nation zoom

teufel65 · 20.12.2013, 18:19

hallo,
habe ein Problem mit der seite ,nation zoom ich kann ihn zum verrecken net loswerden kann mir wer helfen wäre dankbar dafür meine nerven sind am ende!!

ieben gruss

habe gerad gesehen das hier jemand das selbe Problem hat, habe mal versucht die selben schritte zu machen aber kriege jetzt auch nchts mehr gedownloadet.... hilfe kann mir jemand witerhelfen???

cosinus · 21.12.2013, 00:09

Hallo und

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!

Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

teufel65 · 21.12.2013, 14:29

hallo,
danke für die antwort!
wollte dieses farbers recovery scan tool runterladen, aber der Computer sagt mir das diese seite schäden an dem Computer anrichten könnte.
bin mir jetzt auch nicht sicher ob ich diese ausführen kann weil so gut kenn ich mich auch nicht aus mit den Sachen....

lg teufel65

cosinus · 21.12.2013, 16:27

Zitat:

wollte dieses farbers recovery scan tool runterladen, aber der Computer sagt mir das diese seite schäden an dem Computer anrichten könnte.

Das ist Blösinn, FRST ist sicher. Aktion erlauben bitte.

teufel65 · 21.12.2013, 18:30

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-12-2013 02
Ran by Willy at 2013-12-21 17:39:51
Running from C:\Users\Willy\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================


==================== Installed Programs ======================

 Update for Microsoft Office 2007 (KB2508958) (x32)
Activation Assistant for the 2007 Microsoft Office suites (x32 Version: 1.0)
Activation Assistant for the 2007 Microsoft Office suites (x32)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05)
Adobe Shockwave Player 11.6 (x32 Version: 11.6.3.633)
ArcSoft PhotoStudio 5.5 (x32)
ArcSoft Software Suite (x32)
Babylon toolbar (x32) <==== ATTENTION
BabylonObjectInstaller (x32 Version: 2.0.0.4)
BrowserCompanion (x32) <==== ATTENTION
CanoScan Toolbox Ver4.9 (x32)
CHIPDRIVE MyKey (x32)
Comodo Dragon (x32 Version: 30.0.0.0)
COMODO Internet Security Premium (Version: 6.3.32439.2937)
Conduit Engine  (x32 Version: )
D3DX10 (x32 Version: 15.4.2368.0902)
DealPly (remove only) (x32 Version: 4.8.6.3) <==== ATTENTION
DMUninstaller (x32)
Epson Easy Photo Print 2 (x32 Version: 2.1.0.0)
EPSON S21 Series Printer Uninstall
Epson Stylus S21_T21_T27 Handbuch (x32)
EVEREST Home Edition v2.20 (x32 Version: 2.20)
GeekBuddy (Version: 4.10.79)
GinyasBrowserCompanion (x32) <==== ATTENTION
GMX Desktop Icons (x32 Version: 3.0.0.21)
GMX Internet Explorer Addon (x32 Version: 1.0.1.0)
GMX MailCheck für Internet Explorer (x32 Version: 1.9.2.0)
GMX Softwareaktualisierung (x32 Version: 3.0.0.22)
Google Chrome (x32 Version: 31.0.1650.63)
Google Earth Plug-in (x32 Version: 7.1.2.2041)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0)
Google Toolbar for Internet Explorer (x32 Version: 7.5.4805.320)
Google Update Helper (x32 Version: 1.3.22.3)
Hama Webcam Suite (x32)
Hauppauge MCE XP/Vista Software Encoder (2.0.27022) (x32 Version: 2.0.27022)
HiYo  (x32 Version: 3.6.0.1128)
HiYo (x32 Version: 3.6.0.1128)
HiYo Bar DE Toolbar (x32 Version: 6.3.3.3)
IB Updater 2.0.0.550 (Version: 2.0.0.550) <==== ATTENTION
IncrediMail (x32 Version: 6.3.9.5254)
IncrediMail 2.0 (x32 Version: 6.3.9.5254)
IncrediMail MediaBar 2 Toolbar (x32 Version: 6.1.0.7)
Internet-TV für Windows Media Center (x32 Version: 4.2.2.0)
J2SE Runtime Environment 5.0 Update 7 (x32 Version: 1.5.0.70)
Java Auto Updater (x32 Version: 2.0.2.1)
Java(TM) 6 Update 20 (x32 Version: 6.0.200)
JNLP (HKCU)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
LUMIX Simple Viewer (x32 Version: 0.99.0000)
Mesh Runtime (x32 Version: 15.4.5722.2)
Message Faces für Internet Explorer (remove only) (x32 Version: 1.0.0.4)
Messenger Companion (x32 Version: 15.4.3502.0922)
Messenger Plus! (x32 Version: 6.00.0.774)
Messenger Plus! Community Smartbar (x32 Version: 1.35.25.10903) <==== ATTENTION
Messenger Plus! for Skype (x32 Version: 2.0.0.150)
Messenger_Plus_Live_Germany Toolbar (x32 Version: )
MessengerPlusLive Germany TB Toolbar (x32 Version: 5.7.2.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft IntelliPoint 7.1 (Version: 7.10.344.0)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
NetWorkingWizard_ICM (x32 Version: 1.02.006)
NVIDIA 3D Vision Treiber 311.06 (Version: 311.06)
NVIDIA Drivers (Version: 1.4)
NVIDIA Grafiktreiber 311.06 (Version: 311.06)
NVIDIA HD-Audiotreiber 1.3.18.0 (Version: 1.3.18.0)
NVIDIA Install Application (Version: 2.1002.109.718)
NVIDIA PhysX (x32 Version: 9.09.0428)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1106)
NVIDIA Systemsteuerung 311.06 (Version: 311.06)
NVIDIA Update 1.11.3 (Version: 1.11.3)
NVIDIA Update Components (Version: 1.11.3)
OmniPage SE 2.0 (x32 Version: 2.00.0004)
Photo Notifier and Animation Creator (x32 Version: 1.0.0.1008)
PHOTOfunSTUDIO -viewer- (x32 Version: 1.00.000)
PhotoMail Maker (x32 Version: 6.0.0.1007)
PlayReady PC Runtime amd64 (Version: 1.3.0)
Plus-HD-1.5 (x32 Version: 1.28.153.1) <==== ATTENTION
PokerStars (x32)
PrivDog (x32 Version: 1.8.0.15)
RealDownloader (x32 Version: 1.3.3)
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0)
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0)
RealPlayer (x32 Version: 16.0.3)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.5911)
RealUpgrade 1.1 (x32 Version: 1.1.0)
Re-markit (x32)
SAMSUNG USB Driver for Mobile Phones (Version: 1.3.350.0)
SCR3xxx Smart Card Reader (x32 Version: 8.44)
swMSM (x32 Version: 12.0.0.1)
SystemDiagnostics (x32 Version: 2.04.0006)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
VLC media player 1.1.11 (x32 Version: 1.1.11)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3555.0308)
Windows Live Family Safety (Version: 15.4.3555.0308)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3555.0308)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Windows Media Center Add-in for Silverlight (x32 Version: 4.7.3.0)
WPM17.8.0.3159 (x32 Version: 17.8.0.3159) <==== ATTENTION

==================== Restore Points  =========================

Could not list Restore Points. Check WMI.


==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {03263E28-7C79-4534-9D09-8822725CC055} - System32\Tasks\{0BC62CCD-EFCB-4F43-9AE8-7C01997AFDBD} => C:\Program Files (x86)\PokerStars\PokerStarsUpdate.exe [2012-12-18] (PokerStars)
Task: {0480C709-671E-470A-87CC-702E6A19030C} - System32\Tasks\{E103402B-783A-43CC-B247-CD781A13D9EC} => C:\Program Files (x86)\Hama\Hama Webcam Suite\HamaWebcamSuite.exe [2007-09-28] (ArcSoft, Inc.)
Task: {10A60B85-19D9-4F8F-BAB1-7715AB68F841} - System32\Tasks\{A3CF25EE-C4FD-4B64-8FF4-A21AC39ABBE8} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe [2013-09-21] (RealNetworks, Inc.)
Task: {22DFF180-C2F4-4900-97E5-B5F220DF78E7} - System32\Tasks\{3872ECB8-A741-462D-8B9A-4F26BDE1848D} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe [2013-09-21] (RealNetworks, Inc.)
Task: {28BAF405-CD92-4377-AE88-176A82020089} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-06-25] (Google Inc.)
Task: {2A08AF78-89C3-4117-BFE6-64DD3182CA7C} - System32\Tasks\1und1 Konfiguration => C:\ProgramData\1und1InternetExplorerAddon\ConfigTask.exe [2011-04-19] (1und1 Mail und Media GmbH)
Task: {2A555A72-B0CC-4FD0-B525-9C9B54FE89CD} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3941800147-2058653031-3768181621-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {2AB4A4F5-B695-465F-88C5-0B7ED2F71962} - System32\Tasks\COMODO\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2013-11-11] (COMODO)
Task: {2DBEACBF-79B7-4B0E-BD05-C3D495D7980D} - System32\Tasks\{3CE7B16A-C93B-4FE8-A0FE-31C2EC8A836B} => C:\Program Files (x86)\Hama\Hama Webcam Suite\WebCam Companion 2\uWebCam.exe [2007-10-09] (ArcSoft Inc.)
Task: {3B0FC4E5-B5CF-413D-B631-6E95881B527F} - System32\Tasks\COMODO\COMODO Cache Builder {0FB77674-7905-4F34-A362-C5A9A26F8CF9} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2013-11-11] (COMODO)
Task: {40A4CE57-39D6-492E-9839-730037DC016F} - System32\Tasks\COMODO\COMODO Welcome {CEB54B45-2B5E-4FF5-9223-6735CD80FE69} => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [2013-11-20] (COMODO)
Task: {495E26BF-2F9C-4ABD-8699-C2B612F53F96} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2013-11-11] (COMODO)
Task: {4DBA9DF0-82EA-41B2-AB14-EB090B82AD5A} - System32\Tasks\{CCF3712F-8E54-4EE1-A3C7-A3306FE8A5C1} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe [2013-09-21] (RealNetworks, Inc.)
Task: {52097AD5-AE6D-4E97-932F-2D0E3C59E2B3} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2013-11-11] (COMODO)
Task: {5BD7FB4D-E891-4826-8CC9-69A9C6AFBBB7} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-3941800147-2058653031-3768181621-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2013-08-14] (RealNetworks, Inc.)
Task: {5C7326E6-C9EB-4B68-ACA7-D241477CC773} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3941800147-2058653031-3768181621-1001 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {61BF8582-11D5-43B7-9778-E85B284C3C1C} - System32\Tasks\{3E4C72CB-DC70-48C7-AB6A-D6208A60E5CC} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe [2013-09-21] (RealNetworks, Inc.)
Task: {620E6F89-59E3-409C-9793-B840AE36FBB2} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3941800147-2058653031-3768181621-1001 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {6220F1D9-AF6F-47BD-8CF1-2FE08C98D310} - System32\Tasks\{2918ED34-7BA1-4BB3-82ED-484E745F4A3B} => C:\Program Files (x86)\Hama\Hama Webcam Suite\WebCam Companion 2\uWebCam.exe [2007-10-09] (ArcSoft Inc.)
Task: {66C16627-8EE0-4789-B6C1-CE291C44EE04} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {66ED8ADA-E40A-4A9B-9242-98BCBC7303A4} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: {7F4C017C-5CB3-4513-9413-68CD3393BE78} - System32\Tasks\{E61AEF89-698C-42C6-B965-1D61CE0DB6FD} => C:\Program Files (x86)\Hama\Hama Webcam Suite\HamaWebcamSuite.exe [2007-09-28] (ArcSoft, Inc.)
Task: {7FE0A3BF-31E5-4229-AAC2-F424C17AF240} - System32\Tasks\Registration 1und1 Task => C:\Program Files (x86)\1und1Softwareaktualisierung\cdsupdclient.exe [2013-02-21] (1&1 Mail & Media GmbH)
Task: {8534BB11-B272-45C3-B695-5B5938A33339} - System32\Tasks\Plus-HD-1.5-firefoxinstaller => C:\Program Files (x86)\Plus-HD-1.5\Plus-HD-1.5-firefoxinstaller.exe [2013-09-18] (Plus HD) <==== ATTENTION
Task: {8594C23F-F5C9-40A6-8F16-AE8E8F86225C} - System32\Tasks\Plus-HD-1.5-codedownloader => C:\Program Files (x86)\Plus-HD-1.5\Plus-HD-1.5-codedownloader.exe [2013-09-18] (Plus HD) <==== ATTENTION
Task: {85E093B3-6B09-41BB-8DA6-DA20D4B44DCA} - System32\Tasks\{1C08AC1E-0BCE-4E93-BE06-E4BBA1E9462F} => C:\Program Files (x86)\PokerStars\PokerStarsUpdate.exe [2012-12-18] (PokerStars)
Task: {94BA9655-E720-468E-A938-F075B703E3C5} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3941800147-2058653031-3768181621-1001 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {96F3A01A-E949-4410-B7B4-27E93B5E6500} - System32\Tasks\Browser Manager => Sc.exe start Browser Manager
Task: {9C38D959-D421-4C85-BF20-46C9241AC0E3} - System32\Tasks\Re-markit Update => C:\Program Files (x86)\Re-markit\ReMarkit_up.exe <==== ATTENTION
Task: {9F8A789A-EF61-4778-AF02-463A242C6DC3} - System32\Tasks\Plus-HD-1.5-enabler => C:\Program Files (x86)\Plus-HD-1.5\Plus-HD-1.5-enabler.exe [2013-09-18] (Plus HD) <==== ATTENTION
Task: {A0E193DE-1230-4119-887E-2B7F9950C28B} - System32\Tasks\Plus-HD-1.5-updater => C:\Program Files (x86)\Plus-HD-1.5\Plus-HD-1.5-updater.exe [2013-09-18] (Plus HD) <==== ATTENTION
Task: {A3FDA8C7-4A85-4B57-BF78-2B292324C7F9} - System32\Tasks\Plus-HD-1.5-chromeinstaller => C:\Program Files (x86)\Plus-HD-1.5\Plus-HD-1.5-chromeinstaller.exe [2013-09-18] (Plus HD) <==== ATTENTION
Task: {A9119604-BCA2-46E3-8990-58A72F137E34} - System32\Tasks\GinyasBrowserCompanion Update Checker => C:\ProgramData\GinyasBrowserCompanion\tbhcn.exe [2013-01-23] (Blabbers Communications Ltd)
Task: {AB1C263B-0554-4330-BABF-CA09B8222496} - System32\Tasks\{63968CF1-7392-4A5E-B580-B5E916C206EF} => C:\Program Files (x86)\PokerStars\PokerStarsUpdate.exe [2012-12-18] (PokerStars)
Task: {B4C8429E-98F6-4533-815E-8D7BF9C225DB} - System32\Tasks\GinyasBrowserCompanion FireFox Watcher => C:\ProgramData\GinyasBrowserCompanion\tbhcn.exe [2013-01-23] (Blabbers Communications Ltd)
Task: {B651A092-7CEE-4E60-AE2A-1715E2056056} - System32\Tasks\{EC512E36-99A6-4F6D-82B2-58E27D01BDDC} => C:\Program Files (x86)\PokerStars\PokerStarsUpdate.exe [2012-12-18] (PokerStars)
Task: {B87572B8-BE81-4E3B-9DDA-940847B56434} - System32\Tasks\{26972764-9BB7-4B5D-A545-4F5FD06A9EB0} => C:\Program Files (x86)\Hama\Hama Webcam Suite\HamaWebcamSuite.exe [2007-09-28] (ArcSoft, Inc.)
Task: {C1D304D4-B4BF-4AE4-9642-A6DE8D26CCB6} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2009-11-11] (Microsoft Corporation)
Task: {CD47EBD7-D381-4A51-8655-836443629509} - System32\Tasks\GinyasBrowserCompanion Chrome Watcher => C:\ProgramData\GinyasBrowserCompanion\tbhcn.exe [2013-01-23] (Blabbers Communications Ltd)
Task: {D6B64F35-A843-418B-BFE7-6218EA429ADC} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3941800147-2058653031-3768181621-1001 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {D87B66D8-F485-4A77-BBB6-5FFBA02EC9EA} - System32\Tasks\GinyasBrowserCompanion Stats Report => C:\ProgramData\GinyasBrowserCompanion\tbhcn.exe [2013-01-23] (Blabbers Communications Ltd)
Task: {DDA20311-8673-466C-83D7-DB8E3E5CCDDC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-06-25] (Google Inc.)
Task: {E099D4CD-2A36-476F-AD6B-9DBB55F1157E} - System32\Tasks\{9336DFF7-3B35-4966-B0F5-65C87D536CBC} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe [2013-09-21] (RealNetworks, Inc.)
Task: {E104E262-2D48-47F3-AEB2-29D9DA63203A} - System32\Tasks\{FD56BE6E-3F7B-47C2-A77E-8C2989A0BAFB} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe [2013-09-21] (RealNetworks, Inc.)
Task: {E3BFDFFA-9186-4984-AAF3-57A9B5568773} - System32\Tasks\{544E289D-D709-4BB5-B757-8064D1A55969} => C:\Program Files (x86)\Hama\Hama Webcam Suite\WebCam Companion 2\uWebCam.exe [2007-10-09] (ArcSoft Inc.)
Task: {F5D48F14-3081-4145-85B1-D2A43D600314} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3941800147-2058653031-3768181621-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {F6D8E134-D47A-45C4-88E5-6AEF00B9B00A} - System32\Tasks\{B0AC0E49-041B-4DDB-AD27-DC2BD8BC8671} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe [2013-09-21] (RealNetworks, Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GinyasBrowserCompanion Chrome Watcher.job => C:\ProgramData\GinyasBrowserCompanion\tbhcn.exe
Task: C:\Windows\Tasks\GinyasBrowserCompanion FireFox Watcher.job => C:\ProgramData\GinyasBrowserCompanion\tbhcn.exe
Task: C:\Windows\Tasks\GinyasBrowserCompanion Stats Report.job => C:\ProgramData\GinyasBrowserCompanion\tbhcn.exe
Task: C:\Windows\Tasks\GinyasBrowserCompanion Update Checker.job => C:\ProgramData\GinyasBrowserCompanion\tbhcn.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Plus-HD-1.5-chromeinstaller.job => C:\Program Files (x86)\Plus-HD-1.5\Plus-HD-1.5-chromeinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-1.5-codedownloader.job => C:\Program Files (x86)\Plus-HD-1.5\Plus-HD-1.5-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-1.5-enabler.job => C:\Program Files (x86)\Plus-HD-1.5\Plus-HD-1.5-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-1.5-firefoxinstaller.job => C:\Program Files (x86)\Plus-HD-1.5\Plus-HD-1.5-firefoxinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-1.5-updater.job => C:\Program Files (x86)\Plus-HD-1.5\Plus-HD-1.5-updater.exe <==== ATTENTION
Task: C:\Windows\Tasks\Re-markit Update.job => C:\Program Files (x86)\Re-markit\ReMarkit_up.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) =============


==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:373E1720
AlternateDataStreams: C:\Users\Willy\AppData\Roaming\Microsoft\Windows\Start Menu\GMX Homepage.website:TASKICON_0favicon-2099680105
AlternateDataStreams: C:\Users\Willy\AppData\Roaming\Microsoft\Windows\Start Menu\GMX Homepage.website:TASKICON_1favicon484815124
AlternateDataStreams: C:\Users\Willy\AppData\Roaming\Microsoft\Windows\Start Menu\GMX Homepage.website:TASKICON_2favicon854324833
AlternateDataStreams: C:\Users\Willy\AppData\Roaming\Microsoft\Windows\Start Menu\GMX Homepage.website:TASKICON_3favicon-1603395699
AlternateDataStreams: C:\Users\Willy\AppData\Roaming\Microsoft\Windows\Start Menu\GMX Homepage.website:TASKICON_4favicon-933502785

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Could not list Devices. Check WMI.


==================== Event log errors: =========================

Application errors:
==================
Error: (12/21/2013 05:33:56 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: messagefaces-ie.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x4d67e275
Ausnahmecode: 0xc0000005
Fehleroffset: 0x63598d4a
ID des fehlerhaften Prozesses: 0x18ac
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3

Error: (12/21/2013 05:23:15 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: unit.exe, Version: 4.0.0.0, Zeitstempel: 0x52aae7b7
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521eaf24
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000053290
ID des fehlerhaften Prozesses: 0xf54
Startzeit der fehlerhaften Anwendung: 0xunit.exe0
Pfad der fehlerhaften Anwendung: unit.exe1
Pfad des fehlerhaften Moduls: unit.exe2
Berichtskennung: unit.exe3

Error: (12/21/2013 05:22:47 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: tbhcn.exe, Version: 1.0.0.5, Zeitstempel: 0x50f25761
Name des fehlerhaften Moduls: tbhcn.exe, Version: 1.0.0.5, Zeitstempel: 0x50f25761
Ausnahmecode: 0x40000015
Fehleroffset: 0x0007a2fd
ID des fehlerhaften Prozesses: 0x830
Startzeit der fehlerhaften Anwendung: 0xtbhcn.exe0
Pfad der fehlerhaften Anwendung: tbhcn.exe1
Pfad des fehlerhaften Moduls: tbhcn.exe2
Berichtskennung: tbhcn.exe3

Error: (12/21/2013 05:22:40 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (12/21/2013 05:21:04 PM) (Source: MsgPlusService) (User: )
Description: MsgPlusServiceService failed to shut down.

Error: (12/21/2013 05:21:04 PM) (Source: MsgPlusService) (User: )
Description: MsgPlusServiceReceiving shutdown message.

Error: (12/21/2013 04:14:43 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: tbhcn.exe, Version: 1.0.0.5, Zeitstempel: 0x50f25761
Name des fehlerhaften Moduls: tbhcn.exe, Version: 1.0.0.5, Zeitstempel: 0x50f25761
Ausnahmecode: 0x40000015
Fehleroffset: 0x0007a2fd
ID des fehlerhaften Prozesses: 0x8bc
Startzeit der fehlerhaften Anwendung: 0xtbhcn.exe0
Pfad der fehlerhaften Anwendung: tbhcn.exe1
Pfad des fehlerhaften Moduls: tbhcn.exe2
Berichtskennung: tbhcn.exe3

Error: (12/21/2013 04:14:40 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (12/21/2013 04:14:40 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (12/21/2013 04:11:41 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".


System errors:
=============
Error: (12/21/2013 05:24:43 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (12/21/2013 05:24:43 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (12/21/2013 04:16:36 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (12/21/2013 04:16:36 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (12/21/2013 03:55:48 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (12/21/2013 03:55:48 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (12/21/2013 03:39:03 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (12/21/2013 03:39:03 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (12/21/2013 00:56:25 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (12/21/2013 00:56:25 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2010-06-25 18:21:29.543
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Willy\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2010-06-25 18:21:29.538
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Willy\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2010-06-25 18:21:29.362
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2010-06-25 18:21:29.358
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 54%
Total physical RAM: 4094.42 MB
Available physical RAM: 1842.93 MB
Total Pagefile: 8187.02 MB
Available Pagefile: 5148.45 MB
Total Virtual: 8192 MB
Available Virtual: 8191.79 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:150 GB) (Free:31.64 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Datenträger) (Fixed) (Total:931.51 GB) (Free:244.04 GB) NTFS
Drive e: (Data) (Fixed) (Total:779.5 GB) (Free:779.35 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 241C6624)
Partition 1: (Active) - (Size=2 GB) - (Type=27)
Partition 2: (Not Active) - (Size=150 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=780 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 932 GB) (Disk ID: 8CAA536F)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

==================== End Of Log ============================

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-12-2013 02
Ran by Willy (administrator) on WILLY-PC on 21-12-2013 17:38:45
Running from C:\Users\Willy\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Could not list processes ===============

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8060960 2009-08-05] (Realtek Semiconductor)
HKLM\...\Run: [IntelliPoint] - C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2320752 2009-11-11] (Microsoft Corporation)
HKLM\...\Run: [COMODO Internet Security] - C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1612504 2013-11-11] (COMODO)
Winlogon\Notify\ScCertProp: C:\Windows\SysWOW64\explorer.exe (Microsoft Corporation)
HKCU\...\Run: [IncrediMail] - C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe [367168 2013-01-28] (IncrediMail, Ltd.)
HKCU\...\Run: [EPSON S21 Series] - C:\Windows\Temp\E_S8535.tmp [118 2010-06-25] ()
HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-06-25] (Google Inc.)
HKCU\...\Run: [Browser Infrastructure Helper] - C:\Users\Willy\AppData\Local\Smartbar\Application\Smartbar.exe [20272 2013-06-16] (Smartbar)
MountPoints2: {378993e6-8891-11e1-bc00-001999793c0d} - K:\ICM_ML.exe
MountPoints2: {52a5abe1-7434-11e1-9997-001999793c0d} - K:\ICM_ML.exe
HKLM-x32\...\Run: [Hiyo] - C:\Program Files (x86)\HiYo\Bin\HiYo.exe [238960 2011-12-16] (IncrediMail, Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [248040 2010-02-18] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [OpwareSE2] - C:\Program Files (x86)\ScanSoft\OmniPageSE2.0\opwareSE2.exe [49152 2003-05-08] (ScanSoft, Inc.)
HKLM-x32\...\Run: [OPSE reminder] - C:\Program Files (x86)\ScanSoft\OmniPageSE2.0\EregGer\Ereg.ini [241 2013-12-21] ()
HKLM-x32\...\Run: [ArcSoft Connection Service] - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [31232 2007-10-11] (ArcSoft)
HKLM-x32\...\Run: [BabylonToolbar] - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe [286720 2010-11-07] (Babylon Ltd.)
HKLM-x32\...\Run: [Browser companion helper] - C:\Program Files (x86)\BrowserCompanion\BCHelper.exe [187696 2011-12-16] (Blabbers Communications LTD)
HKLM-x32\...\Run: [PlusService] - C:\Program Files (x86)\Yuna Software\Messenger Plus!\PlusService.exe [802304 2013-01-23] (Yuna Software)
HKLM-x32\...\Run: [DATAMNGR] - C:\PROGRA~2\SEARCH~1\Datamngr\DATAMN~1.EXE
HKLM-x32\...\Run: [MyKey] - C:\Program Files (x86)\CHIPDRIVE\CHIPDRIVE MyKey\MyKey\MyKey.exe [3757000 2012-12-03] (Identive GmbH)
HKLM-x32\...\Run: [MessengerPlusForSkypeService] - C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe [128000 2013-06-27] (Yuna Software)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [MailCheck IE Broker] - C:\Program Files (x86)\GMX MailCheck\IE\GMX_MailCheck_Broker.exe [1430592 2013-03-15] (1und1 Mail und Media GmbH)
HKLM-x32\...\Run: [TkBellExe] - C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [295512 2013-09-21] (RealNetworks, Inc.)
HKLM-x32\...\Run: [tvncontrol] - C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2013-12-13] (Comodo Security Solutions, Inc.)
HKLM-x32\...\Run: [PrivDogService] - C:\Program Files (x86)\AdTrustMedia\PrivDog\1.8.0.18\trustedadssvc.exe [525480 2013-12-13] (AdTrustMedia)
AppInit_DLLs: C:\PROGRA~2\SEARCH~1\Datamngr\x64\datamngr.dll C:\PROGRA~2\SEARCH~1\Datamngr\x64\IEBHO.dll                [ ] ()
AppInit_DLLs-x32: c:\windows\syswow64\guard32.dll c:\windows\syswow64\guard32.dll   [354240 2013-09-24] (COMODO)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup\LaunchCenter.lnk
ShortcutTarget: LaunchCenter.lnk -> C:\Program Files (x86)\Fujitsu\LaunchCenter\LaunchCenter.exe (Fujitsu Technology Solutions)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup\LaunchCenter.lnk
ShortcutTarget: LaunchCenter.lnk -> C:\Program Files (x86)\Fujitsu\LaunchCenter\LaunchCenter.exe (Fujitsu Technology Solutions)
Startup: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup\LaunchCenter.lnk
ShortcutTarget: LaunchCenter.lnk -> C:\Program Files (x86)\Fujitsu\LaunchCenter\LaunchCenter.exe (Fujitsu Technology Solutions)
Startup: C:\Users\Willy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.plusnetwork.com/?publisher=MessengerPlus&dpid=MessengerPlus&co=TJ&userid=488aa0ea-afd7-4991-bed1-14a3897d7d6d&sp=addr&q={searchTerms}&t=a0815&uid={uid}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gmx.net/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1387317121&from=tugs&uid=3219913727_67194_14BFF698
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www.gmx.net/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387317121&from=tugs&uid=3219913727_67194_14BFF698&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1387317121&from=tugs&uid=3219913727_67194_14BFF698
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.nationzoom.com/?type=hp&ts=1387317121&from=tugs&uid=3219913727_67194_14BFF698
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1387317121&from=tugs&uid=3219913727_67194_14BFF698&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387317121&from=tugs&uid=3219913727_67194_14BFF698&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1387317121&from=tugs&uid=3219913727_67194_14BFF698
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.nationzoom.com/?type=hp&ts=1387317121&from=tugs&uid=3219913727_67194_14BFF698
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1387317121&from=tugs&uid=3219913727_67194_14BFF698&q={searchTerms}
URLSearchHook: HKLM-x32 - Messenger Plus Live Germany Toolbar - {542e4d79-1970-4e95-9862-fdb96f61b280} - C:\Program Files (x86)\Messenger_Plus_Live_Germany\prxtbMes2.dll (Conduit Ltd.)
URLSearchHook: HKLM-x32 - MessengerPlusLive Germany TB Toolbar - {76aeea42-e04a-4b62-83ab-df4b2be2541e} - C:\Program Files (x86)\MessengerPlusLive_Germany_TB\prxtbMes0.dll (Conduit Ltd.)
URLSearchHook: HKLM-x32 - IncrediMail MediaBar 2 Toolbar - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files (x86)\IncrediMail_MediaBar_2\prxtbInc2.dll (Conduit Ltd.)
URLSearchHook: HKLM-x32 - HiYo Bar DE Toolbar - {0865f8dd-348d-4575-81b6-bfdb08207c9e} - C:\Program Files (x86)\HiYo_Bar_DE\prxtbHiYo.dll (Conduit Ltd.)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.nationzoom.com/?type=sc&ts=1387317121&from=tugs&uid=3219913727_67194_14BFF698
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387317121&from=tugs&uid=3219913727_67194_14BFF698&q={searchTerms}
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387317121&from=tugs&uid=3219913727_67194_14BFF698&q={searchTerms}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://www.searchya.com/?q={searchTerms}&s=1&a=foxtab&chnl=tc-100&cd=2XzuyEtN2Y1L1QzutDtDtCzyzyzyyBzytA0CtD0D0FyCzyzztN0D0Tzu0StBzyyCtN1L2XzutBtFtBtFtDtFtAyEyE&cr=1845847145
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387317121&from=tugs&uid=3219913727_67194_14BFF698&q={searchTerms}
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.plusnetwork.com/?publisher=MessengerPlus&dpid=MessengerPlus&co=DE&userid=488aa0ea-afd7-4991-bed1-14a3897d7d6d&sp=addr&q={searchTerms}&t=a0815
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387317121&from=tugs&uid=3219913727_67194_14BFF698&q={searchTerms}
SearchScopes: HKLM-x32 - {4490034A-1DBD-12C3-7B5F-527F0FA0532C} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=384&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=2412381238744726&q={searchTerms}
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://www.searchya.com/?q={searchTerms}&s=1&a=foxtab&chnl=tc-100&cd=2XzuyEtN2Y1L1QzutDtDtCzyzyzyyBzytA0CtD0D0FyCzyzztN0D0Tzu0StBzyyCtN1L2XzutBtFtBtFtDtFtAyEyE&cr=1845847145
SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2567732
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.plusnetwork.com/?publisher=MessengerPlus&dpid=MessengerPlus&co=TJ&userid=488aa0ea-afd7-4991-bed1-14a3897d7d6d&sp=addr&q={searchTerms}&t=a0815&uid={uid}
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.plusnetwork.com/?publisher=MessengerPlus&dpid=MessengerPlus&co=TJ&userid=488aa0ea-afd7-4991-bed1-14a3897d7d6d&sp=addr&q={searchTerms}&t=a0815&uid={uid}
SearchScopes: HKCU - {09038620-190C-402B-A92F-18864E6AB22F} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&affID=113480&tt=4312_8&babsrc=SP_ss&mntrId=14bff698000000000000001999793c0d
SearchScopes: HKCU - {1F096B29-E9DA-4D64-8D63-936BE7762CC5} URL = hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=14bff698000000000000001999793c0d&tlver=1.4.19.19&affID=17159
SearchScopes: HKCU - {25629637-5298-4DAC-BC6D-2440E168C410} URL = 
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387317121&from=tugs&uid=3219913727_67194_14BFF698&q={searchTerms}
SearchScopes: HKCU - {4327FABE-3C22-4689-8DBF-D226CF777FE9} URL = hxxp://plusnetwork.com/?sp=brw&q={searchTerms}
SearchScopes: HKCU - {5A817CF6-92D5-4DE5-AC38-82DF8A73EF28} URL = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms}
SearchScopes: HKCU - {6B1D1FB7-7233-4F7C-802C-21A1DDB12754} URL = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms}
SearchScopes: HKCU - {8B63A8D6-BBED-4341-8867-790E5F524C96} URL = hxxp://mystart.hiyo.com/?search={searchTerms}&loc=ie_search
SearchScopes: HKCU - {8EEAC88A-079B-4b2c-80C1-7836F79EB40A} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-comodo
SearchScopes: HKCU - {94221320-686C-4815-9E3C-9CA56139808B} URL = hxxp://www.searchya.com/?q={searchTerms}&s=1&a=foxtab&chnl=tc-100&cd=2XzuyEtN2Y1L1QzutDtDtCzyzyzyyBzytA0CtD0D0FyCzyzztN0D0Tzu0StBzyyCtN1L2XzutBtFtBtFtDtFtAyEyE&cr=1845847145
SearchScopes: HKCU - {9B6103C1-F818-48a8-9683-314055BE6075} URL = hxxp://mystart.hiyo.com/?search={searchTerms}&loc=ie_search&a=6mb5BE1D8V
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=384&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=2412381238744726&q={searchTerms}
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2567732
SearchScopes: HKCU - {CA52F1CD-FA5D-4233-BC9A-B6B35AF3E838} URL = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie
SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://mystart.incredimail.com/mb156/?search={searchTerms}&loc=search_box&a=6mb5BE1D8V
BHO: Plus-HD-1.5 - {11111111-1111-1111-1111-110311201100} - C:\Program Files (x86)\Plus-HD-1.5\Plus-HD-1.5-bho64.dll (Plus HD)
BHO: Messenger Plus! Community SmartbarEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
BHO: IB Updater - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\Web Assistant\Extension64.dll ()
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: DataMngr - {9D717F81-9148-4f12-8568-69135F087DB0} - C:\PROGRA~2\SEARCH~1\Datamngr\x64\BROWSE~1.DLL No File
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: GMX MailCheck BHO - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
BHO: Message Faces for Internet Explorer - {E3758FC2-BB95-4B86-84BF-D91F4748EC76} - C:\Program Files (x86)\Message Faces for Internet Explorer\x64\messagefaces-ie.dll ()
BHO: PrivDog Extension - {FB16E5C3-A9E2-47A2-8EFC-319E775E62CC} - C:\Program Files\AdTrustMedia\PrivDog\1.8.0.18\trustedads.dll (AdTrustMedia)
BHO-x32: Ginyas Browser Companion - {00cbb66b-1d3b-46d3-9577-323a336acb50} - C:\Program Files (x86)\BrowserCompanion\jsloader.dll ( )
BHO-x32: HiYo Bar DE Toolbar - {0865f8dd-348d-4575-81b6-bfdb08207c9e} - C:\Program Files (x86)\HiYo_Bar_DE\prxtbHiYo.dll (Conduit Ltd.)
BHO-x32: Plus-HD-1.5 - {11111111-1111-1111-1111-110311201100} - C:\Program Files (x86)\Plus-HD-1.5\Plus-HD-1.5-bho.dll (Plus HD)
BHO-x32: GMX Konfiguration - {17166733-40EA-4432-A85C-AE672FF0E236} - C:\ProgramData\1und1InternetExplorerAddon\BHOXML.dll (1&1 Mail & Media GmbH)
BHO-x32: CescrtHlpr Object - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll (Babylon BHO)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Conduit Engine  - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
BHO-x32: Messenger Plus! Community SmartbarEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: IB Updater - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\Web Assistant\Extension32.dll ()
BHO-x32: Messenger Plus Live Germany Toolbar - {542e4d79-1970-4e95-9862-fdb96f61b280} - C:\Program Files (x86)\Messenger_Plus_Live_Germany\prxtbMes2.dll (Conduit Ltd.)
BHO-x32: MessengerPlusLive Germany TB Toolbar - {76aeea42-e04a-4b62-83ab-df4b2be2541e} - C:\Program Files (x86)\MessengerPlusLive_Germany_TB\prxtbMes0.dll (Conduit Ltd.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Ginyas Browser Companion Verifier - {963B125B-8B21-49A2-A3A8-E37092276531} - C:\Program Files (x86)\BrowserCompanion\updatebhoWin32.dll ( )
BHO-x32: DataMngr - {9D717F81-9148-4f12-8568-69135F087DB0} - C:\PROGRA~2\SEARCH~1\Datamngr\BROWSE~1.DLL No File
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: GMX MailCheck BHO - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Program Files (x86)\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
BHO-x32: IncrediMail MediaBar 2 Toolbar - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files (x86)\IncrediMail_MediaBar_2\prxtbInc2.dll (Conduit Ltd.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Message Faces for Internet Explorer - {E3758FC2-BB95-4B86-84BF-D91F4748EC75} - C:\Program Files (x86)\Message Faces for Internet Explorer\x86\messagefaces-ie.dll ()
BHO-x32: Search-Results Toolbar - {f34c9277-6577-4dff-b2d7-7d58092f272f} - C:\PROGRA~2\SEARCH~1\Datamngr\SRTOOL~1\searchresultsDx.dll No File
BHO-x32: Re-markit - {f4cc7efb-1a47-41bb-9f46-15a0c3de7ee4} - C:\Program Files (x86)\Re-markit\136.dll ()
BHO-x32: PrivDog Extension - {FB16E5C3-A9E2-47A2-8EFC-319E775E62CC} - C:\Program Files (x86)\AdTrustMedia\PrivDog\1.8.0.18\trustedads.dll (AdTrustMedia)
Toolbar: HKLM - Messenger Plus! Community Smartbar - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM - GMX MailCheck - {C424171E-592A-415a-9EB1-DFD6D95D3530} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Messenger Plus Live Germany Toolbar - {542e4d79-1970-4e95-9862-fdb96f61b280} - C:\Program Files (x86)\Messenger_Plus_Live_Germany\prxtbMes2.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - MessengerPlusLive Germany TB Toolbar - {76aeea42-e04a-4b62-83ab-df4b2be2541e} - C:\Program Files (x86)\MessengerPlusLive_Germany_TB\prxtbMes0.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - IncrediMail MediaBar 2 Toolbar - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files (x86)\IncrediMail_MediaBar_2\prxtbInc2.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - Conduit Engine  - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll (Babylon Ltd.)
Toolbar: HKLM-x32 - Messenger Plus! Community Smartbar - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - HiYo Bar DE Toolbar - {0865f8dd-348d-4575-81b6-bfdb08207c9e} - C:\Program Files (x86)\HiYo_Bar_DE\prxtbHiYo.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - Search-Results Toolbar - {f34c9277-6577-4dff-b2d7-7d58092f272f} - C:\PROGRA~2\SEARCH~1\Datamngr\SRTOOL~1\searchresultsDx.dll No File
Toolbar: HKLM-x32 - GMX MailCheck - {C424171E-592A-415a-9EB1-DFD6D95D3530} - C:\Program Files (x86)\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKCU - No Name - {542E4D79-1970-4E95-9862-FDB96F61B280} -  No File
Toolbar: HKCU - No Name - {76AEEA42-E04A-4B62-83AB-DF4B2BE2541E} -  No File
Toolbar: HKCU - No Name - {D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0} -  No File
Toolbar: HKCU - No Name - {30F9B915-B755-4826-820B-08FBA6BD249D} -  No File
Toolbar: HKCU - GMX MailCheck - {C424171E-592A-415A-9EB1-DFD6D95D3530} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: base64 - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} -  No File
Handler: chrome - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} -  No File
Handler: gmx - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
Handler: prox - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} -  No File
Handler-x32: base64 - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll (Blabbers Communications Ltd)
Handler-x32: chrome - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll (Blabbers Communications Ltd)
Handler-x32: gmx - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files (x86)\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
Handler-x32: prox - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll (Blabbers Communications Ltd)
Tcpip\Parameters: [DhcpNameServer] 80.69.102.158 80.69.103.78
Tcpip\..\Interfaces\{F72A3683-90F7-4161-AF5A-8A96583608E6}: [NameServer]156.154.70.25,156.154.71.25

FireFox:
========
FF ProfilePath: C:\Users\Willy\AppData\Roaming\Mozilla\Firefox\Profiles\bxp55mm7.default
FF user.js: detected! => C:\Users\Willy\AppData\Roaming\Mozilla\Firefox\Profiles\bxp55mm7.default\user.js
FF Homepage: hxxp://de.yahoo.com?fr=fp-comodo
FF DefaultSearchEngine: Yahoo
FF Keyword.URL: hxxp://de.search.yahoo.com/search?fr=ytff-comodo&p=
FF SelectedSearchEngine: Yahoo
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Willy\AppData\Roaming\Mozilla\Firefox\Profiles\bxp55mm7.default\searchplugins\browsemngr.xml
FF SearchPlugin: C:\Users\Willy\AppData\Roaming\Mozilla\Firefox\Profiles\bxp55mm7.default\searchplugins\Messenger Plus Smartbar Search.xml
FF SearchPlugin: C:\Users\Willy\AppData\Roaming\Mozilla\Firefox\Profiles\bxp55mm7.default\searchplugins\MyStart Search.xml
FF SearchPlugin: C:\Users\Willy\AppData\Roaming\Mozilla\Firefox\Profiles\bxp55mm7.default\searchplugins\Plusnetwork.xml
FF SearchPlugin: C:\Users\Willy\AppData\Roaming\Mozilla\Firefox\Profiles\bxp55mm7.default\searchplugins\SearchYa!.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
FF Extension: Ginyas Browser Companion - C:\Users\Willy\AppData\Roaming\Mozilla\Firefox\Profiles\bxp55mm7.default\Extensions\bbrs_002@blabbers.com
FF Extension: Plus-HD-1.5 - C:\Users\Willy\AppData\Roaming\Mozilla\Firefox\Profiles\bxp55mm7.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com
FF Extension: Babylon - C:\Users\Willy\AppData\Roaming\Mozilla\Firefox\Profiles\bxp55mm7.default\Extensions\ffxtlbr@babylon.com
FF Extension: searchya.com - C:\Users\Willy\AppData\Roaming\Mozilla\Firefox\Profiles\bxp55mm7.default\Extensions\ffxtlbr@searchya.com
FF Extension: Messenger Plus! Community Smartbar - C:\Users\Willy\AppData\Roaming\Mozilla\Firefox\Profiles\bxp55mm7.default\Extensions\linkuryfirefoxremoteplugin@linkury.com
FF Extension: GMX Toolbar - C:\Users\Willy\AppData\Roaming\Mozilla\Firefox\Profiles\bxp55mm7.default\Extensions\toolbar@gmx.net
FF Extension: Messenger Plus Live Germany Community Toolbar - C:\Users\Willy\AppData\Roaming\Mozilla\Firefox\Profiles\bxp55mm7.default\Extensions\{542e4d79-1970-4e95-9862-fdb96f61b280}
FF Extension: Yahoo! Toolbar - C:\Users\Willy\AppData\Roaming\Mozilla\Firefox\Profiles\bxp55mm7.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
FF Extension: MessengerPlusLive Germany TB Community Toolbar - C:\Users\Willy\AppData\Roaming\Mozilla\Firefox\Profiles\bxp55mm7.default\Extensions\{76aeea42-e04a-4b62-83ab-df4b2be2541e}
FF Extension: IncrediMail MediaBar 2 Community Toolbar - C:\Users\Willy\AppData\Roaming\Mozilla\Firefox\Profiles\bxp55mm7.default\Extensions\{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0}
FF Extension: No Name - C:\Users\Willy\AppData\Roaming\Mozilla\Firefox\Profiles\bxp55mm7.default\Extensions\PrivDog@AdTrustMedia.com.xpi
FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\Web Assistant\Firefox
FF Extension: IB Updater - C:\Program Files\Web Assistant\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\Web Assistant\Firefox
FF Extension: IB Updater - C:\Program Files\Web Assistant\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{FACC66B7-E49F-49ed-997E-66A221FD956D}] - C:\Program Files (x86)\CHIPDRIVE\CHIPDRIVE MyKey\MyKey\FireFox\
FF Extension: MyKey Interface - C:\Program Files (x86)\CHIPDRIVE\CHIPDRIVE MyKey\MyKey\FireFox\
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF HKCU\...\Firefox\Extensions: [{b64982b1-d112-42b5-b1e4-d3867c4533f8}] - C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\FirefoxExtension
FF HKCU\...\Firefox\Extensions: [{48d682c9-1734-4ab6-bbe8-8b343cbddcf1}] - C:\Program Files (x86)\Re-markit\136.xpi
FF Extension: No Name - C:\Program Files (x86)\Re-markit\136.xpi
FF Extension: No Name - C:\Program Files (x86)\Re-markit\136.xpi

Chrome: 
=======
CHR HomePage: hxxp://www.nationzoom.com/?type=hp&ts=1387317121&from=tugs&uid=3219913727_67194_14BFF698
CHR RestoreOnStartup: "hxxp://www.nationzoom.com/?type=hp&ts=1387317121&from=tugs&uid=3219913727_67194_14BFF698"
CHR DefaultSearchKeyword: nationzoom
CHR DefaultSearchProvider: nationzoom
CHR DefaultSearchURL: hxxp://www.nationzoom.com/web/?type=ds&ts=1387317121&from=tugs&uid=3219913727_67194_14BFF698&q={searchTerms}
CHR Extension: (Plus-HD-1.5) - C:\Users\Willy\AppData\Local\Google\Chrome\User Data\Default\Extensions\amcnaamhfnpmekghmhckingkdiingmjm\1.24.57_0
CHR Extension: (Ginyas Browser Companion) - C:\Users\Willy\AppData\Local\Google\Chrome\User Data\Default\Extensions\bodddioamolcibagionmmobehnbhiakf\1.0.5_0
CHR Extension: (Extended Protection) - C:\Users\Willy\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.3_0
CHR Extension: (New Tab) - C:\Users\Willy\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\5.1_0
CHR Extension: (PrivDog) - C:\Users\Willy\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmaiofennmphjldldcpphcechfnnohja\1.5.0.14_0
CHR Extension: (Re-markit) - C:\Users\Willy\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcpfhaghaadpjpgocojgnlhjcieeooel\1.136_0
CHR Extension: (Babylon Chrome OCR) - C:\Users\Willy\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.0_0
CHR Extension: (Web Assistant) - C:\Users\Willy\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd\2.0.0.441_0
CHR Extension: (RealDownloader) - C:\Users\Willy\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.2
CHR Extension: (Lightning Newtab) - C:\Users\Willy\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo\1.1.7.9_0
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\Willy\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5
CHR Extension: (New Tab for Chrome) - C:\Users\Willy\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0
CHR Extension: (Google Wallet) - C:\Users\Willy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (DealPly  Shopping  ) - C:\Users\Willy\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojcgaoafcmbadjkfdippkdddgkeaipbn\3.5.0.0_0
CHR HKLM\...\Chrome\Extension: [cjpglkicenollcignonpgiafdgfeehoj] - C:\Users\Willy\AppData\Local\speeddial.crx
CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\Web Assistant\source.crx
CHR HKLM-x32\...\Chrome\Extension: [bodddioamolcibagionmmobehnbhiakf] - C:\Program Files (x86)\BrowserCompanion\blabbers-ch.crx
CHR HKLM-x32\...\Chrome\Extension: [cjpglkicenollcignonpgiafdgfeehoj] - C:\Users\Willy\AppData\Local\speeddial.crx
CHR HKLM-x32\...\Chrome\Extension: [cmaiofennmphjldldcpphcechfnnohja] - C:\Program Files (x86)\AdTrustMedia\PrivDog\PrivDog_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [dcpfhaghaadpjpgocojgnlhjcieeooel] - C:\Program Files (x86)\Re-markit\136.crx
CHR HKLM-x32\...\Chrome\Extension: [dhkplhfnhceodhffomolpfigojocbpcb] - C:\Users\Willy\AppData\Roaming\BabylonToolbar\CR\BabylonChrome1.crx
CHR HKLM-x32\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\Web Assistant\source.crx
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx
CHR HKLM-x32\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Willy\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx
CHR HKLM-x32\...\Chrome\Extension: [jifflliplgeajjdhmkcfnngfpgbjonjg] - C:\Program Files (x86)\Perion\NewTab\NewTab.crx
CHR HKLM-x32\...\Chrome\Extension: [kolgnaidildmdbfgdnoapjdianbpajne] - C:\Program Files (x86)\BrowserCompanion\blabbers-ch.crx
CHR HKLM-x32\...\Chrome\Extension: [pgafcinpmmpklohkojmllohdhomoefph] - C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.crx
CHR StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe hxxp://www.nationzoom.com/?type=sc&ts=1387317121&from=tugs&uid=3219913727_67194_14BFF698

==================== Services (Whitelisted) =================

R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [51712 2007-10-11] (ArcSoft)
R2 CLPSLauncher; C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe [70352 2013-12-13] (Comodo Security Solutions, Inc.)
R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [6254152 2013-10-20] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [164056 2013-09-24] (COMODO)
R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2098880 2013-11-11] ()
R2 GeekBuddyRSP; C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2013-12-13] (Comodo Security Solutions, Inc.)
R2 IB Updater; C:\Program Files\Web Assistant\ExtensionUpdaterService.exe [188760 2012-11-20] ()
R2 LanmanWorkstation; C:\Windows\System32\aptwbkx49.dll [286208 2012-04-09] (Works Ltd.)
R2 MsgPlusService; C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe [128000 2013-06-27] (Yuna Software)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
R2 TestHandler; C:\Program Files (x86)\Fujitsu\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe [341264 2009-02-19] (Fujitsu Technology Solutions)
R2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [499856 2013-12-17] (Cherished Technololgy LIMITED)
R2 Update-Service; %SystemRoot%\System32\UpdSvc.dll [x]

==================== Drivers (Whitelisted) ====================

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [18688 2007-05-30] (ArcSoft, Inc.)
R1 CFRMD; C:\Windows\System32\DRIVERS\CFRMD.sys [37976 2013-05-07] (Windows (R) Win 7 DDK provider)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [23168 2013-09-24] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [709144 2013-11-14] (COMODO)
R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [48872 2013-09-24] (COMODO)
S3 dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys [20568 2010-05-01] (Devguru Co., Ltd)
R3 hcw85cir; C:\Windows\System32\drivers\hcw85cir3.sys [32768 2009-08-24] (Hauppauge Computer Works, Inc.)
R1 HMD; C:\Windows\System32\DRIVERS\hmd.sys [14888 2013-10-07] ()
R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [96800 2013-09-24] (COMODO)
S3 ssceserd; C:\Windows\System32\DRIVERS\ssceserd.sys [129024 2010-04-27] (MCCI Corporation)
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [19968 2013-02-12] (Microsoft Corporation)
S3 pccsmcfd; system32\DRIVERS\pccsmcfdx64.sys [x]
S3 SCL01164; system32\DRIVERS\SCL01164.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-21 17:38 - 2013-12-21 17:39 - 00036541 _____ C:\Users\Willy\Downloads\FRST.txt
2013-12-21 17:37 - 2013-12-21 17:37 - 00000000 ____D C:\FRST
2013-12-21 17:36 - 2013-12-21 17:37 - 02193141 _____ (Farbar) C:\Users\Willy\Downloads\FRST64.exe
2013-12-21 17:19 - 2013-12-21 17:19 - 00000000 ____D C:\Users\Willy\AppData\Local\AdTrustMedia
2013-12-21 16:04 - 2013-12-21 16:04 - 00000000 ____D C:\Windows\System32\Tasks\COMODO
2013-12-21 16:03 - 2013-12-21 17:17 - 00001985 _____ C:\Users\Public\Desktop\COMODO Internet Security.lnk
2013-12-21 16:03 - 2013-12-21 16:03 - 00001905 _____ C:\Users\Public\Desktop\Virtuelle Comodo Dragon.lnk
2013-12-21 16:03 - 2013-12-21 16:03 - 00000599 _____ C:\Users\Public\Desktop\Gemeinsamer Bereich.lnk
2013-12-21 16:02 - 2013-12-21 16:02 - 00000000 ____D C:\first_launch
2013-12-21 16:01 - 2013-12-21 16:03 - 00000000 ___SD C:\ProgramData\Shared Space
2013-12-21 16:00 - 2013-12-21 16:11 - 00002019 _____ C:\Users\Public\Desktop\GeekBuddy.lnk
2013-12-21 16:00 - 2013-12-21 16:01 - 00000000 ____D C:\Program Files (x86)\Comodo
2013-12-21 16:00 - 2013-12-21 16:00 - 00057096 _____ (COMODO CA Limited) C:\Windows\system32\certsentry.dll
2013-12-21 16:00 - 2013-12-21 16:00 - 00001126 _____ C:\Users\Public\Desktop\Comodo Dragon.lnk
2013-12-21 16:00 - 2013-12-21 16:00 - 00000000 ____D C:\Users\Willy\AppData\Local\Comodo
2013-12-21 16:00 - 2013-12-21 16:00 - 00000000 ____D C:\ProgramData\Adtrustmedia
2013-12-21 16:00 - 2013-12-21 16:00 - 00000000 ____D C:\Program Files\AdTrustMedia
2013-12-21 16:00 - 2013-12-21 16:00 - 00000000 ____D C:\Program Files (x86)\AdTrustMedia
2013-12-21 15:50 - 2013-12-21 15:50 - 81540952 _____ (COMODO) C:\Users\Willy\Downloads\cispremium_installer_633_x86 (1).exe
2013-12-21 15:43 - 2013-12-21 15:43 - 81540952 _____ (COMODO) C:\Users\Willy\Downloads\cispremium_installer_633_x86.exe
2013-12-21 12:56 - 2013-12-21 17:22 - 00003206 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3941800147-2058653031-3768181621-1001
2013-12-21 12:55 - 2013-12-21 17:22 - 00003340 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3941800147-2058653031-3768181621-1001
2013-12-18 20:18 - 2013-12-19 13:25 - 00000468 _____ C:\Users\Willy\AppData\Roaming\Microsoft\Windows\Start Menu\GMX Homepage.website
2013-12-17 22:52 - 2013-12-17 22:52 - 00000000 ____D C:\ProgramData\WPM
2013-12-17 22:51 - 2013-12-21 17:22 - 00000384 _____ C:\Windows\Tasks\Re-markit Update.job
2013-12-17 22:51 - 2013-12-19 20:37 - 00000000 ____D C:\Program Files (x86)\Re-markit
2013-12-17 22:51 - 2013-12-17 22:51 - 00003032 _____ C:\Windows\System32\Tasks\Re-markit Update
2013-12-14 10:48 - 2013-12-19 11:13 - 00003362 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3941800147-2058653031-3768181621-1001
2013-12-14 10:46 - 2013-12-14 21:58 - 00003434 _____ C:\Windows\System32\Tasks\Browser Manager
2013-12-11 22:04 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-11 22:04 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-11 22:04 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-11 22:04 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-11 22:02 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-11 22:02 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-11 22:02 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-11 22:02 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-11 22:02 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-11 22:02 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-11 22:02 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-11 22:02 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-11 22:02 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-11 22:02 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-11 22:02 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-11 22:02 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-11 22:02 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-11 22:02 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-11 22:02 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-11 22:02 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-11 22:02 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-11 22:02 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-11 22:02 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-11 22:02 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-11 22:02 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-11 22:02 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-11 22:02 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-11 22:02 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-11 22:02 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-11 22:02 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-11 22:02 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-11 22:02 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-11 22:02 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-11 22:02 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-11 22:02 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-11 19:26 - 2013-12-11 19:26 - 09293192 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2013-12-11 16:54 - 2013-12-11 16:54 - 00000000 _____ C:\Windows\Sti_Trace.log
2013-12-11 16:34 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-11 16:34 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-11 16:34 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-11 16:34 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-11 16:34 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-11 16:34 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-11 16:34 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-11 16:34 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-11 16:34 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-11 16:34 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-11 16:34 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-11 16:34 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-11 16:34 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-11 16:34 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-11 16:34 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-11 16:34 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-11 16:34 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-11 16:34 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-11 16:34 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-08 21:47 - 2013-12-08 21:47 - 00000074 _____ C:\Windows\SysWOW64\log.log
2013-12-03 17:51 - 2013-12-03 17:51 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-03 17:51 - 2013-12-03 17:51 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-03 17:51 - 2013-12-03 17:51 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-03 17:51 - 2013-12-03 17:51 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-03 17:50 - 2013-12-03 17:50 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-03 17:50 - 2013-12-03 17:50 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-03 17:50 - 2013-12-03 17:50 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-03 17:50 - 2013-12-03 17:50 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-03 17:50 - 2013-12-03 17:50 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-03 17:50 - 2013-12-03 17:50 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-03 17:50 - 2013-12-03 17:50 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-03 17:50 - 2013-12-03 17:50 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-03 17:50 - 2013-12-03 17:50 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-03 17:50 - 2013-12-03 17:50 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-03 17:50 - 2013-12-03 17:50 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-03 17:50 - 2013-12-03 17:50 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-03 17:50 - 2013-12-03 17:50 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-03 17:50 - 2013-12-03 17:50 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-03 17:50 - 2013-12-03 17:50 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-03 17:50 - 2013-12-03 17:50 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-03 17:50 - 2013-12-03 17:50 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-03 17:50 - 2013-12-03 17:50 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-03 17:49 - 2013-12-03 17:55 - 00010074 _____ C:\Windows\IE11_main.log
2013-11-21 17:12 - 2013-11-21 17:12 - 00003254 _____ C:\Windows\System32\Tasks\{E84E24FB-F283-4F0D-8EBF-8794AC5BF99B}

==================== One Month Modified Files and Folders =======

2013-12-21 17:39 - 2013-12-21 17:38 - 00036541 _____ C:\Users\Willy\Downloads\FRST.txt
2013-12-21 17:37 - 2013-12-21 17:37 - 00000000 ____D C:\FRST
2013-12-21 17:37 - 2013-12-21 17:36 - 02193141 _____ (Farbar) C:\Users\Willy\Downloads\FRST64.exe
2013-12-21 17:36 - 2013-01-29 18:57 - 00001046 _____ C:\Windows\Tasks\GinyasBrowserCompanion Stats Report.job
2013-12-21 17:36 - 2013-01-29 18:56 - 00000000 ____D C:\ProgramData\GinyasBrowserCompanion
2013-12-21 17:32 - 2013-09-18 16:32 - 00001290 _____ C:\Windows\Tasks\Plus-HD-1.5-updater.job
2013-12-21 17:32 - 2013-09-18 16:32 - 00001194 _____ C:\Windows\Tasks\Plus-HD-1.5-codedownloader.job
2013-12-21 17:32 - 2013-09-18 16:32 - 00001094 _____ C:\Windows\Tasks\Plus-HD-1.5-enabler.job
2013-12-21 17:32 - 2010-08-08 13:03 - 01474832 _____ C:\Windows\system32\Drivers\sfi.dat
2013-12-21 17:31 - 2013-09-18 16:31 - 00001902 _____ C:\Windows\Tasks\Plus-HD-1.5-chromeinstaller.job
2013-12-21 17:31 - 2013-09-18 16:31 - 00001826 _____ C:\Windows\Tasks\Plus-HD-1.5-firefoxinstaller.job
2013-12-21 17:29 - 2009-07-14 05:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-21 17:29 - 2009-07-14 05:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-21 17:26 - 2012-03-30 13:55 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-21 17:26 - 2010-06-25 14:59 - 01373235 _____ C:\Windows\WindowsUpdate.log
2013-12-21 17:22 - 2013-12-21 12:56 - 00003206 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3941800147-2058653031-3768181621-1001
2013-12-21 17:22 - 2013-12-21 12:55 - 00003340 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3941800147-2058653031-3768181621-1001
2013-12-21 17:22 - 2013-12-17 22:51 - 00000384 _____ C:\Windows\Tasks\Re-markit Update.job
2013-12-21 17:22 - 2013-03-30 12:15 - 00020808 _____ C:\Windows\setupact.log
2013-12-21 17:22 - 2013-01-29 18:57 - 00000930 _____ C:\Windows\Tasks\GinyasBrowserCompanion Update Checker.job
2013-12-21 17:22 - 2013-01-29 18:56 - 00000998 _____ C:\Windows\Tasks\GinyasBrowserCompanion FireFox Watcher.job
2013-12-21 17:22 - 2013-01-29 18:56 - 00000998 _____ C:\Windows\Tasks\GinyasBrowserCompanion Chrome Watcher.job
2013-12-21 17:22 - 2010-06-25 15:17 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-21 17:22 - 2010-06-25 14:58 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-21 17:22 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-21 17:19 - 2013-12-21 17:19 - 00000000 ____D C:\Users\Willy\AppData\Local\AdTrustMedia
2013-12-21 17:17 - 2013-12-21 16:03 - 00001985 _____ C:\Users\Public\Desktop\COMODO Internet Security.lnk
2013-12-21 17:08 - 2010-06-25 15:17 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-21 16:13 - 2010-06-25 13:52 - 00065000 _____ C:\Windows\PFRO.log
2013-12-21 16:11 - 2013-12-21 16:00 - 00002019 _____ C:\Users\Public\Desktop\GeekBuddy.lnk
2013-12-21 16:04 - 2013-12-21 16:04 - 00000000 ____D C:\Windows\System32\Tasks\COMODO
2013-12-21 16:03 - 2013-12-21 16:03 - 00001905 _____ C:\Users\Public\Desktop\Virtuelle Comodo Dragon.lnk
2013-12-21 16:03 - 2013-12-21 16:03 - 00000599 _____ C:\Users\Public\Desktop\Gemeinsamer Bereich.lnk
2013-12-21 16:03 - 2013-12-21 16:01 - 00000000 ___SD C:\ProgramData\Shared Space
2013-12-21 16:03 - 2010-08-08 13:04 - 00000000 ____D C:\ProgramData\COMODO
2013-12-21 16:02 - 2013-12-21 16:02 - 00000000 ____D C:\first_launch
2013-12-21 16:01 - 2013-12-21 16:00 - 00000000 ____D C:\Program Files (x86)\Comodo
2013-12-21 16:00 - 2013-12-21 16:00 - 00057096 _____ (COMODO CA Limited) C:\Windows\system32\certsentry.dll
2013-12-21 16:00 - 2013-12-21 16:00 - 00001126 _____ C:\Users\Public\Desktop\Comodo Dragon.lnk
2013-12-21 16:00 - 2013-12-21 16:00 - 00000000 ____D C:\Users\Willy\AppData\Local\Comodo
2013-12-21 16:00 - 2013-12-21 16:00 - 00000000 ____D C:\ProgramData\Adtrustmedia
2013-12-21 16:00 - 2013-12-21 16:00 - 00000000 ____D C:\Program Files\AdTrustMedia
2013-12-21 16:00 - 2013-12-21 16:00 - 00000000 ____D C:\Program Files (x86)\AdTrustMedia
2013-12-21 16:00 - 2011-05-15 02:19 - 00000000 ____D C:\ProgramData\Comodo Downloader
2013-12-21 16:00 - 2010-08-08 13:01 - 00000000 ____D C:\Program Files\COMODO
2013-12-21 15:50 - 2013-12-21 15:50 - 81540952 _____ (COMODO) C:\Users\Willy\Downloads\cispremium_installer_633_x86 (1).exe
2013-12-21 15:43 - 2013-12-21 15:43 - 81540952 _____ (COMODO) C:\Users\Willy\Downloads\cispremium_installer_633_x86.exe
2013-12-21 15:36 - 2013-01-29 18:57 - 00004404 _____ C:\Windows\System32\Tasks\GinyasBrowserCompanion Stats Report
2013-12-19 20:37 - 2013-12-17 22:51 - 00000000 ____D C:\Program Files (x86)\Re-markit
2013-12-19 13:25 - 2013-12-18 20:18 - 00000468 _____ C:\Users\Willy\AppData\Roaming\Microsoft\Windows\Start Menu\GMX Homepage.website
2013-12-19 11:13 - 2013-12-14 10:48 - 00003362 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3941800147-2058653031-3768181621-1001
2013-12-19 11:13 - 2013-05-24 20:00 - 00003228 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3941800147-2058653031-3768181621-1001
2013-12-17 22:52 - 2013-12-17 22:52 - 00000000 ____D C:\ProgramData\WPM
2013-12-17 22:52 - 2013-05-15 14:40 - 00001621 _____ C:\Users\Willy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-17 22:52 - 2013-05-15 14:25 - 00002114 _____ C:\Users\Willy\Desktop\Amazon.lnk
2013-12-17 22:52 - 2013-05-15 14:25 - 00002110 _____ C:\Users\Willy\Desktop\eBay.lnk
2013-12-17 22:52 - 2011-11-02 18:34 - 00002138 _____ C:\Users\Willy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GMX.lnk
2013-12-17 22:51 - 2013-12-17 22:51 - 00003032 _____ C:\Windows\System32\Tasks\Re-markit Update
2013-12-17 17:03 - 2010-06-28 08:38 - 00023552 _____ C:\Users\Willy\Desktop\Nachweisbeleg-dezimal.xls
2013-12-17 16:55 - 2010-07-26 16:10 - 00016325 _____ C:\Users\Willy\Documents\Mieterliste!.xlsx
2013-12-15 21:07 - 2010-06-25 15:01 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-15 10:34 - 2013-08-15 18:12 - 00000000 ____D C:\Windows\system32\MRT
2013-12-14 21:59 - 2010-06-27 11:01 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-14 21:58 - 2013-12-14 10:46 - 00003434 _____ C:\Windows\System32\Tasks\Browser Manager
2013-12-14 10:53 - 2010-06-25 15:07 - 00000000 ____D C:\Users\Willy\AppData\Local\Google
2013-12-12 18:56 - 2013-06-14 13:27 - 00000000 ____D C:\Windows\rescache
2013-12-12 16:14 - 2009-07-14 18:58 - 00654150 _____ C:\Windows\system32\perfh007.dat
2013-12-12 16:14 - 2009-07-14 18:58 - 00130022 _____ C:\Windows\system32\perfc007.dat
2013-12-12 16:14 - 2009-07-14 06:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-12 16:08 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-12 16:08 - 2009-07-14 05:45 - 00418704 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-11 22:03 - 2009-09-24 12:07 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-11 19:26 - 2013-12-11 19:26 - 09293192 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2013-12-11 19:26 - 2012-03-30 13:55 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-11 19:26 - 2012-03-30 13:55 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-11 19:26 - 2011-05-22 10:02 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-11 16:54 - 2013-12-11 16:54 - 00000000 _____ C:\Windows\Sti_Trace.log
2013-12-09 17:03 - 2010-06-25 15:17 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-09 17:03 - 2010-06-25 15:17 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-08 22:05 - 2013-10-20 17:14 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-12-08 22:05 - 2010-06-25 15:02 - 00000000 ___RD C:\Users\Willy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup
2013-12-08 21:48 - 2010-08-08 12:43 - 00000000 ____D C:\Program Files (x86)\PC Connectivity Solution
2013-12-08 21:48 - 2010-08-08 12:40 - 00000000 ____D C:\Program Files (x86)\Samsung
2013-12-08 21:48 - 2009-09-24 12:14 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-08 21:47 - 2013-12-08 21:47 - 00000074 _____ C:\Windows\SysWOW64\log.log
2013-12-08 21:47 - 2010-08-08 12:41 - 00000000 ____D C:\Users\Willy\AppData\Roaming\Samsung
2013-12-08 21:47 - 2010-08-08 12:41 - 00000000 ____D C:\ProgramData\Samsung
2013-12-03 17:57 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-03 17:55 - 2013-12-03 17:49 - 00010074 _____ C:\Windows\IE11_main.log
2013-12-03 17:51 - 2013-12-03 17:51 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-03 17:51 - 2013-12-03 17:51 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-03 17:51 - 2013-12-03 17:51 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-03 17:51 - 2013-12-03 17:51 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-03 17:50 - 2013-12-03 17:50 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-03 17:50 - 2013-12-03 17:50 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-03 17:50 - 2013-12-03 17:50 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-03 17:50 - 2013-12-03 17:50 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-03 17:50 - 2013-12-03 17:50 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-03 17:50 - 2013-12-03 17:50 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-03 17:50 - 2013-12-03 17:50 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-03 17:50 - 2013-12-03 17:50 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-03 17:50 - 2013-12-03 17:50 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-03 17:50 - 2013-12-03 17:50 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-03 17:50 - 2013-12-03 17:50 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-03 17:50 - 2013-12-03 17:50 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-03 17:50 - 2013-12-03 17:50 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-03 17:50 - 2013-12-03 17:50 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-03 17:50 - 2013-12-03 17:50 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-03 17:50 - 2013-12-03 17:50 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-03 17:50 - 2013-12-03 17:50 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-03 17:50 - 2013-12-03 17:50 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-03 17:50 - 2013-12-03 17:50 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-27 20:38 - 2010-07-12 18:17 - 00000000 ____D C:\Users\Willy\AppData\Local\PokerStars.EU
2013-11-26 12:54 - 2013-12-11 22:02 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-26 11:19 - 2013-12-11 22:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-26 11:18 - 2013-12-11 22:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-26 11:11 - 2013-12-11 22:02 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-26 10:48 - 2013-12-11 22:02 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-26 10:46 - 2013-12-11 22:02 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-26 10:41 - 2013-12-11 22:02 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-26 10:29 - 2013-12-11 22:02 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-26 10:27 - 2013-12-11 22:02 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-26 10:23 - 2013-12-11 22:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-26 10:21 - 2013-12-11 22:02 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-26 10:18 - 2013-12-11 22:02 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-26 10:18 - 2013-12-11 22:02 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-26 10:16 - 2013-12-11 22:02 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-26 09:57 - 2013-12-11 22:02 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-26 09:38 - 2013-12-11 22:02 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-26 09:38 - 2013-12-11 22:02 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-26 09:35 - 2013-12-11 22:02 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-26 09:32 - 2013-12-11 22:02 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-26 09:28 - 2013-12-11 22:02 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-26 09:16 - 2013-12-11 22:02 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-26 09:02 - 2013-12-11 22:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-26 08:48 - 2013-12-11 22:02 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-26 08:32 - 2013-12-11 22:02 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-26 08:26 - 2013-12-11 22:02 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-26 08:07 - 2013-12-11 22:02 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-26 07:40 - 2013-12-11 22:02 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-26 07:34 - 2013-12-11 22:02 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-26 07:34 - 2013-12-11 22:02 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-26 07:33 - 2013-12-11 22:02 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-26 07:27 - 2013-12-11 22:02 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-23 19:26 - 2013-12-11 16:34 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-11-23 18:47 - 2013-12-11 16:34 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-11-21 17:12 - 2013-11-21 17:12 - 00003254 _____ C:\Windows\System32\Tasks\{E84E24FB-F283-4F0D-8EBF-8794AC5BF99B}
2013-11-21 16:28 - 2010-06-25 17:06 - 00000000 ____D C:\Users\Willy\AppData\Local\Adobe

Files to move or delete:
====================
C:\ProgramData\lsass.exe
C:\ProgramData\qfqmbfll.plz
C:\ProgramData\rundll32.exe


Some content of TEMP:
====================
C:\Users\Willy\AppData\Local\Temp\ose00000.exe
C:\Users\Willy\AppData\Local\Temp\_is1143.exe
C:\Users\Willy\AppData\Local\Temp\_is5012.exe
C:\Users\Willy\AppData\Local\Temp\_isE4B3.exe
C:\Users\Willy\AppData\Local\Temp\_isFF39.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-10 19:32

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

das ist der bericht jetzt von farbars....

muss ich jetzt noch was machen ?

teufel65 · 22.12.2013, 18:48

Jabe jetzt mal das Malwarebytes durchgefuhrt und er sagt mir das ich 1746 infiezierte dateien habe muss ich jetzt alle anklicken und dann entfernen drücken hab etwas schiss das ich programme lösche die wichtig sind bitte um schnelle antwort

cosinus · 22.12.2013, 23:32

Dann poste erstmal das Log ohne etwas zu löschen.
Da es zu groß sein wird, ausnahmsweise zippen und anhängen

22.12.2013, 23:32	#7
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	nation zoom Dann poste erstmal das Log ohne etwas zu löschen. Da es zu groß sein wird, ausnahmsweise zippen und anhängen __________________ Logfiles bitte immer in CODE-Tags posten

nation zoom

Plagegeister aller Art und deren Bekämpfung: nation zoom

nation zoom

nation zoom

nation zoom

nation zoom

nation zoom

nation zoom

nation zoom

Ähnliche Themen: nation zoom

20.12.2013, 18:19	#1
teufel65	nation zoom hallo, habe ein Problem mit der seite ,nation zoom ich kann ihn zum verrecken net loswerden kann mir wer helfen wäre dankbar dafür meine nerven sind am ende!! ieben gruss habe gerad gesehen das hier jemand das selbe Problem hat, habe mal versucht die selben schritte zu machen aber kriege jetzt auch nchts mehr gedownloadet.... hilfe kann mir jemand witerhelfen???

21.12.2013, 14:29	#3
teufel65	nation zoom hallo, danke für die antwort! wollte dieses farbers recovery scan tool runterladen, aber der Computer sagt mir das diese seite schäden an dem Computer anrichten könnte. bin mir jetzt auch nicht sicher ob ich diese ausführen kann weil so gut kenn ich mich auch nicht aus mit den Sachen.... lg teufel65 __________________

22.12.2013, 18:48	#6
teufel65	nation zoom Jabe jetzt mal das Malwarebytes durchgefuhrt und er sagt mir das ich 1746 infiezierte dateien habe muss ich jetzt alle anklicken und dann entfernen drücken hab etwas schiss das ich programme lösche die wichtig sind bitte um schnelle antwort