Hallo,

ich verwende Windwows 7, als Browser Google Chrome.

Bei einigen Seiten (z.B. Ebay, Amazon, Eventim, etc.) werde ich bei Eingabe der Webadresse direkt auf einen Artikel geleitet, in der Adresszeile ist was mit "Pricerunner" zu lesen. Hat jemand ne Idee wie ich das wieder loswerde?

Danke vorab,
Prometheus

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hallo,

hier die FRST:


FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-12-2013 01
Ran by Friedrich (administrator) on Friedrich-PC on 22-12-2013 20:05:14
Running from C:\Users\Friedrich\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Windows\System32\msdeltad.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Fieldston Software) C:\Program Files\Fieldston Software\gSyncit\gsyncit.exe
(ICQ) C:\Users\Friedrich\AppData\Roaming\ICQM\icq.exe
() C:\Users\Friedrich\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Spotify Ltd) C:\Users\Friedrich\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(1&1 Mail & Media GmbH) C:\Users\Friedrich\AppData\Local\GMX Application {sync-000021}\gmx_mediacenter.exe
(TomTom) C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe
(Facebook) C:\Users\Friedrich\AppData\Local\Facebook\Messenger\2.1.4814.0\FacebookMessenger.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) D:\iTunes\iTunesHelper.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winamp.exe
() C:\Program Files (x86)\Streamripper\wstreamripper.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11545192 2010-11-02] (Realtek Semiconductor)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKCU\...\Run: [Facebook Update] - C:\Users\Friedrich\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-03-09] (Facebook Inc.)
HKCU\...\Run: [gSyncit] - C:\Program Files\Fieldston Software\gSyncit\gsyncit.exe [166912 2013-11-29] (Fieldston Software)
HKCU\...\Run: [icq] - C:\Users\Friedrich\AppData\Roaming\ICQM\icq.exe [27453288 2013-03-16] (ICQ)
HKCU\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\Friedrich\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKCU\...\Run: [iFunBoxConnector] - C:\Program Files (x86)\i-Funbox DevTeam\ifb_conn.exe [812544 2012-11-20] ()
HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-09-14] (Apple Inc.)
HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-09-15] (Apple Inc.)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Friedrich\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-10-14] (Spotify Ltd)
HKCU\...\Run: [GMX Application {sync-000021}] - C:\Users\Friedrich\AppData\Local\GMX Application {sync-000021}\gmx_mediacenter.exe [878080 2013-08-09] (1&1 Mail & Media GmbH)
HKCU\...\Run: [MyDriveConnect.exe] - C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe [473496 2013-11-29] (TomTom)
MountPoints2: {1bfa5835-2cde-11e3-997a-f46d04507527} - G:\start.exe /auto
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-04-05] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [WinampAgent] - C:\Program Files (x86)\Winamp\winampa.exe [74752 2012-06-28] (Nullsoft, Inc.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356128 2013-10-10] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] - D:\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
Startup: C:\Users\Friedrich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk
ShortcutTarget: Facebook Messenger.lnk -> C:\Users\Friedrich\AppData\Local\Facebook\Messenger\2.1.4814.0\FacebookMessenger.exe (Facebook)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.softonic.com/MOY00621/tb_v1?SearchSource=10&cc=&mi=5c254478000000000000f46d04507527
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x0422B8B64F1CCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.yhs.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=5C25F46D04507527&affID=119357&tt=040713_ifrmful&tsp=4939
SearchScopes: HKCU - {18E1298C-8EFB-47C9-9254-050F8BD07FB2} URL = hxxp://search.softonic.com/MOY00621/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=5c254478000000000000f46d04507527&r=326
SearchScopes: HKCU - {FFEBBF0A-C22C-4172-89FF-45215A135AC8} URL = hxxp://search.icq.com/search/results.php?q=%s&ch_id=hm&search_mode=web
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
DPF: HKLM-x32 {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} hxxp://quickscan.bitdefender.com/qsax/qsax.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Friedrich\AppData\Roaming\Mozilla\Firefox\Profiles\ewnsf7ax.default
FF user.js: detected! => C:\Users\Friedrich\AppData\Roaming\Mozilla\Firefox\Profiles\ewnsf7ax.default\user.js
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - D:\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Friedrich\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF Plugin HKCU: facebook.com/fbDesktopPlugin - C:\Users\Friedrich\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)
FF SearchPlugin: C:\Users\Friedrich\AppData\Roaming\Mozilla\Firefox\Profiles\ewnsf7ax.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\Friedrich\AppData\Roaming\Mozilla\Firefox\Profiles\ewnsf7ax.default\searchplugins\delta.xml
FF SearchPlugin: C:\Users\Friedrich\AppData\Roaming\Mozilla\Firefox\Profiles\ewnsf7ax.default\searchplugins\softonic.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: InfoBird Pro - C:\Users\Friedrich\AppData\Roaming\Mozilla\Firefox\Profiles\ewnsf7ax.default\Extensions\addon@infobirdpro.com
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com
FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com

Chrome: 
=======
CHR HomePage: hxxp://www.google.de/
CHR RestoreOnStartup: "hxxp://www.google.de/"
CHR DefaultSearchKeyword: google.com
CHR DefaultSearchProvider: Google
CHR DefaultSearchURL: hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
CHR DefaultNewTabURL: 
CHR Extension: (Download Protect) - C:\Users\Friedrich\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaomhckmcilfibimdiiifkpoojjobfhk\2.1_0
CHR Extension: (Google Docs) - C:\Users\Friedrich\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Friedrich\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Friedrich\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Friedrich\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Kaspersky URL Advisor) - C:\Users\Friedrich\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\13.0.1.4190_1
CHR Extension: (AdBlock) - C:\Users\Friedrich\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0
CHR Extension: (Safe Money) - C:\Users\Friedrich\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh\13.0.1.4190_0
CHR Extension: (Content Blocker) - C:\Users\Friedrich\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail\13.0.1.4190_1
CHR Extension: (Virtual Keyboard) - C:\Users\Friedrich\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\13.0.1.4292_1
CHR Extension: (Delta Toolbar) - C:\Users\Friedrich\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkgfcicgjhneabbbfhddfcgifljdhhpl\1.4_1
CHR Extension: (Google Wallet) - C:\Users\Friedrich\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (Gmail) - C:\Users\Friedrich\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_2
CHR Extension: (Anti-Banner) - C:\Users\Friedrich\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\13.0.1.4190_1
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\urladvisor.crx
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\online_banking_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\content_blocker_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\virtkbd.crx
CHR HKLM-x32\...\Chrome\Extension: [nkgfcicgjhneabbbfhddfcgifljdhhpl] - C:\Users\Friedrich\AppData\Roaming\BabSolution\CR\Delta.crx
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\ab.crx

==================== Services (Whitelisted) =================

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356128 2013-10-10] (Kaspersky Lab ZAO)
R2 systemiofo; C:\Windows\system32\msdeltad.exe [118272 2013-03-16] ()

==================== Drivers (Whitelisted) ====================

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-10-04] (DT Soft Ltd)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2013-12-11] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [626272 2013-10-10] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-12-11] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-10-10] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-10] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-06-19] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-04-23] (Kaspersky Lab ZAO)
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [90208 2013-04-23] (Kaspersky Lab ZAO)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-22 20:03 - 2013-12-22 20:05 - 00019704 _____ C:\Users\Friedrich\Desktop\FRST.txt
2013-12-22 20:02 - 2013-12-22 20:02 - 00000000 ____D C:\Users\Friedrich\Desktop\FRST-OlderVersion
2013-12-15 18:17 - 2013-12-22 20:02 - 00000000 ____D C:\FRST
2013-12-15 18:16 - 2013-12-22 20:02 - 01928280 _____ (Farbar) C:\Users\Friedrich\Desktop\FRST64.exe
2013-12-13 21:39 - 2013-12-10 17:25 - 06708928 _____ (TomTom International B.V.) C:\Users\Friedrich\Downloads\InstallMyDriveConnect_3_3_0_1342.exe
2013-12-12 23:31 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-12 23:31 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-12 23:31 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-12 23:31 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-12 23:30 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-12 23:30 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-12 23:30 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-12 23:30 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-12 23:30 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-12 23:30 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-12 23:30 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-12 23:30 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-12 23:30 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-12 23:30 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-12 23:30 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-12 23:30 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-12 23:30 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-12 23:30 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-12 23:30 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-12 23:30 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-12 23:30 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-12 23:30 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-12 23:30 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-12 23:30 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-12 23:30 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-12 23:30 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-12 23:30 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-12 23:30 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-12 23:30 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-12 23:30 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-12 23:30 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-12 23:30 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-12 23:30 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-12 23:30 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-12 23:30 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-12 20:43 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-12 20:43 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-12 20:43 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-12 20:43 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-12 20:43 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-12 20:43 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-12 20:43 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-12 20:43 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-12 20:43 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-12 20:43 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-12 20:43 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-12 20:43 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-12 20:43 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-12 20:43 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-12 20:43 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-12 20:43 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-12 20:43 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-12 20:43 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-12 20:43 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-08 18:22 - 2013-12-08 18:22 - 00000000 ____D C:\Users\Friedrich\Desktop\PRS-T1
2013-12-08 18:21 - 2013-12-08 18:21 - 00000000 ____D C:\Users\Friedrich\Desktop\FT2010
2013-12-07 18:14 - 2013-12-07 18:14 - 00001446 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-12-07 18:14 - 2013-12-07 18:14 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-12-07 18:14 - 2013-12-07 18:14 - 00000000 ____D C:\Program Files\iTunes
2013-12-07 18:14 - 2013-12-07 18:14 - 00000000 ____D C:\Program Files\iPod
2013-11-27 16:58 - 2013-11-27 16:58 - 00001421 _____ C:\Users\Friedrich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-26 23:20 - 2013-11-26 23:20 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-26 23:20 - 2013-11-26 23:20 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-26 23:20 - 2013-11-26 23:20 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-26 23:20 - 2013-11-26 23:20 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-26 23:20 - 2013-11-26 23:20 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-26 23:20 - 2013-11-26 23:20 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-26 23:20 - 2013-11-26 23:20 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-26 23:20 - 2013-11-26 23:20 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-26 23:20 - 2013-11-26 23:20 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-26 23:20 - 2013-11-26 23:20 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-26 23:20 - 2013-11-26 23:20 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-26 23:20 - 2013-11-26 23:20 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-26 23:20 - 2013-11-26 23:20 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-26 23:20 - 2013-11-26 23:20 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-26 23:20 - 2013-11-26 23:20 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-26 23:20 - 2013-11-26 23:20 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-26 23:20 - 2013-11-26 23:20 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-26 23:20 - 2013-11-26 23:20 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-26 23:20 - 2013-11-26 23:20 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-26 23:20 - 2013-11-26 23:20 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-26 23:19 - 2013-11-26 23:22 - 00010074 _____ C:\Windows\IE11_main.log
2013-11-23 21:44 - 2013-11-23 21:47 - 12996104 _____ (Nullsoft, Inc.) C:\Users\Friedrich\Desktop\winamp566_full_de-de.exe

==================== One Month Modified Files and Folders =======

2013-12-22 20:05 - 2013-12-22 20:03 - 00019704 _____ C:\Users\Friedrich\Desktop\FRST.txt
2013-12-22 20:02 - 2013-12-22 20:02 - 00000000 ____D C:\Users\Friedrich\Desktop\FRST-OlderVersion
2013-12-22 20:02 - 2013-12-15 18:17 - 00000000 ____D C:\FRST
2013-12-22 20:02 - 2013-12-15 18:16 - 01928280 _____ (Farbar) C:\Users\Friedrich\Desktop\FRST64.exe
2013-12-22 20:01 - 2013-07-10 18:00 - 00000290 _____ C:\Windows\Tasks\DSite.job
2013-12-22 19:50 - 2013-03-09 01:04 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-22 19:49 - 2013-09-29 16:28 - 00000000 ____D C:\Users\Friedrich\AppData\Local\A3ECDB17-FAA2-4E78-9314-D4791EFC00C9.aplzod
2013-12-22 19:49 - 2013-03-09 17:23 - 00000000 ____D C:\Users\Friedrich\AppData\Roaming\gSyncit
2013-12-22 19:49 - 2013-03-09 17:01 - 00000000 ____D C:\Users\Friedrich\Documents\Outlook-Dateien
2013-12-22 19:48 - 2013-03-09 17:31 - 00000000 ____D C:\Users\Friedrich\AppData\Roaming\Winamp
2013-12-22 19:37 - 2013-03-21 17:31 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-12-22 19:30 - 2013-03-23 21:03 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-22 19:30 - 2013-03-23 21:03 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-22 19:06 - 2013-03-09 15:18 - 00000932 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1059155102-2665250546-557771942-1000UA.job
2013-12-22 19:06 - 2013-03-08 23:40 - 01862189 _____ C:\Windows\WindowsUpdate.log
2013-12-22 15:23 - 2013-03-09 15:18 - 00000910 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1059155102-2665250546-557771942-1000Core.job
2013-12-22 15:08 - 2009-07-14 18:58 - 00699092 _____ C:\Windows\system32\perfh007.dat
2013-12-22 15:08 - 2009-07-14 18:58 - 00149232 _____ C:\Windows\system32\perfc007.dat
2013-12-22 15:08 - 2009-07-14 06:13 - 01619284 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-22 12:47 - 2009-07-14 05:45 - 00015104 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-22 12:47 - 2009-07-14 05:45 - 00015104 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-22 12:40 - 2013-03-22 16:28 - 00004725 _____ C:\Windows\setupact.log
2013-12-22 12:40 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-21 21:22 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-21 20:33 - 2013-07-28 10:00 - 00000000 ____D C:\Users\Friedrich\AppData\Roaming\dvdcss
2013-12-19 23:34 - 2013-03-16 14:49 - 00000000 ____D C:\Users\Friedrich\AppData\Roaming\Skype
2013-12-15 22:44 - 2013-08-15 20:26 - 00000000 ____D C:\Windows\system32\MRT
2013-12-15 22:44 - 2013-03-09 10:08 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-14 14:58 - 2013-03-24 09:27 - 00006854 _____ C:\Windows\PFRO.log
2013-12-14 00:00 - 2013-03-08 23:40 - 00000000 ____D C:\Users\Friedrich\AppData\Local\VirtualStore
2013-12-13 23:56 - 2013-12-13 23:55 - 08566040 _____ (CyberGhost S.R.L.                                           ) C:\Users\Friedrich\Desktop\CGWebInstall.exe
2013-12-13 22:04 - 2013-11-09 15:46 - 00000000 ____D C:\Program Files (x86)\MyDrive Connect
2013-12-13 15:52 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-13 15:52 - 2009-07-14 05:45 - 00416360 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-12 23:30 - 2013-03-09 15:13 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-11 19:50 - 2013-03-09 01:04 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-11 19:50 - 2013-03-09 01:04 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-11 19:50 - 2013-03-09 01:04 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-11 17:22 - 2012-08-02 15:09 - 00029792 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klim6.sys
2013-12-11 17:22 - 2012-06-19 17:28 - 00458336 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys
2013-12-10 17:25 - 2013-12-13 21:39 - 06708928 _____ (TomTom International B.V.) C:\Users\Friedrich\Downloads\InstallMyDriveConnect_3_3_0_1342.exe
2013-12-08 18:22 - 2013-12-08 18:22 - 00000000 ____D C:\Users\Friedrich\Desktop\PRS-T1
2013-12-08 18:21 - 2013-12-08 18:21 - 00000000 ____D C:\Users\Friedrich\Desktop\FT2010
2013-12-07 22:15 - 2013-03-09 15:13 - 00000000 ____D C:\Users\Friedrich\AppData\Local\Microsoft Help
2013-12-07 18:14 - 2013-12-07 18:14 - 00001446 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-12-07 18:14 - 2013-12-07 18:14 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-12-07 18:14 - 2013-12-07 18:14 - 00000000 ____D C:\Program Files\iTunes
2013-12-07 18:14 - 2013-12-07 18:14 - 00000000 ____D C:\Program Files\iPod
2013-12-05 17:32 - 2013-03-23 21:05 - 00002175 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-11-28 21:34 - 2013-03-16 14:49 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-11-28 21:34 - 2013-03-16 14:49 - 00000000 ____D C:\ProgramData\Skype
2013-11-27 16:58 - 2013-11-27 16:58 - 00001421 _____ C:\Users\Friedrich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-27 16:58 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-11-26 23:22 - 2013-11-26 23:19 - 00010074 _____ C:\Windows\IE11_main.log
2013-11-26 23:22 - 2009-07-14 03:34 - 00000478 _____ C:\Windows\win.ini
2013-11-26 23:20 - 2013-11-26 23:20 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-26 23:20 - 2013-11-26 23:20 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-26 23:20 - 2013-11-26 23:20 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-26 23:20 - 2013-11-26 23:20 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-26 23:20 - 2013-11-26 23:20 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-26 23:20 - 2013-11-26 23:20 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-26 23:20 - 2013-11-26 23:20 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-26 23:20 - 2013-11-26 23:20 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-26 23:20 - 2013-11-26 23:20 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-26 23:20 - 2013-11-26 23:20 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-26 23:20 - 2013-11-26 23:20 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-26 23:20 - 2013-11-26 23:20 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-26 23:20 - 2013-11-26 23:20 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-26 23:20 - 2013-11-26 23:20 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-26 23:20 - 2013-11-26 23:20 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-26 23:20 - 2013-11-26 23:20 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-26 23:20 - 2013-11-26 23:20 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-26 23:20 - 2013-11-26 23:20 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-26 23:20 - 2013-11-26 23:20 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-26 23:20 - 2013-11-26 23:20 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-26 23:20 - 2013-11-26 23:20 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-26 12:54 - 2013-12-12 23:30 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-26 11:19 - 2013-12-12 23:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-26 11:18 - 2013-12-12 23:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-26 11:11 - 2013-12-12 23:30 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-26 10:48 - 2013-12-12 23:30 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-26 10:46 - 2013-12-12 23:30 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-26 10:41 - 2013-12-12 23:30 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-26 10:29 - 2013-12-12 23:30 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-26 10:27 - 2013-12-12 23:30 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-26 10:23 - 2013-12-12 23:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-26 10:21 - 2013-12-12 23:30 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-26 10:18 - 2013-12-12 23:30 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-26 10:18 - 2013-12-12 23:30 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-26 10:16 - 2013-12-12 23:30 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-26 09:57 - 2013-12-12 23:30 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-26 09:38 - 2013-12-12 23:30 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-26 09:38 - 2013-12-12 23:30 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-26 09:35 - 2013-12-12 23:30 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-26 09:32 - 2013-12-12 23:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-26 09:28 - 2013-12-12 23:30 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-26 09:16 - 2013-12-12 23:30 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-26 09:02 - 2013-12-12 23:30 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-26 08:48 - 2013-12-12 23:30 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-26 08:32 - 2013-12-12 23:30 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-26 08:26 - 2013-12-12 23:30 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-26 08:07 - 2013-12-12 23:30 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-26 07:40 - 2013-12-12 23:30 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-26 07:34 - 2013-12-12 23:30 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-26 07:34 - 2013-12-12 23:30 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-26 07:33 - 2013-12-12 23:30 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-26 07:27 - 2013-12-12 23:30 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-25 19:25 - 2013-03-23 21:03 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-11-25 19:25 - 2013-03-23 21:03 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-11-23 22:16 - 2013-03-08 23:40 - 00000000 ____D C:\Users\Friedrich
2013-11-23 21:47 - 2013-11-23 21:44 - 12996104 _____ (Nullsoft, Inc.) C:\Users\Friedrich\Desktop\winamp566_full_de-de.exe
2013-11-23 19:26 - 2013-12-12 20:43 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-11-23 18:47 - 2013-12-12 20:43 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

Some content of TEMP:
====================
C:\Users\Friedrich\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Friedrich\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\Friedrich\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\Friedrich\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Friedrich\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Friedrich\AppData\Local\Temp\uninst1.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-21 21:15

==================== End Of Log ============================
         

--- --- ---


Addition:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-12-2013 01
Ran by Friedrich at 2013-12-22 20:06:09
Running from C:\Users\Friedrich\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Kaspersky Internet Security (Enabled - Up to date) {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5}
AS: Kaspersky Internet Security (Enabled - Up to date) {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {FB2ABE9A-01A4-4539-FCD2-C7EA1246D49E}

==================== Installed Programs ======================

Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05)
Advanced Office Password Recovery (x32 Version: 5.5.578.1021)
Amazon MP3-Downloader 1.0.18 (HKCU Version: 1.0.18)
AMD APP SDK Runtime (Version: 2.4.595.10)
Any Video Converter 5.0.9 (x32)
Apple Application Support (x32 Version: 2.3.6)
Apple Mobile Device Support (Version: 7.0.0.117)
Apple Software Update (x32 Version: 2.1.3.127)
Asmedia ASM104x USB 3.0 Host Controller Driver (x32 Version: 1.4.5.0)
ASUS VGA Driver (x32 Version: 3.0.0.1)
ATI AVIVO64 Codecs (Version: 11.6.0.10405)
ATI Catalyst Install Manager (Version: 3.0.820.0)
Avidemux 2.6 - 64bits (x32 Version: 2.6.6.8941)
Bonjour (Version: 3.0.0.10)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center (x32 Version: 2011.0405.2218.38205)
Catalyst Control Center InstallProxy (x32 Version: 2011.0405.2218.38205)
Catalyst Control Center Localization All (x32 Version: 2011.0405.2218.38205)
Catalyst Control Center Profiles Desktop (x32 Version: 2011.0405.2218.38205)
CCC Help German (x32 Version: 2011.0405.2217.38205)
ccc-utility64 (Version: 2011.0405.2218.38205)
DAEMON Tools Lite (x32 Version: 4.47.1.0333)
Daossoft Excel Password Recovery 7.0.0.1 (x32 Version: 7.0.0.1)
Definition Update for Microsoft Office 2010 (KB982726) 64-Bit Edition
Delta Chrome Toolbar (x32) <==== ATTENTION
Desktop Icon für Amazon (Version: 1.0.1 (de))
ElsterFormular (x32 Version: 14.3.20130522)
Excel Password Recovery Lastic 1.1 (x32)
Facebook Messenger 2.1.4814.0 (x32 Version: 2.1.4814.0)
Free Video Joiner (x32)
GMX MediaCenter 1.5.1765.0 (HKCU Version: 1.5.1765.0)
Google Chrome (x32 Version: 31.0.1650.63)
Google Update Helper (x32 Version: 1.3.22.3)
gSyncit (Version: 3.8.53)
HD Tune Pro 5.00 (x32)
HydraVision (x32 Version: 4.2.188.0)
iCloud (Version: 3.0.2.163)
ICQ 8.0 (build 6007, für aktuellen Benutzer) (HKCU Version: 8.0.6007.0)
ICQ 8.0 Banner Remover 1.8 (x32)
iFunbox (v2.1.2228.731), iFunbox DevTeam (x32 Version: v2.1.2228.731)
ImgBurn (x32 Version: 2.5.8.0)
IrfanView (remove only) (x32 Version: 4.36)
iTunes (Version: 11.1.3.8)
Java 7 Update 45 (x32 Version: 7.0.450)
Java Auto Updater (x32 Version: 2.1.9.8)
Kaspersky Internet Security 2013 (x32 Version: 13.0.1.4190)
Konz 2012 (x32 Version: 1.00.0000)
marvell 91xx driver (x32 Version: 1.0.0.1051)
Microsoft .NET Framework 4.5 (Version: 4.5.50709)
Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709)
Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Groove MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Office 32-bit Components 2010 (Version: 14.0.7015.1000)
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Professional Plus 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Shared 32-bit MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Mozilla Firefox 21.0 (x86 de) (x32 Version: 21.0)
Mozilla Maintenance Service (x32 Version: 21.0)
Ms Word Excel Cracker 2.0 (x32)
MyDriveConnect 3.3.0.1342 (x32 Version: 3.3.0.1342)
O&O DiskRecovery (Version: 8.0.335)
O&O SafeErase Professional (Version: 6.0.85)
Realtek Ethernet Controller Driver (x32 Version: 7.37.1229.2010)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6235)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition
Skype™ 6.11 (x32 Version: 6.11.102)
Spotify (HKCU Version: 0.9.4.185.g7545a404)
Steuer 2011 (x32 Version: 19.00.7304)
Streamripper (Remove only) (x32)
Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1)
Update for Microsoft Access 2010 (KB2553446) 64-Bit Edition
Update for Microsoft Filter Pack 2.0 (KB2810071) 64-Bit Edition
Update for Microsoft Office 2010 (KB2589298) 64-Bit Edition
Update for Microsoft Office 2010 (KB2589352) 64-Bit Edition
Update for Microsoft Office 2010 (KB2589375) 64-Bit Edition
Update for Microsoft Office 2010 (KB2597087) 64-Bit Edition
Update for Microsoft Office 2010 (KB2760598) 64-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 64-Bit Edition
Update for Microsoft Office 2010 (KB2794737) 64-Bit Edition
Update for Microsoft Office 2010 (KB2825640) 64-Bit Edition
Update for Microsoft Office 2010 (KB2826026) 64-Bit Edition
Update for Microsoft Office 2010 (KB2850079) 64-Bit Edition
Update for Microsoft OneNote 2010 (KB2810072) 64-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2553145) 64-Bit Edition
Update for Microsoft Visio Viewer 2010 (KB2810066) 64-Bit Edition
Update for Microsoft Word 2010 (KB2837593) 64-Bit Edition
Update for Zip Opener (HKCU) <==== ATTENTION
Visual Studio C++ 10.0 Runtime (x32 Version: 10.0.0)
Winamp (x32 Version: 5.63 )
Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1)
Windows 7 USB/DVD Download Tool (x32 Version: 1.0.30)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)
WinX DVD Ripper Platinum 7.2.0 (x32)
WISO Steuer 2013 (x32 Version: 20.00.8137)

==================== Restore Points  =========================

30-11-2013 22:41:49 Installed gSyncit
03-12-2013 16:26:18 Windows Update
06-12-2013 18:40:02 Windows Update
10-12-2013 16:29:20 Windows Update
12-12-2013 22:29:45 Windows Update
13-12-2013 22:57:03 Gerätetreiber-Paketinstallation: TAP-Windows Provider V9 Netzwerkadapter
15-12-2013 21:44:05 Windows Update
21-12-2013 19:36:08 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {160B9077-968D-4A62-80CE-2ECB4C645A2C} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2013-09-14] (Apple Inc.)
Task: {2CDBD5C4-EF73-4B1F-8A1B-53798B510902} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-23] (Google Inc.)
Task: {42118F33-9E2E-40C3-97DB-9F0487F72D11} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-23] (Google Inc.)
Task: {957D26B8-B4A2-461D-AA17-9CC323168EA2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: {9BDEC22B-CBBD-4F93-B9CD-159229F474C6} - System32\Tasks\EPUpdater => C:\Users\Friedrich\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-06-06] () <==== ATTENTION
Task: {A69E4DDD-864B-48E6-9D72-2F2B1147A047} - System32\Tasks\DSite => C:\Users\Friedrich\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe [2013-07-10] () <==== ATTENTION
Task: {B92D9F9B-EDCB-4508-A1B7-65C0202FEBE6} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1059155102-2665250546-557771942-1000UA => C:\Users\Friedrich\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-03-09] (Facebook Inc.)
Task: {ECF0FB86-8CA1-4044-A8C9-57524E177F77} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1059155102-2665250546-557771942-1000Core => C:\Users\Friedrich\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-03-09] (Facebook Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DSite.job => C:\Users\Friedrich\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1059155102-2665250546-557771942-1000Core.job => C:\Users\Friedrich\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1059155102-2665250546-557771942-1000UA.job => C:\Users\Friedrich\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2009-09-01 05:31 - 2009-09-01 05:31 - 00022016 _____ () C:\Windows\System32\ssp2ml6.dll
2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2013-11-29 20:48 - 2013-11-29 20:48 - 02079744 _____ () C:\Program Files\Fieldston Software\gSyncit\gSyncit.core.dll
2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\office14\Cultures\office.odf
2013-10-05 10:23 - 2013-08-09 11:38 - 00046080 _____ () C:\Users\Friedrich\AppData\Local\GMX Application {sync-000021}\CoreBranding.dll
2011-03-14 14:20 - 2011-03-14 14:20 - 00430080 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2011-03-14 14:20 - 2011-03-14 14:20 - 00032768 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\BrandingResources.dll
2011-04-05 22:16 - 2011-04-05 22:16 - 00243712 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2013-11-29 20:48 - 2013-11-29 20:48 - 00040960 _____ () C:\Program Files\Fieldston Software\gSyncit\gsyncit.addin.dll
2013-02-15 03:36 - 2013-02-15 03:36 - 01554496 _____ () C:\Program Files\Microsoft Office\Office14\ADDINS\UmOutlookAddin.dll
2013-01-28 13:08 - 2013-01-28 13:08 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2013-01-28 13:08 - 2013-01-28 13:08 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2012-08-17 21:39 - 2013-03-21 17:33 - 01310136 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\kpcengine.2.2.dll
2013-03-16 14:37 - 2013-03-16 14:37 - 00851456 _____ () C:\Users\Friedrich\AppData\Roaming\ICQM\ICQ\dll\YLUSBTEL.dll
2013-09-14 00:51 - 2013-09-14 00:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll
2013-09-14 00:50 - 2013-09-14 00:50 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll
2013-11-29 10:29 - 2013-11-29 10:29 - 00026520 _____ () C:\Program Files (x86)\MyDrive Connect\DeviceDetection.dll
2013-11-29 10:28 - 2013-11-29 10:28 - 00082840 _____ () C:\Program Files (x86)\MyDrive Connect\TomTomSupporterBase.dll
2013-11-29 10:28 - 2013-11-29 10:28 - 00344984 _____ () C:\Program Files (x86)\MyDrive Connect\TomTomSupporterProxy.dll
2013-03-07 21:32 - 2013-03-07 21:32 - 00292272 _____ () C:\Users\Friedrich\AppData\Local\Facebook\Messenger\2.1.4814.0\CefSharp.dll
2013-03-07 21:32 - 2013-03-07 21:32 - 21014960 _____ () C:\Users\Friedrich\AppData\Local\Facebook\Messenger\2.1.4814.0\libcef.dll
2013-03-07 21:32 - 2013-03-07 21:32 - 00179632 _____ () C:\Users\Friedrich\AppData\Local\Facebook\Messenger\2.1.4814.0\CefSharp.WinForms.dll
2012-08-17 21:38 - 2012-08-17 21:38 - 00479160 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\dblite.dll
2013-12-05 17:32 - 2013-12-04 03:47 - 00702416 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
2013-12-05 17:32 - 2013-12-04 03:47 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll
2013-12-05 17:32 - 2013-12-04 03:48 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll
2013-12-05 17:32 - 2013-12-04 03:48 - 00399312 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll
2013-12-05 17:32 - 2013-12-04 03:47 - 01619408 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll
2013-12-05 17:32 - 2013-12-04 03:48 - 13586896 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00417280 _____ () C:\Program Files (x86)\Winamp\nsutil.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00078848 _____ () C:\Program Files (x86)\Winamp\nde.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00064512 _____ () C:\Program Files (x86)\Winamp\zlib.dll
2013-12-22 19:48 - 2013-12-22 19:48 - 00010752 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\auth.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00069120 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\burnlib.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00013824 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\dsp_sps.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00006656 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\enc_fhgaac.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00004096 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\enc_flac.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00005632 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\enc_lame.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00004096 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\enc_vorbis.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00004096 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\enc_wav.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00006144 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\enc_wma.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00023552 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\gen_classicart.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00007168 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\gen_crasher.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00023040 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\gen_ff.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00004096 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\gen_find_on_disk.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00011776 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\gen_hotkeys.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00041984 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\gen_jumpex.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00041984 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\gen_jumpex_original.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00021504 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\gen_ml.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00009728 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\gen_nopro.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00007168 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\gen_orgler.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00014848 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\gen_play_remove.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00011776 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\gen_skinmanager.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00010240 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\gen_timerestore.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00008192 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\gen_tray.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00010752 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\gen_undo.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00005120 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\in_avi.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00014336 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\in_cdda.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00006656 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\in_dshow.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00005632 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\in_flac.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00003584 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\in_flv.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00003584 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\in_linein.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00020480 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\in_midi.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00004608 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\in_mkv.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00018944 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\in_mod.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00023040 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\in_mp3.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00005120 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\in_mp4.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00011776 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\in_nsv.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00003584 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\in_swf.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00011264 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\in_vorbis.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00006656 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\in_wav.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00005632 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\in_wave.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00015360 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\in_wm.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00004608 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\in_wv.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00003584 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\ml_addons.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00006656 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\ml_autotag.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00005120 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\ml_bookmarks.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00008704 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\ml_devices.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00047616 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\ml_disc.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00009728 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\ml_downloads.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00004608 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\ml_enqplay.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00008704 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\ml_history.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00005120 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\ml_impex.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00056320 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\ml_local.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00003584 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\ml_nowplaying.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00014336 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\ml_online.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00004096 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\ml_orb.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00012800 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\ml_playlists.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00034816 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\ml_plg.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00047104 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\ml_pmp.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00005120 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\ml_rg.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00008192 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\ml_transcode.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00014848 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\ml_wire.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00036352 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\ombrowser.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00006144 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\out_disk.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00016384 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\out_ds.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00007680 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\out_wave.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00003072 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\playlist.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00004608 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\pmp_activesync.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00020480 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\pmp_android.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00036864 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\pmp_ipod.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00003584 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\pmp_njb.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00004096 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\pmp_p4s.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00011776 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\pmp_usb.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00039424 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\pmp_wifi.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00006144 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\tagz.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00088064 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\vis_avs.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00156160 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\vis_milk2.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00007680 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\vis_nsfs.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00206336 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\winamp.lng
2013-12-22 19:48 - 2013-12-22 19:48 - 00004096 _____ () C:\Users\Friedrich\AppData\Local\Temp\WLZ211E.tmp\winampa.lng
2012-06-28 16:42 - 2013-03-09 17:32 - 00023552 _____ () C:\Program Files (x86)\Winamp\System\albumart.w5s
2012-06-28 16:42 - 2013-03-09 17:32 - 00174080 _____ () C:\Program Files (x86)\Winamp\System\auth.w5s
2012-06-28 16:42 - 2013-03-09 17:32 - 00019456 _____ () C:\Program Files (x86)\Winamp\System\bmp.w5s
2012-06-28 16:42 - 2013-03-09 17:32 - 00044544 _____ () C:\Program Files (x86)\Winamp\System\devices.w5s
2012-06-28 16:42 - 2013-03-09 17:32 - 00016896 _____ () C:\Program Files (x86)\Winamp\System\dlmgr.w5s
2012-06-28 16:42 - 2013-03-09 17:32 - 00014336 _____ () C:\Program Files (x86)\Winamp\System\filereader.w5s
2012-06-28 16:42 - 2013-03-09 17:32 - 00019456 _____ () C:\Program Files (x86)\Winamp\System\gif.w5s
2012-06-28 16:42 - 2013-03-09 17:32 - 00016384 _____ () C:\Program Files (x86)\Winamp\System\gracenote.w5s
2012-06-28 16:42 - 2013-03-09 17:32 - 00623616 _____ () C:\Program Files (x86)\Winamp\System\jnetlib.w5s
2012-06-28 16:42 - 2013-03-09 17:32 - 00154624 _____ () C:\Program Files (x86)\Winamp\System\jpeg.w5s
2012-06-28 16:42 - 2013-03-09 17:32 - 00084480 _____ () C:\Program Files (x86)\Winamp\System\playlist.w5s
2012-06-28 16:42 - 2013-03-09 17:32 - 00087552 _____ () C:\Program Files (x86)\Winamp\System\png.w5s
2012-06-28 16:42 - 2013-03-09 17:32 - 00013824 _____ () C:\Program Files (x86)\Winamp\System\primo.w5s
2012-06-28 16:42 - 2013-03-09 17:32 - 00021504 _____ () C:\Program Files (x86)\Winamp\System\tagz.w5s
2012-06-28 16:42 - 2013-03-09 17:32 - 00035328 _____ () C:\Program Files (x86)\Winamp\System\timer.w5s
2012-06-28 16:42 - 2013-03-09 17:32 - 00091136 _____ () C:\Program Files (x86)\Winamp\System\xml.w5s
2012-06-28 16:42 - 2013-03-09 17:32 - 00068608 _____ () C:\Program Files (x86)\Winamp\Plugins\in_avi.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00102400 _____ () C:\Program Files (x86)\Winamp\Plugins\in_cdda.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00072192 _____ () C:\Program Files (x86)\Winamp\Plugins\in_dshow.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00061440 _____ () C:\Program Files (x86)\Winamp\Plugins\in_flac.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00043008 _____ () C:\Program Files (x86)\Winamp\Plugins\in_flv.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00007168 _____ () C:\Program Files (x86)\Winamp\Plugins\in_linein.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00109568 _____ () C:\Program Files (x86)\Winamp\Plugins\in_midi.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00049152 _____ () C:\Program Files (x86)\Winamp\Plugins\in_mkv.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00164864 _____ () C:\Program Files (x86)\Winamp\Plugins\in_mod.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00290816 _____ () C:\Program Files (x86)\Winamp\Plugins\in_mp3.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00052736 _____ () C:\Program Files (x86)\Winamp\Plugins\in_mp4.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00075264 _____ () C:\Program Files (x86)\Winamp\Plugins\in_nsv.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00023552 _____ () C:\Program Files (x86)\Winamp\Plugins\in_swf.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00253440 _____ () C:\Program Files (x86)\Winamp\Plugins\in_vorbis.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00016896 _____ () C:\Program Files (x86)\Winamp\Plugins\in_wave.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00253440 _____ () C:\Program Files (x86)\Winamp\libsndfile.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00313344 _____ () C:\Program Files (x86)\Winamp\Plugins\in_wm.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00022528 _____ () C:\Program Files (x86)\Winamp\Plugins\out_disk.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00052224 _____ () C:\Program Files (x86)\Winamp\Plugins\out_ds.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00018432 _____ () C:\Program Files (x86)\Winamp\Plugins\out_wave.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 01737728 _____ () C:\Program Files (x86)\Winamp\Plugins\gen_ff.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00083968 _____ () C:\Program Files (x86)\Winamp\tataki.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00028160 _____ () C:\Program Files (x86)\Winamp\Plugins\gen_hotkeys.dll
2011-11-10 23:10 - 2013-03-09 17:32 - 00185344 _____ () C:\Program Files (x86)\Winamp\Plugins\gen_jumpex.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00318976 _____ () C:\Program Files (x86)\Winamp\Plugins\gen_ml.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00294912 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_local.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00084480 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_playlists.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00124928 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_online.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00249856 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_devices.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00201728 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_disc.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00240640 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_pmp.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00060928 _____ () C:\Program Files (x86)\Winamp\Plugins\pmp_android.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00170496 _____ () C:\Program Files (x86)\Winamp\Plugins\pmp_ipod.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00020480 _____ () C:\Program Files (x86)\Winamp\Plugins\pmp_njb.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00118272 _____ () C:\Program Files (x86)\Winamp\Plugins\pmp_p4s.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00053760 _____ () C:\Program Files (x86)\Winamp\Plugins\pmp_usb.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00113664 _____ () C:\Program Files (x86)\Winamp\Plugins\pmp_wifi.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00028672 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_bookmarks.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00052224 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_history.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00028672 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_autotag.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00057344 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_impex.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00083456 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_plg.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00033792 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_rg.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00032256 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_transcode.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00057344 _____ () C:\Program Files (x86)\Winamp\Plugins\gen_orgler.dll
2009-03-31 04:54 - 2009-03-31 04:54 - 00040960 _____ () C:\Program Files (x86)\Winamp\Plugins\gen_sripper.dll
2012-06-28 16:42 - 2013-03-09 17:32 - 00025600 _____ () C:\Program Files (x86)\Winamp\Plugins\gen_tray.dll
2008-09-15 01:12 - 2008-09-15 01:12 - 01465925 _____ () C:\PROGRAM FILES (X86)\STREAMRIPPER\libiconv-2.dll
2008-09-15 01:12 - 2008-09-15 01:12 - 00490650 _____ () C:\PROGRAM FILES (X86)\STREAMRIPPER\libintl-8.dll
2009-03-31 05:10 - 2009-03-31 05:10 - 00200704 _____ () C:\PROGRAM FILES (X86)\STREAMRIPPER\streamripper.dll
2005-12-31 17:18 - 2005-12-31 17:18 - 00040960 _____ () C:\PROGRAM FILES (X86)\STREAMRIPPER\ogg.dll
2005-12-31 17:15 - 2005-12-31 17:15 - 01150976 _____ () C:\PROGRAM FILES (X86)\STREAMRIPPER\vorbis.dll
2008-11-26 22:28 - 2008-11-26 22:28 - 00059904 _____ () C:\PROGRAM FILES (X86)\STREAMRIPPER\zlib1.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (12/22/2013 04:14:01 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3011

Error: (12/22/2013 04:14:01 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3011

Error: (12/22/2013 04:14:01 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (12/22/2013 04:14:00 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1997

Error: (12/22/2013 04:14:00 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1997

Error: (12/22/2013 04:14:00 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (12/22/2013 04:13:59 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 999

Error: (12/22/2013 04:13:59 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 999

Error: (12/22/2013 04:13:59 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (12/17/2013 07:12:49 PM) (Source: Bonjour Service) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 24


System errors:
=============
Error: (12/22/2013 07:08:22 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{EC972570-45E3-4375-9EB1-938B314C4EFB}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (12/22/2013 00:43:37 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{EC972570-45E3-4375-9EB1-938B314C4EFB}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (12/21/2013 10:10:13 PM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (12/21/2013 08:33:05 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{EC972570-45E3-4375-9EB1-938B314C4EFB}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (12/19/2013 11:46:41 PM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (12/19/2013 04:19:09 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{EC972570-45E3-4375-9EB1-938B314C4EFB}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (12/18/2013 11:26:47 PM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (12/18/2013 05:31:59 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{EC972570-45E3-4375-9EB1-938B314C4EFB}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (12/18/2013 07:30:31 AM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (12/18/2013 07:10:01 AM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{EC972570-45E3-4375-9EB1-938B314C4EFB}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.


Microsoft Office Sessions:
=========================
Error: (12/22/2013 04:14:01 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3011

Error: (12/22/2013 04:14:01 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3011

Error: (12/22/2013 04:14:01 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (12/22/2013 04:14:00 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1997

Error: (12/22/2013 04:14:00 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1997

Error: (12/22/2013 04:14:00 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (12/22/2013 04:13:59 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 999

Error: (12/22/2013 04:13:59 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 999

Error: (12/22/2013 04:13:59 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (12/17/2013 07:12:49 PM) (Source: Bonjour Service)(User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 24


CodeIntegrity Errors:
===================================
  Date: 2013-12-21 21:15:28.089
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-21 21:15:28.088
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-21 21:15:28.086
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-21 21:15:28.082
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-21 21:15:28.081
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-21 21:15:28.079
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-18 18:52:25.635
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-18 18:52:25.633
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-18 18:52:25.632
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-18 18:52:25.629
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 29%
Total physical RAM: 8159.14 MB
Available physical RAM: 5767.56 MB
Total Pagefile: 16316.46 MB
Available Pagefile: 12713.82 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:476.84 GB) (Free:366.76 GB) NTFS
Drive d: (Volume) (Fixed) (Total:2794.39 GB) (Free:2470.16 GB) NTFS
Drive g: (Steuer2011) (CDROM) (Total:0.35 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 2795 GB) (Disk ID: 00000000)

Partition: GPT Partition Type
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 477 GB) (Disk ID: 849F7BED)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=477 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1


WICHTIG - Speichere Combofix auf deinem Desktop

• Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Hallo,

also erstmal vielen Dank für deine Antwort. Trotz der langen Zeit besteht das Problem immer noch. Ich konnte allerdings mittlerweile die Ursache lokalisieren. Es ist ein Chrome-Addin, nennt sich "Download Protect 2.20" und läßt sich leider nicht entfernen. Anbei ein Screenshot:



Anbei nun das Ergebnis der ComboFix:

ComboFix 14-03-24.01 - Daniel 29.03.2014  15:10:55.1.4 - x64
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.49.1031.18.8159.5705 [GMT 1:00]
ausgeführt von:: c:\users\Daniel\Desktop\ComboFix.exe
AV: Kaspersky Internet Security *Disabled/Updated* {179979E8-273D-D14E-0543-2861940E4886}
FW: Kaspersky Internet Security *Disabled* {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}
SP: Kaspersky Internet Security *Disabled/Updated* {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-02-28 bis 2014-03-29  ))))))))))))))))))))))))))))))
.
.
2014-03-29 14:13 . 2014-03-29 14:13	--------	d-----w-	c:\users\Default\AppData\Local\temp
2014-03-28 15:30 . 2014-03-07 04:43	10521840	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{F75A07E1-7A35-4048-AE10-92D174E8DD84}\mpengine.dll
2014-03-26 23:13 . 2014-03-26 23:15	--------	d-----w-	C:\AdwCleaner
2014-03-14 15:11 . 2014-02-04 02:32	1424384	----a-w-	c:\windows\system32\WindowsCodecs.dll
2014-03-14 15:11 . 2014-02-04 02:32	624128	----a-w-	c:\windows\system32\qedit.dll
2014-03-14 15:11 . 2014-02-04 02:04	1230336	----a-w-	c:\windows\SysWow64\WindowsCodecs.dll
2014-03-14 15:11 . 2014-02-04 02:04	509440	----a-w-	c:\windows\SysWow64\qedit.dll
2014-03-10 15:48 . 2014-03-10 15:48	--------	d-----w-	c:\users\Daniel\AppData\Local\Skype
2014-03-10 15:47 . 2014-03-10 15:47	--------	d-----w-	c:\program files (x86)\Common Files\Skype
2014-03-10 15:47 . 2014-03-10 15:47	--------	d-----r-	c:\program files (x86)\Skype
2014-03-08 14:08 . 2014-03-08 14:08	--------	d-----w-	c:\program files\iPod
2014-03-08 14:08 . 2014-03-08 14:08	--------	d-----w-	c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-08 14:08 . 2014-03-08 14:08	--------	d-----w-	c:\program files\iTunes
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-03-25 18:11 . 2013-12-25 11:16	625248	----a-w-	c:\windows\system32\drivers\klif.sys
2014-03-25 18:11 . 2013-12-25 11:16	115296	----a-w-	c:\windows\system32\drivers\klflt.sys
2014-03-19 21:11 . 2013-03-09 09:08	90015360	----a-w-	c:\windows\system32\MRT.exe
2014-03-12 16:50 . 2013-03-09 00:04	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-03-12 16:50 . 2013-03-09 00:04	692616	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2014-02-18 17:20 . 2013-10-17 14:47	29280	----a-w-	c:\windows\system32\drivers\klkbdflt.sys
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2013-11-02 11:35	1727176	----a-w-	c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2013-11-02 11:35	1727176	----a-w-	c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2013-11-02 11:35	1727176	----a-w-	c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"gSyncit"="c:\program files\Fieldston Software\gSyncit\gsyncit.exe" [2014-02-26 166912]
"icq"="c:\users\Daniel\AppData\Roaming\ICQM\icq.exe" [2013-03-16 27453288]
"AmazonMP3DownloaderHelper"="c:\users\Daniel\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe" [2013-05-22 400704]
"iFunBoxConnector"="c:\program files (x86)\i-Funbox DevTeam\ifb_conn.exe" [2012-11-19 812544]
"iCloudServices"="c:\program files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe" [2013-11-20 59720]
"ApplePhotoStreams"="c:\program files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" [2013-11-20 59720]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-03-14 3672640]
"Spotify Web Helper"="c:\users\Daniel\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2013-10-14 1140736]
"GMX Application {sync-000021}"="c:\users\Daniel\AppData\Local\GMX Application {sync-000021}\gmx_mediacenter.exe" [2013-08-09 878080]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-04-05 336384]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2014-02-12 43848]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"Acrobat Assistant 8.0"="c:\program files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe" [2013-12-21 3478392]
"iTunesHelper"="d:\itunes\iTunesHelper.exe" [2014-02-21 152392]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
WISO Mein Steuer-Sparbuch heute.lnk - c:\program files (x86)\WISO\Steuersoftware 2014\mshaktuell.exe [2014-3-22 1427760]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 klflt;klflt;c:\windows\system32\DRIVERS\klflt.sys;c:\windows\SYSNATIVE\DRIVERS\klflt.sys [x]
S0 mv91xx;mv91xx;c:\windows\system32\DRIVERS\mv91xx.sys;c:\windows\SYSNATIVE\DRIVERS\mv91xx.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys;c:\windows\SYSNATIVE\DRIVERS\klim6.sys [x]
S1 klpd;klpd;c:\windows\system32\DRIVERS\klpd.sys;c:\windows\SYSNATIVE\DRIVERS\klpd.sys [x]
S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys;c:\windows\SYSNATIVE\DRIVERS\kltdi.sys [x]
S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys;c:\windows\SYSNATIVE\DRIVERS\kneps.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 systemiofo;File SSDP-Suche Wd;c:\windows\system32\msdeltad.exe;c:\windows\SYSNATIVE\msdeltad.exe [x]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVERS\asmthub3.sys [x]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtxhci.sys [x]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys;c:\windows\SYSNATIVE\DRIVERS\klkbdflt.sys [x]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys;c:\windows\SYSNATIVE\DRIVERS\klmouflt.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-03-15 15:37	1150280	----a-w-	c:\program files (x86)\Google\Chrome\Application\33.0.1750.154\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-03-29 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-09 16:50]
.
2014-03-29 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-03-23 20:03]
.
2014-03-29 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-03-23 20:03]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2013-11-02 11:30	2331336	----a-w-	c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2013-11-02 11:30	2331336	----a-w-	c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2013-11-02 11:30	2331336	----a-w-	c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-11-02 11545192]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-09-20 444904]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.de/
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = <-loopback>
uInternet Settings,ProxyServer = http=127.0.0.1:49394;https=127.0.0.1:49394
IE: An OneNote s&enden - c:\progra~1\MICROS~2\Office15\ONBttnIE.dll/105
IE: Nach Microsoft E&xcel exportieren - c:\progra~1\MICROS~2\Office15\EXCEL.EXE/3000
IE: Zu Anti-Banner hinzufügen - c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ie_banner_deny.htm
TCP: DhcpNameServer = 192.168.1.1
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL
FF - ProfilePath - c:\users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\ewnsf7ax.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.de/search?hl=de&gl=de&lr=&ie=UTF-8&oe=UTF-8&meta=lr=lang_de&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.de?hl=de&gl=de
FF - prefs.js: keyword.URL - hxxp://www.google.de/search?hl=de&gl=de&lr=&ie=UTF-8&oe=UTF-8&meta=lr=lang_de&q=
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
AddRemove-44a5ce38-8adb-43c9-8a5e-ee8ed8f3982a - c:\program files (x86)\Show-Password\Uninstall.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_77_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_77_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_77_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_77_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.12"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\System*]
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
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-03-29  15:15:04
ComboFix-quarantined-files.txt  2014-03-29 14:15
.
Vor Suchlauf: 10 Verzeichnis(se), 403.075.764.224 Bytes frei
Nach Suchlauf: 14 Verzeichnis(se), 403.068.510.208 Bytes frei
.
- - End Of File - - C7395D90EDE0A813FAFDC1A4B9FC6BB5
A36C5E4F47E84449FF07ED3517B43A31
         

Revo Uninstaller - Download - Filepony
Damit alles deinstallieren was Du in der Additional.txt findest mit dem Zusatz <== ATTENTION

Mit Revo auch Moderat die Reste entfernen lassen.



Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.