04/2011] [07:43 13/04/2011] F0F10134BF30F97BCDE2CDF35BE4EFD8
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_50_226_CT2269050_Images_634067677527028750_png.png.vir --a---- 1346 bytes [07:43 13/04/2011] [07:43 13/04/2011] 7C78444B802879E92DCE86DAF35C3824
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_50_226_CT2269050_Images_634084057716610000_png.png.vir --a---- 793 bytes [07:43 13/04/2011] [07:43 13/04/2011] 9D873E96E36B03DBD52AB98853407AF6
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_50_226_CT2269050_Images_634084059408641250_png.png.vir --a---- 1059 bytes [07:43 13/04/2011] [07:43 13/04/2011] A227374511D48950EC48A6A15F4541BB
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_50_226_CT2269050_Images_634084059786610000_png.png.vir --a---- 789 bytes [07:43 13/04/2011] [07:43 13/04/2011] 86D3043D6F316587C3720F2FBBCC6549
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_50_226_CT2269050_Images_634084060140360000_png.png.vir --a---- 811 bytes [07:43 13/04/2011] [07:43 13/04/2011] FDCCCE0F7C7AC770E7911A6B434E6733
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_50_226_CT2269050_Images_634084060404266250_png.png.vir --a---- 728 bytes [07:43 13/04/2011] [07:43 13/04/2011] A276D6E6345751686804933685E86F6E
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_50_226_CT2269050_Images_634262976368243750_png.png.vir --a---- 969 bytes [07:43 13/04/2011] [07:43 13/04/2011] B033FEB6EADD5D827AD96FA0F0215B73
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_50_226_CT2269050_Images_634265435748037500_png.png.vir --a---- 1177 bytes [07:43 13/04/2011] [07:43 13/04/2011] 658B7FC9B84B15E731DDDD0E0AF2ABBD
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_50_226_CT2269050_Images_634382053378175000_png.png.vir --a---- 1392 bytes [07:43 13/04/2011] [07:43 13/04/2011] 2FE53D7A2CC73DEB8A0753B136AF88DC
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_50_226_CT2269050_Images_634382054836300000_png.png.vir --a---- 679 bytes [07:43 13/04/2011] [07:43 13/04/2011] EB1B088EDD86F1B754A90947556A9115
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_50_226_CT2269050_Images_SearchActivationButton-go_but20_gif-General-633937242465431250_gif.gif.vir --a---- 320 bytes [07:43 13/04/2011] [07:43 13/04/2011] 34A3D0783A67DC6CC33A396A35C809BE
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_74_161_CT1616974_Images_633971085913980000_gif.gif.vir --a---- 1024 bytes [07:43 13/04/2011] [07:43 13/04/2011] FD7B80B70EDB98954F9F11B94C32C7E2
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_74_161_CT1616974_Images_633971087054136250_gif.gif.vir --a---- 484 bytes [07:43 13/04/2011] [07:43 13/04/2011] 3A2207D97AAD9108DD5A0FE6EB750963
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_74_161_CT1616974_Images_633971088460386250_gif.gif.vir --a---- 998 bytes [07:43 13/04/2011] [07:43 13/04/2011] E52FC3A80EA5471A9E2A851A2DF1362F
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_74_161_CT1616974_Images_633971089234993750_gif.gif.vir --a---- 1022 bytes [07:43 13/04/2011] [07:43 13/04/2011] BE7DB18620AA6DB7973AB1654FC09FC4
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_74_161_CT1616974_Images_633971089477650000_gif.gif.vir --a---- 1081 bytes [07:43 13/04/2011] [07:43 13/04/2011] FD9121C1922BCE5FCCBE713259828B66
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_74_161_CT1616974_Images_633971089670306250_gif.gif.vir --a---- 649 bytes [07:43 13/04/2011] [07:43 13/04/2011] EAB4BEDBC6DA14A3953133BF7B19E0CC
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_74_161_CT1616974_Images_633971092504525000_gif.gif.vir --a---- 658 bytes [07:43 13/04/2011] [07:43 13/04/2011] 471B3E142F52914396200581AEC029D5
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_74_161_CT1616974_Images_633971094131400000_gif.gif.vir --a---- 624 bytes [07:43 13/04/2011] [07:43 13/04/2011] 23BDD502317F5CEA518AEE25AEDADD75
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_bankImages_ConduitEngine_ContextMenu_LikeIcon_png.png.vir --a---- 263 bytes [07:43 13/04/2011] [07:43 13/04/2011] 36BD416D16391EFAAAFB2C3C54EAE986
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_chevron_menu_gif.gif.vir --a---- 884 bytes [07:43 13/04/2011] [07:43 13/04/2011] 872292DE9C3484F16BDA3A0900533398
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_display_gif.gif.vir --a---- 138 bytes [07:43 13/04/2011] [07:43 13/04/2011] D5E20EF49F3808A51AA78B090CBB4B12
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_equalizer_dead_gif.gif.vir --a---- 119 bytes [07:43 13/04/2011] [07:43 13/04/2011] A5220F9E01F826B14FB6E2C3F4ECE421
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_Equalizer_GIF.GIF.vir --a---- 465 bytes [07:43 13/04/2011] [07:43 13/04/2011] 02203C380AF50E00A0DFDB7C784F961A
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_Error_GIF.GIF.vir --a---- 286 bytes [07:43 13/04/2011] [07:43 13/04/2011] 27B43532E7F5E4A6E339EFD8011C16F1
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_Loading_gif.gif.vir --a---- 658 bytes [07:43 13/04/2011] [07:43 13/04/2011] 576E8AE9DA580108D5E93341140B6345
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_maxi_dn_gif.gif.vir --a---- 598 bytes [07:43 13/04/2011] [07:43 13/04/2011] 591233CBD455659937B107D87BE97E7C
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_maxi_gif.gif.vir --a---- 386 bytes [07:43 13/04/2011] [07:43 13/04/2011] 93EAAC8DE4960D491628477809038DA5
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_maxi_over_gif.gif.vir --a---- 594 bytes [07:43 13/04/2011] [07:43 13/04/2011] 81BA97263822D545B98ECB1D676DB5F3
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_minimize_dn_gif.gif.vir --a---- 598 bytes [07:43 13/04/2011] [07:43 13/04/2011] BFB6AC32B680CC2DC9E3B042239BFB20
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_minimize_gif.gif.vir --a---- 590 bytes [07:43 13/04/2011] [07:43 13/04/2011] EFFF305AD2F5AA1DB77F7786B490DC61
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_minimize_over_gif.gif.vir --a---- 594 bytes [07:43 13/04/2011] [07:43 13/04/2011] CE62E18B9DC4BE7EAB8D2D574128CE77
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_pause_dn_gif.gif.vir --a---- 652 bytes [07:43 13/04/2011] [07:43 13/04/2011] 74ED5324648F879B6CCEF58E2DF9E49D
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_pause_dn_mini_gif.gif.vir --a---- 652 bytes [07:43 13/04/2011] [07:43 13/04/2011] 74ED5324648F879B6CCEF58E2DF9E49D
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_pause_gif.gif.vir --a---- 672 bytes [07:43 13/04/2011] [07:43 13/04/2011] D785EA3384FE734DBE31B821F6514F94
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_pause_mini_gif.gif.vir --a---- 672 bytes [07:43 13/04/2011] [07:43 13/04/2011] D785EA3384FE734DBE31B821F6514F94
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_pause_over_gif.gif.vir --a---- 1094 bytes [07:43 13/04/2011] [07:43 13/04/2011] 2F2AD66C23996419E7D8266ECDDA1F88
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_pause_over_mini_gif.gif.vir --a---- 1094 bytes [07:43 13/04/2011] [07:43 13/04/2011] 2F2AD66C23996419E7D8266ECDDA1F88
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_play_chevron_gif.gif.vir --a---- 1007 bytes [07:43 13/04/2011] [07:43 13/04/2011] F9897266FC817421D83726AD3F4402FA
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_play_dn_gif.gif.vir --a---- 661 bytes [07:43 13/04/2011] [07:43 13/04/2011] E6ABE3C5999EE1F0013004AA549B8E60
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_play_dn_mini_gif.gif.vir --a---- 661 bytes [07:43 13/04/2011] [07:43 13/04/2011] E6ABE3C5999EE1F0013004AA549B8E60
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_play_gif.gif.vir --a---- 676 bytes [07:43 13/04/2011] [07:43 13/04/2011] 40A8862A7994FA5600025CFDF7A8B81E
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_play_mini_gif.gif.vir --a---- 676 bytes [07:43 13/04/2011] [07:43 13/04/2011] 40A8862A7994FA5600025CFDF7A8B81E
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_play_over_gif.gif.vir --a---- 1094 bytes [07:43 13/04/2011] [07:43 13/04/2011] BF6A9260886A9E4ACB4023A2EF9F610A
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_play_over_mini_gif.gif.vir --a---- 1094 bytes [07:43 13/04/2011] [07:43 13/04/2011] BF6A9260886A9E4ACB4023A2EF9F610A
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_slider_bg_gif.gif.vir --a---- 244 bytes [07:43 13/04/2011] [07:43 13/04/2011] 86E2DDD8337AF0386A656216B67EFF64
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_slider_gif.gif.vir --a---- 129 bytes [07:43 13/04/2011] [07:43 13/04/2011] 556E84F732734EA045DBCF4DD6098BBB
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_stop_chevron_gif.gif.vir --a---- 1001 bytes [07:43 13/04/2011] [07:43 13/04/2011] 7428C0515D708D7C3520CF78F85B74FE
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_stop_dn_gif.gif.vir --a---- 695 bytes [07:43 13/04/2011] [07:43 13/04/2011] 6E6BA836B7FEE53CE498ECE354A9C2D9
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_stop_gif.gif.vir --a---- 703 bytes [07:43 13/04/2011] [07:43 13/04/2011] 253E89E7D1686D67C40FFB20FF78FEEF
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_stop_over_gif.gif.vir --a---- 1126 bytes [07:43 13/04/2011] [07:43 13/04/2011] B1BE39AC8F8DDBD990E30CD513A77ACA
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_vol_dn_gif.gif.vir --a---- 703 bytes [07:43 13/04/2011] [07:43 13/04/2011] 64383A68A4B5EF32C30E151EB53F53E8
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_vol_gif.gif.vir --a---- 712 bytes [07:43 13/04/2011] [07:43 13/04/2011] 5AB7200023489A910B502A6EEE23674D
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_vol_over_gif.gif.vir --a---- 1132 bytes [07:43 13/04/2011] [07:43 13/04/2011] B13B78C10FB60AB39EDB1951707360FC
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_ClientImages_radio_gif.gif.vir --a---- 419 bytes [07:43 13/04/2011] [07:43 13/04/2011] 01B83C91554738F6AFFB7895BBBA73FB
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_icons_bullet_gif.gif.vir --a---- 218 bytes [07:43 13/04/2011] [07:43 13/04/2011] 94286B23FBE8E35F31EBC0B7A9CDDA44
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_icons_flags_france_flag_gif.gif.vir --a---- 152 bytes [07:43 13/04/2011] [07:43 13/04/2011] 95F614D766F5EE11DF9D5AB1602EC899
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_icons_flags_Germany_flag_gif.gif.vir --a---- 166 bytes [07:43 13/04/2011] [07:43 13/04/2011] FC0A71A4C385F498F26F493524B093C9
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_icons_flags_holland_flag_gif.gif.vir --a---- 161 bytes [07:43 13/04/2011] [07:43 13/04/2011] 46BDCD0038DD02741E2E52EF90C85311
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_icons_flags_italy_flag_gif.gif.vir --a---- 152 bytes [07:43 13/04/2011] [07:43 13/04/2011] B5BCC1A76A843C22C45EC83DF86DED4D
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_icons_flags_spain_flag_gif.gif.vir --a---- 127 bytes [07:43 13/04/2011] [07:43 13/04/2011] BF010F1A7D1628176A6E89CD4E3C12AA
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_icons_flags_uk_flag_gif.gif.vir --a---- 173 bytes [07:43 13/04/2011] [07:43 13/04/2011] 02AA4894D6BFC50DAC190EB93AEE4E03
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_icons_flags_usa_flag_gif.gif.vir --a---- 167 bytes [07:43 13/04/2011] [07:43 13/04/2011] 218A7C5E05C6F0FB85388A9DA06B55A3
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_ArcticQuest_gif.gif.vir --a---- 1077 bytes [07:43 13/04/2011] [07:43 13/04/2011] FE6E5A8B0A9444786AE508147C93B8A4
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_AtlantisQuest_gif.gif.vir --a---- 619 bytes [07:43 13/04/2011] [07:43 13/04/2011] CED90C973D01D3D581A1F658B263E41E
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_Backgammon_gif.gif.vir --a---- 1031 bytes [07:43 13/04/2011] [07:43 13/04/2011] 3784449EBC06BA246D3EEF9019D401EC
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_BistroStars_gif.gif.vir --a---- 610 bytes [07:43 13/04/2011] [07:43 13/04/2011] 816E1F5B333A1B2064999214296D2BD5
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_Checkers_gif.gif.vir --a---- 969 bytes [07:43 13/04/2011] [07:43 13/04/2011] 47F42E2411A7E9D76B8F66BB40604FA2
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_Chess_gif.gif.vir --a---- 985 bytes [07:43 13/04/2011] [07:43 13/04/2011] 63125AFB782F81FAECCA4B28F86B72AB
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_Clash_N_Slash_gif.gif.vir --a---- 586 bytes [07:43 13/04/2011] [07:43 13/04/2011] 5CEA9F1083981E0F3D35223F0D5610E8
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_Connect4_gif.gif.vir --a---- 1022 bytes [07:43 13/04/2011] [07:43 13/04/2011] BE7DB18620AA6DB7973AB1654FC09FC4
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_FinalFortress_gif.gif.vir --a---- 589 bytes [07:43 13/04/2011] [07:43 13/04/2011] C0098518021F9B797FE38A50C94D4587
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_FlowerQuest_gif.gif.vir --a---- 1081 bytes [07:43 13/04/2011] [07:43 13/04/2011] 2AAE23CCCAEFA8D1A1830DA6E24E841C
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_Go_gif.gif.vir --a---- 997 bytes [07:43 13/04/2011] [07:43 13/04/2011] 48455300FF81F80324231AD962C9241A
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_HiddenExpedition_gif.gif.vir --a---- 1046 bytes [07:43 13/04/2011] [07:43 13/04/2011] 414F9D82D26CE56585D367CE3B75E786
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_MahjonggArtifacts2_gif.gif.vir --a---- 1088 bytes [07:43 13/04/2011] [07:43 13/04/2011] 46F10BACB1357BD0D3474A33854D838C
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_Marbles_gif.gif.vir --a---- 1000 bytes [07:43 13/04/2011] [07:43 13/04/2011] 7854D45C7EAA4977D51A1BC5CE2C4CFC
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_Match4_gif.gif.vir --a---- 1026 bytes [07:43 13/04/2011] [07:43 13/04/2011] DDFA780E11491440D96FB557CD43BBAB
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_PyramidRunner_gif.gif.vir --a---- 431 bytes [07:43 13/04/2011] [07:43 13/04/2011] D1457BB4130E42B6A8734F0D6C36BDBE
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_Reversi_gif.gif.vir --a---- 1009 bytes [07:43 13/04/2011] [07:43 13/04/2011] 3282C3698B729DD4D6111B1411E6BBF8
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_RiseofAtlantis_gif.gif.vir --a---- 1090 bytes [07:43 13/04/2011] [07:43 13/04/2011] 92E82CFE67DD8266F90681ACB82F1576
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_SheepMe_gif.gif.vir --a---- 1008 bytes [07:43 13/04/2011] [07:43 13/04/2011] 11E9841A2C2470AE234FB85F7F3385ED
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_SnowyBearsAdventures_gif.gif.vir --a---- 1064 bytes [07:43 13/04/2011] [07:43 13/04/2011] 1CAB9AED1E3A6D0AEF3A419DD0EEE137
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_SnowyTreasureHunter_gif.gif.vir --a---- 678 bytes [07:43 13/04/2011] [07:43 13/04/2011] 3A1CB22D90146FF71C3D2ED9DAC3682F
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_Sudoku_gif.gif.vir --a---- 1000 bytes [07:43 13/04/2011] [07:43 13/04/2011] 0291D57D31C445545661E08C7D1D6AA5
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_TicTacToe_gif.gif.vir --a---- 988 bytes [07:43 13/04/2011] [07:43 13/04/2011] E86BDAB48EFA93D6273D18E3D0DA79E7
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_main_menu_about_gif.gif.vir --a---- 403 bytes [07:43 13/04/2011] [07:43 13/04/2011] EC3C2B4E0DEC4D880BAFF88ABBF94188
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_main_menu_clear_history_gif.gif.vir --a---- 414 bytes [07:43 13/04/2011] [07:43 13/04/2011] A9E001CBC00B06B121DFBC80707F5298
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_main_menu_contact_gif.gif.vir --a---- 278 bytes [07:43 13/04/2011] [07:43 13/04/2011] 15DEF39E438E807E2F0E22D44FDC7FB7
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_main_menu_help_gif.gif.vir --a---- 405 bytes [07:43 13/04/2011] [07:43 13/04/2011] 995595D4C685D659E8F03CD0A287EDDF
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_main_menu_home_page_gif.gif.vir --a---- 405 bytes [07:43 13/04/2011] [07:43 13/04/2011] AA39D8A6B65E208901EBA9F3D4728D3E
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_main_menu_options_gif.gif.vir --a---- 361 bytes [07:43 13/04/2011] [07:43 13/04/2011] 464E244E7E2F27FB85E0C3AB69D72104
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_main_menu_privacy_gif.gif.vir --a---- 425 bytes [07:43 13/04/2011] [07:43 13/04/2011] 6427565C7105DC497287866100F260BB
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_main_menu_refresh_gif.gif.vir --a---- 381 bytes [07:43 13/04/2011] [07:43 13/04/2011] AE7C9F67594A84B096D225601ACB0B2A
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_main_menu_shrink_gif.gif.vir --a---- 351 bytes [07:43 13/04/2011] [07:43 13/04/2011] C3EBA0237D68F665AF6D663906221092
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_main_menu_upgrade_gif.gif.vir --a---- 399 bytes [07:43 13/04/2011] [07:43 13/04/2011] 8BE02D510B4B2E05AD2611B1E9A0BD56
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_SearchEngines_ebay_search_gif.gif.vir --a---- 216 bytes [07:43 13/04/2011] [07:43 13/04/2011] 44A5718F3E1C5785F969C82B2C1D0904
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_SearchEngines_images_search_gif.gif.vir --a---- 405 bytes [07:43 13/04/2011] [07:43 13/04/2011] 66018EAE0906C9831A821CAE5D1089BB
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_SearchEngines_news_icon_gif.gif.vir --a---- 371 bytes [07:43 13/04/2011] [07:43 13/04/2011] 84896837EDB1A78C14DB6A2F3A0AEE3A
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\CacheIcons\http___storage_conduit_com_images_SearchEngines_site_search_gif.gif.vir --a---- 625 bytes [07:43 13/04/2011] [07:43 13/04/2011] C23D4DB18B6BB4F38ECBA57AD414A5CF
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\DVDVideoSoft\RadioPlayer\Skins\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_display_xml.xml.vir --a---- 4982 bytes [07:43 13/04/2011] [07:45 13/04/2011] B4EA4D6103C55461DBE7D8EF2E8010CC
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Conduit\cachedIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_equalizer_dead.gif.vir --a---- 119 bytes [00:13 13/02/2011] [00:13 13/02/2011] A5220F9E01F826B14FB6E2C3F4ECE421
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Conduit\cachedIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_minimize.gif.vir --a---- 590 bytes [00:13 13/02/2011] [00:13 13/02/2011] EFFF305AD2F5AA1DB77F7786B490DC61
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Conduit\cachedIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_play.gif.vir --a---- 676 bytes [00:13 13/02/2011] [00:13 13/02/2011] 40A8862A7994FA5600025CFDF7A8B81E
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Conduit\cachedIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_stop.gif.vir --a---- 703 bytes [00:13 13/02/2011] [00:13 13/02/2011] 253E89E7D1686D67C40FFB20FF78FEEF
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Conduit\cachedIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_vol.gif.vir --a---- 712 bytes [00:13 13/02/2011] [00:13 13/02/2011] 5AB7200023489A910B502A6EEE23674D
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\CT2269050\radio\Skins\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_display_xml.xml.vir --a---- 5803 bytes [14:04 16/07/2011] [14:06 16/07/2011] 6BF50FDA3BC02B1E91036766306A9AB6
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\CT2431245\feed\http___feeds2_feedburner_com_ConduitLinuxEs_history.xml.vir --a---- 0 bytes [00:13 13/02/2011] [00:13 13/02/2011] D41D8CD98F00B204E9800998ECF8427E
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\CT2431245\feed\http___feeds2_feedburner_com_ConduitLinuxEs_structured.xml.vir --a---- 7854 bytes [00:13 13/02/2011] [16:54 27/07/2011] 6E0852CA9CB9A1A2ADECBF8FBC9C9953
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\CT2431245\feed\http___feeds2_feedburner_com_ConduitMacDe_history.xml.vir --a---- 0 bytes [00:13 13/02/2011] [00:13 13/02/2011] D41D8CD98F00B204E9800998ECF8427E
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\CT2431245\feed\http___feeds2_feedburner_com_ConduitMacDe_structured.xml.vir --a---- 7910 bytes [00:13 13/02/2011] [16:54 27/07/2011] E83A1E0ED548B2BADF4E61E0F8C0079C
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\CT2431245\feed\http___feeds2_feedburner_com_ConduitPalmDe_history.xml.vir --a---- 0 bytes [00:13 13/02/2011] [00:13 13/02/2011] D41D8CD98F00B204E9800998ECF8427E
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\CT2431245\feed\http___feeds2_feedburner_com_ConduitPalmDe_structured.xml.vir --a---- 5328 bytes [00:13 13/02/2011] [13:33 23/07/2011] E22AAE14568FF0F47BC1EDF8C8B7294F
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\CT2431245\feed\http___feeds2_feedburner_com_ConduitPhonesDe _history.xml.vir --a---- 0 bytes [00:13 13/02/2011] [00:13 13/02/2011] D41D8CD98F00B204E9800998ECF8427E
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\CT2431245\feed\http___feeds2_feedburner_com_ConduitPhonesDe _structured.xml.vir --a---- 7132 bytes [00:13 13/02/2011] [16:54 27/07/2011] 2798B9D19AAF4787E74070A0E3965254
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\CT2431245\feed\http___feeds2_feedburner_com_ConduitPocketDe_history.xml.vir --a---- 0 bytes [00:13 13/02/2011] [00:13 13/02/2011] D41D8CD98F00B204E9800998ECF8427E
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\CT2431245\feed\http___feeds2_feedburner_com_ConduitPocketDe_structured.xml.vir --a---- 5416 bytes [00:13 13/02/2011] [13:33 23/07/2011] BECF81B2AD2692646945016BFCA3E976
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\CT2431245\feed\http___feeds2_feedburner_com_ConduitWindowsDe_history.xml.vir --a---- 0 bytes [00:13 13/02/2011] [00:13 13/02/2011] D41D8CD98F00B204E9800998ECF8427E
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\CT2431245\feed\http___feeds2_feedburner_com_ConduitWindowsDe_structured.xml.vir --a---- 10762 bytes [00:13 13/02/2011] [16:54 27/07/2011] E3F06C52606B2EAAA45C2E682040015B
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\CT2431245\radio\Skins\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_display_xml.xml.vir --a---- 5803 bytes [00:13 13/02/2011] [00:13 13/02/2011] 6BF50FDA3BC02B1E91036766306A9AB6
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\engine@conduit.com\chrome\conduitengine.jar.vir --a---- 729935 bytes [17:52 27/07/2011] [13:30 13/03/2011] 4A2D55615F60C3A00E03ECFD39224EC5
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\engine@conduit.com\components\ConduitAutoCompleteSearch.js.vir --a---- 16435 bytes [17:52 27/07/2011] [13:30 13/03/2011] FA0D9E1396C227B8697E41996A95912B
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\engine@conduit.com\components\ConduitAutoCompleteSearch.xpt.vir --a---- 166 bytes [17:52 27/07/2011] [13:30 13/03/2011] 806EA6CC4DCBF88A20AA3331BCDC9918
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\engine@conduit.com\components\ConduitToolbar.idl.vir --a---- 152 bytes [17:52 27/07/2011] [13:30 13/03/2011] 33D4D4337895FCA507DF937B5980D41A
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\engine@conduit.com\components\ConduitToolbar.js.vir --a---- 2389 bytes [17:52 27/07/2011] [13:30 13/03/2011] 6A2C72DF1348F39C0CE44E1B8C10F5CE
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\engine@conduit.com\components\ConduitToolbar.xpt.vir --a---- 140 bytes [17:52 27/07/2011] [13:30 13/03/2011] DFFE26916941DE0A33E503FD38008290
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\engine@conduit.com\searchplugin\conduit.gif.vir --a---- 173 bytes [17:52 27/07/2011] [13:30 13/03/2011] 225B6898AE7D6E0CE88B3FE57BD750F2
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\engine@conduit.com\searchplugin\conduit.ico.vir --a---- 1406 bytes [17:52 27/07/2011] [13:30 13/03/2011] A23164BA794BE61799C67423F56C9163
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\engine@conduit.com\searchplugin\conduit.PNG.vir --a---- 255 bytes [17:52 27/07/2011] [13:30 13/03/2011] AF3A51D0B8D6F04EE33307A654560DBE
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\engine@conduit.com\searchplugin\conduit.src.vir --a---- 328 bytes [17:52 27/07/2011] [13:30 13/03/2011] 43317CC423A502C077AD68F838249117
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\engine@conduit.com\searchplugin\conduit.xml.vir --a---- 913 bytes [17:52 27/07/2011] [13:30 13/03/2011] 4E45A93B99F44F41EADFB167FB85FB02
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\components\ConduitAutoCompleteSearch.js.vir --a---- 16435 bytes [17:52 27/07/2011] [14:17 25/05/2011] FA0D9E1396C227B8697E41996A95912B
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\components\ConduitAutoCompleteSearch.xpt.vir --a---- 166 bytes [17:52 27/07/2011] [14:17 25/05/2011] 806EA6CC4DCBF88A20AA3331BCDC9918
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\components\ConduitToolbar.idl.vir --a---- 148 bytes [17:52 27/07/2011] [14:17 25/05/2011] 0A9AAEB4839D78CB03740D8A8EF0D863
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\components\ConduitToolbar.js.vir --a---- 2377 bytes [17:52 27/07/2011] [14:17 25/05/2011] 6F686421F40A7D62E0A1DE0C0C37AD25
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\components\ConduitToolbar.xpt.vir --a---- 136 bytes [17:52 27/07/2011] [14:17 25/05/2011] 4822F1CBA7EE2F77496FDCE234D32C20
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\searchplugin\conduit.gif.vir --a---- 173 bytes [17:52 27/07/2011] [14:17 25/05/2011] 225B6898AE7D6E0CE88B3FE57BD750F2
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\searchplugin\conduit.ico.vir --a---- 1406 bytes [17:52 27/07/2011] [14:17 25/05/2011] A23164BA794BE61799C67423F56C9163
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\searchplugin\conduit.PNG.vir --a---- 255 bytes [17:52 27/07/2011] [14:17 25/05/2011] AF3A51D0B8D6F04EE33307A654560DBE
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\searchplugin\conduit.src.vir --a---- 325 bytes [17:52 27/07/2011] [14:17 25/05/2011] CF536B7243D9194A187D352AFC5D1F98
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\searchplugin\conduit.xml.vir --a---- 931 bytes [17:52 27/07/2011] [14:17 25/05/2011] 27321E5730943A3A73EA8699E9EBB540
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}\components\ConduitAutoCompleteSearch.js.vir --a---- 8641 bytes [17:52 27/07/2011] [14:58 07/07/2011] 467C3FEB6421FFDE5CD545B21DCD4696
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}\components\ConduitAutoCompleteSearch.xpt.vir --a---- 166 bytes [17:52 27/07/2011] [14:58 07/07/2011] 806EA6CC4DCBF88A20AA3331BCDC9918
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}\searchplugin\conduit.xml.vir --a---- 927 bytes [17:52 27/07/2011] [14:58 07/07/2011] 5FCD970CA6C6B1A636D2DB115C76243A
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f}\components\ConduitAutoCompleteSearch.js.vir --a---- 12885 bytes [07:43 13/04/2011] [07:43 13/04/2011] E0E9E9198AE40B8E6CFAD7B3E2161607
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f}\components\ConduitAutoCompleteSearch.xpt.vir --a---- 166 bytes [07:43 13/04/2011] [07:43 13/04/2011] 806EA6CC4DCBF88A20AA3331BCDC9918
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f}\components\ConduitToolbar.idl.vir --a---- 148 bytes [07:43 13/04/2011] [07:43 13/04/2011] A368D264366BCA88381769C63A2F2006
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f}\components\ConduitToolbar.js.vir --a---- 3242 bytes [07:43 13/04/2011] [07:43 13/04/2011] 78515AFBBC0A5C0FD07607CB18523F74
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f}\components\ConduitToolbar.xpt.vir --a---- 136 bytes [07:43 13/04/2011] [07:43 13/04/2011] 66081A784C3D52D1424C21D1F9DE75A5
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f}\searchplugin\conduit.gif.vir --a---- 173 bytes [07:43 13/04/2011] [07:43 13/04/2011] 225B6898AE7D6E0CE88B3FE57BD750F2
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f}\searchplugin\conduit.ico.vir --a---- 1406 bytes [07:43 13/04/2011] [07:43 13/04/2011] A23164BA794BE61799C67423F56C9163
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f}\searchplugin\conduit.PNG.vir --a---- 255 bytes [07:43 13/04/2011] [07:43 13/04/2011] AF3A51D0B8D6F04EE33307A654560DBE
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f}\searchplugin\conduit.src.vir --a---- 319 bytes [07:43 13/04/2011] [07:43 13/04/2011] AD1E3C191E36DFB94CB8D49D53EC5E75
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f}\searchplugin\conduit.xml.vir --a---- 886 bytes [07:43 13/04/2011] [07:43 13/04/2011] 84D3FA581DCD44364180BE9D5F7312D2
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\searchplugins\Conduit.xml.vir --a---- 873 bytes [00:13 13/02/2011] [14:04 16/07/2011] 3C2B3542D1D01C2561856EEA275D02D5
Searching for "*OpenCandy*"
No files found.
========== folderfind ==========
Searching for "*AVG Secure Search*"
C:\AdwCleaner\Quarantine\C\Program Files\AVG Secure Search d------ [10:30 29/11/2013]
C:\AdwCleaner\Quarantine\C\Program Files\AVG Secure Search\ChromeRes\AVG Secure Search d------ [10:30 29/11/2013]
C:\AdwCleaner\Quarantine\C\Program Files\Common Files\AVG Secure Search d------ [10:30 29/11/2013]
C:\AdwCleaner\Quarantine\C\ProgramData\AVG Secure Search d------ [10:30 29/11/2013]
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Local\AVG Secure Search d------ [10:30 29/11/2013]
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\AVG Secure Search d------ [10:31 29/11/2013]
C:\zoek_backup\C_Windows_system32_config_systemprofile_AppData_LocalLow_AVG Secure Search d-a---- [09:38 06/12/2013]
Searching for "*AVG Security Toolbar*"
C:\AdwCleaner\Quarantine\C\ProgramData\AVG Security Toolbar d------ [10:30 29/11/2013]
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Local\AVG Security Toolbar d------ [10:30 29/11/2013]
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\LocalLow\AVG Security Toolbar d------ [10:31 29/11/2013]
Searching for "*DriverCure*"
C:\AdwCleaner\Quarantine\C\ProgramData\DriverCure d------ [10:30 29/11/2013]
C:\AdwCleaner\Quarantine\C\ProgramData\ParetoLogic\UUS2\DriverCure d------ [10:30 29/11/2013]
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\DriverCure d------ [10:32 29/11/2013]
Searching for "*IBUpdater*"
No folders found.
Searching for "*ParetoLogic*"
C:\AdwCleaner\Quarantine\C\Program Files\Common Files\ParetoLogic d------ [10:30 29/11/2013]
C:\AdwCleaner\Quarantine\C\ProgramData\ParetoLogic d------ [10:30 29/11/2013]
Searching for "*DriverScanner*"
C:\AdwCleaner\Quarantine\C\Program Files\Uniblue\DriverScanner d------ [10:30 29/11/2013]
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Uniblue\DriverScanner d------ [10:32 29/11/2013]
Searching for "*Complitly*"
C:\AdwCleaner\Quarantine\C\Program Files\Complitly d------ [10:30 29/11/2013]
C:\AdwCleaner\Quarantine\C\Program Files\Complitly\support@Complitly.com d------ [10:30 29/11/2013]
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Complitly d------ [10:31 29/11/2013]
Searching for "*Conduit*"
C:\AdwCleaner\Quarantine\C\Program Files\Conduit d------ [10:30 29/11/2013]
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Conduit d------ [10:32 29/11/2013]
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\ConduitEngine d------ [10:32 29/11/2013]
C:\AdwCleaner\Quarantine\C\Users\Riehmer\AppData\Roaming\Mozilla\Firefox\Profiles\a3m6s5vt.default\Extensions\engine@conduit.com d------ [10:32 29/11/2013]
C:\zoek_backup\C_Users_Riehmer_AppData_Roaming_Mozilla_Firefox_Profiles_a3m6s5vt.default_extensions_engine@conduit.com d-a---- [09:38 06/12/2013]
Searching for "*OpenCandy*"
No folders found.
========== regfind ==========
Searching for "AVG Secure Search"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1415058074-704485446-1059558982-1000\Software\AVG Secure Search]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{56D5B21A-BA79-4CEC-86C4-C89A044E38EB}]
"AppPath"="C:\Program Files\Common Files\AVG Secure Search\ScriptHelperInstaller\11.1.0"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9E5E0B8B-C666-4A3C-81C5-50E5C0C39856}]
"AppPath"="C:\Program Files\Common Files\AVG Secure Search\ScriptHelperInstaller\9.0.1"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DE428D7A-801B-4ED8-A2E6-0479FC06944C}]
"AppPath"="C:\Program Files\Common Files\AVG Secure Search\ScriptHelperInstaller\11.2.0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{63EDCDD3-8AFC-4358-A90F-F7FB8F5C64FF}\ProgID]
@="AVG Secure Search.BrowserWndAPI.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{63EDCDD3-8AFC-4358-A90F-F7FB8F5C64FF}\VersionIndependentProgID]
@="AVG Secure Search.BrowserWndAPI"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BD5843ED-13C4-4EFF-ACE9-56CEE22BC087}\ProgID]
@="AVG Secure Search.BrowserWndAPI.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BD5843ED-13C4-4EFF-ACE9-56CEE22BC087}\VersionIndependentProgID]
@="AVG Secure Search.BrowserWndAPI"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Search.BrowserWndAPI\CurVer]
@="AVG Secure Search.BrowserWndAPI.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Search.PugiObj\CurVer]
@="AVG Secure Search.PugiObj.1"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\AVG Security Toolbar]
"ChromeSearchName"="AVG Secure Search"
[HKEY_USERS\.DEFAULT\Software\AVG Secure Search]
[HKEY_USERS\S-1-5-21-1415058074-704485446-1059558982-1000\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1415058074-704485446-1059558982-1000\Software\AVG Secure Search]
[HKEY_USERS\S-1-5-21-1415058074-704485446-1059558982-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{56D5B21A-BA79-4CEC-86C4-C89A044E38EB}]
"AppPath"="C:\Program Files\Common Files\AVG Secure Search\ScriptHelperInstaller\11.1.0"
[HKEY_USERS\S-1-5-21-1415058074-704485446-1059558982-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9E5E0B8B-C666-4A3C-81C5-50E5C0C39856}]
"AppPath"="C:\Program Files\Common Files\AVG Secure Search\ScriptHelperInstaller\9.0.1"
[HKEY_USERS\S-1-5-21-1415058074-704485446-1059558982-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DE428D7A-801B-4ED8-A2E6-0479FC06944C}]
"AppPath"="C:\Program Files\Common Files\AVG Secure Search\ScriptHelperInstaller\11.2.0"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\AVG Security Toolbar]
"ChromeSearchName"="AVG Secure Search"
[HKEY_USERS\S-1-5-18\Software\AVG Secure Search]
Searching for "AVG Security Toolbar"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1415058074-704485446-1059558982-1000\Software\AVG Security Toolbar]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Search.PugiObj]
@="AVG Security Toolbar"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Search.PugiObj.1]
@="AVG Security Toolbar"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AVG Security Toolbar Service]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AVG Security Toolbar Service]
"DisplayName"="AVG Security Toolbar Service"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AVG Security Toolbar Service]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AVG Security Toolbar Service]
"DisplayName"="AVG Security Toolbar Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AVG Security Toolbar Service]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AVG Security Toolbar Service]
"DisplayName"="AVG Security Toolbar Service"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\AVG Security Toolbar]
[HKEY_USERS\S-1-5-21-1415058074-704485446-1059558982-1000\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1415058074-704485446-1059558982-1000\Software\AVG Security Toolbar]
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\AVG Security Toolbar]
Searching for "DriverCure"
[HKEY_CURRENT_USER\Software\Classes\Applications\DriverCure.exe]
[HKEY_USERS\S-1-5-21-1415058074-704485446-1059558982-1000\Software\Classes\Applications\DriverCure.exe]
[HKEY_USERS\S-1-5-21-1415058074-704485446-1059558982-1000_Classes\Applications\DriverCure.exe]
Searching for "IBUpdater"
No data found.
Searching for "ParetoLogic"
[HKEY_USERS\.DEFAULT\Software\ParetoLogic]
[HKEY_USERS\.DEFAULT\Software\ParetoLogic\ParetoLogic UUS2]
[HKEY_USERS\S-1-5-18\Software\ParetoLogic]
[HKEY_USERS\S-1-5-18\Software\ParetoLogic\ParetoLogic UUS2]
Searching for "DriverScanner"
No data found.
Searching for "Complitly"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1415058074-704485446-1059558982-1000\Software\Complitly]
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Chrome\Extensions\defdhglnppeioeflggkmglipcecffkhk]
"path"="C:\Program Files\Complitly\chrome\ComplitlyChrome.crx"
[HKEY_USERS\S-1-5-21-1415058074-704485446-1059558982-1000\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1415058074-704485446-1059558982-1000\Software\Complitly]
Searching for "Conduit"
No data found.
Searching for "OpenCandy"
No data found.
-= EOF =-
habe die Rückmeldung, dass der Rechner viel schneller läuft ;-) |
| Themen zu Spywarebefall |
| 32 bit, adblock, adobe, adobe flash player, autorun, avg, avg security toolbar, browser, converter, defender, explorer, festplatte, festplatte voll, firefox, flash player, format, home, install.exe, logfile, malwarebytes, microsoft, packard bell, photoshop, plug-in, realtek, registry, scan, secure, secure search, security, seiten, software, vista, vtoolbarupdater |
Baum-Darstellung