Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen"

Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen"


Plagegeister aller Art und deren Bekämpfung: Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen"

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 24.01.2014, 05:51   #1
boyherre
 
Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen" - Standard

Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen"


Hallo,
da hab ich immer gedacht, ich sei ein alter Hase, der seit 1983 mit Computern arbeitet - und mir könnte ein Virus nicht passieren, so vorsichtig hab ich mich verhalten; nun ist es also wohl doch passiert.
Virenscanner ist seit HBEDV-Zeiten Avira premium.
In Erwartung eines Faxes hatte ich in Thunderbird in Eile einen Datei-Anhang Fax-xxxxxx.zip (mit Ziffern) geöffnet (großer Fehler!) und sofort eine Avira-Warnung erhalten, die natürlich sofort zur Löschung geführt hat. Offensichtlich war's aber doch schon zu spät. Zum Glück arbeite ich parallel mit Linux Mint, das funktioniert unbeeindruckt...
Avira meldete also einen "Hiddenext/Worm.Gen"-Trojaner.
Ich habe dann sogleich mithilfe von Desinfec't einen Vierfach-Scan von DVD (Linux Ubuntu) über Nacht laufen lassen (Avira, BitDefender, Kaspersky und ClamAV), der mir 43 Fundstellen dokumentierte, von TR/Spy.Gen, ExpKit.Gen3, TR/Dropper.Gen, Hiddenext/Worm.Gen, TR/Atraps.Gen, TR/Crypt.XPack.Gen3, Adware.Gen7 und Fraud.gen.
Der einzige, dessen Angriff ich per Warnung wahrgenommen habe, war aber Hiddenext/Worm.Gen .
Der ist offenbar recht übel: Es setzt alle Browser außer Gefecht (Chrome, FF, Safari, Opera, IE 11), indem die Browser keinerlei Daten mehr transportieren, keine URLs mehr annehmen.
Avira konnte nicht mehr scannen, sondern zeigte eine Fehlermeldung. Und läßt sich auch nicht mehr installieren, da ja kein Online-Kontakt da ist. Dass das Netzwerk inkl. DSL in Ordnung ist, zeigen Linux und andere Rechner, die nicht kompromittiert sind. Ich gehe also davon aus, dass hier ein Virus am Werk sein muss... Betroffen ist nur ein Rechner von dreien. Und nur in Windows 7.
Falls es nicht anders geht, werde ich das Windows 7 völlig neu aufsetzen müssen, nachdem die Partition gelöscht und formatiert wurde. Das bedeutet 2 - 3 Wochen Arbeit, es handelt sich um meinen Haupt-Arbeits-Desktop-Rechner. Ich kann mir eigentlich keine unangenehmere und teurere Situation vorstellen.
Mir wäre schon geholfen, wenn jemand dieses Verhalten und den verantwortlichen Virus/Trojaner kennt und was dazu sagen kann; dafür wäre ich echt dankbar.
Noch besser wäre natürlich, wenn es einen Weg gäbe, mich ohne Radikalkur davon zu befreien. Da ich für diverse Kunden täglich in WordPress und Joomla arbeite, sind funktionierende Browser natürlich unverzichtbar. Das Heim-Netzwerk funktioniert übrigens, der Weg nach draußen ins Internet funktioniert nicht.
Ich habe nun erst mal den Windows-eigenen Defender wieder eingeschaltet, der aber auch keine Updates holen kann.
So würde ich mich also über jede Antwort freuen.
LG, Boy

Alt 24.01.2014, 07:13   #2
schrauber
/// the machine
/// TB-Ausbilder
 
Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen" - Standard

Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen"


hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________
Alt 24.01.2014, 18:22   #3
boyherre
 
Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen" - Standard

Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen"


Hallo schrauber,
danke für die rasche Antwort.
Deine Anweisungen konnte ich nur befolgen, indem ich einen sauberen Zweit-Rechner (Laptop) im Heimnetzwerk bemüht habe, der das Programm runterladen und auf den Desktop kopieren konnte; umgekehrt die Log-Dateien wieder zurück zum Laptop, der sie hochladen konnte. Alternativ hätte ich auch Linux bemühen können – fällt mir grad ein…
Vielleicht wichtig zu wissen:
Heises Desinfec't bietet die Möglichkeit, alle infizierten Dateien, die beim ersten Scan gefunden wurden, mit der Erweiterung „.virus“ automatisch umzubenennen, was ich gemacht habe; auch um zu sehen, ob Windows7/64 noch startet – was es tut. Dass die Browser, Thunderbird und alles, was ins Internet geht, nicht mehr funktionieren, könnte auch diesem Umstand geschuldet sein. Keine dieser Dateien wurde bislang gelöscht.
Ein zweiter Desinfec't-Scan zur Kontrolle (diesmal nur mit Avira & Bitdefender) meldete heute keine Fundstellen mehr. Nachfolgend die beiden Log-Dateien…

Nochmal danke für Deine Mühe!

LG, Boy



FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-01-2014
Ran by win-boy (administrator) on WIN-BOY-PC on 24-01-2014 17:39:05
Running from C:\Users\Public\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(cFos Software GmbH) C:\Program Files\ASRock\XFast LAN\spd.exe
(Microsoft Corporation) C:\Windows\ehome\ehrecvr.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Tlapia) C:\Program Files (x86)\sysTPL\sysTPLMonitor.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(cFos Software GmbH) C:\Program Files\ASRock\XFast LAN\cfosspeed.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\Logitech Vid\Vid.exe
(Dropbox, Inc.) C:\Users\win-boy\AppData\Roaming\Dropbox\bin\Dropbox.exe
() C:\Windows\Samsung\PanelMgr\SSMMgr.exe
() C:\Windows\Samsung\PanelMgr\caller64.exe
(Tablet Driver) C:\Windows\System32\drivers\WTSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Nikon Corporation) C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(CyberLink Corp.) H:\Programme\CyberLink\PowerDVD10\PDVD10Serv.exe
() C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) H:\Programme\iTunes\iTunesHelper.exe
(cyberlink) C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
(CyberLink) H:\Programme\CyberLink\Power2Go\CLMLSvc.exe
(Tlapia) C:\Program Files (x86)\sysTPL\sysTPL.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
() C:\Program Files (x86)\Common Files\LogiShrd\LQCVFX\COCIManager.exe
(Adobe Systems Incorporated) H:\Programme\Adobe\Elements\Elements 10 Organizer\PhotoshopElementsFileAgent.exe
(Adobe Systems Incorporated) H:\Programme\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Corel) C:\Program Files (x86)\Common Files\Corel\Standby\Standby.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [XFast LAN] - C:\Program Files\ASRock\XFast LAN\cFosSpeed.exe [1441152 2011-10-19] (cFos Software GmbH)
HKLM\...\Run: [THXCfg64] - C:\Windows\system32\THXCfg64.dll [26624 2011-05-13] (Creative Technology Ltd.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)
HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2184520 2009-07-27] (CANON INC.)
HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-03-18] (CANON INC.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [630912 2012-05-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AMD AVT] - C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [12288 2012-04-19] ()
HKLM-x32\...\Run: [Samsung PanelMgr] - C:\Windows\Samsung\PanelMgr\ssmmgr.exe [618496 2010-06-07] ()
HKLM-x32\...\Run: [QuickFinder Scheduler] - h:\Programme\Corel\WordPerfect Office X5\Programs\QFSCHD150.EXE [128440 2012-09-21] (Corel Corporation)
HKLM-x32\...\Run: [BCSSync] - H:\Programme\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [402432 2010-07-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Nikon Transfer Monitor] - C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe [479232 2009-09-15] (Nikon Corporation)
HKLM-x32\...\Run: [RemoteControl10] - H:\Programme\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePPShortCut] - H:\Programme\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [223096 2012-04-17] (CyberLink Corp.)
HKLM-x32\...\Run: [Standby] - C:\Program Files (x86)\Common Files\Corel\Standby\Standby.exe [105632 2010-05-17] (Corel)
HKLM-x32\...\Run: [LogitechQuickCamRibbon] - C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe [2793304 2009-10-14] ()
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] - H:\Programme\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [179976 2013-09-25] (cyberlink)
HKLM-x32\...\Run: [CLMLServer] - H:\Programme\CyberLink\Power2Go\CLMLSvc.exe [107816 2011-03-09] (CyberLink)
HKLM-x32\...\Run: [sysTPL] - C:\Program Files (x86)\sysTPL\sysTPL.exe [872560 2013-11-28] (Tlapia)
HKCU\...\Run: [ISUSPM Startup] - C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2005-02-16] (InstallShield Software Corporation)
HKCU\...\Run: [Logitech Vid] - C:\Program Files (x86)\Logitech\Logitech Vid\Vid.exe [5458704 2009-07-16] (Logitech Inc.)
MountPoints2: {94da6606-ca60-11e2-8f43-806e6f6e6963} - M:\ASRSetup.exe
Startup: C:\Users\win-boy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\win-boy\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.wrws.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x0C300D80F35FCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - H:\Programme\JAVA64\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - H:\Programme\JAVA64\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - H:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - H:\Programme\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File
Toolbar: HKCU - No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} -  No File
DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog9 01 H:\Programme\Avira\Avira\AntiVir Desktop\avsda.dll File Not found ()
Winsock: Catalog9 02 H:\Programme\Avira\Avira\AntiVir Desktop\avsda.dll File Not found ()
Winsock: Catalog9 03 H:\Programme\Avira\Avira\AntiVir Desktop\avsda.dll File Not found ()
Winsock: Catalog9 04 H:\Programme\Avira\Avira\AntiVir Desktop\avsda.dll File Not found ()
Winsock: Catalog9 05 H:\Programme\Avira\Avira\AntiVir Desktop\avsda.dll File Not found ()
Winsock: Catalog9 06 H:\Programme\Avira\Avira\AntiVir Desktop\avsda.dll File Not found ()
Winsock: Catalog9 07 H:\Programme\Avira\Avira\AntiVir Desktop\avsda.dll File Not found ()
Winsock: Catalog9 08 H:\Programme\Avira\Avira\AntiVir Desktop\avsda.dll File Not found ()
Winsock: Catalog9 19 H:\Programme\Avira\Avira\AntiVir Desktop\avsda.dll File Not found ()
Winsock: Catalog9-x64 01 H:\Programme\Avira\Avira\AntiVir Desktop\avsda64.dll File Not found ()
Winsock: Catalog9-x64 02 H:\Programme\Avira\Avira\AntiVir Desktop\avsda64.dll File Not found ()
Winsock: Catalog9-x64 03 H:\Programme\Avira\Avira\AntiVir Desktop\avsda64.dll File Not found ()
Winsock: Catalog9-x64 04 H:\Programme\Avira\Avira\AntiVir Desktop\avsda64.dll File Not found ()
Winsock: Catalog9-x64 05 H:\Programme\Avira\Avira\AntiVir Desktop\avsda64.dll File Not found ()
Winsock: Catalog9-x64 06 H:\Programme\Avira\Avira\AntiVir Desktop\avsda64.dll File Not found ()
Winsock: Catalog9-x64 07 H:\Programme\Avira\Avira\AntiVir Desktop\avsda64.dll File Not found ()
Winsock: Catalog9-x64 08 H:\Programme\Avira\Avira\AntiVir Desktop\avsda64.dll File Not found ()
Winsock: Catalog9-x64 19 H:\Programme\Avira\Avira\AntiVir Desktop\avsda64.dll File Not found ()
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default
FF Homepage: hxxp://www.wrws.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - H:\Programme\JAVA64\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - H:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @canon.com/EPPEX - H:\Programme\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - H:\Programme\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - H:\Programme\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - H:\Programme\Microsoft Office\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~3\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - H:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - H:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - H:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Acrobat - H:\Programme\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\searchplugins\aol-search.xml
FF SearchPlugin: C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\searchplugins\duckduckgo.xml
FF SearchPlugin: C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\searchplugins\ixquick-https.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ProxTube - Unblock YouTube - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\ich@maltegoetz.de [2013-12-11]
FF Extension: YouTube Unblocker - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\youtubeunblocker@unblocker.yt [2014-01-23]
FF Extension: TV-Fox - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{2f17f610-5e97-4fed-828f-9940b7b577a4} [2013-06-05]
FF Extension: ColorZilla - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{6AC85730-7D0F-4de0-B3FA-21142DD85326} [2013-06-05]
FF Extension: Flash and Video Download - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2014-01-24]
FF Extension: Firebug - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\firebug@software.joehewitt.com.xpi [2013-06-05]
FF Extension: Alexa Toolbar - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\toolbar@alexa.com.xpi [2014-01-22]
FF Extension: FlashGot - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi [2013-06-05]
FF Extension: QuickTime Plugin Light - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{6ec24361-5d25-45e8-ba55-6fce99e5f3f2}.xpi [2013-11-07]
FF Extension: {736474a2-af0a-466f-b4c4-d10bc8f3a78f} - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{736474a2-af0a-466f-b4c4-d10bc8f3a78f}.xpi [2013-11-01]
FF Extension: NoScript - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-06-05]
FF Extension: MeasureIt - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{75CEEE46-9B64-46f8-94BF-54012DE155F0}.xpi [2013-06-05]
FF Extension: Easy YouTube Video Downloader - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi [2013-06-05]
FF Extension: Adblock Plus - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-06-05]
FF Extension: QuickJava - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{E6C1199F-E687-42da-8C24-E7770CC3AE66}.xpi [2013-06-05]
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - H:\Programme\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - H:\Programme\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ []
FF HKCU\...\Firefox\Extensions: [{9309FA47-1B48-4768-AFA4-9E0556F5DC81}] - C:\Program Files (x86)\LyricsPal\125.xpi
FF StartMenuInternet: FIREFOX.EXE - H:\Programme\Mozilla Firefox\firefox.exe

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Extension: (Xmarks Bookmark Sync) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajpgkpeckebdhofmmjfgcjjiiejpodla [2013-06-01]
CHR Extension: (Google Docs) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-06-01]
CHR Extension: (MeasureIt!) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aonjhmdcgbgikgjapjckfkefpphjpgma [2013-07-04]
CHR Extension: (Google Drive) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-06-01]
CHR Extension: (ColorZilla) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhlhnicpbhignbdhedgjhgdocnmhomnp [2013-06-01]
CHR Extension: (YouTube) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-06-01]
CHR Extension: (Firebug Lite for Google Chrome™) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmagokdooijbeehmkpknfglimnifench [2013-06-01]
CHR Extension: (Adblock Plus) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-06-01]
CHR Extension: (Google-Suche) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-06-01]
CHR Extension: (Freemake Video Converter) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbolfgndggfhhpbnkgnpjkfhinclbigj [2014-01-04]
CHR Extension: (Google Wallet) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR Extension: (Traffic Rank) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\oipgijiceofkdddeceikmdjledafnehk [2013-06-01]
CHR Extension: (Alexa Rank Checker) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\paccfoonakeffgimhfkopmhplabglkad [2013-06-01]
CHR Extension: (Google Mail) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-06-01]
CHR HKLM-x32\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - H:\Programme\Freemake\Freemake Video Converter\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2012-12-06]
CHR HKLM-x32\...\Chrome\Extension: [mmiopbgcekanlhpjkonogoljpfmhpkhf] - C:\Program Files (x86)\LyricsPal\125.crx [2012-12-06]

==================== Services (Whitelisted) =================

R2 AdobeActiveFileMonitor10.0; H:\Programme\Adobe\Elements\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [169624 2011-09-01] (Adobe Systems Incorporated)
R2 AdobeActiveFileMonitor11.0; H:\Programme\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171600 2012-09-23] (Adobe Systems Incorporated)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-05-04] (Advanced Micro Devices, Inc.)
S4 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-06-20] (Microsoft Corp.)
R2 cFosSpeedS; C:\Program Files\ASRock\XFast LAN\spd.exe [395136 2011-10-19] (cFos Software GmbH)
S2 CLKMSVC10_B91AB049; H:\Programme\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [243464 2013-09-25] (CyberLink)
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [101888 2013-11-19] (Freemake)
S2 hasplms; C:\Windows\system32\hasplms.exe [4412872 2012-08-23] (SafeNet Inc.)
R2 sysTPLMonitor.exe; C:\Program Files (x86)\sysTPL\sysTPLMonitor.exe [395888 2013-11-28] (Tlapia)
S2 sysTPLService.exe; C:\Program Files (x86)\sysTPL\sysTPLService.exe [397080 2013-09-29] (Tlapia)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R3 anvsnddrv; C:\Windows\System32\drivers\anvsnddrv.sys [33872 2011-11-28] (AnvSoft Inc.)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-14] (Avira Operations GmbH & Co. KG)
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [323584 2012-10-06] (SafeNet Inc.)
R3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
R3 MTSBDA; C:\Windows\System32\Drivers\MtsBda.sys [344592 2009-07-13] (TechniSat Provide)
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation)
S2 SSPORT; C:\Windows\SysWOW64\Drivers\SSPORT.sys [11576 2009-02-23] (Samsung Electronics)
R3 TridVid; C:\Windows\System32\DRIVERS\tridvid6010.sys [411648 2011-01-21] (10Moons Technologies Co.,Ltd)
S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [x]
S3 Tablet2k; "%SystemRoot%\System32\Drivers\Tablet2k.sys" [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-24 17:39 - 2014-01-24 17:39 - 00025990 _____ C:\Users\Public\Downloads\FRST.txt
2014-01-24 17:38 - 2014-01-24 17:38 - 00000000 ____D C:\FRST
2014-01-24 17:35 - 2014-01-24 17:34 - 02077696 _____ (Farbar) C:\Users\Public\Downloads\FRST64.exe
2014-01-24 04:39 - 2014-01-24 04:32 - 23867560 _____ (Mozilla) C:\Users\Public\Downloads\Firefox Setup 26.0.exe
2014-01-24 03:30 - 2013-11-03 01:36 - 00000512 _____ C:\Users\win-boy\Documents\hbedv.key
2014-01-22 20:09 - 2014-01-22 20:09 - 00002777 _____ C:\Users\Public\Desktop\Nero Video 12.lnk
2014-01-22 20:08 - 2014-01-22 20:08 - 00002873 _____ C:\Users\Public\Desktop\Nero Recode 12.lnk
2014-01-22 20:08 - 2014-01-22 20:08 - 00002841 _____ C:\Users\Public\Desktop\Nero 12.lnk
2014-01-22 20:08 - 2014-01-22 20:08 - 00002763 _____ C:\Users\Public\Desktop\Nero BackItUp 12.lnk
2014-01-22 20:07 - 2014-01-22 20:07 - 00002601 _____ C:\Users\Public\Desktop\Nero Burning ROM 12.lnk
2014-01-22 19:42 - 2014-01-22 19:42 - 00000866 _____ C:\Users\win-boy\Desktop\Revo Uninstaller.lnk
2014-01-22 19:15 - 2014-01-22 19:15 - 00005327 _____ C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-22 19:15 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-15 14:19 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 14:19 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 14:19 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 14:19 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 14:19 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 14:19 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 14:19 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 14:19 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 14:19 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-14 18:35 - 2014-01-14 18:35 - 00001095 _____ C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-01-14 18:35 - 2014-01-14 18:35 - 00001037 _____ C:\Windows\system32\TeamViewer9_Hooks.log
2014-01-14 18:35 - 2014-01-14 18:35 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2014-01-13 17:09 - 2014-01-13 17:12 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\TeamViewer
2014-01-12 05:42 - 2014-01-12 05:42 - 00001074 _____ C:\Users\Public\Desktop\Free Video to DVD Converter.lnk
2014-01-12 05:42 - 2014-01-12 05:42 - 00000895 _____ C:\Users\Public\Desktop\Free DVD Video Burner.lnk
2014-01-08 17:36 - 2014-01-08 17:36 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-01-07 19:31 - 2014-01-24 16:53 - 00003528 _____ C:\Windows\setupact.log
2014-01-07 19:31 - 2014-01-24 16:52 - 00016064 _____ C:\Windows\PFRO.log
2014-01-07 19:31 - 2014-01-07 19:31 - 00000000 _____ C:\Windows\setuperr.log
2014-01-07 17:16 - 2014-01-07 17:16 - 00000704 _____ C:\Users\Public\Desktop\Sketch Drawer.lnk
2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\Windows\SysWOW64\GPhotos.scr
2014-01-04 18:09 - 2014-01-04 18:09 - 00000771 _____ C:\Users\Public\Desktop\FotoPrinter 4.5.lnk
2014-01-03 19:05 - 2014-01-03 19:05 - 00002776 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-01-03 19:05 - 2014-01-03 19:05 - 00000827 _____ C:\Users\Public\Desktop\CCleaner.lnk
2014-01-03 19:05 - 2014-01-03 19:05 - 00000000 ____D C:\Program Files\CCleaner
2013-12-25 18:47 - 2011-02-25 07:19 - 00000803 ___SH C:\Windows\M3jp2k.ini
2013-12-25 18:47 - 2011-02-25 07:19 - 00000038 ___SH C:\Windows\camcodec100.ini
2013-12-25 18:47 - 2011-02-25 07:19 - 00000028 ___SH C:\Windows\lagarith.ini
2013-12-25 18:47 - 2004-06-26 17:39 - 00438272 ___SH (On2.com) C:\Windows\SysWOW64\vp6vfw.dll
2013-12-25 18:46 - 2013-12-25 18:46 - 00000000 ____D C:\Program Files (x86)\AviSynth 2.5
2013-12-25 18:46 - 2009-09-27 09:39 - 00415744 ___SH (The Public) C:\Windows\SysWOW64\avisynth.dll
2013-12-25 18:46 - 2005-07-14 12:31 - 00032256 ___SH C:\Windows\SysWOW64\AVSredirect.dll
2013-12-25 18:46 - 2004-02-22 10:11 - 00764416 ___SH (Abysmal Software) C:\Windows\SysWOW64\devil.dll
2013-12-25 18:46 - 2004-01-25 00:00 - 00070656 ___SH (www.helixcommunity.org) C:\Windows\SysWOW64\yv12vfw.dll
2013-12-25 18:46 - 2004-01-25 00:00 - 00070656 ___SH (www.helixcommunity.org) C:\Windows\SysWOW64\i420vfw.dll
2013-12-25 18:29 - 2013-12-25 18:29 - 00001117 _____ C:\Users\Public\Desktop\SUPER ©.lnk
2013-12-25 18:29 - 2013-12-25 18:29 - 00000000 ____D C:\Users\win-boy\Documents\eRightSoft
2013-12-25 18:29 - 2012-10-05 19:54 - 00188416 __RSH C:\Windows\SysWOW64\winDCE32.dll
2013-12-25 18:29 - 2012-07-11 23:00 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Olepau32.ax
2013-12-25 18:29 - 2011-06-15 23:00 - 00163328 __RSH C:\Windows\SysWOW64\flvDX.dll
2013-12-25 18:29 - 2011-06-14 19:05 - 00121344 __RSH C:\Windows\SysWOW64\TAKDSDecoder.ax
2013-12-25 18:29 - 2011-02-11 10:26 - 00112128 __RSH C:\Windows\SysWOW64\OptimFROG.dll
2013-12-25 18:29 - 2010-01-06 23:00 - 00107520 __RSH C:\Windows\SysWOW64\TAKDSDecoder.dll
2013-12-25 18:29 - 2009-09-27 23:00 - 00143872 __RSH C:\Windows\SysWOW64\AviDX.ax
2013-12-25 18:29 - 2009-08-10 23:00 - 00352768 __RSH C:\Windows\SysWOW64\ac3DX.ax
2013-12-25 18:29 - 2009-03-17 10:38 - 00070656 __RSH C:\Windows\SysWOW64\RLAPEDec.ax
2013-12-25 18:29 - 2009-01-18 17:15 - 00120832 __RSH C:\Windows\SysWOW64\MPCDx.ax
2013-12-25 18:29 - 2009-01-18 12:03 - 00107520 __RSH C:\Windows\SysWOW64\RLMPCDec.ax
2013-12-25 18:29 - 2008-03-16 14:30 - 00216064 __RSH (MONOGRAM Multimedia, s.r.o.) C:\Windows\SysWOW64\nbDX.dll
2013-12-25 18:29 - 2007-02-21 12:47 - 00031232 __RSH (Hans Mayerl) C:\Windows\SysWOW64\msfDX.dll
2013-12-25 18:29 - 2006-08-16 15:53 - 00175104 __RSH () C:\Windows\SysWOW64\CoreAAC.ax
2013-12-25 18:29 - 2006-03-10 20:21 - 00195584 __RSH C:\Windows\SysWOW64\MatroskaDX.ax
2013-12-25 18:29 - 2006-01-12 23:00 - 00123904 __RSH (CoreCodec) C:\Windows\SysWOW64\AVCDX.ax
2013-12-25 18:29 - 2005-11-25 21:46 - 00161792 __RSH (Gabest) C:\Windows\SysWOW64\RealMediaDX.ax
2013-12-25 18:29 - 2005-02-22 17:55 - 00081920 __RSH C:\Windows\SysWOW64\aac_parser.ax
2013-12-25 18:29 - 2005-02-13 00:00 - 00186880 __RSH (RadLight) C:\Windows\SysWOW64\RLOgg.ax
2013-12-25 18:29 - 2005-02-13 00:00 - 00067584 __RSH (RadLight, LLC) C:\Windows\SysWOW64\RLTheoraDec.ax
2013-12-25 18:29 - 2005-02-13 00:00 - 00051712 __RSH C:\Windows\SysWOW64\RLSpeexDec.ax
2013-12-25 18:29 - 2005-02-06 00:00 - 00092672 __RSH (RadLight) C:\Windows\SysWOW64\RLVorbisDec.ax
2013-12-25 18:29 - 2005-01-18 00:26 - 00179200 __RSH (Gabest) C:\Windows\SysWOW64\DiracSplitter.ax
2013-12-25 18:29 - 2004-10-10 09:50 - 00278528 _____ (Real Networks, Inc) C:\Windows\SysWOW64\pncrt.dll
2013-12-25 18:29 - 2004-09-17 04:07 - 00090112 __RSH (-) C:\Windows\SysWOW64\TTADSSplitter.ax
2013-12-25 18:29 - 2004-08-22 11:56 - 00090112 __RSH (-) C:\Windows\SysWOW64\TTADSDecoder.ax
2013-12-25 18:29 - 2004-07-02 16:33 - 00327749 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\drvc.dll
2013-12-25 18:29 - 2004-04-27 16:03 - 00017408 __RSH (RadLight) C:\Windows\SysWOW64\RLOFRDec.ax
2013-12-25 18:29 - 2003-12-07 08:59 - 00097280 __RSH C:\Windows\SysWOW64\FLACDX.ax
2013-12-25 18:27 - 2013-12-25 18:29 - 00000000 ____D C:\Program Files (x86)\eRightSoft
2013-12-25 18:26 - 2014-01-24 03:34 - 00000364 _____ C:\Windows\Tasks\AmiUpdXp.job
2013-12-25 18:26 - 2013-12-25 18:26 - 00003388 _____ C:\Windows\System32\Tasks\AmiUpdXp
2013-12-25 18:26 - 2013-12-25 18:26 - 00000000 ____D C:\Users\win-boy\AppData\Local\SwvUpdater
2013-12-25 18:18 - 2013-12-25 18:20 - 64722251 _____ (eRightSoft                                                  ) C:\Users\win-boy\Downloads\SUPERsetup.exe

==================== One Month Modified Files and Folders =======

2014-01-24 17:39 - 2014-01-24 17:39 - 00025990 _____ C:\Users\Public\Downloads\FRST.txt
2014-01-24 17:39 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2014-01-24 17:38 - 2014-01-24 17:38 - 00000000 ____D C:\FRST
2014-01-24 17:34 - 2014-01-24 17:35 - 02077696 _____ (Farbar) C:\Users\Public\Downloads\FRST64.exe
2014-01-24 17:02 - 2009-07-14 05:45 - 00014064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-24 17:02 - 2009-07-14 05:45 - 00014064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-24 16:56 - 2013-06-01 03:16 - 02033243 _____ C:\Windows\WindowsUpdate.log
2014-01-24 16:55 - 2013-06-01 21:31 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\Dropbox
2014-01-24 16:53 - 2014-01-07 19:31 - 00003528 _____ C:\Windows\setupact.log
2014-01-24 16:53 - 2009-07-14 06:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-24 16:53 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-24 16:52 - 2014-01-07 19:31 - 00016064 _____ C:\Windows\PFRO.log
2014-01-24 16:52 - 2013-06-01 10:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-24 04:40 - 2013-06-11 00:53 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-24 04:32 - 2014-01-24 04:39 - 23867560 _____ (Mozilla) C:\Users\Public\Downloads\Firefox Setup 26.0.exe
2014-01-24 03:34 - 2013-12-25 18:26 - 00000364 _____ C:\Windows\Tasks\AmiUpdXp.job
2014-01-24 03:33 - 2013-06-01 10:45 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-24 03:32 - 2013-07-19 19:56 - 00000378 _____ C:\Windows\Tasks\Lyrics-Pal Update.job
2014-01-24 03:26 - 2013-06-03 02:51 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-24 03:12 - 2013-06-01 10:45 - 00001112 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-24 02:00 - 2013-06-01 12:55 - 00000000 ____D C:\Users\win-boy\AppData\Local\Adobe
2014-01-23 18:38 - 2013-06-01 12:41 - 00000099 _____ C:\Users\Public\LMDebug.log
2014-01-23 00:03 - 2013-06-01 22:38 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\Free Download Manager
2014-01-22 20:12 - 2013-07-16 11:37 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\Nero
2014-01-22 20:12 - 2013-06-03 18:00 - 00000000 ____D C:\Users\win-boy\AppData\Local\Nero
2014-01-22 20:12 - 2013-06-03 17:35 - 00000000 ____D C:\ProgramData\Nero
2014-01-22 20:09 - 2014-01-22 20:09 - 00002777 _____ C:\Users\Public\Desktop\Nero Video 12.lnk
2014-01-22 20:08 - 2014-01-22 20:08 - 00002873 _____ C:\Users\Public\Desktop\Nero Recode 12.lnk
2014-01-22 20:08 - 2014-01-22 20:08 - 00002841 _____ C:\Users\Public\Desktop\Nero 12.lnk
2014-01-22 20:08 - 2014-01-22 20:08 - 00002763 _____ C:\Users\Public\Desktop\Nero BackItUp 12.lnk
2014-01-22 20:07 - 2014-01-22 20:07 - 00002601 _____ C:\Users\Public\Desktop\Nero Burning ROM 12.lnk
2014-01-22 19:42 - 2014-01-22 19:42 - 00000866 _____ C:\Users\win-boy\Desktop\Revo Uninstaller.lnk
2014-01-22 19:15 - 2014-01-22 19:15 - 00005327 _____ C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-22 19:15 - 2013-10-28 12:39 - 00000000 ____D C:\ProgramData\Oracle
2014-01-22 19:15 - 2013-10-28 12:33 - 00000000 ____D C:\Program Files (x86)\Java
2014-01-22 17:19 - 2009-07-14 03:34 - 00000635 _____ C:\Windows\win.ini
2014-01-21 01:32 - 2013-12-16 19:18 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\vlc
2014-01-19 22:20 - 2013-06-01 13:27 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\FileZilla
2014-01-16 19:51 - 2011-04-18 18:46 - 00000000 ____D C:\VueScan
2014-01-16 19:46 - 2013-06-01 23:42 - 00006476 ___SH C:\ProgramData\KGyGaAvL.sys
2014-01-16 16:18 - 2013-06-01 03:35 - 00000000 ___RD C:\Users\win-boy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-16 16:17 - 2013-06-02 01:58 - 00001029 _____ C:\Users\win-boy\Desktop\Dropbox.lnk
2014-01-16 16:17 - 2013-06-02 01:55 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-16 16:14 - 2009-07-14 05:45 - 03852608 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-16 03:03 - 2013-07-14 00:27 - 00000000 ____D C:\Windows\system32\MRT
2014-01-16 03:00 - 2013-06-01 05:00 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-15 14:11 - 2013-06-15 19:12 - 00202480 _____ C:\Users\win-boy\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-14 18:35 - 2014-01-14 18:35 - 00001095 _____ C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-01-14 18:35 - 2014-01-14 18:35 - 00001037 _____ C:\Windows\system32\TeamViewer9_Hooks.log
2014-01-14 18:35 - 2014-01-14 18:35 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2014-01-14 00:54 - 2013-06-01 22:46 - 00000000 ____D C:\Users\win-boy\AppData\Local\FRITZ!
2014-01-13 17:12 - 2014-01-13 17:09 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\TeamViewer
2014-01-13 13:49 - 2013-11-10 19:27 - 00000000 ____D C:\Program Files (x86)\sysTPL
2014-01-12 17:15 - 2013-06-01 03:35 - 00000000 ____D C:\Users\win-boy
2014-01-12 16:41 - 2013-07-31 12:57 - 00000000 ____D C:\Users\win-boy\Documents\Outlook-Dateien
2014-01-12 16:37 - 2013-07-17 15:12 - 00059392 ___SH C:\Users\win-boy\Documents\Thumbs.db
2014-01-12 06:05 - 2013-10-31 13:42 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\DVDVideoSoft
2014-01-12 05:42 - 2014-01-12 05:42 - 00001074 _____ C:\Users\Public\Desktop\Free Video to DVD Converter.lnk
2014-01-12 05:42 - 2014-01-12 05:42 - 00000895 _____ C:\Users\Public\Desktop\Free DVD Video Burner.lnk
2014-01-12 05:42 - 2013-10-31 13:42 - 00001248 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-01-08 17:36 - 2014-01-08 17:36 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-01-08 17:30 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2014-01-07 19:31 - 2014-01-07 19:31 - 00000000 _____ C:\Windows\setuperr.log
2014-01-07 17:16 - 2014-01-07 17:16 - 00000704 _____ C:\Users\Public\Desktop\Sketch Drawer.lnk
2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\Windows\SysWOW64\GPhotos.scr
2014-01-04 18:09 - 2014-01-04 18:09 - 00000771 _____ C:\Users\Public\Desktop\FotoPrinter 4.5.lnk
2014-01-03 19:12 - 2013-06-03 20:00 - 00000000 ____D C:\Users\win-boy\AppData\Local\CrashDumps
2014-01-03 19:12 - 2013-06-01 04:10 - 00000000 ____D C:\Windows\Panther
2014-01-03 19:05 - 2014-01-03 19:05 - 00002776 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-01-03 19:05 - 2014-01-03 19:05 - 00000827 _____ C:\Users\Public\Desktop\CCleaner.lnk
2014-01-03 19:05 - 2014-01-03 19:05 - 00000000 ____D C:\Program Files\CCleaner
2013-12-26 16:09 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-25 18:48 - 2013-06-26 17:13 - 00015872 _____ C:\Users\win-boy\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-12-25 18:46 - 2013-12-25 18:46 - 00000000 ____D C:\Program Files (x86)\AviSynth 2.5
2013-12-25 18:29 - 2013-12-25 18:29 - 00001117 _____ C:\Users\Public\Desktop\SUPER ©.lnk
2013-12-25 18:29 - 2013-12-25 18:29 - 00000000 ____D C:\Users\win-boy\Documents\eRightSoft
2013-12-25 18:29 - 2013-12-25 18:27 - 00000000 ____D C:\Program Files (x86)\eRightSoft
2013-12-25 18:26 - 2013-12-25 18:26 - 00003388 _____ C:\Windows\System32\Tasks\AmiUpdXp
2013-12-25 18:26 - 2013-12-25 18:26 - 00000000 ____D C:\Users\win-boy\AppData\Local\SwvUpdater
2013-12-25 18:20 - 2013-12-25 18:18 - 64722251 _____ (eRightSoft                                                  ) C:\Users\win-boy\Downloads\SUPERsetup.exe

Files to move or delete:
====================
C:\ProgramData\PKP_DLdu.DAT


Some content of TEMP:
====================
C:\Users\win-boy\AppData\Local\Temp\avgnt.exe
C:\Users\win-boy\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-19 00:03

==================== End Of Log ============================
--- --- ---



Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 24-01-2014
Ran by win-boy at 2014-01-24 17:39:54
Running from C:\Users\Public\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

7-Zip 9.22 (x64 edition) (Version: 9.22.00.0 - Igor Pavlov)
AC3Filter 2.5b (x32 Version: 2.5b - Alexander Vigovsky)
Adobe Acrobat 9 Pro - English, Français, Deutsch (x32 Version: 9.5.5 - Adobe Systems) Hidden
Adobe Acrobat 9.5.5 - CPSID_83708 (x32 Version:  - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 2.6.0.19140 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 2.6.0.19140 - Adobe Systems Incorporated) Hidden
Adobe Community Help (x32 Version: 3.5.23 - Adobe Systems Incorporated.)
Adobe Community Help (x32 Version: 3.5.23 - Adobe Systems Incorporated.) Hidden
Adobe Creative Suite 5 Design Standard (x32 Version: 5.0 - Adobe Systems Incorporated)
Adobe Download Assistant (x32 Version: 1.2.6 - Adobe Systems Incorporated)
Adobe Download Assistant (x32 Version: 1.2.6 - Adobe Systems Incorporated) Hidden
Adobe Dreamweaver CS5 (x32 Version: 11.0 - Adobe Systems Incorporated)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Media Player (x32 Version: 1.8 - Adobe Systems Incorporated)
Adobe Media Player (x32 Version: 1.8 - Adobe Systems Incorporated) Hidden
Adobe Photoshop Elements 11 (x32 Version: 11.0 - Adobe Systems Incorporated)
Adobe Photoshop Elements 11 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Adobe Premiere Elements 10 (Version: 10.0 - Adobe Systems Incorporated)
Adobe Premiere Elements 10 (Version: 10.0 - Adobe Systems Incorporated) Hidden
Adobe Premiere Elements 10 Content (x32 Version: 10.0 - Adobe Systems Incorporated)
Adobe Premiere Elements 10 Content (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
Adobe Premiere Elements 10 Content 1 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
Adobe Premiere Elements 10 Content 2 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
Adobe Premiere Elements 10 Content 3 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
Adobe Premiere Elements 10 HD Content 1 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
Adobe Premiere Elements 10 HD Content 2 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
Adobe Premiere Elements 10 HD Content 3 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 2.00.0002 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.873.1 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (Version: 8.0.881.0 - Advanced Micro Devices, Inc.)
AMD Fuel (Version: 2012.0504.1554.26509 - Ihr Firmenname) Hidden
AMD Media Foundation Decoders (Version: 1.0.70504.1544 - Advanced Micro Devices, Inc.) Hidden
AMD USB 3.0 Device Detector (Version: 2.1.27.0 - Advanced Micro Devices, Inc.) Hidden
AMD VISION Engine Control Center (x32 Version: 2012.0504.1554.26509 - Ihr Firmenname) Hidden
Any Video Converter Ultimate 4.5.8 (x32 Version:  - Any-Video-Converter.com)
Apple Application Support (x32 Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
Artisteer 4 (x32 Version: 4.1 - Extensoft)
Ashampoo Burning Studio 12 v.12.0.5 (x32 Version: 12.0.5 - Ashampoo GmbH & Co. KG)
ASRock App Charger v1.0.5 (Version:  - ASRock Inc.)
ASRock eXtreme Tuner v0.1.281 (x32 Version:  - )
ASRock InstantBoot v1.29 (x32 Version:  - )
Audacity 2.0 (x32 Version:  - Audacity Team)
Avidemux 2.5 (x32 Version: 2.5.6.7716 - )
AVM FRITZ!fax für FRITZ!Box (x32 Version:  - AVM Berlin)
BenVista PhotoZoom Pro 4.1.2 (x32 Version: 4.1.2 - BenVista Ltd.)
Bing-Desktop (x32 Version: 1.3.171.0 - Microsoft Corporation)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
Canon Easy-WebPrint EX (x32 Version: 1.3.5.0 - Canon Inc.)
Canon iP4700 series Benutzerregistrierung (x32 Version:  - )
Canon iP4700 series Printer Driver (Version:  - )
Canon Utilities Easy-PhotoPrint EX (x32 Version:  - )
Canon Utilities My Printer (x32 Version:  - )
Canon Utilities Solution Menu (x32 Version:  - )
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2012.0504.1554.26509 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Profiles Mobile (x32 Version: 2012.0504.1554.26509 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2012.0504.1553.26509 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2012.0504.1553.26509 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2012.0504.1553.26509 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2012.0504.1553.26509 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2012.0504.1553.26509 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2012.0504.1553.26509 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2012.0504.1553.26509 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2012.0504.1553.26509 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2012.0504.1553.26509 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2012.0504.1553.26509 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2012.0504.1553.26509 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2012.0504.1553.26509 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2012.0504.1553.26509 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2012.0504.1553.26509 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2012.0504.1553.26509 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2012.0504.1553.26509 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2012.0504.1553.26509 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2012.0504.1553.26509 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2012.0504.1553.26509 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2012.0504.1553.26509 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2012.0504.1553.26509 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2012.0504.1553.26509 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2012.0504.1554.26509 - Advanced Micro Devices, Inc.) Hidden
CCleaner (Version: 4.09 - Piriform)
CD-LabelPrint (x32 Version:  - )
Compatibility Pack für 2007 Office System (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
ContentHD (x32 Version: 1.00.0002 - Corel Corporation) Hidden
Contents (x32 Version: 1.6.2.36 - Corel Corporation) Hidden
Corel Graphics Suite 11 (x32 Version: 11 - Corel Corporation) Hidden
Corel VideoStudio Pro X3 (x32 Version: 1.6.2.36 - Corel Corporation)
CorelDRAW Graphics Suite 11 (x32 Version: 11 - Corel Corporation)
CrystalDiskInfo 5.6.2 (x32 Version: 5.6.2 - Crystal Dew World)
Cut Out 3.0 (x32 Version:  - Franzis.de)
CyberLink BD_3D Advisor 2.0 (x32 Version: 2.0.5425 - CyberLink Corp.)
CyberLink LabelPrint 2.5 (x32 Version: 2.5.5311 - CyberLink Corp.) Hidden
CyberLink Media Suite 10 (x32 Version: 10.0 - CyberLink Corp.)
CyberLink Media Suite 10 (x32 Version: 10.2021 - CyberLink Corp.) Hidden
CyberLink MediaEspresso 6.5 (x32 Version: 6.5.3019_44673 - CyberLink Corp.) Hidden
CyberLink MediaShow 6 (x32 Version: 6.0.4312 - CyberLink Corp.) Hidden
CyberLink Power2Go 7 (x32 Version: 7.0.0.3328 - CyberLink Corp.) Hidden
CyberLink PowerBackup (x32 Version: 2.5.9729 - CyberLink Corp.)
CyberLink PowerDVD 10 (x32 Version: 10.0.5509.52 - CyberLink Corp.) Hidden
CyberLink PowerProducer 5.5 (x32 Version: 5.5.3.4118 - CyberLink Corp.)
CyberLink PowerProducer 5.5 (x32 Version: 5.5.3.4118 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32 Version:  - Microsoft)
DeviceIO (x32 Version: 1.6.2.36 - Corel Corporation) Hidden
Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.)
DVBViewer Pro (x32 Version: 4.9.6.20 - CM&V)
Elements 10 Organizer (x32 Version: 10.0 - Ihr Firmenname) Hidden
Elements 11 Organizer (x32 Version: 11.0 - Ihr Firmenname) Hidden
EVEREST Home Edition v2.20 (x32 Version: 2.20 - Lavalys Inc)
File Uploader (x32 Version: 1.2.5 - Nikon)
FileZilla Client 3.7.3 (x32 Version: 3.7.3 - Tim Kosse)
Firebird SQL Server - MAGIX Edition (x32 Version: 2.1.32.0 - MAGIX AG)
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
FotoPrinter 4.5 (x32 Version:  - )
Free Download Manager 3.9.2 (x32 Version:  - FreeDownloadManager.ORG)
Free Video to DVD Converter version 5.0.32.1230 (x32 Version: 5.0.32.1230 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.16.1028 (x32 Version: 3.12.16.1028 - DVDVideoSoft Ltd.)
Freemake Video Converter Version 4.1.1 (x32 Version: 4.1.1 - Ellora Assets Corporation)
GIMP 2.8.6 (Version: 2.8.6 - The GIMP Team)
G'MIC for GIMP Version 1.5.6.1 (x32 Version: 1.5.6.1 - )
Google Chrome (x32 Version: 32.0.1700.76 - Google Inc.)
Google Earth (x32 Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
Google+ Auto Backup (x32 Version: 1.0.21.81 - Google)
High-Definition Video Playback (x32 Version: 11.1.10400.2.65 - Nero AG) Hidden
ICA (x32 Version: 1.6.2.36 - Corel Corporation) Hidden
Inkscape 0.48.3.1 (x32 Version: 0.48.3.1 - )
IPM_VS_Pro (x32 Version: 13.0 - Corel Corporation) Hidden
iTunes (Version: 11.1.3.8 - Apple Inc.)
Java 7 Update 25 (64-bit) (Version: 7.0.250 - Oracle)
Java 7 Update 51 (x32 Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
KompoZer 0.8b3 (x32 Version:  - KompoZer)
LAV Filters 0.56.1 (x32 Version: 0.56.1 - Hendrik Leppkes)
LG ODD Auto Firmware Update (x32 Version: 10.01.0712.01 - )
Logitech Vid (x32 Version: 1.10.1009 - Logitech Inc.)
Logitech Webcam Software (Version: 12.10.1113 - Logitech Inc.)
Logitech Webcam Software-Treiberpaket (Version: 12.10.1110 - Logitech Inc.)
Luminance HDR 2.2.1 (x32 Version:  - Luminance HDR Dev Team)
MAGIX Screenshare (x32 Version: 4.3.6.1987 - MAGIX AG)
MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX AG) Hidden
MAGIX Speed burnR (MSI) (x32 Version: 7.0.2.6 - MAGIX AG)
MAGIX Video deluxe 2014 Plus (Version: 13.0.0.28 - MAGIX AG) Hidden
MAGIX Video deluxe 2014 Plus (x32 Version: 13.0.0.28 - MAGIX AG)
MainConcept DTV Decoder Pro (x32 Version: 1.5.0.2 - MainConcept GmbH)
MediaInfo 0.7.64 (Version: 0.7.64 - MediaArea.net)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Access 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Camera Codec Pack (Version: 16.4.1970.0624 - Microsoft Corporation)
Microsoft Office Access 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Access Setup Metadata MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook Connector (x32 Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Spanish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit (x32 Version: 14.0.5120.5000 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SkyDrive (HKCU Version: 16.4.6013.0910 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft VC9 runtime libraries (x32 Version: 2.0.0 - AOL Inc.) Hidden
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_ATL_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053 - Adobe) Hidden
Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000 - Adobe) Hidden
MLE (x32 Version: 1.0.0.23 - Corel Corporation) Hidden
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
MozBackup 1.5.1 (x32 Version:  - Pavel Cvrcek)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
Mozilla Thunderbird 17.0.8 (x86 de) (x32 Version: 17.0.8 - Mozilla)
Mozilla Thunderbird 24.2.0 (x86 de) (HKCU Version: 24.2.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0 - Microsoft Corporation)
Musik & Audio Restaurator Pro 5.0 (x32 Version: 5.0 - Softfeld)
Namo WebEditor 8 (x32 Version: 8.00.000 - Namo Interactive, Inc.)
Nero 11 Cliparts (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden
Nero 11 Disc Menus 1 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden
Nero 11 Disc Menus 2 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden
Nero 11 Disc Menus 3 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden
Nero 11 Disc Menus Basic (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden
Nero 11 Effects Basic (x32 Version: 11.0.11400.14.0 - Nero AG) Hidden
Nero 11 Image Samples (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden
Nero 11 Kwik Themes 1 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden
Nero 11 Kwik Themes 2 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden
Nero 11 Kwik Themes 3 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden
Nero 11 Kwik Themes 4 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden
Nero 11 Kwik Themes Basic (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden
Nero 11 PiP Effects 1 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden
Nero 11 PiP Effects Basic (x32 Version: 11.0.11400.14.0 - Nero AG) Hidden
Nero 11 Video Samples (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden
Nero 11 Video Transitions 1 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden
Nero 12 (x32 Version: 12.5.02100 - Nero AG)
Nero Abstract Themes (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero Audio Pack 1 (x32 Version: 11.0.11500.110.0 - Nero AG) Hidden
Nero BackItUp (x32 Version: 12.5.7000 - Nero AG) Hidden
Nero BackItUp 11 (x32 Version: 6.0.16000.13.100 - Nero AG) Hidden
Nero BackItUp 11 Help (CHM) (x32 Version: 11.0.10200 - Nero AG) Hidden
Nero BackItUp Help (CHM) (x32 Version: 12.0.13000 - Nero AG) Hidden
Nero Blu-ray Player (x32 Version: 12.0.20030 - Nero AG) Hidden
Nero Blu-ray Player (x32 Version: 12.0.20064 - Nero AG) Hidden
Nero Blu-ray Player Help (CHM) (x32 Version: 12.0.9000 - Nero AG) Hidden
Nero Blu-ray Player Help (CHM) (x32 Version: 15.0.00015 - Nero AG) Hidden
Nero Burning ROM (x32 Version: 12.5.6000 - Nero AG) Hidden
Nero Burning ROM 11 (x32 Version: 11.0.12200.23.100 - Nero AG) Hidden
Nero Burning ROM 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden
Nero Burning ROM Help (CHM) (x32 Version: 12.0.3000 - Nero AG) Hidden
Nero Cliparts (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero ControlCenter (x32 Version: 11.0.16700 - Nero AG) Hidden
Nero ControlCenter 11 (x32 Version: 11.0.12300.0.23 - Nero AG) Hidden
Nero ControlCenter 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (x32 Version: 12.0.12000 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (x32 Version: 15.0.00015 - Nero AG) Hidden
Nero Core Components (x32 Version: 11.0.23400 - Nero AG) Hidden
Nero CoverDesigner 11 (x32 Version: 6.0.10800.11.100 - Nero AG) Hidden
Nero CoverDesigner 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden
Nero Disc Menus 1 (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero Disc Menus 2 (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero Disc Menus 3 (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero Disc Menus Basic (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero Effects Basic (x32 Version: 15.0.10011 - Nero AG) Hidden
Nero Express (x32 Version: 12.5.7000 - Nero AG) Hidden
Nero Express 11 (x32 Version: 11.0.11700.23.100 - Nero AG) Hidden
Nero Express 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden
Nero Express Help (CHM) (x32 Version: 12.0.13000 - Nero AG) Hidden
Nero Family and Events Themes (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero Football (Soccer) Themes (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero Holiday and Sports Themes (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero Image Samples (x32 Version: 15.0.10008 - Nero AG) Hidden
Nero Kwik Media (x32 Version: 1.10.19300.93.100 - Nero AG) Hidden
Nero Kwik Media (x32 Version: 1.18.20100 - Nero AG) Hidden
Nero Kwik Media Help (CHM) (x32 Version: 11.0.10200 - Nero AG) Hidden
Nero Kwik Media Help (CHM) (x32 Version: 12.0.12000 - Nero AG) Hidden
Nero Kwik Themes Basic (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero MediaHome (x32 Version: 1.22.3600 - Nero AG) Hidden
Nero MediaHome Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden
Nero PiP Effects 1 (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero PiP Effects Basic (x32 Version: 15.0.10008 - Nero AG) Hidden
Nero Platinum Effects 12 (x32 Version: 15.0.10011 - Nero AG) Hidden
Nero Recode (x32 Version: 12.5.6000 - Nero AG) Hidden
Nero Recode 11 (x32 Version: 5.2.10900.0.0 - Nero AG) Hidden
Nero Recode 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden
Nero Recode Help (CHM) (x32 Version: 12.0.12000 - Nero AG) Hidden
Nero RescueAgent (x32 Version: 12.0.10002 - Nero AG) Hidden
Nero RescueAgent 11 (x32 Version: 4.0.10600.10.100 - Nero AG) Hidden
Nero RescueAgent 11 Help (CHM) (x32 Version: 11.0.10400 - Nero AG) Hidden
Nero RescueAgent Help (CHM) (x32 Version: 12.0.7000 - Nero AG) Hidden
Nero Retro Film Themes (x32 Version: 12.0.11700 - Nero AG) Hidden
Nero SharedVideoCodecs (x32 Version: 1.0.15005 - Nero AG) Hidden
Nero SoundTrax 11 (x32 Version: 5.0.10400.4.100 - Nero AG) Hidden
Nero SoundTrax 11 Help (CHM) (x32 Version: 11.0.10400 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.13300.42.0 - Nero AG) Hidden
Nero Video (x32 Version: 12.5.4000 - Nero AG) Hidden
Nero Video 11 (x32 Version: 8.0.14000.21.100 - Nero AG) Hidden
Nero Video 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden
Nero Video Help (CHM) (x32 Version: 12.0.12000 - Nero AG) Hidden
Nero Video Samples (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero Video Transitions 1 (x32 Version: 12.0.11500 - Nero AG) Hidden
Nero WaveEditor 11 (x32 Version: 6.0.10800.5.100 - Nero AG) Hidden
Nero WaveEditor 11 Help (CHM) (x32 Version: 11.0.10400 - Nero AG) Hidden
nero.prerequisites.msi (x32 Version: 11.0.20010 - Nero AG) Hidden
neroxml (x32 Version: 1.0.0 - Nero AG) Hidden
NewBlue Light Rays for Magix (x32 Version: 1.4 - NewBlue)
NewBlue Lightning for Magix (x32 Version: 1.4 - NewBlue)
Nikon Message Center (x32 Version: 0.92.000 - Nikon)
Nikon Transfer (x32 Version: 1.5.3 - Nikon)
Notepad++ (x32 Version: 6.0 - )
OpenOffice 4.0.0 (x32 Version: 4.00.9702 - Apache Software Foundation)
Opera 12.15 (x32 Version: 12.15.1748 - Opera Software ASA)
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Picasa 3 (x32 Version: 3.9 - Google, Inc.)
PRE10STI64Installer (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
PSE11 STI Installer (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
PureHD (x32 Version: 1.6.2.36 - Corel Corporation) Hidden
QuarkXPress Passport 5.0 (x32 Version: 5.00.0000 - Quark Inc.)
QuickEngine (x32 Version: 1.0.1 - Tlapia)
QuickEngine (x32 Version: 1.0.1 - Tlapia) Hidden
QuickTime (x32 Version: 7.74.80.86 - Apple Inc.)
Realtek Ethernet Controller Driver (x32 Version: 7.48.823.2011 - Realtek)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6662 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (x32 Version: 1.95 - VS Revo Group)
Safari (x32 Version: 5.34.57.2 - Apple Inc.)
ScanSoft OmniPage 16 (x32 Version: 16.1.0000 - Nuance Communications, Inc.)
ScanSoft PDF Create! 4 (Version: 4.01.0069 - Nuance, Inc.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Setup (x32 Version: 1.6.2.36 - Corel Corporation) Hidden
Share (x32 Version: 1.6.2.36 - Corel Corporation) Hidden
Share64 (Version: 1.6.2.36 - Corel Corporation) Hidden
Shark007 Advanced Codecs (x32 Version: 4.2.0 - Shark007)
Sketch Drawer (x32 Version: 1.3 - SoftOrbits)
Skype™ 6.6 (x32 Version: 6.6.106 - Skype Technologies S.A.)
SmartSound Common Data (x32 Version: 1.1.0 - SmartSound Software Inc.)
SmartSound Common Data (x32 Version: 1.1.0 - SmartSound Software Inc.) Hidden
SmartSound Premiere Elements 10 x64 Plugin (Version: 5.70.0001 - SmartSound Software Inc.)
SmartSound Quicktracks 5 (x32 Version: 5.1.6 - SmartSound Software Inc.)
SmartSound Quicktracks 5 (x32 Version: 5.1.6 - SmartSound Software Inc.) Hidden
SmartSound Sonicfire Pro 5 (x32 Version: 5.7.1 - SmartSound Software Inc.)
SmartSound Sonicfire Pro 5 (x32 Version: 5.7.1 - SmartSound Software Inc.) Hidden
Software Informer 1.2 (Version:  - Informer Technologies, Inc.)
Software Version Updater (x32 Version: 1.1.3.8 - ) <==== ATTENTION
Streamripper (Remove only) (x32 Version:  - )
SUPER © v2013.build.59+Recorder (2013/12/18) Version v2013.buil (x32 Version: v2013.build.59+Recorder - eRightSoft)
sysTPL (x32 Version: 1.0.0 - Tlapia)
Tablet Driver V5.02 (x32 Version:  - )
TeamViewer 9 (x32 Version: 9.0.24951 - TeamViewer)
THX TruStudio (x32 Version: 1.00.01 - Creative Technology Limited)
Ultra Defragmenter (x32 Version: 6.0.2 - UltraDefrag Development Team)
update (x32 Version: 2.00.0000 - Your Company Name) Hidden
update (x32 Version: 3.00.0000 - Your Company Name) Hidden
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2494150) (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (x32 Version:  - Microsoft)
VidCoder 1.4.24 (x86) (x32 Version: 1.4.24 - RandomEngy)
VIO (x32 Version: 1.6.2.36 - Corel Corporation) Hidden
VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN)
VSClassic (x32 Version: 1.6.2.36 - Corel Corporation) Hidden
VSPro (x32 Version: 1.6.2.36 - Corel Corporation) Hidden
VueScan (x32 Version:  - )
Wartung Samsung ML-191x 252x Series (x32 Version:  - Samsung Electronics CO.,LTD)
Welcome App (Start-up experience) (x32 Version: 11.0.23500.0.0 - Nero AG) Hidden
Welcome App (Start-up experience) (x32 Version: 12.0.15000 - Nero AG) Hidden
Winamp (x32 Version: 5.63  - Nullsoft, Inc)
Windows Live Communications Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Family Safety (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Media Encoder 9 Series (x32 Version:  - )
Windows Media Encoder 9 Series (x32 Version: 9.00.2980 - Microsoft Corporation) Hidden
Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8 - Microsoft Corp)
Windows Mobile-Gerätecenter (Version: 6.1.6965.0 - Microsoft Corporation)
WordPerfect IFilter 64 bit (Version: 1.2 - Corel Corporation)
WordPerfect Lightning - IPM (x32 Version: 1.0 - Corel Corporation) Hidden
WordPerfect Lightning - Messages (x32 Version: 1.0 - Corel Corporation) Hidden
WordPerfect Lightning - MSOM (x32 Version: 1.1 - Corel Corporation) Hidden
WordPerfect Lightning (x32 Version: 2.0 - Corel Corporation) Hidden
WordPerfect Office X5 - Common (x32 Version: 15.7 - Corel Corporation) Hidden
Wordperfect Office X5 - EN (x32 Version: 15.7 - Corel Corporation) Hidden
WordPerfect Office X5 - Filters (x32 Version: 15.7 - Corel Corporation) Hidden
WordPerfect Office X5 - Graphics (x32 Version: 15.3 - Corel Corporation) Hidden
WordPerfect Office X5 - IPM (x32 Version: 15.7 - Corel Corporation) Hidden
WordPerfect Office X5 - LegalTools (x32 Version: 15.7 - Corel Corporation) Hidden
WordPerfect Office X5 - Migration Manager (x32 Version: 15.7 - Corel Corporation) Hidden
WordPerfect Office X5 - Oxford (x32 Version: 15.7 - Corel Corporation) Hidden
WordPerfect Office X5 - PerfectExperts EN (x32 Version: 15.3 - Corel Corporation) Hidden
WordPerfect Office X5 - PR (x32 Version: 15.3 - Corel Corporation) Hidden
WordPerfect Office X5 - QP (x32 Version: 15.7 - Corel Corporation) Hidden
WordPerfect Office X5 - Setup Files (x32 Version: 15.7 - Corel Corporation) Hidden
WordPerfect Office X5 - Sharepoint (x32 Version: 15.7 - Corel Corporation) Hidden
WordPerfect Office X5 - Skins (x32 Version: 15.3 - Corel Corporation) Hidden
WordPerfect Office X5 - System EN (x32 Version: 15.0 - Corel Corporation) Hidden
WordPerfect Office X5 - Templates (x32 Version: 15.3 - Corel Corporation) Hidden
WordPerfect Office X5 - WP (x32 Version: 15.7 - Corel Corporation) Hidden
WordPerfect Office X5 - WT (x32 Version: 15.7 -  Corel Corporation) Hidden
WordPerfect Office X5 (x32 Version: 15.0.0.528 - Corel Corporation)
WordPerfect Office X5 (x32 Version: 15.7 - Corel Corporation) Hidden
XFast LAN v6.61 (Version: 6.61 - cFos Software GmbH, Bonn)
XMedia Recode Version 3.1.6.4 (x32 Version: 3.1.6.4 - XMedia Recode)

==================== Restore Points  =========================

07-01-2014 18:48:48 Installed Nero 2014 Content Pack.
07-01-2014 19:24:53 Installed Nero 2014 Content Pack.
08-01-2014 16:30:38 Microsoft Camera Codec Pack wurde installiert
15-01-2014 18:32:25 Geplanter Prüfpunkt
16-01-2014 02:00:14 Windows Update
22-01-2014 17:43:31 Revo Uninstaller's restore point - Nero 12
22-01-2014 17:50:20 Revo Uninstaller's restore point - Nero 2014
22-01-2014 18:02:38 Installed Nero 2014.
22-01-2014 18:14:55 Installed Java 7 Update 51
22-01-2014 18:25:10 Installed Nero 2014 Content Pack.
22-01-2014 18:43:12 Revo Uninstaller's restore point - Nero 2014
22-01-2014 19:07:27 Installed Nero 12.

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {00A85DFA-1904-4C45-BB11-68CDD39D3323} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: {1A8443AF-8844-447F-A458-84EC1BF284B1} - System32\Tasks\InstallShield Software-Aktualisierungsdienst => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [2005-02-16] (InstallShield Software Corporation)
Task: {307F0988-F2C3-4FF8-8F51-3128FE6D0E25} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {5D6176EE-28E2-4992-AB00-172B5D1F1760} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {61729F62-601F-4E85-B709-A1640FC7C7D8} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {68EF282F-68EF-46C3-B6AB-E3B5AC7DAFCD} - System32\Tasks\{57C77210-3668-4EAD-BD87-858B2A806001} => Firefox.exe hxxp://ui.skype.com/ui/0/5.3.0.111/de/abandoninstall?source=lightinstaller&amp;page=tsMain&amp;installinfo=google-toolbar:notoffered;ienotdefaultbrowser2,google-chrome:notoffered;systemlevelpresent
Task: {7B7CE1A5-2A34-412B-928A-5FDECA2D4558} - System32\Tasks\{F905F8BE-5475-466F-B807-F7FDDACFD311} => Firefox.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&amp;ver=5.3.0.111&amp;LastError=404
Task: {AA0E411F-DDBD-48CA-BA69-1BA87708E6EC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-01] (Google Inc.)
Task: {AB424CFD-FCAB-47F4-AF79-AEAB2EA87B56} - System32\Tasks\InstallShield Software-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [2005-02-16] (InstallShield Software Corporation)
Task: {AE764483-79D9-4077-8C44-D05FBCD54AB1} - System32\Tasks\AmiUpdXp => C:\Users\win-boy\AppData\Local\SwvUpdater\Updater.exe [2013-12-25] (Amonetizé Ltd) <==== ATTENTION
Task: {B5DBA6BB-82F6-45BA-B326-8BF3C221A003} - System32\Tasks\Lyrics-Pal Update => C:\Program Files (x86)\LyricsPal\Lyrics.exe <==== ATTENTION
Task: {DB16E791-BAB5-4842-9154-D851AB02F16D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-01] (Google Inc.)
Task: {DC8E29CF-0439-4CBB-A75A-9EC007675F80} - System32\Tasks\AdobeAAMUpdater-1.0-win-boy-PC-win-boy => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-20] (Adobe Systems Incorporated)
Task: {E3B5133A-6036-4B21-9466-85C94EE4E8BA} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)
Task: {F06E5F91-ADEA-404D-8144-9474500F191D} - System32\Tasks\ScanSoft Background Update => C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2006-10-25] (Nuance Communications, Inc.)
Task: {FBFA014E-EDE9-46C7-83C9-BC5CD7BE99E6} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AmiUpdXp.job => C:\Users\win-boy\AppData\Local\SwvUpdater\Updater.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Lyrics-Pal Update.job => C:\Program Files (x86)\LyricsPal\Lyrics.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2010-01-02 15:42 - 2010-01-02 15:42 - 00098304 _____ () H:\Programme\FileZilla FTP Client\fzshellext_64.dll
2013-06-01 04:05 - 2011-05-19 08:58 - 00246784 _____ () C:\Windows\SYSTEM32\APOMgr64.DLL
2012-05-04 14:40 - 2012-05-04 14:40 - 00103424 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2011-11-09 09:55 - 2011-11-09 09:55 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2012-05-04 14:47 - 2012-05-04 14:47 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2009-07-16 14:34 - 2009-07-16 14:34 - 02140944 _____ () C:\Program Files (x86)\Logitech\Logitech Vid\QtCore4.dll
2009-07-16 14:34 - 2009-07-16 14:34 - 07704336 _____ () C:\Program Files (x86)\Logitech\Logitech Vid\QtGui4.dll
2009-07-16 14:34 - 2009-07-16 14:34 - 00968976 _____ () C:\Program Files (x86)\Logitech\Logitech Vid\QtNetwork4.dll
2009-07-16 14:34 - 2009-07-16 14:34 - 00475408 _____ () C:\Program Files (x86)\Logitech\Logitech Vid\QtOpenGL4.dll
2009-07-16 14:35 - 2009-07-16 14:35 - 00363792 _____ () C:\Program Files (x86)\Logitech\Logitech Vid\QtXml4.dll
2009-07-16 14:34 - 2009-07-16 14:34 - 00199952 _____ () C:\Program Files (x86)\Logitech\Logitech Vid\QtSql4.dll
2009-07-16 14:35 - 2009-07-16 14:35 - 00027408 _____ () C:\Program Files (x86)\Logitech\Logitech Vid\SDL.dll
2009-07-16 14:35 - 2009-07-16 14:35 - 11311888 _____ () C:\Program Files (x86)\Logitech\Logitech Vid\QtWebKit4.dll
2009-07-16 14:34 - 2009-07-16 14:34 - 00291600 _____ () C:\Program Files (x86)\Logitech\Logitech Vid\phonon4.dll
2010-09-28 12:00 - 2010-09-28 12:00 - 00285696 _____ () C:\Windows\system32\wintab32.DLL
2009-07-16 14:36 - 2009-07-16 14:36 - 00028944 _____ () C:\Program Files (x86)\Logitech\Logitech Vid\plugins\imageformats\qgif4.dll
2009-07-16 14:36 - 2009-07-16 14:36 - 00035088 _____ () C:\Program Files (x86)\Logitech\Logitech Vid\plugins\imageformats\qico4.dll
2009-07-16 14:36 - 2009-07-16 14:36 - 00138000 _____ () C:\Program Files (x86)\Logitech\Logitech Vid\plugins\imageformats\qjpeg4.dll
2009-10-14 12:36 - 2009-10-14 12:36 - 00181592 _____ () C:\Program Files (x86)\Common Files\LogiShrd\LvApi11\LvApi11.dll
2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\win-boy\AppData\Roaming\Dropbox\bin\libcef.dll
2010-09-28 12:00 - 2010-09-28 12:00 - 00285696 _____ () C:\Windows\system32\WinTab32.DLL
2013-04-21 20:44 - 2013-04-21 20:44 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2013-04-21 20:44 - 2013-04-21 20:44 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2011-03-09 13:21 - 2011-03-09 13:21 - 00619816 _____ () H:\Programme\CyberLink\Power2Go\CLMediaLibrary.dll
2011-03-09 13:21 - 2011-03-09 13:21 - 00013096 _____ () H:\Programme\CyberLink\Power2Go\CLMLSvcPS.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:BF3D62E7

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/24/2014 04:55:18 PM) (Source: WcesComm) (User: )
Description: IPv4-Fehler beim Starten des Diensts für Windows Mobile 2003-Geräteverbindungen. (Die Daten enthalten den Fehlercode.)

Error: (01/24/2014 04:54:54 PM) (Source: sysTPLService) (User: )
Description: Der Dienst kann nicht gestartet werden. System.Net.Sockets.SocketException: Der angeforderte Dienstanbieter konnte nicht geladen oder initialisiert werden
   bei System.Net.SafeCloseSocketAndEvent.CreateWSASocketWithEvent(AddressFamily addressFamily, SocketType socketType, ProtocolType protocolType, Boolean autoReset, Boolean signaled)
   bei System.Net.NetworkInformation.NetworkChange.AddressChangeListener.StartHelper(NetworkAddressChangedEventHandler caller, Boolean captureContext, StartIPOptions startIPOptions)
   bei System.Net.NetworkInformation.NetworkChange.AvailabilityChangeListener.Start(NetworkAvailabilityChangedEventHandler caller)
   bei System.Net.NetworkInformation.NetworkChange.add_NetworkAvailabilityChanged(NetworkAvailabilityChangedEventHandler value)
   bei HPService.HPService.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (01/24/2014 04:53:11 PM) (Source: Schedule) (User: )
Description: Schedule error: 10106Initialize call failed, bailing out

Error: (01/24/2014 04:27:34 AM) (Source: MsiInstaller) (User: win-boy-PC)
Description: Produkt: Safari -- Fehler 1706. Für das Produkt Safari wurde kein Installationspaket gefunden. Wiederholen Sie die Installation und verwenden Sie dabei eine gültige Kopie des Installationspakets "Safari.msi".

Error: (01/24/2014 04:21:20 AM) (Source: WcesComm) (User: )
Description: IPv4-Fehler beim Starten des Diensts für Windows Mobile 2003-Geräteverbindungen. (Die Daten enthalten den Fehlercode.)

Error: (01/24/2014 04:20:56 AM) (Source: sysTPLService) (User: )
Description: Der Dienst kann nicht gestartet werden. System.Net.Sockets.SocketException: Der angeforderte Dienstanbieter konnte nicht geladen oder initialisiert werden
   bei System.Net.SafeCloseSocketAndEvent.CreateWSASocketWithEvent(AddressFamily addressFamily, SocketType socketType, ProtocolType protocolType, Boolean autoReset, Boolean signaled)
   bei System.Net.NetworkInformation.NetworkChange.AddressChangeListener.StartHelper(NetworkAddressChangedEventHandler caller, Boolean captureContext, StartIPOptions startIPOptions)
   bei System.Net.NetworkInformation.NetworkChange.AvailabilityChangeListener.Start(NetworkAvailabilityChangedEventHandler caller)
   bei System.Net.NetworkInformation.NetworkChange.add_NetworkAvailabilityChanged(NetworkAvailabilityChangedEventHandler value)
   bei HPService.HPService.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (01/24/2014 04:19:12 AM) (Source: Schedule) (User: )
Description: Schedule error: 10106Initialize call failed, bailing out

Error: (01/24/2014 03:55:32 AM) (Source: WcesComm) (User: )
Description: IPv4-Fehler beim Starten des Diensts für Windows Mobile 2003-Geräteverbindungen. (Die Daten enthalten den Fehlercode.)

Error: (01/24/2014 03:55:19 AM) (Source: sysTPLService) (User: )
Description: Der Dienst kann nicht gestartet werden. System.Net.Sockets.SocketException: Der angeforderte Dienstanbieter konnte nicht geladen oder initialisiert werden
   bei System.Net.SafeCloseSocketAndEvent.CreateWSASocketWithEvent(AddressFamily addressFamily, SocketType socketType, ProtocolType protocolType, Boolean autoReset, Boolean signaled)
   bei System.Net.NetworkInformation.NetworkChange.AddressChangeListener.StartHelper(NetworkAddressChangedEventHandler caller, Boolean captureContext, StartIPOptions startIPOptions)
   bei System.Net.NetworkInformation.NetworkChange.AvailabilityChangeListener.Start(NetworkAvailabilityChangedEventHandler caller)
   bei System.Net.NetworkInformation.NetworkChange.add_NetworkAvailabilityChanged(NetworkAvailabilityChangedEventHandler value)
   bei HPService.HPService.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (01/24/2014 03:52:59 AM) (Source: Schedule) (User: )
Description: Schedule error: 10106Initialize call failed, bailing out


System errors:
=============
Error: (01/24/2014 05:38:25 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "IPsec-Richtlinien-Agent" wurde mit folgendem Fehler beendet: 
%%10106

Error: (01/24/2014 05:38:13 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "IPsec-Richtlinien-Agent" wurde mit folgendem Fehler beendet: 
%%10106

Error: (01/24/2014 05:37:59 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "IPsec-Richtlinien-Agent" wurde mit folgendem Fehler beendet: 
%%10106

Error: (01/24/2014 05:36:27 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "IPsec-Richtlinien-Agent" wurde mit folgendem Fehler beendet: 
%%10106

Error: (01/24/2014 05:36:15 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "IPsec-Richtlinien-Agent" wurde mit folgendem Fehler beendet: 
%%10106

Error: (01/24/2014 05:35:53 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "IPsec-Richtlinien-Agent" wurde mit folgendem Fehler beendet: 
%%10106

Error: (01/24/2014 05:32:29 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "IPsec-Richtlinien-Agent" wurde mit folgendem Fehler beendet: 
%%10106

Error: (01/24/2014 05:32:15 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "IPsec-Richtlinien-Agent" wurde mit folgendem Fehler beendet: 
%%10106

Error: (01/24/2014 05:30:53 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "IPsec-Richtlinien-Agent" wurde mit folgendem Fehler beendet: 
%%10106

Error: (01/24/2014 05:30:29 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "IPsec-Richtlinien-Agent" wurde mit folgendem Fehler beendet: 
%%10106


Microsoft Office Sessions:
=========================
Error: (01/24/2014 04:55:18 PM) (Source: WcesComm)(User: )
Description: IPv4

Error: (01/24/2014 04:54:54 PM) (Source: sysTPLService)(User: )
Description: Der Dienst kann nicht gestartet werden. System.Net.Sockets.SocketException: Der angeforderte Dienstanbieter konnte nicht geladen oder initialisiert werden
   bei System.Net.SafeCloseSocketAndEvent.CreateWSASocketWithEvent(AddressFamily addressFamily, SocketType socketType, ProtocolType protocolType, Boolean autoReset, Boolean signaled)
   bei System.Net.NetworkInformation.NetworkChange.AddressChangeListener.StartHelper(NetworkAddressChangedEventHandler caller, Boolean captureContext, StartIPOptions startIPOptions)
   bei System.Net.NetworkInformation.NetworkChange.AvailabilityChangeListener.Start(NetworkAvailabilityChangedEventHandler caller)
   bei System.Net.NetworkInformation.NetworkChange.add_NetworkAvailabilityChanged(NetworkAvailabilityChangedEventHandler value)
   bei HPService.HPService.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (01/24/2014 04:53:11 PM) (Source: Schedule)(User: )
Description: Schedule error: 10106Initialize call failed, bailing out

Error: (01/24/2014 04:27:34 AM) (Source: MsiInstaller)(User: win-boy-PC)
Description: Produkt: Safari -- Fehler 1706. Für das Produkt Safari wurde kein Installationspaket gefunden. Wiederholen Sie die Installation und verwenden Sie dabei eine gültige Kopie des Installationspakets "Safari.msi".(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (01/24/2014 04:21:20 AM) (Source: WcesComm)(User: )
Description: IPv4

Error: (01/24/2014 04:20:56 AM) (Source: sysTPLService)(User: )
Description: Der Dienst kann nicht gestartet werden. System.Net.Sockets.SocketException: Der angeforderte Dienstanbieter konnte nicht geladen oder initialisiert werden
   bei System.Net.SafeCloseSocketAndEvent.CreateWSASocketWithEvent(AddressFamily addressFamily, SocketType socketType, ProtocolType protocolType, Boolean autoReset, Boolean signaled)
   bei System.Net.NetworkInformation.NetworkChange.AddressChangeListener.StartHelper(NetworkAddressChangedEventHandler caller, Boolean captureContext, StartIPOptions startIPOptions)
   bei System.Net.NetworkInformation.NetworkChange.AvailabilityChangeListener.Start(NetworkAvailabilityChangedEventHandler caller)
   bei System.Net.NetworkInformation.NetworkChange.add_NetworkAvailabilityChanged(NetworkAvailabilityChangedEventHandler value)
   bei HPService.HPService.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (01/24/2014 04:19:12 AM) (Source: Schedule)(User: )
Description: Schedule error: 10106Initialize call failed, bailing out

Error: (01/24/2014 03:55:32 AM) (Source: WcesComm)(User: )
Description: IPv4

Error: (01/24/2014 03:55:19 AM) (Source: sysTPLService)(User: )
Description: Der Dienst kann nicht gestartet werden. System.Net.Sockets.SocketException: Der angeforderte Dienstanbieter konnte nicht geladen oder initialisiert werden
   bei System.Net.SafeCloseSocketAndEvent.CreateWSASocketWithEvent(AddressFamily addressFamily, SocketType socketType, ProtocolType protocolType, Boolean autoReset, Boolean signaled)
   bei System.Net.NetworkInformation.NetworkChange.AddressChangeListener.StartHelper(NetworkAddressChangedEventHandler caller, Boolean captureContext, StartIPOptions startIPOptions)
   bei System.Net.NetworkInformation.NetworkChange.AvailabilityChangeListener.Start(NetworkAvailabilityChangedEventHandler caller)
   bei System.Net.NetworkInformation.NetworkChange.add_NetworkAvailabilityChanged(NetworkAvailabilityChangedEventHandler value)
   bei HPService.HPService.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (01/24/2014 03:52:59 AM) (Source: Schedule)(User: )
Description: Schedule error: 10106Initialize call failed, bailing out


CodeIntegrity Errors:
===================================
  Date: 2013-06-11 02:11:46.736
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Users\win-boy\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-11 02:11:46.689
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Users\win-boy\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-11 02:11:46.611
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume6\Programme\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-11 02:11:46.564
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume6\Programme\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 24%
Total physical RAM: 7635.82 MB
Available physical RAM: 5776.55 MB
Total Pagefile: 15269.82 MB
Available Pagefile: 13289.11 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: (WIN-C) (Fixed) (Total:97.65 GB) (Free:12.94 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive e: (WIN-E) (Fixed) (Total:136.71 GB) (Free:135.64 GB) NTFS
Drive f: (FAT32) (Fixed) (Total:2.92 GB) (Free:2.92 GB) FAT32
Drive g: (WIN-G) (Fixed) (Total:97.65 GB) (Free:61.44 GB) NTFS
Drive h: (WIN-H) (Fixed) (Total:312.5 GB) (Free:246.54 GB) NTFS
Drive i: (WIN-I) (Fixed) (Total:390.63 GB) (Free:246.9 GB) NTFS
Drive j: (WIN-J) (Fixed) (Total:322.26 GB) (Free:46.09 GB) NTFS
Drive k: (WIN-K) (Fixed) (Total:292.97 GB) (Free:136.8 GB) NTFS
Drive l: (WIN-L) (Fixed) (Total:175.14 GB) (Free:160.85 GB) NTFS
Drive m: (WIN-M) (Fixed) (Total:158.43 GB) (Free:142.86 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 298 GB) (Disk ID: 000AFAD1)
Partition 1: (Active) - (Size=298 GB) - (Type=05)

========================================================
Disk: 1 (Size: 1863 GB) (Disk ID: 00033F97)
Partition 1: (Active) - (Size=98 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=-491548777472) - (Type=05)
Partition 3: (Not Active) - (Size=175 GB) - (Type=07 NTFS)

==================== End Of Log ============================
__________________
Alt 25.01.2014, 13:09   #4
schrauber
/// the machine
/// TB-Ausbilder
 
Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen" - Standard

Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen"


Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!
Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1


WICHTIG - Speichere Combofix auf deinem Desktop
  • Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.
Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 25.01.2014, 17:21   #5
boyherre
 
Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen" - Cool

Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen"


Zitat:
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

starte den Rechner einfach neu. Dies sollte das Problem beheben.
Hallo schrauber,
danke für Deine Mühe!

Nach Anwendung von ComboFix scheint meine Windows7-Plattform wieder „normal“ zu funktionieren (!).
Ich werde das noch weiter verifizieren, aber jedenfalls klappt der Internetzugang von FF und TB störungsfrei.

Das macht mich sehr froh – und ich bedanke mich dafür sehr! Good job!

Konsequenz: Nie wieder werde ich voreilig auf Mail-Anhänge klicken!

Herzlichst, Boy

Anbei das Logfile von ComboFix als 7zip angehängt.


Alt 26.01.2014, 07:46   #6
schrauber
/// the machine
/// TB-Ausbilder
 
Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen" - Standard

Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen"


Wir sind noch nicht fertig



Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.


So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.




Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________
--> Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen"

Alt 27.01.2014, 02:49   #7
boyherre
 
Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen" - Standard

Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen"


Oha!

Das letzte Log-File war zu groß, drum musste ich es komprimieren.

Anbei das Logfile von MalwareBytes:

Code:
ATTFilter
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.01.26.04

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
win-boy :: WIN-BOY-PC [Administrator]

26.01.2014 18:00:22
mbam-log-2014-01-26 (18-00-22).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|E:\|F:\|G:\|H:\|I:\|J:\|K:\|L:\|M:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 965723
Laufzeit: 2 Stunde(n), 49 Minute(n), 31 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 8
HKCR\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9} (PUP.Optional.SoftwareUpdater) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476} (PUP.Optional.SoftwareUpdater) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67} (PUP.Optional.SoftwareUpdater) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96} (PUP.Optional.SoftwareUpdater) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\Updater.AmiUpd.1 (PUP.Optional.SoftwareUpdater) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\Updater.AmiUpd (PUP.Optional.SoftwareUpdater) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\Typelib\{F126C9FC-9299-40F2-BD42-C59023AD1E7F} (PUP.Optional.GetNow.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\Interface\{237FDFDB-3722-470E-8BA8-90196DABE967} (PUP.Optional.GetNow.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 16
C:\Users\win-boy\AppData\Local\SwvUpdater\Updater.exe (PUP.Optional.SoftwareUpdater) -> Erfolgreich gelöscht und in Quarantäne gestellt.
L:\DOWNLOAD\ROLLEI XS-10 user guide provided through handbucherfuralles.de.exe (PUP.Optional.GetNow.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\win-boy\AppData\Local\Temp\NeroInstallFiles\NERO20131212105334547\ISSetupPrerequisites\opencandy\OCSetupHlp.dll (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\win-boy\Downloads\ROLLEI XS-10 user guide provided through bedienungsanleitung-pdf.com.exe (PUP.Optional.LiveSoftAction.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\win-boy\Local Settings\Application Data\Bundled software uninstaller\bi_client.exe (PUP.Optional.Somoto.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
J:\Programme\Namo\WebEditor 2006\lib\AppLib\Clipart\Banner\blank\electric_banner_s.gif (Extension.Mismatch) -> Erfolgreich gelöscht und in Quarantäne gestellt.
J:\Programme\Namo\WebEditor 2006\lib\AppLib\Component\Email\114_thankyou.bmp (Extension.Mismatch) -> Erfolgreich gelöscht und in Quarantäne gestellt.
J:\Programme\Winamp\winamp5601_full_emusic-7plus_de-de.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
J:\Programme\Winamp\winamp561_full_emusic-7plus_de-de.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
L:\DOWNLOAD\Freemake12VideoConverterSetup.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
L:\DOWNLOAD\MediaInfo_GUI_0.7.64_Windows.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
L:\DOWNLOAD\SoftonicDownloader_fuer_super.exe.VIRUS (PUP.Optional.Softonic.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
L:\DOWNLOAD\winamp563_full_emusic-7plus_de-de(1).exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
L:\DOWNLOAD\winamp563_full_emusic-7plus_de-de.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
L:\DOWNLOAD\winzip155.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\Tasks\AmiUpdXp.job (PUP.Software.Updater) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
LG, Boy

ADWcleaner-Log:

Code:
ATTFilter
# AdwCleaner v3.017 - Bericht erstellt am 26/01/2014 um 21:24:24
# Aktualisiert 12/01/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : win-boy - WIN-BOY-PC
# Gestartet von : C:\Users\win-boy\Desktop\adwcleaner.exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Datei Gefunden : C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\toolbar@alexa.com.xpi
Ordner Gefunden C:\ProgramData\simplitec
Ordner Gefunden C:\Users\win-boy\AppData\Local\SwvUpdater
Ordner Gefunden C:\Users\win-boy\AppData\Roaming\simplitec
Ordner Gefunden C:\Users\win-boy\AppData\Roaming\Tlapia

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\lyricspal
Schlüssel Gefunden : HKCU\Software\Conduit
Schlüssel Gefunden : [x64] HKCU\Software\Conduit
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\mmiopbgcekanlhpjkonogoljpfmhpkhf
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Wert Gefunden : HKCU\Software\Mozilla\Firefox\Extensions [{9309FA47-1B48-4768-AFA4-9E0556F5DC81}]

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Mozilla Firefox v26.0 (de)

[ Datei : C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\prefs.js ]

Zeile gefunden : user_pref("extensions.alexa.toolbarXMLText", "<?xml version=\"1.0\" encoding=\"utf-8\"?>\n<toolbar>\n  <replacements>\n    <replacement>\n      <key><![CDATA[__REGION__PLACEHOLDER__]]></key>\n      <v[...]

-\\ Google Chrome v32.0.1700.76

[ Datei : C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [2124 octets] - [26/01/2014 21:24:24]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [2184 octets] ##########
Vorm Löschen…

AdwCleaner nach dem Löschen:

Code:
ATTFilter
# AdwCleaner v3.017 - Bericht erstellt am 26/01/2014 um 21:33:06
# Aktualisiert 12/01/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : win-boy - WIN-BOY-PC
# Gestartet von : C:\Users\win-boy\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\simplitec
Ordner Gelöscht : C:\Users\win-boy\AppData\Local\SwvUpdater
Ordner Gelöscht : C:\Users\win-boy\AppData\Roaming\simplitec
Ordner Gelöscht : C:\Users\win-boy\AppData\Roaming\Tlapia
[x] Nicht Gelöscht : C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\toolbar@alexa.com.xpi

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

[x] Nicht Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [{9309FA47-1B48-4768-AFA4-9E0556F5DC81}]
[x] Nicht Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\mmiopbgcekanlhpjkonogoljpfmhpkhf
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\lyricspal

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Mozilla Firefox v26.0 (de)

[ Datei : C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\prefs.js ]

Zeile gelöscht : user_pref("extensions.alexa.toolbarXMLText", "<?xml version=\"1.0\" encoding=\"utf-8\"?>\n<toolbar>\n  <replacements>\n    <replacement>\n      <key><![CDATA[__REGION__PLACEHOLDER__]]></key>\n      <v[...]

-\\ Google Chrome v32.0.1700.76

[ Datei : C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [2272 octets] - [26/01/2014 21:24:24]
AdwCleaner[S0].txt - [2156 octets] - [26/01/2014 21:33:06]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2216 octets] ##########
LG, Boy

Und hier der Rest:JRT Logfile:
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Windows 7 Home Premium x64
Ran by win-boy on 26.01.2014 at 21:51:36,64
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\caphyon



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\apn"
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"



~~~ FireFox

Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions\\{9309fa47-1b48-4768-afa4-9e0556f5dc81}
Successfully deleted the following from C:\Users\win-boy\AppData\Roaming\mozilla\firefox\profiles\13mrofd7.default\prefs.js

user_pref("extensions.alexa.searchconf", "{\n  \"google\" : {\n     \"urlexp\" : \"hxxp(s)?:\\\\/\\\\/www\\\\.google\\\\..*\\\\/.*[?#&]q=([^&]+)\",\n     \"rankometer\" :  {\n
user_pref("extensions.alexa.toolbarXMLText", "<?xml version=\"1.0\" encoding=\"utf-8\"?>\n<toolbar>\n  <replacements>\n    <replacement>\n      <key><![CDATA[__REGION__PLACEHO
Emptied folder: C:\Users\win-boy\AppData\Roaming\mozilla\firefox\profiles\13mrofd7.default\minidumps [134 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 26.01.2014 at 21:57:29,23
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
--- --- ---
… das Alexa-Teil ist aber von mir erwünscht und installiert, weil es mir IVW-vergleichbare Platzierungen der Auflage dokumentiert…

LG, Boy

Zu guter Letzt das neuerliche FRST-Log:


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-01-2014 02
Ran by win-boy (administrator) on WIN-BOY-PC on 27-01-2014 02:45:01
Running from L:\DOWNLOAD
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(cFos Software GmbH) C:\Program Files\ASRock\XFast LAN\spd.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\ehome\ehrecvr.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(cFos Software GmbH) C:\Program Files\ASRock\XFast LAN\cfosspeed.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\Logitech Vid\Vid.exe
(Dropbox, Inc.) C:\Users\win-boy\AppData\Roaming\Dropbox\bin\Dropbox.exe
() C:\Windows\Samsung\PanelMgr\SSMMgr.exe
() C:\Windows\Samsung\PanelMgr\caller64.exe
(Nikon Corporation) C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(CyberLink Corp.) H:\Programme\CyberLink\PowerDVD10\PDVD10Serv.exe
() C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) H:\Programme\iTunes\iTunesHelper.exe
(cyberlink) C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
(CyberLink) H:\Programme\CyberLink\Power2Go\CLMLSvc.exe
(Tlapia) C:\Program Files (x86)\sysTPL\sysTPL.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(SafeNet Inc.) C:\Windows\System32\hasplms.exe
(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe
() C:\Program Files (x86)\Common Files\LogiShrd\LQCVFX\COCIManager.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Tlapia) C:\Program Files (x86)\sysTPL\sysTPLMonitor.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Tablet Driver) C:\Windows\System32\drivers\WTSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(Tlapia) C:\Program Files (x86)\sysTPL\sysTPLService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(Mozilla Corporation) H:\Programme\Mozilla Thunderbird\thunderbird.exe
(Adobe Systems Incorporated) H:\Programme\Adobe\Elements\Elements 10 Organizer\PhotoshopElementsFileAgent.exe
(Adobe Systems Incorporated) H:\Programme\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Corel) C:\Program Files (x86)\Common Files\Corel\Standby\Standby.exe
(FreeDownloadManager.ORG) H:\Programme\Free Download Manager\fdm.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [XFast LAN] - C:\Program Files\ASRock\XFast LAN\cFosSpeed.exe [1441152 2011-10-19] (cFos Software GmbH)
HKLM\...\Run: [THXCfg64] - C:\Windows\system32\THXCfg64.dll [26624 2011-05-13] (Creative Technology Ltd.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)
HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2184520 2009-07-27] (CANON INC.)
HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-03-18] (CANON INC.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [630912 2012-05-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AMD AVT] - C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [12288 2012-04-19] ()
HKLM-x32\...\Run: [Samsung PanelMgr] - C:\Windows\Samsung\PanelMgr\ssmmgr.exe [618496 2010-06-07] ()
HKLM-x32\...\Run: [QuickFinder Scheduler] - h:\Programme\Corel\WordPerfect Office X5\Programs\QFSCHD150.EXE [128440 2012-09-21] (Corel Corporation)
HKLM-x32\...\Run: [BCSSync] - H:\Programme\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [402432 2010-07-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Nikon Transfer Monitor] - C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe [479232 2009-09-15] (Nikon Corporation)
HKLM-x32\...\Run: [RemoteControl10] - H:\Programme\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePPShortCut] - H:\Programme\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [223096 2012-04-17] (CyberLink Corp.)
HKLM-x32\...\Run: [Standby] - C:\Program Files (x86)\Common Files\Corel\Standby\Standby.exe [105632 2010-05-17] (Corel)
HKLM-x32\...\Run: [LogitechQuickCamRibbon] - C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe [2793304 2009-10-14] ()
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] - H:\Programme\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [179976 2013-09-25] (cyberlink)
HKLM-x32\...\Run: [CLMLServer] - H:\Programme\CyberLink\Power2Go\CLMLSvc.exe [107816 2011-03-09] (CyberLink)
HKLM-x32\...\Run: [sysTPL] - C:\Program Files (x86)\sysTPL\sysTPL.exe [872560 2013-11-28] (Tlapia)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2014-01-25] (Avira Operations GmbH & Co. KG)
HKCU\...\Run: [ISUSPM Startup] - C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2005-02-16] (InstallShield Software Corporation)
HKCU\...\Run: [Logitech Vid] - C:\Program Files (x86)\Logitech\Logitech Vid\Vid.exe [5458704 2009-07-16] (Logitech Inc.)
Startup: C:\Users\win-boy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\win-boy\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:8877;https=127.0.0.1:8877
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.wrws.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x0C300D80F35FCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - H:\Programme\JAVA64\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - H:\Programme\JAVA64\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - H:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - H:\Programme\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File
Toolbar: HKCU - No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} -  No File
DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.wrws.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - H:\Programme\JAVA64\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - H:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @canon.com/EPPEX - H:\Programme\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - H:\Programme\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - H:\Programme\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - H:\Programme\Microsoft Office\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~3\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - H:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - H:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - H:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Acrobat - H:\Programme\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\searchplugins\aol-search.xml
FF SearchPlugin: C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\searchplugins\duckduckgo.xml
FF SearchPlugin: C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\searchplugins\ixquick-https.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ProxTube - Unblock YouTube - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\ich@maltegoetz.de [2013-12-11]
FF Extension: YouTube Unblocker - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\youtubeunblocker@unblocker.yt [2014-01-23]
FF Extension: TV-Fox - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{2f17f610-5e97-4fed-828f-9940b7b577a4} [2013-06-05]
FF Extension: ColorZilla - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{6AC85730-7D0F-4de0-B3FA-21142DD85326} [2013-06-05]
FF Extension: Flash and Video Download - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2014-01-24]
FF Extension: Firebug - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\firebug@software.joehewitt.com.xpi [2013-06-05]
FF Extension: Alexa Toolbar - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\toolbar@alexa.com.xpi [2014-01-22]
FF Extension: FlashGot - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi [2013-06-05]
FF Extension: QuickTime Plugin Light - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{6ec24361-5d25-45e8-ba55-6fce99e5f3f2}.xpi [2013-11-07]
FF Extension: {736474a2-af0a-466f-b4c4-d10bc8f3a78f} - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{736474a2-af0a-466f-b4c4-d10bc8f3a78f}.xpi [2013-11-01]
FF Extension: NoScript - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-06-05]
FF Extension: MeasureIt - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{75CEEE46-9B64-46f8-94BF-54012DE155F0}.xpi [2013-06-05]
FF Extension: Easy YouTube Video Downloader - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi [2013-06-05]
FF Extension: Adblock Plus - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-06-05]
FF Extension: QuickJava - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{E6C1199F-E687-42da-8C24-E7770CC3AE66}.xpi [2013-06-05]
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - H:\Programme\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - H:\Programme\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ []

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Extension: (Xmarks Bookmark Sync) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajpgkpeckebdhofmmjfgcjjiiejpodla [2013-06-01]
CHR Extension: (Google Docs) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-06-01]
CHR Extension: (MeasureIt!) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aonjhmdcgbgikgjapjckfkefpphjpgma [2013-07-04]
CHR Extension: (Google Drive) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-06-01]
CHR Extension: (ColorZilla) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhlhnicpbhignbdhedgjhgdocnmhomnp [2013-06-01]
CHR Extension: (YouTube) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-06-01]
CHR Extension: (Firebug Lite for Google Chrome™) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmagokdooijbeehmkpknfglimnifench [2013-06-01]
CHR Extension: (Adblock Plus) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-06-01]
CHR Extension: (Google-Suche) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-06-01]
CHR Extension: (Freemake Video Converter) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbolfgndggfhhpbnkgnpjkfhinclbigj [2014-01-04]
CHR Extension: (Google Wallet) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR Extension: (Traffic Rank) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\oipgijiceofkdddeceikmdjledafnehk [2013-06-01]
CHR Extension: (Alexa Rank Checker) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\paccfoonakeffgimhfkopmhplabglkad [2013-06-01]
CHR Extension: (Google Mail) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-06-01]
CHR HKLM-x32\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - H:\Programme\Freemake\Freemake Video Converter\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2012-12-06]
CHR HKLM-x32\...\Chrome\Extension: [mmiopbgcekanlhpjkonogoljpfmhpkhf] - C:\Program Files (x86)\LyricsPal\125.crx [2012-12-06]

==================== Services (Whitelisted) =================

R2 AdobeActiveFileMonitor10.0; H:\Programme\Adobe\Elements\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [169624 2011-09-01] (Adobe Systems Incorporated)
R2 AdobeActiveFileMonitor11.0; H:\Programme\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171600 2012-09-23] (Adobe Systems Incorporated)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-05-04] (Advanced Micro Devices, Inc.)
R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [908856 2014-01-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2014-01-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2014-01-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2014-01-25] (Avira Operations GmbH & Co. KG)
S4 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-06-20] (Microsoft Corp.)
R2 cFosSpeedS; C:\Program Files\ASRock\XFast LAN\spd.exe [395136 2011-10-19] (cFos Software GmbH)
S2 CLKMSVC10_B91AB049; H:\Programme\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [243464 2013-09-25] (CyberLink)
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [101888 2013-11-19] (Freemake)
R2 hasplms; C:\Windows\system32\hasplms.exe [4412872 2012-08-23] (SafeNet Inc.)
R2 sysTPLMonitor.exe; C:\Program Files (x86)\sysTPL\sysTPLMonitor.exe [395888 2013-11-28] (Tlapia)
R2 sysTPLService.exe; C:\Program Files (x86)\sysTPL\sysTPLService.exe [397080 2013-09-29] (Tlapia)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R3 anvsnddrv; C:\Windows\System32\drivers\anvsnddrv.sys [33872 2011-11-28] (AnvSoft Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2014-01-25] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2014-01-25] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-01-25] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2014-01-25] (Avira Operations GmbH & Co. KG)
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [323584 2012-10-06] (SafeNet Inc.)
R3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
R3 MTSBDA; C:\Windows\System32\Drivers\MtsBda.sys [344592 2009-07-13] (TechniSat Provide)
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation)
S2 SSPORT; C:\Windows\SysWOW64\Drivers\SSPORT.sys [11576 2009-02-23] (Samsung Electronics)
R3 TridVid; C:\Windows\System32\DRIVERS\tridvid6010.sys [411648 2011-01-21] (10Moons Technologies Co.,Ltd)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [x]
S3 Tablet2k; "%SystemRoot%\System32\Drivers\Tablet2k.sys" [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-26 22:06 - 2014-01-26 22:06 - 00001129 _____ C:\Users\win-boy\Desktop\JRT.txt
2014-01-26 21:50 - 2014-01-26 21:50 - 01037068 _____ (Thisisu) C:\Users\win-boy\Desktop\JRT.exe
2014-01-26 21:18 - 2014-01-26 21:33 - 00000000 ____D C:\AdwCleaner
2014-01-26 21:10 - 2014-01-26 21:10 - 01236282 _____ C:\Users\win-boy\Desktop\adwcleaner.exe
2014-01-26 17:56 - 2014-01-26 17:56 - 00000741 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-26 17:56 - 2014-01-26 17:56 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\Malwarebytes
2014-01-26 17:56 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-26 01:14 - 2014-01-26 01:14 - 00000000 ____D C:\Windows\System32\Tasks\Nero
2014-01-26 01:13 - 2014-01-26 01:13 - 00002873 _____ C:\Users\Public\Desktop\Nero 2014.lnk
2014-01-26 00:31 - 2014-01-26 00:31 - 00000000 _____ C:\Users\win-boy\Downloads\NeroFirstAidKit[1].zip
2014-01-25 17:55 - 2014-01-25 17:55 - 00000000 ____D C:\Program Files (x86)\Avira
2014-01-25 17:55 - 2014-01-25 17:46 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-01-25 17:55 - 2014-01-25 17:46 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-01-25 17:55 - 2014-01-25 17:46 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-01-25 17:55 - 2014-01-25 17:46 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-01-25 17:47 - 2014-01-25 17:48 - 00000000 ____D C:\Users\win-boy\Avira
2014-01-25 17:47 - 2014-01-25 17:47 - 00000000 ____D C:\Users\win-boy\Neuer Ordner
2014-01-25 16:56 - 2014-01-25 16:56 - 00128420 _____ C:\Users\Public\Downloads\ComboFix.txt
2014-01-25 16:40 - 2014-01-25 16:40 - 00128420 _____ C:\ComboFix.txt
2014-01-25 15:35 - 2014-01-25 16:41 - 00000000 ____D C:\Qoobox
2014-01-25 15:35 - 2014-01-25 16:32 - 00000000 ____D C:\Windows\erdnt
2014-01-25 15:35 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2014-01-25 15:35 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2014-01-25 15:35 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-01-25 15:35 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-01-25 15:35 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-01-25 15:35 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2014-01-25 15:35 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2014-01-25 15:35 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2014-01-24 17:39 - 2014-01-24 17:40 - 00056440 _____ C:\Users\Public\Downloads\Addition.txt
2014-01-24 17:39 - 2014-01-24 17:40 - 00043022 _____ C:\Users\Public\Downloads\FRST.txt
2014-01-24 17:38 - 2014-01-24 17:38 - 00000000 ____D C:\FRST
2014-01-24 17:35 - 2014-01-24 17:34 - 02077696 _____ (Farbar) C:\Users\Public\Downloads\FRST64.exe
2014-01-24 04:39 - 2014-01-24 04:32 - 23867560 _____ (Mozilla) C:\Users\Public\Downloads\Firefox Setup 26.0.exe
2014-01-24 03:30 - 2013-11-03 01:36 - 00000512 _____ C:\Users\win-boy\Documents\hbedv.key
2014-01-22 19:42 - 2014-01-22 19:42 - 00000866 _____ C:\Users\win-boy\Desktop\Revo Uninstaller.lnk
2014-01-22 19:15 - 2014-01-22 19:15 - 00005327 _____ C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-22 19:15 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-15 14:19 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 14:19 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 14:19 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 14:19 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 14:19 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 14:19 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 14:19 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 14:19 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 14:19 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-14 18:35 - 2014-01-14 18:35 - 00001095 _____ C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-01-14 18:35 - 2014-01-14 18:35 - 00001037 _____ C:\Windows\system32\TeamViewer9_Hooks.log
2014-01-14 18:35 - 2014-01-14 18:35 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2014-01-13 17:09 - 2014-01-13 17:12 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\TeamViewer
2014-01-12 05:42 - 2014-01-12 05:42 - 00001074 _____ C:\Users\Public\Desktop\Free Video to DVD Converter.lnk
2014-01-12 05:42 - 2014-01-12 05:42 - 00000895 _____ C:\Users\Public\Desktop\Free DVD Video Burner.lnk
2014-01-08 17:36 - 2014-01-08 17:36 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-01-07 19:31 - 2014-01-27 01:58 - 00031234 _____ C:\Windows\PFRO.log
2014-01-07 19:31 - 2014-01-27 01:58 - 00004256 _____ C:\Windows\setupact.log
2014-01-07 19:31 - 2014-01-07 19:31 - 00000000 _____ C:\Windows\setuperr.log
2014-01-07 17:16 - 2014-01-07 17:16 - 00000704 _____ C:\Users\Public\Desktop\Sketch Drawer.lnk
2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\Windows\SysWOW64\GPhotos.scr
2014-01-04 18:09 - 2014-01-04 18:09 - 00000771 _____ C:\Users\Public\Desktop\FotoPrinter 4.5.lnk
2014-01-03 19:05 - 2014-01-03 19:05 - 00002776 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-01-03 19:05 - 2014-01-03 19:05 - 00000827 _____ C:\Users\Public\Desktop\CCleaner.lnk
2014-01-03 19:05 - 2014-01-03 19:05 - 00000000 ____D C:\Program Files\CCleaner

==================== One Month Modified Files and Folders =======

2014-01-27 02:26 - 2013-06-03 02:51 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-27 02:12 - 2013-06-01 10:45 - 00001112 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-27 02:08 - 2009-07-14 05:45 - 00014064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-27 02:08 - 2009-07-14 05:45 - 00014064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-27 02:02 - 2013-06-01 12:55 - 00000000 ____D C:\Users\win-boy\AppData\Local\Adobe
2014-01-27 02:01 - 2013-06-01 21:31 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\Dropbox
2014-01-27 01:59 - 2013-06-01 10:45 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-27 01:58 - 2014-01-07 19:31 - 00031234 _____ C:\Windows\PFRO.log
2014-01-27 01:58 - 2014-01-07 19:31 - 00004256 _____ C:\Windows\setupact.log
2014-01-27 01:58 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-27 01:57 - 2013-06-01 03:16 - 01138598 _____ C:\Windows\WindowsUpdate.log
2014-01-26 22:06 - 2014-01-26 22:06 - 00001129 _____ C:\Users\win-boy\Desktop\JRT.txt
2014-01-26 21:50 - 2014-01-26 21:50 - 01037068 _____ (Thisisu) C:\Users\win-boy\Desktop\JRT.exe
2014-01-26 21:33 - 2014-01-26 21:18 - 00000000 ____D C:\AdwCleaner
2014-01-26 21:19 - 2013-06-01 22:38 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\Free Download Manager
2014-01-26 21:10 - 2014-01-26 21:10 - 01236282 _____ C:\Users\win-boy\Desktop\adwcleaner.exe
2014-01-26 17:56 - 2014-01-26 17:56 - 00000741 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-26 17:56 - 2014-01-26 17:56 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\Malwarebytes
2014-01-26 03:20 - 2013-07-16 11:37 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\Nero
2014-01-26 02:07 - 2013-06-03 20:00 - 00000000 ____D C:\Users\win-boy\AppData\Local\CrashDumps
2014-01-26 01:30 - 2013-06-03 18:00 - 00000000 ____D C:\Users\win-boy\AppData\Local\Nero
2014-01-26 01:14 - 2014-01-26 01:14 - 00000000 ____D C:\Windows\System32\Tasks\Nero
2014-01-26 01:14 - 2013-06-03 17:35 - 00000000 ____D C:\ProgramData\Nero
2014-01-26 01:13 - 2014-01-26 01:13 - 00002873 _____ C:\Users\Public\Desktop\Nero 2014.lnk
2014-01-26 00:52 - 2013-06-03 02:51 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-26 00:52 - 2013-06-03 02:51 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-26 00:52 - 2013-06-03 02:51 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-26 00:31 - 2014-01-26 00:31 - 00000000 _____ C:\Users\win-boy\Downloads\NeroFirstAidKit[1].zip
2014-01-25 17:55 - 2014-01-25 17:55 - 00000000 ____D C:\Program Files (x86)\Avira
2014-01-25 17:55 - 2013-11-03 01:36 - 00002075 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2014-01-25 17:48 - 2014-01-25 17:47 - 00000000 ____D C:\Users\win-boy\Avira
2014-01-25 17:48 - 2013-06-01 03:35 - 00000000 ____D C:\Users\win-boy
2014-01-25 17:47 - 2014-01-25 17:47 - 00000000 ____D C:\Users\win-boy\Neuer Ordner
2014-01-25 17:46 - 2014-01-25 17:55 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-01-25 17:46 - 2014-01-25 17:55 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-01-25 17:46 - 2014-01-25 17:55 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-01-25 17:46 - 2014-01-25 17:55 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-01-25 16:56 - 2014-01-25 16:56 - 00128420 _____ C:\Users\Public\Downloads\ComboFix.txt
2014-01-25 16:41 - 2014-01-25 15:35 - 00000000 ____D C:\Qoobox
2014-01-25 16:41 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2014-01-25 16:40 - 2014-01-25 16:40 - 00128420 _____ C:\ComboFix.txt
2014-01-25 16:32 - 2014-01-25 15:35 - 00000000 ____D C:\Windows\erdnt
2014-01-25 16:21 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2014-01-25 15:27 - 2009-07-14 06:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-24 17:40 - 2014-01-24 17:39 - 00056440 _____ C:\Users\Public\Downloads\Addition.txt
2014-01-24 17:40 - 2014-01-24 17:39 - 00043022 _____ C:\Users\Public\Downloads\FRST.txt
2014-01-24 17:38 - 2014-01-24 17:38 - 00000000 ____D C:\FRST
2014-01-24 17:34 - 2014-01-24 17:35 - 02077696 _____ (Farbar) C:\Users\Public\Downloads\FRST64.exe
2014-01-24 16:52 - 2013-06-01 10:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-24 04:40 - 2013-06-11 00:53 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-24 04:32 - 2014-01-24 04:39 - 23867560 _____ (Mozilla) C:\Users\Public\Downloads\Firefox Setup 26.0.exe
2014-01-23 18:38 - 2013-06-01 12:41 - 00000099 _____ C:\Users\Public\LMDebug.log
2014-01-22 19:42 - 2014-01-22 19:42 - 00000866 _____ C:\Users\win-boy\Desktop\Revo Uninstaller.lnk
2014-01-22 19:15 - 2014-01-22 19:15 - 00005327 _____ C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-22 19:15 - 2013-10-28 12:39 - 00000000 ____D C:\ProgramData\Oracle
2014-01-22 19:15 - 2013-10-28 12:33 - 00000000 ____D C:\Program Files (x86)\Java
2014-01-22 17:19 - 2009-07-14 03:34 - 00000635 _____ C:\Windows\win.ini
2014-01-21 01:32 - 2013-12-16 19:18 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\vlc
2014-01-19 22:20 - 2013-06-01 13:27 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\FileZilla
2014-01-16 19:51 - 2011-04-18 18:46 - 00000000 ____D C:\VueScan
2014-01-16 19:46 - 2013-06-01 23:42 - 00006476 ___SH C:\ProgramData\KGyGaAvL.sys
2014-01-16 16:18 - 2013-06-01 03:35 - 00000000 ___RD C:\Users\win-boy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-16 16:17 - 2013-06-02 01:58 - 00001029 _____ C:\Users\win-boy\Desktop\Dropbox.lnk
2014-01-16 16:17 - 2013-06-02 01:55 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-16 16:14 - 2009-07-14 05:45 - 03852608 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-16 03:03 - 2013-07-14 00:27 - 00000000 ____D C:\Windows\system32\MRT
2014-01-16 03:00 - 2013-06-01 05:00 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-15 14:11 - 2013-06-15 19:12 - 00202480 _____ C:\Users\win-boy\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-14 18:35 - 2014-01-14 18:35 - 00001095 _____ C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-01-14 18:35 - 2014-01-14 18:35 - 00001037 _____ C:\Windows\system32\TeamViewer9_Hooks.log
2014-01-14 18:35 - 2014-01-14 18:35 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2014-01-14 00:54 - 2013-06-01 22:46 - 00000000 ____D C:\Users\win-boy\AppData\Local\FRITZ!
2014-01-13 17:12 - 2014-01-13 17:09 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\TeamViewer
2014-01-13 13:49 - 2013-11-10 19:27 - 00000000 ____D C:\Program Files (x86)\sysTPL
2014-01-12 16:41 - 2013-07-31 12:57 - 00000000 ____D C:\Users\win-boy\Documents\Outlook-Dateien
2014-01-12 16:37 - 2013-07-17 15:12 - 00059392 ___SH C:\Users\win-boy\Documents\Thumbs.db
2014-01-12 06:05 - 2013-10-31 13:42 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\DVDVideoSoft
2014-01-12 05:42 - 2014-01-12 05:42 - 00001074 _____ C:\Users\Public\Desktop\Free Video to DVD Converter.lnk
2014-01-12 05:42 - 2014-01-12 05:42 - 00000895 _____ C:\Users\Public\Desktop\Free DVD Video Burner.lnk
2014-01-12 05:42 - 2013-10-31 13:42 - 00001248 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-01-08 17:36 - 2014-01-08 17:36 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-01-08 17:30 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2014-01-07 19:31 - 2014-01-07 19:31 - 00000000 _____ C:\Windows\setuperr.log
2014-01-07 17:16 - 2014-01-07 17:16 - 00000704 _____ C:\Users\Public\Desktop\Sketch Drawer.lnk
2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\Windows\SysWOW64\GPhotos.scr
2014-01-04 18:09 - 2014-01-04 18:09 - 00000771 _____ C:\Users\Public\Desktop\FotoPrinter 4.5.lnk
2014-01-03 19:12 - 2013-06-01 04:10 - 00000000 ____D C:\Windows\Panther
2014-01-03 19:05 - 2014-01-03 19:05 - 00002776 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-01-03 19:05 - 2014-01-03 19:05 - 00000827 _____ C:\Users\Public\Desktop\CCleaner.lnk
2014-01-03 19:05 - 2014-01-03 19:05 - 00000000 ____D C:\Program Files\CCleaner

Files to move or delete:
====================
C:\ProgramData\PKP_DLdu.DAT


Some content of TEMP:
====================
C:\Users\win-boy\AppData\Local\Temp\avgnt.exe
C:\Users\win-boy\AppData\Local\Temp\Offercast_AVIRAV7_.exe
C:\Users\win-boy\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-19 00:03

==================== End Of Log ============================
--- --- ---

--- --- ---


Ist jetzt alles wieder gut (soweit man das sagen kann) ?

LG, Boy
Geändert von boyherre (26.01.2014 um 21:06 Uhr) Grund: Code-Tag fehlte

Alt 27.01.2014, 16:20   #8
schrauber
/// the machine
/// TB-Ausbilder
 
Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen" - Standard

Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen"



ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 28.01.2014, 03:29   #9
boyherre
 
Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen" - Standard

Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen"


… erst mal das ESET-LOG (nix gefunden):

Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=e1af609657dd1b419d61c68008c02959
# engine=16814
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-01-28 01:17:20
# local_time=2014-01-28 02:17:20 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 290828 142501690 0 0
# scanned=741277
# found=0
# cleaned=0
# scan_time=35237
… was lange Stunden gedauert hat.

LG, Boy

… und Security Check:

Code:
ATTFilter
 Results of screen317's Security Check version 0.99.79  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Avira Desktop   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 Java 7 Update 51  
  Adobe Flash Player 12.0.0.43 Flash Player out of Date!  
 Adobe Reader XI  
 Mozilla Firefox (26.0) 
 Mozilla Thunderbird (17.0.8) 
 Google Chrome 32.0.1700.72  
 Google Chrome 32.0.1700.76  
 Google Chrome Plugins...  
````````Process Check: objlist.exe by Laurent````````  
 Avira Antivir avgnt.exe 
 Avira Antivir avguard.exe 
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
… und FRST:


FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-01-2014 02
Ran by win-boy (administrator) on WIN-BOY-PC on 28-01-2014 03:16:45
Running from L:\DOWNLOAD
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(cFos Software GmbH) C:\Program Files\ASRock\XFast LAN\spd.exe
(Microsoft Corporation) C:\Windows\ehome\ehrecvr.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(cFos Software GmbH) C:\Program Files\ASRock\XFast LAN\cfosspeed.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\Logitech Vid\Vid.exe
(Dropbox, Inc.) C:\Users\win-boy\AppData\Roaming\Dropbox\bin\Dropbox.exe
() C:\Windows\Samsung\PanelMgr\SSMMgr.exe
() C:\Windows\Samsung\PanelMgr\caller64.exe
(Nikon Corporation) C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe
(CyberLink Corp.) H:\Programme\CyberLink\PowerDVD10\PDVD10Serv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
() C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(SafeNet Inc.) C:\Windows\System32\hasplms.exe
(Apple Inc.) H:\Programme\iTunes\iTunesHelper.exe
(cyberlink) C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe
(CyberLink) H:\Programme\CyberLink\Power2Go\CLMLSvc.exe
(Tlapia) C:\Program Files (x86)\sysTPL\sysTPL.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files (x86)\Common Files\LogiShrd\LQCVFX\COCIManager.exe
(Tlapia) C:\Program Files (x86)\sysTPL\sysTPLMonitor.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Tablet Driver) C:\Windows\System32\drivers\WTSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(Tlapia) C:\Program Files (x86)\sysTPL\sysTPLService.exe
(Adobe Systems Incorporated) H:\Programme\Adobe\Elements\Elements 10 Organizer\PhotoshopElementsFileAgent.exe
(Adobe Systems Incorporated) H:\Programme\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(InstallShield Software Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
(Mozilla Corporation) H:\Programme\Mozilla Thunderbird\thunderbird.exe
(InstallShield Software Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe
(InstallShield Software Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\agent.exe
(FreeDownloadManager.ORG) H:\Programme\Free Download Manager\fdm.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Corel) C:\Program Files (x86)\Common Files\Corel\Standby\Standby.exe
() L:\DOWNLOAD\SecurityCheck.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [XFast LAN] - C:\Program Files\ASRock\XFast LAN\cFosSpeed.exe [1441152 2011-10-19] (cFos Software GmbH)
HKLM\...\Run: [THXCfg64] - C:\Windows\system32\THXCfg64.dll [26624 2011-05-13] (Creative Technology Ltd.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)
HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2184520 2009-07-27] (CANON INC.)
HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-03-18] (CANON INC.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [630912 2012-05-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AMD AVT] - C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [12288 2012-04-19] ()
HKLM-x32\...\Run: [Samsung PanelMgr] - C:\Windows\Samsung\PanelMgr\ssmmgr.exe [618496 2010-06-07] ()
HKLM-x32\...\Run: [QuickFinder Scheduler] - h:\Programme\Corel\WordPerfect Office X5\Programs\QFSCHD150.EXE [128440 2012-09-21] (Corel Corporation)
HKLM-x32\...\Run: [BCSSync] - H:\Programme\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [402432 2010-07-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Nikon Transfer Monitor] - C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe [479232 2009-09-15] (Nikon Corporation)
HKLM-x32\...\Run: [RemoteControl10] - H:\Programme\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePPShortCut] - H:\Programme\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [223096 2012-04-17] (CyberLink Corp.)
HKLM-x32\...\Run: [Standby] - C:\Program Files (x86)\Common Files\Corel\Standby\Standby.exe [105632 2010-05-17] (Corel)
HKLM-x32\...\Run: [LogitechQuickCamRibbon] - C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe [2793304 2009-10-14] ()
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] - H:\Programme\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [179976 2013-09-25] (cyberlink)
HKLM-x32\...\Run: [CLMLServer] - H:\Programme\CyberLink\Power2Go\CLMLSvc.exe [107816 2011-03-09] (CyberLink)
HKLM-x32\...\Run: [sysTPL] - C:\Program Files (x86)\sysTPL\sysTPL.exe [872560 2013-11-28] (Tlapia)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2014-01-25] (Avira Operations GmbH & Co. KG)
HKCU\...\Run: [ISUSPM Startup] - C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2005-02-16] (InstallShield Software Corporation)
HKCU\...\Run: [Logitech Vid] - C:\Program Files (x86)\Logitech\Logitech Vid\Vid.exe [5458704 2009-07-16] (Logitech Inc.)
Startup: C:\Users\win-boy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\win-boy\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:8877;https=127.0.0.1:8877
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.wrws.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x0C300D80F35FCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - H:\Programme\JAVA64\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - H:\Programme\JAVA64\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - H:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - H:\Programme\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File
Toolbar: HKCU - No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} -  No File
DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.wrws.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - H:\Programme\JAVA64\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - H:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @canon.com/EPPEX - H:\Programme\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - H:\Programme\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - H:\Programme\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - H:\Programme\Microsoft Office\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~3\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - H:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - H:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - H:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Acrobat - H:\Programme\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\searchplugins\aol-search.xml
FF SearchPlugin: C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\searchplugins\duckduckgo.xml
FF SearchPlugin: C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\searchplugins\ixquick-https.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ProxTube - Unblock YouTube - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\ich@maltegoetz.de [2013-12-11]
FF Extension: YouTube Unblocker - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\youtubeunblocker@unblocker.yt [2014-01-23]
FF Extension: TV-Fox - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{2f17f610-5e97-4fed-828f-9940b7b577a4} [2013-06-05]
FF Extension: ColorZilla - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{6AC85730-7D0F-4de0-B3FA-21142DD85326} [2013-06-05]
FF Extension: Flash and Video Download - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2014-01-24]
FF Extension: Firebug - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\firebug@software.joehewitt.com.xpi [2013-06-05]
FF Extension: Alexa Toolbar - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\toolbar@alexa.com.xpi [2014-01-22]
FF Extension: FlashGot - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi [2013-06-05]
FF Extension: QuickTime Plugin Light - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{6ec24361-5d25-45e8-ba55-6fce99e5f3f2}.xpi [2013-11-07]
FF Extension: {736474a2-af0a-466f-b4c4-d10bc8f3a78f} - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{736474a2-af0a-466f-b4c4-d10bc8f3a78f}.xpi [2013-11-01]
FF Extension: NoScript - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-06-05]
FF Extension: MeasureIt - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{75CEEE46-9B64-46f8-94BF-54012DE155F0}.xpi [2013-06-05]
FF Extension: Easy YouTube Video Downloader - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi [2013-06-05]
FF Extension: Adblock Plus - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-06-05]
FF Extension: QuickJava - C:\Users\win-boy\AppData\Roaming\Mozilla\Firefox\Profiles\13mrofd7.default\Extensions\{E6C1199F-E687-42da-8C24-E7770CC3AE66}.xpi [2013-06-05]
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - H:\Programme\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - H:\Programme\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ []

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Extension: (Xmarks Bookmark Sync) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajpgkpeckebdhofmmjfgcjjiiejpodla [2013-06-01]
CHR Extension: (Google Docs) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-06-01]
CHR Extension: (MeasureIt!) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aonjhmdcgbgikgjapjckfkefpphjpgma [2013-07-04]
CHR Extension: (Google Drive) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-06-01]
CHR Extension: (ColorZilla) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhlhnicpbhignbdhedgjhgdocnmhomnp [2013-06-01]
CHR Extension: (YouTube) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-06-01]
CHR Extension: (Firebug Lite for Google Chrome™) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmagokdooijbeehmkpknfglimnifench [2013-06-01]
CHR Extension: (Adblock Plus) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-06-01]
CHR Extension: (Google-Suche) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-06-01]
CHR Extension: (Freemake Video Converter) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbolfgndggfhhpbnkgnpjkfhinclbigj [2014-01-04]
CHR Extension: (Google Wallet) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR Extension: (Traffic Rank) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\oipgijiceofkdddeceikmdjledafnehk [2013-06-01]
CHR Extension: (Alexa Rank Checker) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\paccfoonakeffgimhfkopmhplabglkad [2013-06-01]
CHR Extension: (Google Mail) - C:\Users\win-boy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-06-01]
CHR HKLM-x32\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - H:\Programme\Freemake\Freemake Video Converter\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2012-12-06]
CHR HKLM-x32\...\Chrome\Extension: [mmiopbgcekanlhpjkonogoljpfmhpkhf] - C:\Program Files (x86)\LyricsPal\125.crx [2012-12-06]

==================== Services (Whitelisted) =================

R2 AdobeActiveFileMonitor10.0; H:\Programme\Adobe\Elements\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [169624 2011-09-01] (Adobe Systems Incorporated)
R2 AdobeActiveFileMonitor11.0; H:\Programme\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171600 2012-09-23] (Adobe Systems Incorporated)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-05-04] (Advanced Micro Devices, Inc.)
R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [908856 2014-01-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2014-01-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2014-01-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2014-01-25] (Avira Operations GmbH & Co. KG)
S4 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-06-20] (Microsoft Corp.)
R2 cFosSpeedS; C:\Program Files\ASRock\XFast LAN\spd.exe [395136 2011-10-19] (cFos Software GmbH)
S2 CLKMSVC10_B91AB049; H:\Programme\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [243464 2013-09-25] (CyberLink)
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [101888 2013-11-19] (Freemake)
R2 hasplms; C:\Windows\system32\hasplms.exe [4412872 2012-08-23] (SafeNet Inc.)
R2 sysTPLMonitor.exe; C:\Program Files (x86)\sysTPL\sysTPLMonitor.exe [395888 2013-11-28] (Tlapia)
R2 sysTPLService.exe; C:\Program Files (x86)\sysTPL\sysTPLService.exe [397080 2013-09-29] (Tlapia)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R3 anvsnddrv; C:\Windows\System32\drivers\anvsnddrv.sys [33872 2011-11-28] (AnvSoft Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2014-01-25] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2014-01-25] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-01-25] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2014-01-25] (Avira Operations GmbH & Co. KG)
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [323584 2012-10-06] (SafeNet Inc.)
R3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
R3 MTSBDA; C:\Windows\System32\Drivers\MtsBda.sys [344592 2009-07-13] (TechniSat Provide)
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation)
S2 SSPORT; C:\Windows\SysWOW64\Drivers\SSPORT.sys [11576 2009-02-23] (Samsung Electronics)
R3 TridVid; C:\Windows\System32\DRIVERS\tridvid6010.sys [411648 2011-01-21] (10Moons Technologies Co.,Ltd)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [x]
S3 Tablet2k; "%SystemRoot%\System32\Drivers\Tablet2k.sys" [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-27 16:26 - 2014-01-27 16:26 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-26 22:06 - 2014-01-26 22:06 - 00001129 _____ C:\Users\win-boy\Desktop\JRT.txt
2014-01-26 21:50 - 2014-01-26 21:50 - 01037068 _____ (Thisisu) C:\Users\win-boy\Desktop\JRT.exe
2014-01-26 21:18 - 2014-01-26 21:33 - 00000000 ____D C:\AdwCleaner
2014-01-26 21:10 - 2014-01-26 21:10 - 01236282 _____ C:\Users\win-boy\Desktop\adwcleaner.exe
2014-01-26 17:56 - 2014-01-26 17:56 - 00000741 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-26 17:56 - 2014-01-26 17:56 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\Malwarebytes
2014-01-26 17:56 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-26 01:14 - 2014-01-26 01:14 - 00000000 ____D C:\Windows\System32\Tasks\Nero
2014-01-26 01:13 - 2014-01-26 01:13 - 00002873 _____ C:\Users\Public\Desktop\Nero 2014.lnk
2014-01-26 00:31 - 2014-01-26 00:31 - 00000000 _____ C:\Users\win-boy\Downloads\NeroFirstAidKit[1].zip
2014-01-25 17:55 - 2014-01-25 17:55 - 00000000 ____D C:\Program Files (x86)\Avira
2014-01-25 17:55 - 2014-01-25 17:46 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-01-25 17:55 - 2014-01-25 17:46 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-01-25 17:55 - 2014-01-25 17:46 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-01-25 17:55 - 2014-01-25 17:46 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-01-25 17:47 - 2014-01-25 17:48 - 00000000 ____D C:\Users\win-boy\Avira
2014-01-25 17:47 - 2014-01-25 17:47 - 00000000 ____D C:\Users\win-boy\Neuer Ordner
2014-01-25 16:56 - 2014-01-25 16:56 - 00128420 _____ C:\Users\Public\Downloads\ComboFix.txt
2014-01-25 16:40 - 2014-01-25 16:40 - 00128420 _____ C:\ComboFix.txt
2014-01-25 15:35 - 2014-01-25 16:41 - 00000000 ____D C:\Qoobox
2014-01-25 15:35 - 2014-01-25 16:32 - 00000000 ____D C:\Windows\erdnt
2014-01-25 15:35 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2014-01-25 15:35 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2014-01-25 15:35 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-01-25 15:35 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-01-25 15:35 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-01-25 15:35 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2014-01-25 15:35 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2014-01-25 15:35 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2014-01-24 17:39 - 2014-01-24 17:40 - 00056440 _____ C:\Users\Public\Downloads\Addition.txt
2014-01-24 17:39 - 2014-01-24 17:40 - 00043022 _____ C:\Users\Public\Downloads\FRST.txt
2014-01-24 17:38 - 2014-01-28 03:16 - 00000000 ____D C:\FRST
2014-01-24 17:35 - 2014-01-24 17:34 - 02077696 _____ (Farbar) C:\Users\Public\Downloads\FRST64.exe
2014-01-24 04:39 - 2014-01-24 04:32 - 23867560 _____ (Mozilla) C:\Users\Public\Downloads\Firefox Setup 26.0.exe
2014-01-24 03:30 - 2013-11-03 01:36 - 00000512 _____ C:\Users\win-boy\Documents\hbedv.key
2014-01-22 19:42 - 2014-01-22 19:42 - 00000866 _____ C:\Users\win-boy\Desktop\Revo Uninstaller.lnk
2014-01-22 19:15 - 2014-01-22 19:15 - 00005327 _____ C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-22 19:15 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-15 14:19 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 14:19 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 14:19 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 14:19 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 14:19 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 14:19 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 14:19 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 14:19 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 14:19 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-14 18:35 - 2014-01-14 18:35 - 00001095 _____ C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-01-14 18:35 - 2014-01-14 18:35 - 00001037 _____ C:\Windows\system32\TeamViewer9_Hooks.log
2014-01-14 18:35 - 2014-01-14 18:35 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2014-01-13 17:09 - 2014-01-13 17:12 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\TeamViewer
2014-01-12 05:42 - 2014-01-12 05:42 - 00001074 _____ C:\Users\Public\Desktop\Free Video to DVD Converter.lnk
2014-01-12 05:42 - 2014-01-12 05:42 - 00000895 _____ C:\Users\Public\Desktop\Free DVD Video Burner.lnk
2014-01-08 17:36 - 2014-01-08 17:36 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-01-07 19:31 - 2014-01-27 13:06 - 00004312 _____ C:\Windows\setupact.log
2014-01-07 19:31 - 2014-01-27 13:05 - 00031528 _____ C:\Windows\PFRO.log
2014-01-07 19:31 - 2014-01-07 19:31 - 00000000 _____ C:\Windows\setuperr.log
2014-01-07 17:16 - 2014-01-07 17:16 - 00000704 _____ C:\Users\Public\Desktop\Sketch Drawer.lnk
2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\Windows\SysWOW64\GPhotos.scr
2014-01-04 18:09 - 2014-01-04 18:09 - 00000771 _____ C:\Users\Public\Desktop\FotoPrinter 4.5.lnk
2014-01-03 19:05 - 2014-01-03 19:05 - 00002776 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-01-03 19:05 - 2014-01-03 19:05 - 00000827 _____ C:\Users\Public\Desktop\CCleaner.lnk
2014-01-03 19:05 - 2014-01-03 19:05 - 00000000 ____D C:\Program Files\CCleaner

==================== One Month Modified Files and Folders =======

2014-01-28 03:16 - 2014-01-24 17:38 - 00000000 ____D C:\FRST
2014-01-28 03:14 - 2013-06-01 22:38 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\Free Download Manager
2014-01-28 03:12 - 2013-06-01 10:45 - 00001112 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-28 03:00 - 2013-06-01 03:16 - 01175710 _____ C:\Windows\WindowsUpdate.log
2014-01-28 02:26 - 2013-06-03 02:51 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-28 02:00 - 2013-06-01 12:55 - 00000000 ____D C:\Users\win-boy\AppData\Local\Adobe
2014-01-27 16:26 - 2014-01-27 16:26 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-27 15:12 - 2013-06-01 10:45 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-27 13:16 - 2009-07-14 05:45 - 00014064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-27 13:16 - 2009-07-14 05:45 - 00014064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-27 13:09 - 2013-06-01 21:31 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\Dropbox
2014-01-27 13:06 - 2014-01-07 19:31 - 00004312 _____ C:\Windows\setupact.log
2014-01-27 13:06 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-27 13:05 - 2014-01-07 19:31 - 00031528 _____ C:\Windows\PFRO.log
2014-01-26 22:06 - 2014-01-26 22:06 - 00001129 _____ C:\Users\win-boy\Desktop\JRT.txt
2014-01-26 21:50 - 2014-01-26 21:50 - 01037068 _____ (Thisisu) C:\Users\win-boy\Desktop\JRT.exe
2014-01-26 21:33 - 2014-01-26 21:18 - 00000000 ____D C:\AdwCleaner
2014-01-26 21:10 - 2014-01-26 21:10 - 01236282 _____ C:\Users\win-boy\Desktop\adwcleaner.exe
2014-01-26 17:56 - 2014-01-26 17:56 - 00000741 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-26 17:56 - 2014-01-26 17:56 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\Malwarebytes
2014-01-26 03:20 - 2013-07-16 11:37 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\Nero
2014-01-26 02:07 - 2013-06-03 20:00 - 00000000 ____D C:\Users\win-boy\AppData\Local\CrashDumps
2014-01-26 01:30 - 2013-06-03 18:00 - 00000000 ____D C:\Users\win-boy\AppData\Local\Nero
2014-01-26 01:14 - 2014-01-26 01:14 - 00000000 ____D C:\Windows\System32\Tasks\Nero
2014-01-26 01:14 - 2013-06-03 17:35 - 00000000 ____D C:\ProgramData\Nero
2014-01-26 01:13 - 2014-01-26 01:13 - 00002873 _____ C:\Users\Public\Desktop\Nero 2014.lnk
2014-01-26 00:52 - 2013-06-03 02:51 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-26 00:52 - 2013-06-03 02:51 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-26 00:52 - 2013-06-03 02:51 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-26 00:31 - 2014-01-26 00:31 - 00000000 _____ C:\Users\win-boy\Downloads\NeroFirstAidKit[1].zip
2014-01-25 17:55 - 2014-01-25 17:55 - 00000000 ____D C:\Program Files (x86)\Avira
2014-01-25 17:55 - 2013-11-03 01:36 - 00002075 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2014-01-25 17:48 - 2014-01-25 17:47 - 00000000 ____D C:\Users\win-boy\Avira
2014-01-25 17:48 - 2013-06-01 03:35 - 00000000 ____D C:\Users\win-boy
2014-01-25 17:47 - 2014-01-25 17:47 - 00000000 ____D C:\Users\win-boy\Neuer Ordner
2014-01-25 17:46 - 2014-01-25 17:55 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-01-25 17:46 - 2014-01-25 17:55 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-01-25 17:46 - 2014-01-25 17:55 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-01-25 17:46 - 2014-01-25 17:55 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-01-25 16:56 - 2014-01-25 16:56 - 00128420 _____ C:\Users\Public\Downloads\ComboFix.txt
2014-01-25 16:41 - 2014-01-25 15:35 - 00000000 ____D C:\Qoobox
2014-01-25 16:41 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2014-01-25 16:40 - 2014-01-25 16:40 - 00128420 _____ C:\ComboFix.txt
2014-01-25 16:32 - 2014-01-25 15:35 - 00000000 ____D C:\Windows\erdnt
2014-01-25 16:21 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2014-01-25 15:27 - 2009-07-14 06:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-24 17:40 - 2014-01-24 17:39 - 00056440 _____ C:\Users\Public\Downloads\Addition.txt
2014-01-24 17:40 - 2014-01-24 17:39 - 00043022 _____ C:\Users\Public\Downloads\FRST.txt
2014-01-24 17:34 - 2014-01-24 17:35 - 02077696 _____ (Farbar) C:\Users\Public\Downloads\FRST64.exe
2014-01-24 16:52 - 2013-06-01 10:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-24 04:40 - 2013-06-11 00:53 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-24 04:32 - 2014-01-24 04:39 - 23867560 _____ (Mozilla) C:\Users\Public\Downloads\Firefox Setup 26.0.exe
2014-01-23 18:38 - 2013-06-01 12:41 - 00000099 _____ C:\Users\Public\LMDebug.log
2014-01-22 19:42 - 2014-01-22 19:42 - 00000866 _____ C:\Users\win-boy\Desktop\Revo Uninstaller.lnk
2014-01-22 19:15 - 2014-01-22 19:15 - 00005327 _____ C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-22 19:15 - 2013-10-28 12:39 - 00000000 ____D C:\ProgramData\Oracle
2014-01-22 19:15 - 2013-10-28 12:33 - 00000000 ____D C:\Program Files (x86)\Java
2014-01-22 17:19 - 2009-07-14 03:34 - 00000635 _____ C:\Windows\win.ini
2014-01-21 01:32 - 2013-12-16 19:18 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\vlc
2014-01-19 22:20 - 2013-06-01 13:27 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\FileZilla
2014-01-16 19:51 - 2011-04-18 18:46 - 00000000 ____D C:\VueScan
2014-01-16 19:46 - 2013-06-01 23:42 - 00006476 ___SH C:\ProgramData\KGyGaAvL.sys
2014-01-16 16:18 - 2013-06-01 03:35 - 00000000 ___RD C:\Users\win-boy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-16 16:17 - 2013-06-02 01:58 - 00001029 _____ C:\Users\win-boy\Desktop\Dropbox.lnk
2014-01-16 16:17 - 2013-06-02 01:55 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-16 16:14 - 2009-07-14 05:45 - 03852608 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-16 03:03 - 2013-07-14 00:27 - 00000000 ____D C:\Windows\system32\MRT
2014-01-16 03:00 - 2013-06-01 05:00 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-15 14:11 - 2013-06-15 19:12 - 00202480 _____ C:\Users\win-boy\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-14 18:35 - 2014-01-14 18:35 - 00001095 _____ C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-01-14 18:35 - 2014-01-14 18:35 - 00001037 _____ C:\Windows\system32\TeamViewer9_Hooks.log
2014-01-14 18:35 - 2014-01-14 18:35 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2014-01-14 00:54 - 2013-06-01 22:46 - 00000000 ____D C:\Users\win-boy\AppData\Local\FRITZ!
2014-01-13 17:12 - 2014-01-13 17:09 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\TeamViewer
2014-01-13 13:49 - 2013-11-10 19:27 - 00000000 ____D C:\Program Files (x86)\sysTPL
2014-01-12 16:41 - 2013-07-31 12:57 - 00000000 ____D C:\Users\win-boy\Documents\Outlook-Dateien
2014-01-12 16:37 - 2013-07-17 15:12 - 00059392 ___SH C:\Users\win-boy\Documents\Thumbs.db
2014-01-12 06:05 - 2013-10-31 13:42 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\DVDVideoSoft
2014-01-12 05:42 - 2014-01-12 05:42 - 00001074 _____ C:\Users\Public\Desktop\Free Video to DVD Converter.lnk
2014-01-12 05:42 - 2014-01-12 05:42 - 00000895 _____ C:\Users\Public\Desktop\Free DVD Video Burner.lnk
2014-01-12 05:42 - 2013-10-31 13:42 - 00001248 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-01-08 17:36 - 2014-01-08 17:36 - 00000000 ____D C:\Users\win-boy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-01-08 17:30 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2014-01-07 19:31 - 2014-01-07 19:31 - 00000000 _____ C:\Windows\setuperr.log
2014-01-07 17:16 - 2014-01-07 17:16 - 00000704 _____ C:\Users\Public\Desktop\Sketch Drawer.lnk
2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\Windows\SysWOW64\GPhotos.scr
2014-01-04 18:09 - 2014-01-04 18:09 - 00000771 _____ C:\Users\Public\Desktop\FotoPrinter 4.5.lnk
2014-01-03 19:12 - 2013-06-01 04:10 - 00000000 ____D C:\Windows\Panther
2014-01-03 19:05 - 2014-01-03 19:05 - 00002776 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-01-03 19:05 - 2014-01-03 19:05 - 00000827 _____ C:\Users\Public\Desktop\CCleaner.lnk
2014-01-03 19:05 - 2014-01-03 19:05 - 00000000 ____D C:\Program Files\CCleaner

Files to move or delete:
====================
C:\ProgramData\PKP_DLdu.DAT


Some content of TEMP:
====================
C:\Users\win-boy\AppData\Local\Temp\avgnt.exe
C:\Users\win-boy\AppData\Local\Temp\Offercast_AVIRAV7_.exe
C:\Users\win-boy\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-19 00:03

==================== End Of Log ============================
--- --- ---

--- --- ---

--- --- ---


Problem gab's bereits vorher keine… (!) . War's das jetzt? Das war ja 'ne außerordentlich umfassende Aktion.
Soll Malwarebytes eingeschaltet bleiben?
Dublette von Chrome? Alles löschen und noch mal neu installieren? Oder was?
Flashplayer updaten?

Noch mal: für diesen Riesenaufwand bin ich sehr dankbar. Subjektiv fühlt sich die Win7-Plattform sehr sauber an (vorläufig – erst mal…). Großartig!

LG, Boy
Geändert von boyherre (28.01.2014 um 03:32 Uhr) Grund: Korrektur

Alt 28.01.2014, 15:48   #10
schrauber
/// the machine
/// TB-Ausbilder
 
Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen" - Standard

Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen"


Flash updaten, Chrome kannste so lassen.

Fertig

Falls Du Lob oder Kritik loswerden möchtest kannst Du das hier tun


Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.


Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 28.01.2014, 16:28   #11
boyherre
 
Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen" - Standard

Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen"


Ja, super! Dann sind wir fertig.
Dafür noch mal ganz großen Dank!

LG, Boy

Alt 29.01.2014, 10:50   #12
schrauber
/// the machine
/// TB-Ausbilder
 
Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen" - Standard

Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen"


Gern Geschehen
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen"
bitdefender, browser gesperrt, dsl, extension.mismatch, hiddenext/worm.gen, ie 11, kaspersky, kunde, pup.optional.getnow.a, pup.optional.livesoftaction.a, pup.optional.opencandy, pup.optional.softonic.a, pup.optional.softwareupdater, pup.optional.somoto.a, pup.software.updater, tr/atraps.gen, tr/crypt.xpack.ge, tr/crypt.xpack.gen, tr/dropper.gen, tr/spy.gen, virenscanner aus


« Windows 7 Trojana mit Avira gefunden(TR/Crypt.Xpack22716) | TR/Agent.131072.V und PHISH/PayPal.27959 wie entfernen? »


Ähnliche Themen: Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen"


  1. Trojaner? Alle installierten Browser sind mit "Roll Around" Werbeanzeigen versucht!
    Log-Analyse und Auswertung - 04.03.2015 (21)
  2. Windows 7: "HealthAlert" befällt alle Browser
    Log-Analyse und Auswertung - 25.01.2015 (13)
  3. alle Browser: Pop Up weiße Felder, about blank, PC Reparatur, weitergeleiter auf "offer...."
    Log-Analyse und Auswertung - 24.09.2014 (17)
  4. Tab "BKA hat den Browser gesperrt" lässt sich nicht schließen
    Log-Analyse und Auswertung - 22.02.2014 (17)
  5. Win 7 - Firefox - Bundespolizei "ihr browser hat gesperrt"
    Log-Analyse und Auswertung - 09.01.2014 (19)
  6. Trojaner/Virus, Firefoxfenster lässt sich nicht Schliessen "Ihr Browser hat gesperrt", Bundespolizei, Paysafe Card
    Log-Analyse und Auswertung - 07.01.2014 (10)
  7. Windows 7: Fehlermeldung "ihr browser hat gesperrt"
    Log-Analyse und Auswertung - 01.01.2014 (17)
  8. Win 8.1: Bundespolizeitrojaner "Browser gesperrt"
    Log-Analyse und Auswertung - 21.11.2013 (11)
  9. "monstermarketplace.com" Infektion und ihre Folgen; "Anti-Virus-Blocker"," unsichtbare Toolbars" + "Browser-Hijacker" von selbst installiert
    Log-Analyse und Auswertung - 16.11.2013 (21)
  10. Win7 - Firefox - "Ihr Browser hat gesperrt" - Bundespolizei
    Plagegeister aller Art und deren Bekämpfung - 11.11.2013 (15)
  11. "Die Webseite ist nicht verfügbar" (Chrome Fehler 102) - alle Browser
    Log-Analyse und Auswertung - 11.07.2013 (19)
  12. T-mobile MMS {SYMBOL}_foto.zip "HIDDENEXT/Worm.Gen" Avira Archiv geöffnet...
    Log-Analyse und Auswertung - 16.04.2013 (23)
  13. "Deutsche Post(eMail-Anhang)" Alle "EXE(Programme)" werden blockiert "WIN 7 Defender"
    Plagegeister aller Art und deren Bekämpfung - 27.12.2012 (3)
  14. "The document has moved. Redirecting"+"Popup unten rechts"+"Nicht alle Links anklickbar"
    Plagegeister aller Art und deren Bekämpfung - 24.10.2012 (38)
  15. "WORM/Conficker.AK" & "WORM/Kido.IH.40" nach USB-Stick-Anschluss durch AVIRA gefunden
    Plagegeister aller Art und deren Bekämpfung - 25.01.2011 (28)
  16. Alle 10 Minuten "Keine Rückmeldung", im Browser/Desktop, Programme...
    Log-Analyse und Auswertung - 29.08.2010 (1)
  17. Fierefox IE ... alle Browser "gehen nicht mehr" jedoch ICQ...
    Netzwerk und Hardware - 20.03.2010 (1)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen" - Hallo, da hab ich immer gedacht, ich sei ein alter Hase, der seit 1983 mit Computern arbeitet - und mir könnte ein Virus nicht passieren, so vorsichtig hab ich mich - Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen"...
Archiv
Du betrachtest: Alle Browser gesperrt, Virenscanner aus, "Hiddenext/Worm.Gen" auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19