Ich habe seit heute andauernt, egal welsche seite ich aufrufe immer wörter in Grün angezeigt und dahinter popups sitzen das nervt.
Habe auch schon einige program,e drüber laufen lassen aber bekomme den kramm nicht weg.
Hihr ist mal ein lock.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2014 04
Ran by tce (administrator) on TCE-PC on 03-02-2014 13:22:21
Running from C:\Users\tce\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(DATA BECKER GmbH & Co KG) C:\Program Files (x86)\Common Files\DATA BECKER Shared\DBService.exe
(Acer Incorporated) C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Acer Group) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
() C:\OEM\USBDECTION\USBS3S4Detection.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
() C:\Program Files (x86)\Visagesoft\eXPert PDF 6\vspdfprsrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ZTE) C:\Program Files (x86)\congstar\Internetmanager\Bin\mcserver.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
() C:\Program Files (x86)\congstar\Internetmanager\Bin\dbus-daemon.exe
() C:\Program Files (x86)\congstar\Internetmanager\Bin\gconfd-2.exe
() C:\Program Files (x86)\congstar\Internetmanager\Bin\db_daemon.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [vspdfprsrv.exe] - C:\Program Files (x86)\Visagesoft\eXPert PDF 6\vspdfprsrv.exe [1195008 2008-09-22] ()
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-2634336733-3951264793-2692642557-1001\...\Run: [ISUSPM Startup] - C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [249856 2005-06-10] (InstallShield Software Corporation)
HKU\S-1-5-21-2634336733-3951264793-2692642557-1001\...\Run: [Google Update] - C:\Users\tce\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-07-12] (Google Inc.)
HKU\S-1-5-21-2634336733-3951264793-2692642557-1001\...\MountPoints2: K - K:\Data\setup.exe
HKU\S-1-5-21-2634336733-3951264793-2692642557-1001\...\MountPoints2: {06796c20-fce0-11e1-9cc5-4487fcfa3217} - K:\pushinst.exe
HKU\S-1-5-21-2634336733-3951264793-2692642557-1003\...\Run: [msnmsgr] - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4280184 2012-03-08] (Microsoft Corporation)
HKU\S-1-5-21-2634336733-3951264793-2692642557-1003\...\Run: [Software Suite SE] - C:\Program Files (x86)\Packard Bell\Software Suite SE\SoftSuiteSE.exe [2275360 2009-09-29] (Acer Incorporated)
HKU\S-1-5-21-2634336733-3951264793-2692642557-1003\...\Run: [ISUSPM Startup] - C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [249856 2005-06-10] (InstallShield Software Corporation)
HKU\S-1-5-21-2634336733-3951264793-2692642557-1003\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-2634336733-3951264793-2692642557-1003\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [162336 2009-07-22] ()
HKU\S-1-5-21-2634336733-3951264793-2692642557-1003\...\MountPoints2: K - K:\Data\setup.exe
HKU\S-1-5-21-2634336733-3951264793-2692642557-1003\...\MountPoints2: {06796c20-fce0-11e1-9cc5-4487fcfa3217} - K:\pushinst.exe
HKU\S-1-5-21-2634336733-3951264793-2692642557-1003\...\MountPoints2: {53998c41-b656-11e1-b3fd-806e6f6e6963} - E:\AutoRun.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&m=ipower_g5800&r=17360612h306pe495v115y5711271n
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 
BHO: SNT - {4EEF4763-33D7-7166-39F6-4FD4A5F6358E} - C:\Program Files (x86)\SNT\y.x64.dll ()
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: YoutubeAdblocker - {C09616C3-6DAE-C126-41DA-53C809265478} - C:\Program Files (x86)\YoutubeAdblocker\WF4F0GPjCB.x64.dll ()
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO: greaTsaver - {EFEAB6B5-8FDF-EBC2-B47C-6508F573A127} - C:\Program Files (x86)\greaTsaver\Tt6Ad.x64.dll ()
BHO-x32: SNT - {4EEF4763-33D7-7166-39F6-4FD4A5F6358E} - C:\Program Files (x86)\SNT\y.dll ()
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: YoutubeAdblocker - {C09616C3-6DAE-C126-41DA-53C809265478} - C:\Program Files (x86)\YoutubeAdblocker\WF4F0GPjCB.dll ()
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: greaTsaver - {EFEAB6B5-8FDF-EBC2-B47C-6508F573A127} - C:\Program Files (x86)\greaTsaver\Tt6Ad.dll ()
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\tce\AppData\Roaming\Mozilla\Firefox\Profiles\isodycb8.default-1378338383939
FF Homepage: google.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @protectdisc.com/NPPDLicenseHelper - C:\Program Files (x86)\ProtectDisc\License Helper\NPPDLicenseHelper.dll ()
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\tce\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\tce\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\tce\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\tce\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\tce\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\tce\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\tce\AppData\Roaming\mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin ProgramFiles/Appdata: C:\Users\tce\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: SNT - C:\Users\tce\AppData\Roaming\Mozilla\Firefox\Profiles\isodycb8.default-1378338383939\Extensions\iouaaoio@zsueye.net [2014-01-31]
FF Extension: YoutubeAdblocker - C:\Users\tce\AppData\Roaming\Mozilla\Firefox\Profiles\isodycb8.default-1378338383939\Extensions\kb7qm@rzklla-.com [2014-01-31]
FF Extension: websave - C:\Users\tce\AppData\Roaming\Mozilla\Firefox\Profiles\isodycb8.default-1378338383939\Extensions\oiowd@wayuo.co.uk [2014-01-31]
FF Extension: WOT - C:\Users\tce\AppData\Roaming\Mozilla\Firefox\Profiles\isodycb8.default-1378338383939\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-11-29]
FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak2 [2013-12-12]
FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2 [2013-12-12]
FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files (x86)\congstar\Internetmanager\Bin\addon
FF Extension: Bytemobile Optimization Client - C:\Program Files (x86)\congstar\Internetmanager\Bin\addon [2013-10-14]
FF HKLM-x32\...\Firefox\Extensions: [{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\
FF Extension: Default Manager - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ []
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2013-09-30]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2013-09-30]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2013-09-30]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2013-09-30]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2013-09-30]

==================== Services (Whitelisted) =================

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-02] (Kaspersky Lab ZAO)
R2 DBService; C:\Program Files (x86)\Common Files\DATA BECKER Shared\DBService.exe [187456 2009-01-08] (DATA BECKER GmbH & Co KG)
R2 Greg_Service; C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe [1150496 2009-08-28] (Acer Incorporated)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 SystemExplorerHelpService; C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe [821720 2012-11-25] (Mister Group)
R2 Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [243232 2010-01-29] (Acer Group)
R2 USBS3S4Detection; C:\OEM\USBDECTION\USBS3S4Detection.exe [76320 2009-12-09] ()

==================== Drivers (Whitelisted) ====================

S1 acedrv07; C:\Windows\system32\drivers\acedrv07.sys [125440 2012-07-18] ()
R0 BMLoad; C:\Windows\System32\drivers\BMLoad.sys [16512 2009-12-15] (Bytemobile, Inc.)
S3 BrSerIf; C:\Windows\System32\DRIVERS\BrSerIf.sys [97280 2006-09-02] (Brother Industries Ltd.)
S3 HSPADataCardusbmdm; C:\Windows\System32\DRIVERS\HSPADataCardusbmdm.sys [122752 2010-02-11] (HSPADataCard Incorporated)
S3 HSPADataCardusbnmea; C:\Windows\System32\DRIVERS\HSPADataCardusbnmea.sys [122752 2010-02-11] (HSPADataCard Incorporated)
S3 HSPADataCardusbser; C:\Windows\System32\DRIVERS\HSPADataCardusbser.sys [122752 2010-02-11] (HSPADataCard Incorporated)
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2013-11-07] (Kaspersky Lab ZAO)
S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [112224 2013-06-08] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620640 2013-12-22] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-10-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-10-02] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-02] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178272 2013-12-22] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R1 tcpipBM; C:\Windows\system32\drivers\tcpipBM.sys [39552 2009-12-15] (Bytemobile, Inc.)
U3 aswMBR; \??\C:\Users\tce\AppData\Local\Temp\aswMBR.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-03 13:11 - 2014-02-03 13:11 - 02347384 _____ (ESET) C:\Users\tce\Downloads\esetsmartinstaller_enu(1).exe
2014-02-03 12:59 - 2014-02-03 12:59 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-02-03 12:58 - 2014-02-03 12:58 - 02347384 _____ (ESET) C:\Users\tce\Downloads\esetsmartinstaller_enu.exe
2014-02-03 12:41 - 2014-02-03 12:41 - 00001085 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-03 12:41 - 2014-02-03 12:41 - 00000000 ____D () C:\Users\tce\AppData\Roaming\Malwarebytes
2014-02-03 12:41 - 2014-02-03 12:41 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-03 12:41 - 2014-02-03 12:41 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-03 12:41 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-03 12:40 - 2014-02-03 12:40 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\tce\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-03 12:08 - 2014-02-03 12:50 - 00000280 _____ () C:\Windows\setupact.log
2014-02-03 12:08 - 2014-02-03 12:08 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-03 11:55 - 2014-02-03 11:55 - 00000000 ____D () C:\Windows\ERUNT
2014-02-03 11:53 - 2014-02-03 12:25 - 00034479 _____ () C:\Users\tce\Desktop\Addition.txt
2014-02-03 11:53 - 2014-02-03 11:53 - 01037068 _____ (Thisisu) C:\Users\tce\Desktop\JRT.exe
2014-02-03 11:45 - 2014-02-03 13:22 - 00018858 _____ () C:\Users\tce\Desktop\FRST.txt
2014-02-03 11:37 - 2014-02-03 11:37 - 00034256 _____ () C:\Users\tce\Downloads\Addition.txt
2014-02-03 11:36 - 2014-02-03 13:22 - 00000000 ____D () C:\FRST
2014-02-03 11:36 - 2014-02-03 11:37 - 00058315 _____ () C:\Users\tce\Downloads\FRST.txt
2014-02-03 11:35 - 2014-02-03 11:36 - 02080256 _____ (Farbar) C:\Users\tce\Desktop\FRST64.exe
2014-02-03 11:21 - 2014-02-03 11:21 - 00725770 _____ () C:\Users\tce\Documents\copy_agent2[1].exe
2014-02-03 11:17 - 2014-02-03 12:03 - 00006861 _____ () C:\Users\tce\Documents\aswMBR.txt
2014-02-03 11:17 - 2014-02-03 12:03 - 00000512 _____ () C:\Users\tce\Documents\MBR.dat
2014-02-03 10:57 - 2014-02-03 10:57 - 04745728 _____ (AVAST Software) C:\Users\tce\Desktop\aswMBR.exe
2014-02-03 00:10 - 2014-02-03 00:10 - 00000000 ____D () C:\Users\tce\AppData\Local\{0076DD7B-057A-4456-9F59-09072BA395F7}
2014-02-02 12:09 - 2014-02-02 12:09 - 00000000 ____D () C:\Users\tce\AppData\Local\{26D4C4C2-5239-4E9E-B87C-B3DC49E8FDCF}
2014-02-02 04:15 - 2014-02-02 04:15 - 00000000 ____D () C:\Users\tce\AppData\Local\Microsoft Corporation
2014-02-02 04:14 - 2014-02-02 04:14 - 00002087 _____ () C:\Users\Public\Desktop\Windows 7 Upgrade Advisor.lnk
2014-02-02 04:14 - 2014-02-02 04:14 - 00000000 ____D () C:\Program Files (x86)\Microsoft Windows 7 Upgrade Advisor
2014-02-02 04:13 - 2014-02-02 04:13 - 08676128 _____ (Microsoft Corporation) C:\Users\tce\Downloads\Windows7UpgradeAdvisorSetup.exe
2014-02-02 00:14 - 2014-02-02 00:16 - 24394803 _____ () C:\Users\tce\Desktop\torbrowser-install-3.5.1_de.exe
2014-02-01 17:33 - 2014-02-01 17:34 - 00000000 ____D () C:\Users\tce\AppData\Local\{19A5D0F7-7DE2-4FB0-8A79-F6E66E54BB5D}
2014-02-01 05:33 - 2014-02-01 05:33 - 00000000 ____D () C:\Users\tce\AppData\Local\{C00E03B3-6675-47AE-983C-0A294BA5CC7A}
2014-01-31 19:43 - 2014-01-31 19:43 - 00000000 ____D () C:\ProgramData\SNT
2014-01-31 19:43 - 2014-01-31 19:43 - 00000000 ____D () C:\ProgramData\SetApp
2014-01-31 19:43 - 2014-01-31 19:43 - 00000000 ____D () C:\Program Files (x86)\SNT
2014-01-31 19:42 - 2014-01-31 19:42 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-01-31 19:41 - 2014-01-31 19:43 - 00000000 ____D () C:\ProgramData\f664f9ea7cf0e39e
2014-01-31 19:41 - 2014-01-31 19:42 - 00000000 ____D () C:\ProgramData\YoutubeAdblocker
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Google
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Comodo
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\tce\AppData\Local\Packages
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\tce\AppData\Local\Comodo
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Torch
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Gast\AppData\Local\Torch
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Gast
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Administrator
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\ProgramData\greaTsaver
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Program Files (x86)\YoutubeAdblocker
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Program Files (x86)\greaTsaver
2014-01-31 19:40 - 2014-01-31 19:43 - 00000000 ____D () C:\ProgramData\InstallMate
2014-01-31 18:14 - 2014-01-31 18:14 - 00593920 _____ (UpMyRank.com) C:\Users\tce\Downloads\upmyrank.exe
2014-01-31 17:33 - 2014-01-31 17:33 - 00000000 ____D () C:\Users\tce\AppData\Local\{41A280A9-EA15-4A95-8746-5C77F7270E21}
2014-01-30 22:25 - 2014-01-30 22:25 - 00000000 ____D () C:\Users\tce\AppData\Local\{F404833B-E474-4BE9-B224-8BD6798F8E55}
2014-01-30 10:25 - 2014-01-30 10:25 - 00000000 ____D () C:\Users\tce\AppData\Local\{5394E0D6-2B40-4DB3-9EBC-E4398A13831A}
2014-01-29 16:38 - 2014-01-29 16:38 - 00000000 ____D () C:\Users\tce\AppData\Local\{CEE9ACAF-AC3D-4AEB-B01C-1DABA017678D}
2014-01-28 21:39 - 2014-01-28 21:39 - 00000000 ____D () C:\Users\tce\AppData\Local\{60E1B840-440F-45A9-A401-DFDC3DA6D083}
2014-01-28 16:35 - 2014-01-28 16:35 - 00046735 _____ () C:\Users\tce\Downloads\akeebabackup-de-DE-j25(4).zip
2014-01-28 09:38 - 2014-01-28 09:38 - 00000000 ____D () C:\Users\tce\AppData\Local\{47E8D966-09E8-4FCD-A694-8F571A90DFDE}
2014-01-27 22:38 - 2014-01-28 01:31 - 00000000 ____D () C:\Users\tce\Documents\ws
2014-01-27 22:33 - 2014-01-27 22:33 - 00000048 _____ () C:\Users\tce\Documents\redirectMatch 301.txt
2014-01-27 16:26 - 2014-01-27 16:27 - 00000000 ____D () C:\Users\tce\AppData\Local\{84821FF8-85F9-4C93-9ED4-F0396EBCDC70}
2014-01-27 13:26 - 2014-01-27 13:26 - 00000032 _____ () C:\Users\tce\Downloads\mywotb97cbeae237e1a373b40.html
2014-01-27 13:24 - 2014-01-27 13:24 - 00000032 _____ () C:\Users\tce\Downloads\mywot91fc61000da8ff2552cd(1).html
2014-01-27 13:21 - 2014-01-27 13:21 - 00000032 _____ () C:\Users\tce\Downloads\mywot91fc61000da8ff2552cd.html
2014-01-27 13:20 - 2014-01-27 13:20 - 00000032 _____ () C:\Users\tce\Downloads\mywot81b4811265d92e7695b8.html
2014-01-27 13:14 - 2014-01-27 13:14 - 00000032 _____ () C:\Users\tce\Downloads\mywote0d1c035b8bd39a7685c(1).html
2014-01-27 13:03 - 2014-01-27 13:03 - 00000032 _____ () C:\Users\tce\Downloads\mywote0d1c035b8bd39a7685c.html
2014-01-27 03:41 - 2014-01-27 03:42 - 00000000 ____D () C:\Users\tce\AppData\Local\{CBBF711F-5E15-4348-95BE-F197FC2992F8}
2014-01-26 11:20 - 2014-01-26 11:20 - 00000000 ____D () C:\Users\tce\AppData\Local\{EFDE82EC-729E-4E39-AC62-FC9931D38518}
2014-01-25 22:53 - 2014-01-25 22:54 - 00000000 ____D () C:\Users\tce\AppData\Local\{D3AEE9C3-4B7C-4882-80CE-9A91F0EB4A1C}
2014-01-25 10:53 - 2014-01-25 10:53 - 00000000 ____D () C:\Users\tce\AppData\Local\{8051F8C4-2590-4C53-BC03-A2D2066A4CA1}
2014-01-24 22:52 - 2014-01-24 22:53 - 00000000 ____D () C:\Users\tce\AppData\Local\{FEFBE3EB-B727-4881-BFC3-2C1AD23D5950}
2014-01-24 10:52 - 2014-01-24 10:52 - 00000000 ____D () C:\Users\tce\AppData\Local\{AF5D803B-37E4-448C-8EC5-1E54C44700F0}
2014-01-23 22:52 - 2014-01-23 22:52 - 00000000 ____D () C:\Users\tce\AppData\Local\{846A37B2-AF60-49DF-BDAA-843FB21588D8}
2014-01-23 10:51 - 2014-01-23 10:52 - 00000000 ____D () C:\Users\tce\AppData\Local\{5B471AA8-1BA2-4D7B-A760-2A5B62467D68}
2014-01-22 22:51 - 2014-01-22 22:51 - 00000000 ____D () C:\Users\tce\AppData\Local\{AE0145E4-CA32-4C85-BD3F-9803374460DD}
2014-01-22 10:51 - 2014-01-22 10:51 - 00000000 ____D () C:\Users\tce\AppData\Local\{6D152136-C7BA-4666-9C86-0A24D271F9FF}
2014-01-21 21:42 - 2014-01-21 21:45 - 00000000 ____D () C:\Users\tce\pdf
2014-01-21 20:56 - 2014-01-22 00:07 - 00002491 _____ () C:\Users\Public\Desktop\Safari.lnk
2014-01-21 20:56 - 2014-01-21 20:56 - 00000000 ____D () C:\Program Files (x86)\Safari
2014-01-21 13:07 - 2014-01-21 13:07 - 00000000 ____D () C:\Users\tce\AppData\Local\{3C85DE14-8C90-47B4-9FB3-C80A4EACDCAA}
2014-01-21 01:06 - 2014-01-21 01:07 - 00000000 ____D () C:\Users\tce\AppData\Local\{C3F9D655-5126-40F3-AD28-0338ED1E2023}
2014-01-20 18:10 - 2014-01-22 00:18 - 00000000 ____D () C:\Users\tce\kopie_vddh
2014-01-20 13:06 - 2014-01-20 13:06 - 00000000 ____D () C:\Users\tce\AppData\Local\{3A11E87B-0729-4D3E-8F55-4A8856EF918F}
2014-01-20 11:35 - 2014-01-20 11:35 - 00002768 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-01-20 11:35 - 2014-01-20 11:35 - 00000834 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-01-20 11:35 - 2014-01-20 11:35 - 00000000 ____D () C:\Program Files\CCleaner
2014-01-20 11:34 - 2014-01-20 11:34 - 03571656 _____ (Piriform Ltd) C:\Users\tce\Downloads\ccsetup409_slim.exe
2014-01-20 10:58 - 2014-01-20 10:58 - 00000053 _____ () C:\Users\tce\Documents\googlef2dfc86b5fd1e0fa.html
2014-01-20 00:25 - 2014-01-20 00:26 - 00000000 ____D () C:\Users\tce\AppData\Local\{FC2EDD28-5FB0-44A5-8703-AE2AA68E7AB5}
2014-01-19 23:45 - 2014-01-19 23:45 - 00001062 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-01-19 18:22 - 2014-01-19 18:22 - 00000162 ____H () C:\Users\tce\Documents\~$htt.txt
2014-01-19 18:21 - 2014-01-19 18:22 - 00000002 _____ () C:\Users\tce\Documents\htt.txt
2014-01-19 15:43 - 2014-01-19 15:43 - 00001282 _____ () C:\Users\tce\Documents\mein.txt
2014-01-19 15:43 - 2014-01-19 15:43 - 00000162 ____H () C:\Users\tce\Documents\~$mein.txt
2014-01-19 15:42 - 2014-01-19 15:42 - 00000069 _____ () C:\Users\tce\Documents\link href.txt
2014-01-19 14:44 - 2014-01-19 14:44 - 00001388 _____ () C:\Users\tce\Downloads\template_css.zip
2014-01-19 12:25 - 2014-01-19 12:25 - 00000000 ____D () C:\Users\tce\AppData\Local\{D044E9C3-B00A-40F8-A2E3-BB0358868368}
2014-01-18 14:34 - 2014-01-18 14:34 - 00000000 ____D () C:\Users\tce\AppData\Local\{CCC2931F-E9A3-4FDA-8476-8F535AB7968A}
2014-01-18 13:09 - 2014-01-18 13:23 - 00000070 _____ () C:\Users\tce\Downloads\NeueDatei.js
2014-01-18 13:09 - 2014-01-18 13:09 - 00000000 _____ () C:\Users\tce\Downloads\NeueDatei(1).js
2014-01-18 12:23 - 2014-01-18 14:32 - 00000000 ____D () C:\Users\tce\Desktop\auslagern
2014-01-18 12:19 - 2014-01-18 12:19 - 00096888 _____ () C:\Users\tce\Desktop\mein.js
2014-01-17 14:16 - 2014-01-17 14:16 - 00000000 ____D () C:\Users\tce\AppData\Local\{BD0C3046-2D4D-436F-B2EB-94A11BAD9DDD}
2014-01-17 02:16 - 2014-01-17 02:16 - 00000000 ____D () C:\Users\tce\AppData\Local\{0DB754C2-AA2F-425F-B0C1-EB9F7F0A8620}
2014-01-16 12:31 - 2014-01-16 13:24 - 00000046 _____ () C:\Windows\hmview.ini
2014-01-16 02:09 - 2014-01-16 02:09 - 00005452 _____ () C:\Users\tce\Desktop\index.php
2014-01-16 01:36 - 2014-01-16 02:08 - 00000064 _____ () C:\Users\tce\Desktop\main.js
2014-01-15 23:01 - 2014-01-15 23:02 - 00000000 ____D () C:\Users\tce\AppData\Local\{1CDE988A-0F21-4B9F-8366-BCE392B12831}
2014-01-15 21:16 - 2014-01-15 21:16 - 00139674 _____ () C:\Users\tce\Documents\Tassi, 15.01.14anwalt
2014-01-15 11:01 - 2014-01-15 11:01 - 00000000 ____D () C:\Users\tce\AppData\Local\{9FCC3157-E4B8-4BA1-9B4E-239D34456F05}
2014-01-15 07:19 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 07:19 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 07:19 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 07:19 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 07:19 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 07:19 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 07:19 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 07:19 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 07:19 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-14 23:01 - 2014-01-14 23:01 - 00000000 ____D () C:\Users\tce\AppData\Local\{5FB63EEA-0203-4178-857F-1A14494E8916}
2014-01-14 22:40 - 2014-01-14 22:40 - 00000000 ____D () C:\Users\tce\Downloads\impresscms_1.3.5_final_de
2014-01-14 22:31 - 2014-01-14 22:31 - 12545683 _____ () C:\Users\tce\Downloads\impresscms_1.3.5_final_de.zip
2014-01-14 21:42 - 2014-01-14 21:42 - 00568764 _____ () C:\Users\tce\Downloads\pt_lacuanda_free.zip
2014-01-14 21:42 - 2014-01-14 21:42 - 00000000 ____D () C:\Users\tce\Downloads\pt_lacuanda_free
2014-01-14 18:50 - 2014-01-14 18:54 - 00000000 ____D () C:\Users\tce\Documents\Zeta Producer 11
2014-01-14 18:47 - 2014-01-14 18:48 - 46280072 _____ (Zeta Software GmbH) C:\Users\tce\Downloads\zp11-setup-de.exe
2014-01-14 18:19 - 2014-01-14 18:19 - 00091227 _____ () C:\Users\tce\Downloads\facebooklikeboxgeniuspro_unzip1st_v1.3(1).zip
2014-01-14 18:16 - 2014-01-14 18:16 - 00000000 ____D () C:\Users\tce\Downloads\mod_fblikeboxslider
2014-01-14 18:15 - 2014-01-14 18:15 - 00016362 _____ () C:\Users\tce\Downloads\mod_fblikeboxslider.zip
2014-01-14 18:08 - 2014-01-14 18:12 - 00000000 ____D () C:\Users\tce\Downloads\facebooklikeboxgeniuspro_unzip1st_v1.3
2014-01-14 18:08 - 2014-01-14 18:08 - 00091227 _____ () C:\Users\tce\Downloads\facebooklikeboxgeniuspro_unzip1st_v1.3.zip
2014-01-14 18:02 - 2014-01-14 18:02 - 00009671 _____ () C:\Users\tce\Downloads\mod_fbslider_j2.5.zip
2014-01-14 18:02 - 2014-01-14 18:02 - 00000000 ____D () C:\Users\tce\Downloads\mod_google_profile_card
2014-01-14 18:02 - 2014-01-14 18:02 - 00000000 ____D () C:\Users\tce\Downloads\mod_fbslider_j2.5
2014-01-14 18:01 - 2014-01-14 18:01 - 00002840 _____ () C:\Users\tce\Downloads\mod_google_profile_card.zip
2014-01-14 17:09 - 2014-01-14 17:09 - 00027757 _____ () C:\Users\tce\Downloads\plg_asyncsocialbuttons_1.5_UNZIPFIRST.zip
2014-01-14 17:09 - 2014-01-14 17:09 - 00000000 ____D () C:\Users\tce\Downloads\plg_asyncsocialbuttons_1.5_UNZIPFIRST
2014-01-14 11:00 - 2014-01-14 11:01 - 00000000 ____D () C:\Users\tce\AppData\Local\{366EAF48-B265-4C07-8521-8B6E768FF159}
2014-01-13 21:07 - 2014-01-13 21:07 - 00006568 _____ () C:\Users\tce\index.html
2014-01-13 20:47 - 2014-01-13 20:48 - 00000000 ____D () C:\Users\tce\AppData\Local\{A84CB12A-CB5E-4215-9B1E-FC6338E56AA5}
2014-01-13 08:47 - 2014-01-13 08:47 - 00000000 ____D () C:\Users\tce\AppData\Local\{4516647E-F9BC-42E0-B5B8-5CCDF3C8C665}
2014-01-12 13:15 - 2014-01-20 10:22 - 00000000 ____D () C:\Users\tce\Documents\Neu_VDDH_duesseldorf
2014-01-12 13:05 - 2014-01-12 13:05 - 00000000 ____D () C:\Users\tce\AppData\Local\{FFC86E59-C6FA-451A-B169-D804FA5A7659}
2014-01-12 02:23 - 2014-01-27 12:15 - 00000000 ____D () C:\Users\tce\Documents\VDDH_EV
2014-01-11 12:16 - 2014-01-11 12:16 - 00000000 ____D () C:\Users\tce\AppData\Local\{FCB36050-7420-46B6-AA6A-E64DDDC8C589}
2014-01-11 00:15 - 2014-01-11 00:16 - 00000000 ____D () C:\Users\tce\AppData\Local\{924F24E2-D6E4-49B3-9BA9-3586C16C9A1F}
2014-01-10 12:15 - 2014-01-10 12:15 - 00000000 ____D () C:\Users\tce\AppData\Local\{D6D8B26D-1619-45DD-825D-A8D5AB696ABC}
2014-01-09 21:36 - 2014-01-09 21:37 - 00000000 ____D () C:\Users\tce\Downloads\direkhosting123
2014-01-09 20:17 - 2014-01-09 20:18 - 00000000 ____D () C:\Users\tce\AppData\Local\{E6972426-0CA6-4E92-BA8D-4E48A8C9A234}
2014-01-09 08:17 - 2014-01-09 08:17 - 00000000 ____D () C:\Users\tce\AppData\Local\{3C98300A-FD04-4556-9BFD-D3B42FA99493}
2014-01-08 20:16 - 2014-01-08 20:17 - 00000000 ____D () C:\Users\tce\AppData\Local\{3D455830-9467-4ACB-B54D-BB9B3D1C0829}
2014-01-08 08:16 - 2014-01-08 08:16 - 00000000 ____D () C:\Users\tce\AppData\Local\{37D0DF06-1EB0-40E2-A4F7-4584A77178CD}
2014-01-07 20:16 - 2014-01-07 20:16 - 00000000 ____D () C:\Users\tce\AppData\Local\{2F8CFCAB-4B83-413C-A5E2-D2D2E379F70E}
2014-01-06 22:43 - 2014-01-06 22:44 - 00000000 ____D () C:\Users\tce\Downloads\Joomla_2.5.17-Stable-Full_Package_German
2014-01-06 22:42 - 2014-01-06 22:43 - 08249873 _____ () C:\Users\tce\Downloads\Joomla_2.5.17-Stable-Full_Package_German.zip
2014-01-06 09:08 - 2014-01-06 09:09 - 00000000 ____D () C:\Users\tce\AppData\Local\{4387E77E-72CC-4E23-8CA0-AA722E9229D1}
2014-01-05 21:08 - 2014-01-05 21:08 - 00000000 ____D () C:\Users\tce\AppData\Local\{75C31A5C-869A-4D76-B306-502F0D2F9958}
2014-01-05 08:56 - 2014-01-05 08:56 - 00000000 ____D () C:\Users\tce\AppData\Local\{07A406D7-771C-4987-9FCD-C5F882382BB2}
2014-01-04 20:55 - 2014-01-04 20:56 - 00000000 ____D () C:\Users\tce\AppData\Local\{42FA1417-7139-40F8-B535-9619ED3D6EC1}
2014-01-04 20:24 - 2014-01-04 20:40 - 00000000 ____D () C:\Users\tce\AppData\Roaming\Ahnenblatt
2014-01-04 20:24 - 2014-01-04 20:24 - 00001901 _____ () C:\Users\tce\Desktop\Ahnenblatt.lnk
2014-01-04 20:24 - 2014-01-04 20:24 - 00000000 ____D () C:\Users\tce\Documents\Ahnenblatt
2014-01-04 20:24 - 2014-01-04 20:24 - 00000000 ____D () C:\Users\tce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ahnenblatt
2014-01-04 20:24 - 2014-01-04 20:24 - 00000000 ____D () C:\Program Files (x86)\Ahnenblatt
2014-01-04 20:23 - 2014-01-04 20:23 - 04707624 _____ (Dirk Boettcher ) C:\Users\tce\Downloads\absetup_2.74.exe
2014-01-04 08:55 - 2014-01-04 08:55 - 00000000 ____D () C:\Users\tce\AppData\Local\{77110533-F3A9-46FA-A2F2-4BFCD56841D2}

==================== One Month Modified Files and Folders =======

2014-02-03 13:22 - 2014-02-03 11:45 - 00018858 _____ () C:\Users\tce\Desktop\FRST.txt
2014-02-03 13:22 - 2014-02-03 11:36 - 00000000 ____D () C:\FRST
2014-02-03 13:19 - 2013-08-20 11:03 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2634336733-3951264793-2692642557-1001UA.job
2014-02-03 13:12 - 2012-06-14 22:37 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-03 13:11 - 2014-02-03 13:11 - 02347384 _____ (ESET) C:\Users\tce\Downloads\esetsmartinstaller_enu(1).exe
2014-02-03 13:07 - 2012-10-12 12:26 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-02-03 12:59 - 2014-02-03 12:59 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-02-03 12:58 - 2014-02-03 12:58 - 02347384 _____ (ESET) C:\Users\tce\Downloads\esetsmartinstaller_enu.exe
2014-02-03 12:58 - 2009-07-14 05:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-03 12:58 - 2009-07-14 05:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-03 12:51 - 2012-06-14 21:38 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-03 12:51 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-03 12:50 - 2014-02-03 12:08 - 00000280 _____ () C:\Windows\setupact.log
2014-02-03 12:50 - 2012-06-14 20:34 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-03 12:41 - 2014-02-03 12:41 - 00001085 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-03 12:41 - 2014-02-03 12:41 - 00000000 ____D () C:\Users\tce\AppData\Roaming\Malwarebytes
2014-02-03 12:41 - 2014-02-03 12:41 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-03 12:41 - 2014-02-03 12:41 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-03 12:40 - 2014-02-03 12:40 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\tce\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-03 12:35 - 2012-06-14 20:25 - 01807598 _____ () C:\Windows\WindowsUpdate.log
2014-02-03 12:31 - 2012-06-14 21:38 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-03 12:25 - 2014-02-03 11:53 - 00034479 _____ () C:\Users\tce\Desktop\Addition.txt
2014-02-03 12:08 - 2014-02-03 12:08 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-03 12:07 - 2012-07-14 16:53 - 00000000 ____D () C:\Windows\Minidump
2014-02-03 12:03 - 2014-02-03 11:17 - 00006861 _____ () C:\Users\tce\Documents\aswMBR.txt
2014-02-03 12:03 - 2014-02-03 11:17 - 00000512 _____ () C:\Users\tce\Documents\MBR.dat
2014-02-03 11:55 - 2014-02-03 11:55 - 00000000 ____D () C:\Windows\ERUNT
2014-02-03 11:53 - 2014-02-03 11:53 - 01037068 _____ (Thisisu) C:\Users\tce\Desktop\JRT.exe
2014-02-03 11:37 - 2014-02-03 11:37 - 00034256 _____ () C:\Users\tce\Downloads\Addition.txt
2014-02-03 11:37 - 2014-02-03 11:36 - 00058315 _____ () C:\Users\tce\Downloads\FRST.txt
2014-02-03 11:36 - 2014-02-03 11:35 - 02080256 _____ (Farbar) C:\Users\tce\Desktop\FRST64.exe
2014-02-03 11:21 - 2014-02-03 11:21 - 00725770 _____ () C:\Users\tce\Documents\copy_agent2[1].exe
2014-02-03 10:57 - 2014-02-03 10:57 - 04745728 _____ (AVAST Software) C:\Users\tce\Desktop\aswMBR.exe
2014-02-03 02:24 - 2012-06-15 13:53 - 00000000 ____D () C:\Users\tce\AppData\Roaming\FileZilla
2014-02-03 01:19 - 2013-08-20 11:03 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2634336733-3951264793-2692642557-1001Core.job
2014-02-03 00:10 - 2014-02-03 00:10 - 00000000 ____D () C:\Users\tce\AppData\Local\{0076DD7B-057A-4456-9F59-09072BA395F7}
2014-02-02 12:09 - 2014-02-02 12:09 - 00000000 ____D () C:\Users\tce\AppData\Local\{26D4C4C2-5239-4E9E-B87C-B3DC49E8FDCF}
2014-02-02 04:15 - 2014-02-02 04:15 - 00000000 ____D () C:\Users\tce\AppData\Local\Microsoft Corporation
2014-02-02 04:14 - 2014-02-02 04:14 - 00002087 _____ () C:\Users\Public\Desktop\Windows 7 Upgrade Advisor.lnk
2014-02-02 04:14 - 2014-02-02 04:14 - 00000000 ____D () C:\Program Files (x86)\Microsoft Windows 7 Upgrade Advisor
2014-02-02 04:13 - 2014-02-02 04:13 - 08676128 _____ (Microsoft Corporation) C:\Users\tce\Downloads\Windows7UpgradeAdvisorSetup.exe
2014-02-02 00:16 - 2014-02-02 00:14 - 24394803 _____ () C:\Users\tce\Desktop\torbrowser-install-3.5.1_de.exe
2014-02-01 17:34 - 2014-02-01 17:33 - 00000000 ____D () C:\Users\tce\AppData\Local\{19A5D0F7-7DE2-4FB0-8A79-F6E66E54BB5D}
2014-02-01 05:33 - 2014-02-01 05:33 - 00000000 ____D () C:\Users\tce\AppData\Local\{C00E03B3-6675-47AE-983C-0A294BA5CC7A}
2014-01-31 19:43 - 2014-01-31 19:43 - 00000000 ____D () C:\ProgramData\SNT
2014-01-31 19:43 - 2014-01-31 19:43 - 00000000 ____D () C:\ProgramData\SetApp
2014-01-31 19:43 - 2014-01-31 19:43 - 00000000 ____D () C:\Program Files (x86)\SNT
2014-01-31 19:43 - 2014-01-31 19:41 - 00000000 ____D () C:\ProgramData\f664f9ea7cf0e39e
2014-01-31 19:43 - 2014-01-31 19:40 - 00000000 ____D () C:\ProgramData\InstallMate
2014-01-31 19:42 - 2014-01-31 19:42 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-01-31 19:42 - 2014-01-31 19:41 - 00000000 ____D () C:\ProgramData\YoutubeAdblocker
2014-01-31 19:42 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-01-31 19:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Google
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Comodo
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\tce\AppData\Local\Packages
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\tce\AppData\Local\Comodo
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Torch
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Gast\AppData\Local\Torch
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Gast
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Administrator
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\ProgramData\greaTsaver
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Program Files (x86)\YoutubeAdblocker
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Program Files (x86)\greaTsaver
2014-01-31 19:41 - 2012-06-14 21:21 - 00000000 ____D () C:\Users\tce\AppData\Local\Google
2014-01-31 19:38 - 2010-05-11 01:34 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-01-31 18:14 - 2014-01-31 18:14 - 00593920 _____ (UpMyRank.com) C:\Users\tce\Downloads\upmyrank.exe
2014-01-31 17:33 - 2014-01-31 17:33 - 00000000 ____D () C:\Users\tce\AppData\Local\{41A280A9-EA15-4A95-8746-5C77F7270E21}
2014-01-30 23:00 - 2012-06-14 22:22 - 00000563 _____ () C:\Windows\ulead32.ini
2014-01-30 22:25 - 2014-01-30 22:25 - 00000000 ____D () C:\Users\tce\AppData\Local\{F404833B-E474-4BE9-B224-8BD6798F8E55}
2014-01-30 10:25 - 2014-01-30 10:25 - 00000000 ____D () C:\Users\tce\AppData\Local\{5394E0D6-2B40-4DB3-9EBC-E4398A13831A}
2014-01-29 16:38 - 2014-01-29 16:38 - 00000000 ____D () C:\Users\tce\AppData\Local\{CEE9ACAF-AC3D-4AEB-B01C-1DABA017678D}
2014-01-29 08:33 - 2013-03-15 08:50 - 00002147 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-28 21:39 - 2014-01-28 21:39 - 00000000 ____D () C:\Users\tce\AppData\Local\{60E1B840-440F-45A9-A401-DFDC3DA6D083}
2014-01-28 16:35 - 2014-01-28 16:35 - 00046735 _____ () C:\Users\tce\Downloads\akeebabackup-de-DE-j25(4).zip
2014-01-28 15:15 - 2012-06-17 17:23 - 00000030 _____ () C:\Windows\Iedit_.INI
2014-01-28 15:09 - 2013-03-03 17:29 - 01643520 ___SH () C:\Users\tce\Thumbs.db
2014-01-28 12:46 - 2012-06-14 20:35 - 00000000 ____D () C:\Users\tce
2014-01-28 09:38 - 2014-01-28 09:38 - 00000000 ____D () C:\Users\tce\AppData\Local\{47E8D966-09E8-4FCD-A694-8F571A90DFDE}
2014-01-28 01:31 - 2014-01-27 22:38 - 00000000 ____D () C:\Users\tce\Documents\ws
2014-01-27 22:33 - 2014-01-27 22:33 - 00000048 _____ () C:\Users\tce\Documents\redirectMatch 301.txt
2014-01-27 19:29 - 2012-06-19 20:21 - 00000000 ____D () C:\Users\tce\AppData\Roaming\Skype
2014-01-27 16:27 - 2014-01-27 16:26 - 00000000 ____D () C:\Users\tce\AppData\Local\{84821FF8-85F9-4C93-9ED4-F0396EBCDC70}
2014-01-27 13:26 - 2014-01-27 13:26 - 00000032 _____ () C:\Users\tce\Downloads\mywotb97cbeae237e1a373b40.html
2014-01-27 13:24 - 2014-01-27 13:24 - 00000032 _____ () C:\Users\tce\Downloads\mywot91fc61000da8ff2552cd(1).html
2014-01-27 13:21 - 2014-01-27 13:21 - 00000032 _____ () C:\Users\tce\Downloads\mywot91fc61000da8ff2552cd.html
2014-01-27 13:20 - 2014-01-27 13:20 - 00000032 _____ () C:\Users\tce\Downloads\mywot81b4811265d92e7695b8.html
2014-01-27 13:14 - 2014-01-27 13:14 - 00000032 _____ () C:\Users\tce\Downloads\mywote0d1c035b8bd39a7685c(1).html
2014-01-27 13:03 - 2014-01-27 13:03 - 00000032 _____ () C:\Users\tce\Downloads\mywote0d1c035b8bd39a7685c.html
2014-01-27 12:15 - 2014-01-12 02:23 - 00000000 ____D () C:\Users\tce\Documents\VDDH_EV
2014-01-27 03:42 - 2014-01-27 03:41 - 00000000 ____D () C:\Users\tce\AppData\Local\{CBBF711F-5E15-4348-95BE-F197FC2992F8}
2014-01-26 11:20 - 2014-01-26 11:20 - 00000000 ____D () C:\Users\tce\AppData\Local\{EFDE82EC-729E-4E39-AC62-FC9931D38518}
2014-01-26 00:31 - 2012-06-15 09:11 - 00000000 ____D () C:\Users\tce\AppData\Local\Adobe
2014-01-26 00:31 - 2012-06-14 22:37 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-26 00:31 - 2012-06-14 22:37 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-26 00:31 - 2012-06-14 22:37 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-26 00:18 - 2013-07-11 21:41 - 00000000 ____D () C:\Users\tce\Documents\vddh
2014-01-25 22:54 - 2014-01-25 22:53 - 00000000 ____D () C:\Users\tce\AppData\Local\{D3AEE9C3-4B7C-4882-80CE-9A91F0EB4A1C}
2014-01-25 10:53 - 2014-01-25 10:53 - 00000000 ____D () C:\Users\tce\AppData\Local\{8051F8C4-2590-4C53-BC03-A2D2066A4CA1}
2014-01-24 22:53 - 2014-01-24 22:52 - 00000000 ____D () C:\Users\tce\AppData\Local\{FEFBE3EB-B727-4881-BFC3-2C1AD23D5950}
2014-01-24 21:21 - 2012-06-14 21:38 - 00000000 ____D () C:\Users\tce\AppData\Roaming\Mozilla
2014-01-24 12:47 - 2013-07-29 12:54 - 00000000 ____D () C:\Unbenannte Site 2
2014-01-24 11:12 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-01-24 11:08 - 2013-01-06 19:48 - 00000000 ____D () C:\Users\tce\AppData\Roaming\EurekaLog
2014-01-24 10:52 - 2014-01-24 10:52 - 00000000 ____D () C:\Users\tce\AppData\Local\{AF5D803B-37E4-448C-8EC5-1E54C44700F0}
2014-01-23 22:52 - 2014-01-23 22:52 - 00000000 ____D () C:\Users\tce\AppData\Local\{846A37B2-AF60-49DF-BDAA-843FB21588D8}
2014-01-23 10:52 - 2014-01-23 10:51 - 00000000 ____D () C:\Users\tce\AppData\Local\{5B471AA8-1BA2-4D7B-A760-2A5B62467D68}
2014-01-22 22:51 - 2014-01-22 22:51 - 00000000 ____D () C:\Users\tce\AppData\Local\{AE0145E4-CA32-4C85-BD3F-9803374460DD}
2014-01-22 10:51 - 2014-01-22 10:51 - 00000000 ____D () C:\Users\tce\AppData\Local\{6D152136-C7BA-4666-9C86-0A24D271F9FF}
2014-01-22 00:18 - 2014-01-20 18:10 - 00000000 ____D () C:\Users\tce\kopie_vddh
2014-01-22 00:07 - 2014-01-21 20:56 - 00002491 _____ () C:\Users\Public\Desktop\Safari.lnk
2014-01-21 21:45 - 2014-01-21 21:42 - 00000000 ____D () C:\Users\tce\pdf
2014-01-21 21:26 - 2012-12-30 15:55 - 00000000 ____D () C:\Users\tce\AppData\Roaming\Apple Computer
2014-01-21 21:00 - 2012-12-30 15:55 - 00000000 ____D () C:\Users\tce\AppData\Local\Apple Computer
2014-01-21 20:56 - 2014-01-21 20:56 - 00000000 ____D () C:\Program Files (x86)\Safari
2014-01-21 13:07 - 2014-01-21 13:07 - 00000000 ____D () C:\Users\tce\AppData\Local\{3C85DE14-8C90-47B4-9FB3-C80A4EACDCAA}
2014-01-21 01:07 - 2014-01-21 01:06 - 00000000 ____D () C:\Users\tce\AppData\Local\{C3F9D655-5126-40F3-AD28-0338ED1E2023}
2014-01-20 16:57 - 2009-07-14 05:45 - 00483784 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-20 14:10 - 2012-06-14 20:36 - 00161160 _____ () C:\Users\tce\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-20 13:06 - 2014-01-20 13:06 - 00000000 ____D () C:\Users\tce\AppData\Local\{3A11E87B-0729-4D3E-8F55-4A8856EF918F}
2014-01-20 12:23 - 2012-06-20 16:03 - 00000000 ____D () C:\Users\tce\Tracing
2014-01-20 12:22 - 2010-05-11 02:14 - 00000000 ____D () C:\Windows\Panther
2014-01-20 11:35 - 2014-01-20 11:35 - 00002768 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-01-20 11:35 - 2014-01-20 11:35 - 00000834 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-01-20 11:35 - 2014-01-20 11:35 - 00000000 ____D () C:\Program Files\CCleaner
2014-01-20 11:34 - 2014-01-20 11:34 - 03571656 _____ (Piriform Ltd) C:\Users\tce\Downloads\ccsetup409_slim.exe
2014-01-20 10:58 - 2014-01-20 10:58 - 00000053 _____ () C:\Users\tce\Documents\googlef2dfc86b5fd1e0fa.html
2014-01-20 10:22 - 2014-01-12 13:15 - 00000000 ____D () C:\Users\tce\Documents\Neu_VDDH_duesseldorf
2014-01-20 00:26 - 2014-01-20 00:25 - 00000000 ____D () C:\Users\tce\AppData\Local\{FC2EDD28-5FB0-44A5-8703-AE2AA68E7AB5}
2014-01-19 23:45 - 2014-01-19 23:45 - 00001062 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-01-19 23:44 - 2013-10-16 17:29 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2014-01-19 18:22 - 2014-01-19 18:22 - 00000162 ____H () C:\Users\tce\Documents\~$htt.txt
2014-01-19 18:22 - 2014-01-19 18:21 - 00000002 _____ () C:\Users\tce\Documents\htt.txt
2014-01-19 15:43 - 2014-01-19 15:43 - 00001282 _____ () C:\Users\tce\Documents\mein.txt
2014-01-19 15:43 - 2014-01-19 15:43 - 00000162 ____H () C:\Users\tce\Documents\~$mein.txt
2014-01-19 15:42 - 2014-01-19 15:42 - 00000069 _____ () C:\Users\tce\Documents\link href.txt
2014-01-19 14:44 - 2014-01-19 14:44 - 00001388 _____ () C:\Users\tce\Downloads\template_css.zip
2014-01-19 12:25 - 2014-01-19 12:25 - 00000000 ____D () C:\Users\tce\AppData\Local\{D044E9C3-B00A-40F8-A2E3-BB0358868368}
2014-01-18 14:34 - 2014-01-18 14:34 - 00000000 ____D () C:\Users\tce\AppData\Local\{CCC2931F-E9A3-4FDA-8476-8F535AB7968A}
2014-01-18 14:32 - 2014-01-18 12:23 - 00000000 ____D () C:\Users\tce\Desktop\auslagern
2014-01-18 13:23 - 2014-01-18 13:09 - 00000070 _____ () C:\Users\tce\Downloads\NeueDatei.js
2014-01-18 13:09 - 2014-01-18 13:09 - 00000000 _____ () C:\Users\tce\Downloads\NeueDatei(1).js
2014-01-18 12:19 - 2014-01-18 12:19 - 00096888 _____ () C:\Users\tce\Desktop\mein.js
2014-01-17 14:16 - 2014-01-17 14:16 - 00000000 ____D () C:\Users\tce\AppData\Local\{BD0C3046-2D4D-436F-B2EB-94A11BAD9DDD}
2014-01-17 02:16 - 2014-01-17 02:16 - 00000000 ____D () C:\Users\tce\AppData\Local\{0DB754C2-AA2F-425F-B0C1-EB9F7F0A8620}
2014-01-16 13:24 - 2014-01-16 12:31 - 00000046 _____ () C:\Windows\hmview.ini
2014-01-16 02:37 - 2012-06-14 22:06 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-01-16 02:36 - 2013-07-14 09:34 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-16 02:34 - 2012-06-18 07:38 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-16 02:09 - 2014-01-16 02:09 - 00005452 _____ () C:\Users\tce\Desktop\index.php
2014-01-16 02:08 - 2014-01-16 01:36 - 00000064 _____ () C:\Users\tce\Desktop\main.js
2014-01-15 23:02 - 2014-01-15 23:01 - 00000000 ____D () C:\Users\tce\AppData\Local\{1CDE988A-0F21-4B9F-8366-BCE392B12831}
2014-01-15 21:16 - 2014-01-15 21:16 - 00139674 _____ () C:\Users\tce\Documents\Tassi, 15.01.14anwalt
2014-01-15 11:01 - 2014-01-15 11:01 - 00000000 ____D () C:\Users\tce\AppData\Local\{9FCC3157-E4B8-4BA1-9B4E-239D34456F05}
2014-01-14 23:01 - 2014-01-14 23:01 - 00000000 ____D () C:\Users\tce\AppData\Local\{5FB63EEA-0203-4178-857F-1A14494E8916}
2014-01-14 22:40 - 2014-01-14 22:40 - 00000000 ____D () C:\Users\tce\Downloads\impresscms_1.3.5_final_de
2014-01-14 22:31 - 2014-01-14 22:31 - 12545683 _____ () C:\Users\tce\Downloads\impresscms_1.3.5_final_de.zip
2014-01-14 21:42 - 2014-01-14 21:42 - 00568764 _____ () C:\Users\tce\Downloads\pt_lacuanda_free.zip
2014-01-14 21:42 - 2014-01-14 21:42 - 00000000 ____D () C:\Users\tce\Downloads\pt_lacuanda_free
2014-01-14 18:54 - 2014-01-14 18:50 - 00000000 ____D () C:\Users\tce\Documents\Zeta Producer 11
2014-01-14 18:48 - 2014-01-14 18:47 - 46280072 _____ (Zeta Software GmbH) C:\Users\tce\Downloads\zp11-setup-de.exe
2014-01-14 18:19 - 2014-01-14 18:19 - 00091227 _____ () C:\Users\tce\Downloads\facebooklikeboxgeniuspro_unzip1st_v1.3(1).zip
2014-01-14 18:16 - 2014-01-14 18:16 - 00000000 ____D () C:\Users\tce\Downloads\mod_fblikeboxslider
2014-01-14 18:15 - 2014-01-14 18:15 - 00016362 _____ () C:\Users\tce\Downloads\mod_fblikeboxslider.zip
2014-01-14 18:12 - 2014-01-14 18:08 - 00000000 ____D () C:\Users\tce\Downloads\facebooklikeboxgeniuspro_unzip1st_v1.3
2014-01-14 18:08 - 2014-01-14 18:08 - 00091227 _____ () C:\Users\tce\Downloads\facebooklikeboxgeniuspro_unzip1st_v1.3.zip
2014-01-14 18:02 - 2014-01-14 18:02 - 00009671 _____ () C:\Users\tce\Downloads\mod_fbslider_j2.5.zip
2014-01-14 18:02 - 2014-01-14 18:02 - 00000000 ____D () C:\Users\tce\Downloads\mod_google_profile_card
2014-01-14 18:02 - 2014-01-14 18:02 - 00000000 ____D () C:\Users\tce\Downloads\mod_fbslider_j2.5
2014-01-14 18:01 - 2014-01-14 18:01 - 00002840 _____ () C:\Users\tce\Downloads\mod_google_profile_card.zip
2014-01-14 17:09 - 2014-01-14 17:09 - 00027757 _____ () C:\Users\tce\Downloads\plg_asyncsocialbuttons_1.5_UNZIPFIRST.zip
2014-01-14 17:09 - 2014-01-14 17:09 - 00000000 ____D () C:\Users\tce\Downloads\plg_asyncsocialbuttons_1.5_UNZIPFIRST
2014-01-14 11:01 - 2014-01-14 11:00 - 00000000 ____D () C:\Users\tce\AppData\Local\{366EAF48-B265-4C07-8521-8B6E768FF159}
2014-01-13 21:07 - 2014-01-13 21:07 - 00006568 _____ () C:\Users\tce\index.html
2014-01-13 20:48 - 2014-01-13 20:47 - 00000000 ____D () C:\Users\tce\AppData\Local\{A84CB12A-CB5E-4215-9B1E-FC6338E56AA5}
2014-01-13 08:47 - 2014-01-13 08:47 - 00000000 ____D () C:\Users\tce\AppData\Local\{4516647E-F9BC-42E0-B5B8-5CCDF3C8C665}
2014-01-12 21:14 - 2013-06-26 21:28 - 00000000 ____D () C:\Users\tce\Documents\DDH-eV
2014-01-12 13:05 - 2014-01-12 13:05 - 00000000 ____D () C:\Users\tce\AppData\Local\{FFC86E59-C6FA-451A-B169-D804FA5A7659}
2014-01-11 12:16 - 2014-01-11 12:16 - 00000000 ____D () C:\Users\tce\AppData\Local\{FCB36050-7420-46B6-AA6A-E64DDDC8C589}
2014-01-11 00:16 - 2014-01-11 00:15 - 00000000 ____D () C:\Users\tce\AppData\Local\{924F24E2-D6E4-49B3-9BA9-3586C16C9A1F}
2014-01-10 12:15 - 2014-01-10 12:15 - 00000000 ____D () C:\Users\tce\AppData\Local\{D6D8B26D-1619-45DD-825D-A8D5AB696ABC}
2014-01-09 21:37 - 2014-01-09 21:36 - 00000000 ____D () C:\Users\tce\Downloads\direkhosting123
2014-01-09 20:18 - 2014-01-09 20:17 - 00000000 ____D () C:\Users\tce\AppData\Local\{E6972426-0CA6-4E92-BA8D-4E48A8C9A234}
2014-01-09 08:17 - 2014-01-09 08:17 - 00000000 ____D () C:\Users\tce\AppData\Local\{3C98300A-FD04-4556-9BFD-D3B42FA99493}
2014-01-09 01:13 - 2012-06-14 20:40 - 00000000 _____ () C:\Windows\system32\Drivers\lvuvc.hs
2014-01-08 20:17 - 2014-01-08 20:16 - 00000000 ____D () C:\Users\tce\AppData\Local\{3D455830-9467-4ACB-B54D-BB9B3D1C0829}
2014-01-08 16:33 - 2013-02-01 18:55 - 00000000 ____D () C:\Users\tce\Downloads\black
2014-01-08 08:16 - 2014-01-08 08:16 - 00000000 ____D () C:\Users\tce\AppData\Local\{37D0DF06-1EB0-40E2-A4F7-4584A77178CD}
2014-01-07 20:16 - 2014-01-07 20:16 - 00000000 ____D () C:\Users\tce\AppData\Local\{2F8CFCAB-4B83-413C-A5E2-D2D2E379F70E}
2014-01-06 22:44 - 2014-01-06 22:43 - 00000000 ____D () C:\Users\tce\Downloads\Joomla_2.5.17-Stable-Full_Package_German
2014-01-06 22:43 - 2014-01-06 22:42 - 08249873 _____ () C:\Users\tce\Downloads\Joomla_2.5.17-Stable-Full_Package_German.zip
2014-01-06 09:09 - 2014-01-06 09:08 - 00000000 ____D () C:\Users\tce\AppData\Local\{4387E77E-72CC-4E23-8CA0-AA722E9229D1}
2014-01-05 21:08 - 2014-01-05 21:08 - 00000000 ____D () C:\Users\tce\AppData\Local\{75C31A5C-869A-4D76-B306-502F0D2F9958}
2014-01-05 08:56 - 2014-01-05 08:56 - 00000000 ____D () C:\Users\tce\AppData\Local\{07A406D7-771C-4987-9FCD-C5F882382BB2}
2014-01-04 20:56 - 2014-01-04 20:55 - 00000000 ____D () C:\Users\tce\AppData\Local\{42FA1417-7139-40F8-B535-9619ED3D6EC1}
2014-01-04 20:40 - 2014-01-04 20:24 - 00000000 ____D () C:\Users\tce\AppData\Roaming\Ahnenblatt
2014-01-04 20:24 - 2014-01-04 20:24 - 00001901 _____ () C:\Users\tce\Desktop\Ahnenblatt.lnk
2014-01-04 20:24 - 2014-01-04 20:24 - 00000000 ____D () C:\Users\tce\Documents\Ahnenblatt
2014-01-04 20:24 - 2014-01-04 20:24 - 00000000 ____D () C:\Users\tce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ahnenblatt
2014-01-04 20:24 - 2014-01-04 20:24 - 00000000 ____D () C:\Program Files (x86)\Ahnenblatt
2014-01-04 20:23 - 2014-01-04 20:23 - 04707624 _____ (Dirk Boettcher ) C:\Users\tce\Downloads\absetup_2.74.exe
2014-01-04 08:55 - 2014-01-04 08:55 - 00000000 ____D () C:\Users\tce\AppData\Local\{77110533-F3A9-46FA-A2F2-4BFCD56841D2}

Some content of TEMP:
====================
C:\Users\tce\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-29 20:48

==================== End Of Log ============================

hi,

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

• WICHTIG: Speichere Combofix auf deinem Desktop.
• Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
• Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
• Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
• Wenn Combofix fertig ist, wird es ein Logfile erstellen.
• Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Also habe alles so gemacht aber das problem ist immer noch da. Die werbung ist noch nicht weg.
Hier ist das log..
Combofix Logfile:

ComboFix 14-02-01.01 - tce 03.02.2014  14:18:59.1.8 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.6135.3696 [GMT 1:00]
ausgeführt von:: c:\users\tce\Downloads\ComboFix.exe
AV: Kaspersky Internet Security *Disabled/Updated* {179979E8-273D-D14E-0543-2861940E4886}
FW: Kaspersky Internet Security *Disabled* {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}
SP: Kaspersky Internet Security *Disabled/Updated* {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\install.exe
c:\program files (x86)\YoutubeAdblocker
c:\program files (x86)\YoutubeAdblocker\WF4F0GPjCB.dat
c:\program files (x86)\YoutubeAdblocker\WF4F0GPjCB.dll
c:\program files (x86)\YoutubeAdblocker\WF4F0GPjCB.tlb
c:\program files (x86)\YoutubeAdblocker\WF4F0GPjCB.x64.dll
c:\programdata\Wincert\WIN32C~1.DLL
c:\users\tce\123.png
c:\users\tce\16.png
c:\users\tce\1611.png
c:\users\tce\589.png
c:\users\tce\59.png
c:\users\tce\992.png
c:\users\tce\Documents\~WRL0031.tmp
c:\users\tce\Documents\~WRL1051.tmp
c:\users\tce\Documents\~WRL1857.tmp
c:\users\tce\Documents\~WRL1880.tmp
c:\users\tce\Documents\~WRL1916.tmp
c:\users\tce\pdf
c:\users\tce\pdf\a-hundebesitzer.pdf
c:\users\tce\pdf\a-hundevereine.pdf
c:\users\tce\pdf\a-hundezuechter.pdf
c:\users\tce\pdf\a-ohnehund.pdf
c:\users\tce\pdf\a-ohnehund.rtf
c:\users\tce\pdf\auswertung-hd-ed.pdf
c:\users\tce\pdf\deckbescheinigung.pdf
c:\users\tce\pdf\sparziergang55.pdf
c:\users\tce\pdf\wurf-melde.pdf
c:\windows\Readme.txt
D:\install.exe
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-01-03 bis 2014-02-03  ))))))))))))))))))))))))))))))
.
.
2014-02-03 13:32 . 2014-02-03 13:32	--------	d-----w-	c:\users\UpdatusUser\AppData\Local\temp
2014-02-03 13:32 . 2014-02-03 13:32	--------	d-----w-	c:\users\Default\AppData\Local\temp
2014-02-03 13:22 . 2014-02-03 13:22	75888	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{F569A63B-1671-427C-A691-658D4ED0AE7E}\offreg.dll
2014-02-03 11:41 . 2014-02-03 11:41	--------	d-----w-	c:\users\tce\AppData\Roaming\Malwarebytes
2014-02-03 11:41 . 2014-02-03 11:41	--------	d-----w-	c:\programdata\Malwarebytes
2014-02-03 10:55 . 2014-02-03 10:55	--------	d-----w-	c:\windows\ERUNT
2014-02-03 10:36 . 2014-02-03 12:58	--------	d-----w-	C:\FRST
2014-02-02 03:15 . 2014-02-02 03:15	--------	d-----w-	c:\users\tce\AppData\Local\Microsoft Corporation
2014-02-02 03:14 . 2014-02-02 03:14	--------	d-----w-	c:\program files (x86)\Microsoft Windows 7 Upgrade Advisor
2014-01-31 18:43 . 2014-01-31 18:43	--------	d-----w-	c:\programdata\SNT
2014-01-31 18:43 . 2014-01-31 18:43	--------	d-----w-	c:\program files (x86)\SNT
2014-01-31 10:24 . 2013-12-16 00:54	10315576	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{F569A63B-1671-427C-A691-658D4ED0AE7E}\mpengine.dll
2014-01-21 19:56 . 2014-01-21 19:56	--------	d-----w-	c:\program files (x86)\Safari
2014-01-20 17:10 . 2014-01-21 23:18	--------	d-----w-	c:\users\tce\kopie_vddh
2014-01-20 10:35 . 2014-01-20 10:35	--------	d-----w-	c:\program files\CCleaner
2014-01-15 06:19 . 2013-11-27 01:41	343040	----a-w-	c:\windows\system32\drivers\usbhub.sys
2014-01-15 06:19 . 2013-11-27 01:41	99840	----a-w-	c:\windows\system32\drivers\usbccgp.sys
2014-01-15 06:19 . 2013-11-27 01:41	53248	----a-w-	c:\windows\system32\drivers\usbehci.sys
2014-01-15 06:19 . 2013-11-27 01:41	325120	----a-w-	c:\windows\system32\drivers\usbport.sys
2014-01-15 06:19 . 2013-11-27 01:41	25600	----a-w-	c:\windows\system32\drivers\usbohci.sys
2014-01-15 06:19 . 2013-11-27 01:41	30720	----a-w-	c:\windows\system32\drivers\usbuhci.sys
2014-01-15 06:19 . 2013-11-27 01:41	7808	----a-w-	c:\windows\system32\drivers\usbd.sys
2014-01-15 06:19 . 2013-11-26 11:40	376768	----a-w-	c:\windows\system32\drivers\netio.sys
2014-01-15 06:19 . 2013-11-26 10:32	3156480	----a-w-	c:\windows\system32\win32k.sys
2014-01-04 19:24 . 2014-01-04 19:40	--------	d-----w-	c:\users\tce\AppData\Roaming\Ahnenblatt
2014-01-04 19:24 . 2014-01-04 19:24	--------	d-----w-	c:\program files (x86)\Ahnenblatt
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-01-25 23:31 . 2012-06-14 21:37	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-01-25 23:31 . 2012-06-14 21:37	692616	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2014-01-16 01:34 . 2012-06-18 06:38	86054176	----a-w-	c:\windows\system32\MRT.exe
2013-12-22 13:57 . 2013-08-14 10:40	620640	----a-w-	c:\windows\system32\drivers\klif.sys
2013-12-22 13:57 . 2013-06-06 15:38	178272	----a-w-	c:\windows\system32\drivers\kneps.sys
2013-12-18 05:13 . 2012-06-14 20:26	270496	------w-	c:\windows\system32\MpSigStub.exe
2013-11-30 02:02 . 2013-11-30 02:02	940032	----a-w-	c:\windows\system32\MsSpellCheckingFacility.exe
2013-11-30 02:02 . 2013-11-30 02:02	194048	----a-w-	c:\windows\SysWow64\elshyph.dll
2013-11-30 02:02 . 2013-11-30 02:02	71680	----a-w-	c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-11-30 02:02 . 2013-11-30 02:02	645120	----a-w-	c:\windows\SysWow64\jsIntl.dll
2013-11-30 02:02 . 2013-11-30 02:02	62464	----a-w-	c:\windows\SysWow64\tdc.ocx
2013-11-30 02:02 . 2013-11-30 02:02	61952	----a-w-	c:\windows\SysWow64\iesetup.dll
2013-11-30 02:02 . 2013-11-30 02:02	34816	----a-w-	c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2013-11-30 02:02 . 2013-11-30 02:02	337408	----a-w-	c:\windows\SysWow64\html.iec
2013-11-30 02:02 . 2013-11-30 02:02	24576	----a-w-	c:\windows\SysWow64\licmgr10.dll
2013-11-30 02:02 . 2013-11-30 02:02	235008	----a-w-	c:\windows\system32\elshyph.dll
2013-11-30 02:02 . 2013-11-30 02:02	182272	----a-w-	c:\windows\SysWow64\msls31.dll
2013-11-30 02:02 . 2013-11-30 02:02	151552	----a-w-	c:\windows\SysWow64\iexpress.exe
2013-11-30 02:02 . 2013-11-30 02:02	139264	----a-w-	c:\windows\SysWow64\wextract.exe
2013-11-30 02:02 . 2013-11-30 02:02	1051136	----a-w-	c:\windows\SysWow64\mshtmlmedia.dll
2013-11-30 02:02 . 2013-11-30 02:02	942592	----a-w-	c:\windows\system32\jsIntl.dll
2013-11-30 02:02 . 2013-11-30 02:02	86016	----a-w-	c:\windows\SysWow64\iesysprep.dll
2013-11-30 02:02 . 2013-11-30 02:02	86016	----a-w-	c:\windows\system32\RegisterIEPKEYs.exe
2013-11-30 02:02 . 2013-11-30 02:02	74240	----a-w-	c:\windows\SysWow64\SetIEInstalledDate.exe
2013-11-30 02:02 . 2013-11-30 02:02	61952	----a-w-	c:\windows\SysWow64\MshtmlDac.dll
2013-11-30 02:02 . 2013-11-30 02:02	52224	----a-w-	c:\windows\system32\msfeedsbs.dll
2013-11-30 02:02 . 2013-11-30 02:02	51200	----a-w-	c:\windows\SysWow64\ieetwproxystub.dll
2013-11-30 02:02 . 2013-11-30 02:02	48640	----a-w-	c:\windows\SysWow64\mshtmler.dll
2013-11-30 02:02 . 2013-11-30 02:02	454656	----a-w-	c:\windows\SysWow64\vbscript.dll
2013-11-30 02:02 . 2013-11-30 02:02	36352	----a-w-	c:\windows\SysWow64\imgutil.dll
2013-11-30 02:02 . 2013-11-30 02:02	247808	----a-w-	c:\windows\system32\msls31.dll
2013-11-30 02:02 . 2013-11-30 02:02	195584	----a-w-	c:\windows\system32\msrating.dll
2013-11-30 02:02 . 2013-11-30 02:02	13312	----a-w-	c:\windows\SysWow64\mshta.exe
2013-11-30 02:02 . 2013-11-30 02:02	13312	----a-w-	c:\windows\system32\msfeedssync.exe
2013-11-30 02:02 . 2013-11-30 02:02	131072	----a-w-	c:\windows\system32\IEAdvpack.dll
2013-11-30 02:02 . 2013-11-30 02:02	112128	----a-w-	c:\windows\SysWow64\ieUnatt.exe
2013-11-30 02:02 . 2013-11-30 02:02	111616	----a-w-	c:\windows\SysWow64\IEAdvpack.dll
2013-11-30 02:02 . 2013-11-30 02:02	90112	----a-w-	c:\windows\system32\SetIEInstalledDate.exe
2013-11-30 02:02 . 2013-11-30 02:02	84992	----a-w-	c:\windows\system32\mshtmled.dll
2013-11-30 02:02 . 2013-11-30 02:02	83968	----a-w-	c:\windows\system32\MshtmlDac.dll
2013-11-30 02:02 . 2013-11-30 02:02	81408	----a-w-	c:\windows\system32\icardie.dll
2013-11-30 02:02 . 2013-11-30 02:02	774144	----a-w-	c:\windows\system32\jscript.dll
2013-11-30 02:02 . 2013-11-30 02:02	77312	----a-w-	c:\windows\system32\tdc.ocx
2013-11-30 02:02 . 2013-11-30 02:02	626176	----a-w-	c:\windows\system32\msfeeds.dll
2013-11-30 02:02 . 2013-11-30 02:02	62464	----a-w-	c:\windows\system32\pngfilt.dll
2013-11-30 02:02 . 2013-11-30 02:02	616104	----a-w-	c:\windows\system32\ieapfltr.dat
2013-11-30 02:02 . 2013-11-30 02:02	548352	----a-w-	c:\windows\system32\vbscript.dll
2013-11-30 02:02 . 2013-11-30 02:02	48640	----a-w-	c:\windows\system32\mshtmler.dll
2013-11-30 02:02 . 2013-11-30 02:02	48128	----a-w-	c:\windows\system32\imgutil.dll
2013-11-30 02:02 . 2013-11-30 02:02	453120	----a-w-	c:\windows\system32\dxtmsft.dll
2013-11-30 02:02 . 2013-11-30 02:02	413696	----a-w-	c:\windows\system32\html.iec
2013-11-30 02:02 . 2013-11-30 02:02	40448	----a-w-	c:\windows\system32\JavaScriptCollectionAgent.dll
2013-11-30 02:02 . 2013-11-30 02:02	30208	----a-w-	c:\windows\system32\licmgr10.dll
2013-11-30 02:02 . 2013-11-30 02:02	296960	----a-w-	c:\windows\system32\dxtrans.dll
2013-11-30 02:02 . 2013-11-30 02:02	263376	----a-w-	c:\windows\system32\iedkcs32.dll
2013-11-30 02:02 . 2013-11-30 02:02	243200	----a-w-	c:\windows\system32\webcheck.dll
2013-11-30 02:02 . 2013-11-30 02:02	235520	----a-w-	c:\windows\system32\url.dll
2013-11-30 02:02 . 2013-11-30 02:02	167424	----a-w-	c:\windows\system32\iexpress.exe
2013-11-30 02:02 . 2013-11-30 02:02	147968	----a-w-	c:\windows\system32\occache.dll
2013-11-30 02:02 . 2013-11-30 02:02	143872	----a-w-	c:\windows\system32\wextract.exe
2013-11-30 02:02 . 2013-11-30 02:02	13824	----a-w-	c:\windows\system32\mshta.exe
2013-11-30 02:02 . 2013-11-30 02:02	135680	----a-w-	c:\windows\system32\iepeers.dll
2013-11-30 02:02 . 2013-11-30 02:02	1228800	----a-w-	c:\windows\system32\mshtmlmedia.dll
2013-11-30 02:02 . 2013-11-30 02:02	105984	----a-w-	c:\windows\system32\iesysprep.dll
2013-11-30 02:02 . 2013-11-30 02:02	101376	----a-w-	c:\windows\system32\inseng.dll
2013-11-26 11:54 . 2013-12-11 20:21	23183360	----a-w-	c:\windows\system32\mshtml.dll
2013-11-26 10:19 . 2013-12-11 20:21	2724864	----a-w-	c:\windows\system32\mshtml.tlb
2013-11-26 10:18 . 2013-12-11 20:21	4096	----a-w-	c:\windows\system32\ieetwcollectorres.dll
2013-11-26 09:48 . 2013-12-11 20:21	66048	----a-w-	c:\windows\system32\iesetup.dll
2013-11-26 09:46 . 2013-12-11 20:21	48640	----a-w-	c:\windows\system32\ieetwproxystub.dll
2013-11-26 09:41 . 2013-12-11 20:21	2764288	----a-w-	c:\windows\system32\iertutil.dll
2013-11-26 09:29 . 2013-12-11 20:21	53760	----a-w-	c:\windows\system32\jsproxy.dll
2013-11-26 09:27 . 2013-12-11 20:21	33792	----a-w-	c:\windows\system32\iernonce.dll
2013-11-26 09:23 . 2013-12-11 20:21	2724864	----a-w-	c:\windows\SysWow64\mshtml.tlb
2013-11-26 09:21 . 2013-12-11 20:21	574976	----a-w-	c:\windows\system32\ieui.dll
2013-11-26 09:18 . 2013-12-11 20:21	139264	----a-w-	c:\windows\system32\ieUnatt.exe
2013-11-26 09:18 . 2013-12-11 20:21	111616	----a-w-	c:\windows\system32\ieetwcollector.exe
2013-11-26 09:16 . 2013-12-11 20:21	708608	----a-w-	c:\windows\system32\jscript9diag.dll
2013-11-26 08:57 . 2013-12-11 20:21	218624	----a-w-	c:\windows\system32\ie4uinit.exe
2013-11-26 08:35 . 2013-12-11 20:21	5769216	----a-w-	c:\windows\system32\jscript9.dll
2013-11-26 08:28 . 2013-12-11 20:21	553472	----a-w-	c:\windows\SysWow64\jscript9diag.dll
2013-11-26 08:16 . 2013-12-11 20:21	4243968	----a-w-	c:\windows\SysWow64\jscript9.dll
2013-11-26 08:02 . 2013-12-11 20:21	1995264	----a-w-	c:\windows\system32\inetcpl.cpl
2013-11-26 07:48 . 2013-12-11 20:21	12996608	----a-w-	c:\windows\system32\ieframe.dll
2013-11-26 07:32 . 2013-12-11 20:21	1928192	----a-w-	c:\windows\SysWow64\inetcpl.cpl
2013-11-26 07:07 . 2013-12-11 20:21	2334208	----a-w-	c:\windows\system32\wininet.dll
2013-11-26 06:40 . 2013-12-11 20:21	1395200	----a-w-	c:\windows\system32\urlmon.dll
2013-11-26 06:34 . 2013-12-11 20:21	817664	----a-w-	c:\windows\system32\ieapfltr.dll
2013-11-26 06:33 . 2013-12-11 20:21	1820160	----a-w-	c:\windows\SysWow64\wininet.dll
2013-11-23 18:26 . 2013-12-11 20:19	417792	----a-w-	c:\windows\SysWow64\WMPhoto.dll
2013-11-23 17:47 . 2013-12-11 20:19	465920	----a-w-	c:\windows\system32\WMPhoto.dll
2013-11-12 02:23 . 2013-12-11 20:19	2048	----a-w-	c:\windows\system32\tzres.dll
2013-11-12 02:07 . 2013-12-11 20:19	2048	----a-w-	c:\windows\SysWow64\tzres.dll
2013-11-07 07:55 . 2013-05-06 07:22	458336	----a-w-	c:\windows\system32\drivers\kl1.sys
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{4EEF4763-33D7-7166-39F6-4FD4A5F6358E}]
2013-01-31 18:43	423936	----a-w-	c:\program files (x86)\SNT\y.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{EFEAB6B5-8FDF-EBC2-B47C-6508F573A127}]
2014-01-31 18:41	423936	----a-w-	c:\program files (x86)\greaTsaver\Tt6Ad.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM Startup"="c:\program files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2005-06-10 249856]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"vspdfprsrv.exe"="c:\program files (x86)\Visagesoft\eXPert PDF 6\vspdfprsrv.exe" [2008-09-22 1195008]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
MCtlSvc.lnk - c:\program files (x86)\congstar\Internetmanager\Bin\mcserver.exe [2013-10-14 89600]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"BrMfcWnd"=c:\program files (x86)\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
"ISUSScheduler"="c:\program files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start
"HP Software Update"=c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe"
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x]
R3 HSPADataCardusbmdm;HSPADataCard Proprietary USB Driver;c:\windows\system32\DRIVERS\HSPADataCardusbmdm.sys;c:\windows\SYSNATIVE\DRIVERS\HSPADataCardusbmdm.sys [x]
R3 HSPADataCardusbnmea;HSPADataCard NMEA Port;c:\windows\system32\DRIVERS\HSPADataCardusbnmea.sys;c:\windows\SYSNATIVE\DRIVERS\HSPADataCardusbnmea.sys [x]
R3 HSPADataCardusbser;HSPADataCard Diagnostic Port;c:\windows\system32\DRIVERS\HSPADataCardusbser.sys;c:\windows\SYSNATIVE\DRIVERS\HSPADataCardusbser.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 lvpopf64;Logitech POP Suppression Filter;c:\windows\system32\DRIVERS\lvpopf64.sys;c:\windows\SYSNATIVE\DRIVERS\lvpopf64.sys [x]
R3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys;c:\windows\SYSNATIVE\DRIVERS\lvrs64.sys [x]
R3 LVUVC64;Logitech QuickCam Pro 5000(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys;c:\windows\SYSNATIVE\DRIVERS\lvuvc64.sys [x]
R3 massfilter;Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys;c:\windows\SYSNATIVE\drivers\massfilter.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 SystemExplorerHelpService;System Explorer Service;c:\program files (x86)\System Explorer\service\SystemExplorerService64.exe;c:\program files (x86)\System Explorer\service\SystemExplorerService64.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R4 klflt;klflt;c:\windows\system32\DRIVERS\klflt.sys;c:\windows\SYSNATIVE\DRIVERS\klflt.sys [x]
S0 BMLoad;Bytemobile Boot Time Load Driver;c:\windows\system32\drivers\BMLoad.sys;c:\windows\SYSNATIVE\drivers\BMLoad.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys;c:\windows\SYSNATIVE\DRIVERS\klim6.sys [x]
S1 klpd;klpd;c:\windows\system32\DRIVERS\klpd.sys;c:\windows\SYSNATIVE\DRIVERS\klpd.sys [x]
S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys;c:\windows\SYSNATIVE\DRIVERS\kltdi.sys [x]
S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys;c:\windows\SYSNATIVE\DRIVERS\kneps.sys [x]
S2 acedrv11;acedrv11;c:\windows\system32\drivers\acedrv11.sys;c:\windows\SYSNATIVE\drivers\acedrv11.sys [x]
S2 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8;c:\program files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe;c:\program files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe [x]
S2 DBService;DATA BECKER Update Service;c:\program files (x86)\Common Files\DATA BECKER Shared\DBService.exe;c:\program files (x86)\Common Files\DATA BECKER Shared\DBService.exe [x]
S2 Greg_Service;GRegService;c:\program files (x86)\Packard Bell\Registration\GregHSRW.exe;c:\program files (x86)\Packard Bell\Registration\GregHSRW.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TeamViewer9;TeamViewer 9;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [x]
S2 UMVPFSrv;UMVPFSrv;c:\program files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe;c:\program files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [x]
S2 Updater Service;Updater Service;c:\program files\Packard Bell\Packard Bell Updater\UpdaterService.exe;c:\program files\Packard Bell\Packard Bell Updater\UpdaterService.exe [x]
S2 USBS3S4Detection;USBS3S4Detection;c:\oem\USBDECTION\USBS3S4Detection.exe;c:\oem\USBDECTION\USBS3S4Detection.exe [x]
S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys;c:\windows\SYSNATIVE\DRIVERS\klkbdflt.sys [x]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys;c:\windows\SYSNATIVE\DRIVERS\klmouflt.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-01-29 07:32	1211672	----a-w-	c:\program files (x86)\Google\Chrome\Application\32.0.1700.102\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-02-03 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-14 23:31]
.
2014-02-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-06-14 20:38]
.
2014-02-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-06-14 20:38]
.
2014-02-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2634336733-3951264793-2692642557-1001Core.job
- c:\users\tce\AppData\Local\Google\Update\GoogleUpdate.exe [2013-08-20 00:16]
.
2014-02-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2634336733-3951264793-2692642557-1001UA.job
- c:\users\tce\AppData\Local\Google\Update\GoogleUpdate.exe [2013-08-20 00:16]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{4EEF4763-33D7-7166-39F6-4FD4A5F6358E}]
2014-01-31 18:43	472064	----a-w-	c:\program files (x86)\SNT\y.x64.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EFEAB6B5-8FDF-EBC2-B47C-6508F573A127}]
2014-01-31 18:41	472064	----a-w-	c:\program files (x86)\greaTsaver\Tt6Ad.x64.dll
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.com
uLocal Page = c:\windows\system32\blank.htm
mStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
IE: Zu Anti-Banner hinzufügen - c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ie_banner_deny.htm
IE: Öffnen mit WordPerfect - c:\program files (x86)\WordPerfect Office X3\Programs\WPLauncher.hta
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\tce\AppData\Roaming\Mozilla\Firefox\Profiles\isodycb8.default-1378338383939\
FF - prefs.js: browser.startup.homepage - google.de
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
BHO-{C09616C3-6DAE-C126-41DA-53C809265478} - c:\program files (x86)\YoutubeAdblocker\WF4F0GPjCB.dll
Toolbar-Locked - (no file)
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
BHO-{C09616C3-6DAE-C126-41DA-53C809265478} - c:\program files (x86)\YoutubeAdblocker\WF4F0GPjCB.x64.dll
Toolbar-Locked - (no file)
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-02-03  14:46:01
ComboFix-quarantined-files.txt  2014-02-03 13:45
.
Vor Suchlauf: 16 Verzeichnis(se), 383.483.764.736 Bytes frei
Nach Suchlauf: 22 Verzeichnis(se), 383.179.345.920 Bytes frei
.
- - End Of File - - EC99158DE7979F1CEF05B903F1CA19D6
         

--- --- ---
A36C5E4F47E84449FF07ED3517B43A31
[/HTML]

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.