Bee Coupon hartnäckiger geworden!

rebbi60 · 15.02.2014, 06:37

Hallo, ich habe bei mir den Bee Coupon "sch..." auf den Browsern. Bei Firefox hab ich Ihn auch wie hier beschreiben runter bekommen, jedoch nicht bei Chrom. Da er angeblich hier verwaltet wird und nicht deaktiviert oder gelöscht werden kann (s.Hardcopy)

Wer kann helfen

schrauber · 15.02.2014, 09:09

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

rebbi60 · 15.02.2014, 17:01

Hi ich hab das mit der Datei einfügen noch nie gemacht ich hoffe das ist richtig so.

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-02-2014 01
Ran by Laptop Michael Rebbe (administrator) on LAPTOP-MRE on 15-02-2014 16:50:59
Running from C:\Users\Laptop Michael Rebbe\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Kaspersky Lab ZAO) D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE
(FirebirdSQL Project) C:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbguard.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
() C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\ConversionService.exe
() D:\Tobit Radio.fx\Server\rfx-server.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(TeamViewer GmbH) D:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Windows\AsScrPro.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
(FirebirdSQL Project) C:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbserver.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() D:\Program Files (x86)\Kies\External\FirmwareUpdate\KiesPDLR.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIHFE.EXE
() C:\Users\Laptop Michael Rebbe\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(ASUS) C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(Dropbox, Inc.) C:\Users\Laptop Michael Rebbe\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Kaspersky Lab ZAO) D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe
(Samsung Electronics Co., Ltd.) D:\Program Files (x86)\Kies\KiesTrayAgent.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
(Apple Inc.) D:\Program Files (x86)\iTunes\iTunesHelper.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Marius Czyz aka Phalynx) C:\Users\Laptop Michael Rebbe\Downloads\ActiveDossierUploader.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\smartlogon.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Kaspersky Lab ZAO) D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\klwtblfs.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2264168 2011-07-13] (Realtek Semiconductor)
HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [324096 2010-08-11] (Alcor Micro Corp.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2785064 2011-05-05] (Synaptics Incorporated)
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4526 2010-11-29] ()
HKLM\...\Run: [SynAsusAcpi] - C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [97064 2011-05-05] (Synaptics Incorporated)
HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3331312 2011-10-19] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUSWebStorage] - C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe [737104 2011-07-29] (ecareme)
HKLM-x32\...\Run: [SonicMasterTray] - C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe [984400 2010-07-10] (Virage Logic Corporation / Sonic Focus)
HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5716608 2011-07-22] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2255360 2011-06-10] (ASUS)
HKLM-x32\...\Run: [Samsung PanelMgr] - C:\Windows\Samsung\PanelMgr\SSMMgr.exe [606208 2009-10-13] ()
HKLM-x32\...\Run: [ITSecMng] - C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [83336 2009-07-22] (TOSHIBA CORPORATION)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [avp] - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe [206448 2012-10-31] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [KiesTrayAgent] - D:\Program Files (x86)\Kies\KiesTrayAgent.exe [3521424 2012-04-27] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] - D:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)
HKLM-x32\...\Run: [FUFAXRCV] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [495616 2011-03-08] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [FUFAXSTM] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [856064 2011-03-08] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [EEventManager] - C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [979328 2010-10-12] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\klogon: C:\Windows\System32\klogon.dll (Kaspersky Lab ZAO)
HKU\.DEFAULT\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [18705664 2013-01-08] (Skype Technologies S.A.)
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\Run: [KiesHelper] - D:\Program Files (x86)\Kies\KiesHelper.exe [955280 2012-04-27] (Samsung)
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\Run: [KiesPDLR] - D:\Program Files (x86)\Kies\External\FirmwareUpdate\KiesPDLR.exe [21416 2012-05-28] ()
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\Run: [rfxsrvtray] - D:\Tobit Radio.fx\Client\rfx-tray.exe [1838872 2013-02-07] (Tobit.Software)
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\Run: [EPLTarget\P0000000000000000] - C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIHFE.EXE [241280 2012-07-12] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\Run: [Amazon Cloud Player] - C:\Users\Laptop Michael Rebbe\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe [3145536 2013-12-12] ()
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\MountPoints2: H - H:\AutoRun.exe
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\MountPoints2: {1cb66dd1-f738-11e1-8507-c8600001845d} - H:\AutoRun.exe
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\MountPoints2: {3d38e903-da2c-11e2-b5d4-c8600001845d} - H:\AutoRun.exe
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\MountPoints2: {9ca96f7f-dedf-11e1-81f3-c8600001845d} - H:\AutoRun.exe
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\MountPoints2: {b3805e48-940f-11e1-98e6-c8600001845d} - H:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\MountPoints2: {decbd0cf-d484-11e1-9e09-c8600001845d} - H:\AutoRun.exe
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\MountPoints2: {decbd0e4-d484-11e1-9e09-c8600001845d} - H:\AutoRun.exe
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [245872 2013-04-08] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [201576 2013-04-08] (NVIDIA Corporation)
Startup: C:\Users\Laptop Michael Rebbe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Laptop Michael Rebbe\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Laptop Michael Rebbe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.
SearchScopes: HKCU - {101E48B1-2339-40C4-8709-238D8843D875} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3311336&CUI=UN29019650615449671&UM=2
BHO: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\ievkbd.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\klwtbbho.dll (Kaspersky Lab ZAO)
BHO: Bee Coupons BHO - {FC4DBA8C-2CC8-4741-BCE5-ADAC3EEA50B0} - C:\Program Files (x86)\Bee Coupons\FrameworkBHO64.dll No File
BHO-x32: Browser Guard - {02a0d829-4393-46fc-a37e-126263035883} - C:\Program Files (x86)\Browser Guard\browserguard.dll No File
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GbR)
BHO-x32: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM - Bee Coupons - {814C44E6-B2BA-4413-AEB3-F958AD419DB4} - C:\Program Files (x86)\Bee Coupons\FrameworkBHO64.dll No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: 54.204.28.26	gcbkfpidjhchgnokamccdemjfamackdh
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{70EE0C7C-6F1F-45CC-935D-C82E51049ED7}: [NameServer]10.74.210.210 10.74.210.211
Tcpip\..\Interfaces\{A897705E-AA56-488D-A6C7-E38D3CED4898}: [NameServer]10.74.210.210 10.74.210.211
Tcpip\..\Interfaces\{D534E621-75BE-4191-BEC1-904739C2A010}: [NameServer]10.74.210.210 10.74.210.211
Tcpip\..\Interfaces\{F2A1458F-44BF-427F-92CE-EF12C4530881}: [NameServer]10.74.210.210 10.74.210.211

FireFox:
========
FF ProfilePath: C:\Users\Laptop Michael Rebbe\AppData\Roaming\Mozilla\Firefox\Profiles\5hstnu5u.default
FF SearchEngineOrder.user_pref("browser.search.order.1,S", "");: user_pref("browser.search.order.1,S", "");
FF SelectedSearchEngine: Google
FF Homepage: https://www.google.de/?gws_rd=cr&ei=rdiVUrDDIqm2yAPI3YGADw
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - D:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pages.tvunetworks.com/WebPlayer - D:\Program Files (x86)\TVUPlayer\npTVUAx.dll (TVU networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - D:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Laptop Michael Rebbe\AppData\Roaming\Mozilla\Firefox\Profiles\5hstnu5u.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-08-27]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Laptop Michael Rebbe\AppData\Roaming\Mozilla\Firefox\Profiles\5hstnu5u.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-21]
FF Extension: DownThemAll! - C:\Users\Laptop Michael Rebbe\AppData\Roaming\Mozilla\Firefox\Profiles\5hstnu5u.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2012-02-18]
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru
FF Extension: Kaspersky Virtual Keyboard - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru [2012-02-17]
FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\linkfilter@kaspersky.ru
FF Extension: Kaspersky URL Advisor - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\linkfilter@kaspersky.ru [2012-02-17]
FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files\T-Mobile\InternetManager_H\OCx64\addon
FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\KavAntiBanner@Kaspersky.ru
FF Extension: Anti-Banner - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\KavAntiBanner@Kaspersky.ru [2012-02-17]
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-01-08]
FF HKLM-x32\...\Firefox\Extensions: [{20d1f7b3-7721-4da0-b6f3-78bb4d7248f4}] - C:\Program Files (x86)\Browser Guard\browserguard.xpi

Chrome: 
=======
CHR HomePage: 
CHR Extension: (Google Docs) - C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-12]
CHR Extension: (Google Drive) - C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-12]
CHR Extension: (YouTube) - C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-12]
CHR Extension: (Google-Suche) - C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-12]
CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2014-02-12]
CHR Extension: (Bee Coupons) - C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh [2014-02-12]
CHR Extension: (Virtuelle Tastatur) - C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2014-02-12]
CHR Extension: (Google Wallet) - C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-12]
CHR Extension: (Google Mail) - C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-12]
CHR Extension: (Anti-Banner) - C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2014-02-12]
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ChromeExt\urladvisor.crx [2011-04-25]
CHR HKLM-x32\...\Chrome\Extension: [iemmnakfifhlfhkmdddbojpkkmlecfhe] - C:\ProgramData\SaveByclick\iemmnakfifhlfhkmdddbojpkkmlecfhe.crx [2011-04-25]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ChromeExt\virtkbd.crx [2011-04-25]
CHR HKLM-x32\...\Chrome\Extension: [kfepagcelbegkpkcjgfeecmlnmkedjin] - C:\Program Files (x86)\Browser Guard\browserguard.crx [2011-04-25]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ChromeExt\ab.crx [2011-04-25]

==================== Services (Whitelisted) =================

R2 AVP; D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe [206448 2012-10-31] (Kaspersky Lab ZAO)
R2 DokanMounter; C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe [14848 2011-01-10] ()
R2 FirebirdGuardianDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbguard.exe [81920 2007-03-02] (FirebirdSQL Project)
R3 FirebirdServerDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbserver.exe [1994752 2007-03-02] (FirebirdSQL Project)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [344928 2011-01-28] ()
S2 Internet Manager. RunOuc; D:\Program Files (x86)\Stick\UpdateDog\ouc.exe [224096 2012-07-25] ()
S2 MBAMScheduler; D:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; D:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1522312 2012-11-22] (pdfforge GbR)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [905864 2012-11-22] (pdfforge GbR)
R2 Radio.fx; D:\Tobit Radio.fx\Server\rfx-server.exe [3999512 2013-06-03] ()
R2 TeamViewer8; D:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [3560288 2013-03-06] (TeamViewer GmbH)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)
S3 MozillaMaintenance; "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe" [X]

==================== Drivers (Whitelisted) ====================

S3 aksusb; C:\Windows\System32\DRIVERS\aksusb.sys [21120 2011-08-09] (SafeNet Inc.)
S3 ASUSProcObsrv; C:\eSupport\eDriver\I386\AsPrOb64.sys [12416 2010-05-26] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2012-07-08] ()
R0 BMLoad; C:\Windows\System32\drivers\BMLoad.sys [16512 2012-07-25] (Bytemobile, Inc.)
S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [53816 2009-03-25] (Samsung Electronics Co., Ltd.)
R2 Dokan; C:\Windows\system32\drivers\dokan.sys [120408 2011-01-10] (Windows (R) Win 7 DDK provider)
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [321536 2011-10-07] (SafeNet Inc.)
S2 Haspnt; C:\Windows\SysWOW64\drivers\Haspnt.sys [47616 2012-03-14] (Aladdin Knowledge Systems)
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [212992 2012-07-25] (Huawei Technologies Co., Ltd.)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [460888 2011-03-04] (Kaspersky Lab ZAO)
R1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [11864 2011-03-04] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [637272 2012-10-31] (Kaspersky Lab)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29488 2011-03-10] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [22544 2009-11-02] (Kaspersky Lab)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2012-07-08] ()
R2 lirsgt; C:\Windows\SysWOW64\DRIVERS\lirsgt.sys [18048 2012-06-06] ()
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R1 tcpipBM; C:\Windows\system32\drivers\tcpipBM.sys [39552 2012-07-25] (Bytemobile, Inc.)
S3 cpuz130; \??\C:\Users\LAPTOP~1\AppData\Local\Temp\cpuz130\cpuz_x64.sys [X]
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-15 16:50 - 2014-02-15 16:51 - 00026984 _____ () C:\Users\Laptop Michael Rebbe\Downloads\FRST.txt
2014-02-15 16:50 - 2014-02-15 16:50 - 02152960 _____ (Farbar) C:\Users\Laptop Michael Rebbe\Downloads\FRST64.exe
2014-02-15 16:50 - 2014-02-15 16:50 - 00000000 ____D () C:\FRST
2014-02-14 20:11 - 2014-02-14 20:11 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\Microsoft\Windows\Start Menu\OMC ModPack
2014-02-14 19:26 - 2014-02-14 20:10 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Documents\OMC ModPack
2014-02-14 19:22 - 2014-02-14 19:22 - 01787096 _____ (Odem Mortis ) C:\Users\Laptop Michael Rebbe\Downloads\OMC_ModPack_0.8.11.exe
2014-02-14 19:14 - 2014-02-14 19:14 - 00093285 _____ () C:\Users\Laptop Michael Rebbe\Downloads\Crakker-s-Sniper-Zoom-ScopeShodow-remove-Mod-Zoomstufe.rar
2014-02-14 19:14 - 2014-02-14 19:14 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\Crakker-s-Sniper-Zoom-ScopeShodow-remove-Mod-Zoomstufe
2014-02-14 10:16 - 2014-02-14 13:32 - 04878848 _____ () C:\Users\Laptop Michael Rebbe\Desktop\Barth_Wipro_DachsPro20ST.xls
2014-02-12 20:03 - 2014-02-12 20:03 - 00002205 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-12 19:59 - 2014-02-14 20:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-12 19:59 - 2014-02-12 19:59 - 00001105 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-02-12 19:59 - 2014-02-12 19:59 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-12 18:15 - 2014-02-12 18:15 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\xvm-5.1.0
2014-02-12 17:52 - 2014-02-12 17:52 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-02-12 17:52 - 2014-02-12 17:52 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-02-12 17:52 - 2014-02-12 17:52 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-02-12 17:52 - 2014-02-12 17:52 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-02-12 12:41 - 2014-02-12 12:41 - 00000846 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-12 12:41 - 2014-02-12 12:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\Malwarebytes
2014-02-12 12:41 - 2014-02-12 12:41 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-12 12:41 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-12 10:28 - 2014-02-12 12:24 - 00000000 ____D () C:\AdwCleaner
2014-02-11 19:45 - 2014-02-11 19:45 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-02-11 18:41 - 2014-02-11 18:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\locastans Minimap_3rdGen_811
2014-02-11 18:41 - 2014-02-11 18:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\J1mB0s_Crosshair_Mod_v1.36
2014-02-11 18:41 - 2014-02-11 18:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\0.8.11White_Dead_Tanks
2014-02-09 17:23 - 2014-02-09 17:24 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Local\{39E7D8F3-0E75-4EA2-A5A5-B06DFB3853A4}
2014-02-07 22:41 - 2014-02-07 22:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\updated
2014-02-04 11:40 - 2014-02-04 12:10 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Local\Deployment
2014-02-04 11:40 - 2014-02-04 11:40 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Local\Apps\2.0
2014-02-03 14:35 - 2014-02-03 14:35 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\ab_excel_2007_wipro_v_13_04_1
2014-02-02 10:19 - 2014-02-12 14:15 - 00000000 ____D () C:\Program Files (x86)\Bench
2014-02-02 10:19 - 2014-02-02 10:19 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Local\emaze
2014-01-24 07:15 - 2014-01-24 07:15 - 00005327 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-21 15:08 - 2014-01-21 15:08 - 00000788 _____ () C:\Users\Public\Desktop\PDFCreator.lnk
2014-01-21 15:08 - 2013-04-09 14:13 - 00110264 _____ (pdfforge GmbH) C:\Windows\system32\pdfcmon.dll
2014-01-21 15:08 - 2012-05-05 10:54 - 00662288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCT2.OCX
2014-01-21 15:08 - 2012-05-05 10:54 - 00137000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMAPI32.OCX
2014-01-21 15:08 - 2012-05-05 10:54 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPIDE.DLL
2014-01-21 15:08 - 1998-07-06 17:55 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCMCDE.DLL
2014-01-21 15:08 - 1998-07-06 17:55 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCC2DE.DLL
2014-01-21 09:19 - 2014-01-21 09:19 - 00001060 _____ () C:\Users\Laptop Michael Rebbe\Desktop\Dropbox.lnk
2014-01-21 09:17 - 2014-01-21 09:19 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\DropboxMaster
2014-01-21 09:16 - 2014-01-21 09:16 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

==================== One Month Modified Files and Folders =======

2014-02-15 16:51 - 2014-02-15 16:50 - 00026984 _____ () C:\Users\Laptop Michael Rebbe\Downloads\FRST.txt
2014-02-15 16:50 - 2014-02-15 16:50 - 02152960 _____ (Farbar) C:\Users\Laptop Michael Rebbe\Downloads\FRST64.exe
2014-02-15 16:50 - 2014-02-15 16:50 - 00000000 ____D () C:\FRST
2014-02-15 16:47 - 2009-07-14 05:51 - 00223920 _____ () C:\Windows\setupact.log
2014-02-15 16:32 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2014-02-15 16:14 - 2012-02-17 05:55 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-02-15 16:13 - 2012-05-22 15:35 - 00001138 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-15 16:12 - 2012-03-31 04:38 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-15 16:12 - 2011-12-28 12:11 - 01558066 _____ () C:\Windows\WindowsUpdate.log
2014-02-15 06:09 - 2013-03-20 07:46 - 00651776 ___SH () C:\Users\Laptop Michael Rebbe\Desktop\Thumbs.db
2014-02-15 05:11 - 2014-01-06 08:00 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\ActiveDossierUploader
2014-02-14 20:22 - 2009-07-14 05:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-14 20:22 - 2009-07-14 05:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-14 20:18 - 2012-03-05 09:18 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Documents\Mein Steuer-Sparbuch Heute
2014-02-14 20:17 - 2013-09-30 14:45 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Desktop\WOT
2014-02-14 20:16 - 2012-06-10 12:55 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\Dropbox
2014-02-14 20:15 - 2012-05-22 15:35 - 00001134 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-14 20:15 - 2012-02-14 19:53 - 00105936 _____ () C:\Users\Laptop Michael Rebbe\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-14 20:15 - 2012-02-14 19:53 - 00045056 _____ () C:\Windows\SysWOW64\acovcnt.exe
2014-02-14 20:14 - 2012-06-08 21:20 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-02-14 20:14 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-14 20:14 - 2009-07-14 05:45 - 00402112 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-14 20:13 - 2014-02-12 19:59 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-14 20:13 - 2011-10-19 04:20 - 01089910 _____ () C:\Windows\PFRO.log
2014-02-14 20:11 - 2014-02-14 20:11 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\Microsoft\Windows\Start Menu\OMC ModPack
2014-02-14 20:10 - 2014-02-14 19:26 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Documents\OMC ModPack
2014-02-14 19:22 - 2014-02-14 19:22 - 01787096 _____ (Odem Mortis ) C:\Users\Laptop Michael Rebbe\Downloads\OMC_ModPack_0.8.11.exe
2014-02-14 19:14 - 2014-02-14 19:14 - 00093285 _____ () C:\Users\Laptop Michael Rebbe\Downloads\Crakker-s-Sniper-Zoom-ScopeShodow-remove-Mod-Zoomstufe.rar
2014-02-14 19:14 - 2014-02-14 19:14 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\Crakker-s-Sniper-Zoom-ScopeShodow-remove-Mod-Zoomstufe
2014-02-14 13:35 - 2011-02-19 05:24 - 00809028 _____ () C:\Windows\system32\perfh007.dat
2014-02-14 13:35 - 2011-02-19 05:24 - 00186594 _____ () C:\Windows\system32\perfc007.dat
2014-02-14 13:35 - 2009-07-14 06:13 - 01890364 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-14 13:32 - 2014-02-14 10:16 - 04878848 _____ () C:\Users\Laptop Michael Rebbe\Desktop\Barth_Wipro_DachsPro20ST.xls
2014-02-14 09:46 - 2012-04-28 08:58 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Documents\DachsWelt
2014-02-13 17:59 - 2012-05-22 15:35 - 00004134 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-13 17:59 - 2012-05-22 15:35 - 00003882 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-12 20:03 - 2014-02-12 20:03 - 00002205 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-12 20:03 - 2012-05-22 15:35 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Local\Google
2014-02-12 20:03 - 2012-05-22 15:35 - 00000000 ____D () C:\Program Files (x86)\Google
2014-02-12 19:59 - 2014-02-12 19:59 - 00001105 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-02-12 19:59 - 2014-02-12 19:59 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-12 18:15 - 2014-02-12 18:15 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\xvm-5.1.0
2014-02-12 17:52 - 2014-02-12 17:52 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-02-12 17:52 - 2014-02-12 17:52 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-02-12 17:52 - 2014-02-12 17:52 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-02-12 17:52 - 2014-02-12 17:52 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-02-12 17:52 - 2013-10-16 10:17 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-12 14:27 - 2011-12-28 12:24 - 00001591 _____ () C:\Windows\system32\ServiceFilter.ini
2014-02-12 14:15 - 2014-02-02 10:19 - 00000000 ____D () C:\Program Files (x86)\Bench
2014-02-12 12:53 - 2012-02-14 19:53 - 00000000 ____D () C:\Users\Laptop Michael Rebbe
2014-02-12 12:41 - 2014-02-12 12:41 - 00000846 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-12 12:41 - 2014-02-12 12:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\Malwarebytes
2014-02-12 12:41 - 2014-02-12 12:41 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-12 12:24 - 2014-02-12 10:28 - 00000000 ____D () C:\AdwCleaner
2014-02-12 11:39 - 2012-02-16 06:30 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\Maytec.net
2014-02-12 10:38 - 2012-02-14 19:54 - 00000000 ___RD () C:\Users\Laptop Michael Rebbe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-11 21:21 - 2013-12-21 08:11 - 02215424 _____ (Marius Czyz aka Phalynx) C:\Users\Laptop Michael Rebbe\Downloads\ActiveDossierUploader.exe
2014-02-11 19:45 - 2014-02-11 19:45 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-02-11 19:44 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-02-11 19:44 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-02-11 18:41 - 2014-02-11 18:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\locastans Minimap_3rdGen_811
2014-02-11 18:41 - 2014-02-11 18:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\J1mB0s_Crosshair_Mod_v1.36
2014-02-11 18:41 - 2014-02-11 18:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\0.8.11White_Dead_Tanks
2014-02-09 17:24 - 2014-02-09 17:23 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Local\{39E7D8F3-0E75-4EA2-A5A5-B06DFB3853A4}
2014-02-09 15:19 - 2012-02-14 20:49 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\uninstall
2014-02-09 15:11 - 2013-05-23 10:43 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\browser
2014-02-09 15:11 - 2013-04-12 16:42 - 00028272 _____ (Mozilla Corporation) C:\Users\Laptop Michael Rebbe\plugin-hang-ui.exe
2014-02-09 15:11 - 2012-10-19 23:07 - 00170960 _____ (Mozilla Corporation) C:\Users\Laptop Michael Rebbe\webapp-uninstaller.exe
2014-02-09 15:11 - 2012-10-19 23:07 - 00093808 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\webapprt-stub.exe
2014-02-09 15:11 - 2012-10-19 23:07 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\webapprt
2014-02-09 15:11 - 2012-10-06 14:58 - 00075376 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\breakpadinjector.dll
2014-02-09 15:11 - 2012-05-08 20:44 - 00194552 _____ (Mozilla Corporation) C:\Users\Laptop Michael Rebbe\maintenanceservice_installer.exe
2014-02-09 15:11 - 2012-05-08 20:44 - 00118896 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\maintenanceservice.exe
2014-02-09 15:11 - 2012-05-08 20:44 - 00000132 _____ () C:\Users\Laptop Michael Rebbe\update-settings.ini
2014-02-09 15:11 - 2012-03-21 21:29 - 03494512 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\gkmedias.dll
2014-02-09 15:11 - 2012-03-21 21:29 - 00142960 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\mozglue.dll
2014-02-09 15:11 - 2012-02-18 22:19 - 08484775 _____ () C:\Users\Laptop Michael Rebbe\omni.ja
2014-02-09 15:11 - 2012-02-14 20:49 - 22777456 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\xul.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 03583600 _____ () C:\Users\Laptop Michael Rebbe\mozjs.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 01786480 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\nss3.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 00647280 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\libGLESv2.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 00398960 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\nssckbi.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 00307824 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\freebl3.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 00276592 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\updater.exe
2014-02-09 15:11 - 2012-02-14 20:49 - 00152688 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\softokn3.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 00117360 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\crashreporter.exe
2014-02-09 15:11 - 2012-02-14 20:49 - 00092784 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\nssdbm3.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 00053360 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\libEGL.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 00020080 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\AccessibleMarshal.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 00018544 _____ (Mozilla Corporation) C:\Users\Laptop Michael Rebbe\plugin-container.exe
2014-02-09 15:11 - 2012-02-14 20:49 - 00017008 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\mozalloc.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 00001928 _____ () C:\Users\Laptop Michael Rebbe\precomplete
2014-02-09 15:11 - 2012-02-14 20:49 - 00000899 _____ () C:\Users\Laptop Michael Rebbe\softokn3.chk
2014-02-09 15:11 - 2012-02-14 20:49 - 00000899 _____ () C:\Users\Laptop Michael Rebbe\nssdbm3.chk
2014-02-09 15:11 - 2012-02-14 20:49 - 00000899 _____ () C:\Users\Laptop Michael Rebbe\freebl3.chk
2014-02-09 15:11 - 2012-02-14 20:49 - 00000662 _____ () C:\Users\Laptop Michael Rebbe\application.ini
2014-02-09 15:11 - 2012-02-14 20:49 - 00000140 _____ () C:\Users\Laptop Michael Rebbe\platform.ini
2014-02-07 22:41 - 2014-02-07 22:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\updated
2014-02-07 07:23 - 2013-12-21 08:11 - 02215424 _____ (Marius Czyz aka Phalynx) C:\Users\Laptop Michael Rebbe\Downloads\ActiveDossierUploader.exe_OLD
2014-02-05 07:59 - 2012-03-31 04:38 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-05 07:59 - 2012-03-31 04:38 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-05 07:59 - 2012-02-16 21:58 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-04 12:10 - 2014-02-04 11:40 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Local\Deployment
2014-02-04 12:03 - 2012-02-14 22:10 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Local\Microsoft Help
2014-02-04 11:40 - 2014-02-04 11:40 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Local\Apps\2.0
2014-02-03 14:35 - 2014-02-03 14:35 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\ab_excel_2007_wipro_v_13_04_1
2014-02-02 10:22 - 2009-07-14 04:20 - 00000000 ___HD () C:\Program Files\Common Files\Microsoft Shared
2014-02-02 10:19 - 2014-02-02 10:19 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Local\emaze
2014-01-24 07:15 - 2014-01-24 07:15 - 00005327 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-24 07:15 - 2013-08-16 14:10 - 00000000 ____D () C:\Program Files (x86)\Java
2014-01-21 15:08 - 2014-01-21 15:08 - 00000788 _____ () C:\Users\Public\Desktop\PDFCreator.lnk
2014-01-21 09:19 - 2014-01-21 09:19 - 00001060 _____ () C:\Users\Laptop Michael Rebbe\Desktop\Dropbox.lnk
2014-01-21 09:19 - 2014-01-21 09:17 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\DropboxMaster
2014-01-21 09:16 - 2014-01-21 09:16 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-17 14:00 - 2013-12-11 17:54 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Desktop\Akquise 12.12.2013
2014-01-17 14:00 - 2013-12-10 16:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Desktop\Akquise 11.12.2013
2014-01-17 11:21 - 2012-02-17 22:11 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\plugins
2014-01-16 09:59 - 2012-02-17 06:09 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

Files to move or delete:
====================
C:\Users\Laptop Michael Rebbe\AccessibleMarshal.dll
C:\Users\Laptop Michael Rebbe\breakpadinjector.dll
C:\Users\Laptop Michael Rebbe\crashreporter.exe
C:\Users\Laptop Michael Rebbe\D3DCompiler_43.dll
C:\Users\Laptop Michael Rebbe\freebl3.dll
C:\Users\Laptop Michael Rebbe\gkmedias.dll
C:\Users\Laptop Michael Rebbe\libEGL.dll
C:\Users\Laptop Michael Rebbe\libGLESv2.dll
C:\Users\Laptop Michael Rebbe\maintenanceservice.exe
C:\Users\Laptop Michael Rebbe\maintenanceservice_installer.exe
C:\Users\Laptop Michael Rebbe\mozalloc.dll
C:\Users\Laptop Michael Rebbe\mozglue.dll
C:\Users\Laptop Michael Rebbe\mozjs.dll
C:\Users\Laptop Michael Rebbe\msvcp100.dll
C:\Users\Laptop Michael Rebbe\msvcr100.dll
C:\Users\Laptop Michael Rebbe\nss3.dll
C:\Users\Laptop Michael Rebbe\nssckbi.dll
C:\Users\Laptop Michael Rebbe\nssdbm3.dll
C:\Users\Laptop Michael Rebbe\plugin-container.exe
C:\Users\Laptop Michael Rebbe\plugin-hang-ui.exe
C:\Users\Laptop Michael Rebbe\softokn3.dll
C:\Users\Laptop Michael Rebbe\updater.exe
C:\Users\Laptop Michael Rebbe\webapp-uninstaller.exe
C:\Users\Laptop Michael Rebbe\webapprt-stub.exe
C:\Users\Laptop Michael Rebbe\xul.dll


Some content of TEMP:
====================
C:\Users\Laptop Michael Rebbe\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp7jlubt.dll
C:\Users\Laptop Michael Rebbe\AppData\Local\Temp\information.exe
C:\Users\Laptop Michael Rebbe\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Laptop Michael Rebbe\AppData\Local\Temp\jre_setup.exe
C:\Users\Laptop Michael Rebbe\AppData\Local\Temp\jre_setup_1.7.0.51.exe
C:\Users\Laptop Michael Rebbe\AppData\Local\Temp\npp.6.5.2.Installer.exe
C:\Users\Laptop Michael Rebbe\AppData\Local\Temp\SendMsg.dll
C:\Users\Laptop Michael Rebbe\AppData\Local\Temp\Unipack_Installer.exe
C:\Users\Laptop Michael Rebbe\AppData\Local\Temp\xmlUpdater.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-08 19:43

==================== End Of Log ============================

--- --- ---

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-02-2014 01
Ran by Laptop Michael Rebbe at 2014-02-15 16:52:06
Running from C:\Users\Laptop Michael Rebbe\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Kaspersky Internet Security (Enabled - Up to date) {2EAA32A5-1EE1-1B22-95DA-337730C6E984}
AS: Kaspersky Internet Security (Enabled - Up to date) {95CBD341-38DB-14AC-AF6A-08054B41A339}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {1691B380-548E-1A7A-BE85-9A42CE15AEFF}

==================== Installed Programs ======================

 Update for Microsoft Office 2007 (KB2508958) (x32 Version:  - Microsoft)
[BV] Mod Collection (x32 Version: 1.08.91 - Black & Bloody Vengeance)
Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated)
Advanced Tactical Center™ 1.12 (x32 Version: 1.1.2.0 - Foolish Entertainment)
aerosoft's - German Airports 2 - 2012 (FSX) (x32 Version: 1.00 - aerosoft)
Alcor Micro USB Card Reader (x32 Version: 1.8.17.26026 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 1.8.17.26026 - Alcor Micro Corp.) Hidden
Amazon Cloud Player (HKCU Version: 2.2.0.399 - Amazon Services LLC)
Anno 1404 (x32 Version: 1.00.0000 - Ubisoft) Hidden
ANNO 1404 (x32 Version: 1.03.0000 - Ubisoft)
Apple Application Support (x32 Version: 2.3.4 - Apple Inc.)
Apple Mobile Device Support (Version: 6.1.0.13 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
ASUS LifeFrame3 (x32 Version: 3.0.25 - ASUS)
ASUS Live Update (x32 Version: 3.0.6 - ASUS)
ASUS Power4Gear Hybrid (Version: 1.1.45 - ASUS)
ASUS SmartLogon (x32 Version: 1.0.0011 - ASUS)
ASUS Splendid Video Enhancement Technology (x32 Version: 1.02.0033 - ASUS)
ASUS Virtual Camera (x32 Version: 1.0.23 - asus)
ASUS WebStorage (x32 Version: 3.0.108.222 - eCareme Technologies, Inc.)
ASUS_Screensaver (x32 Version:  - )
AsusVibe2.0 (x32 Version: 2.0.7.142 - ASUSTEK)
ATK Package (x32 Version: 1.0.0013 - ASUS)
Bluetooth Stack for Windows by Toshiba (Version: v8.00.02(T) - TOSHIBA CORPORATION)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
Bubbletown (x32 Version:  - Oberon Media)
CPUID CPU-Z 1.63.0 (Version:  - )
CyberLink LabelPrint (x32 Version: 2.5.3624 - CyberLink Corp.)
CyberLink LabelPrint (x32 Version: 2.5.3624 - CyberLink Corp.) Hidden
CyberLink Media Suite (x32 Version: 8.0.2926 - CyberLink Corp.)
CyberLink Media Suite (x32 Version: 8.0.2926 - CyberLink Corp.) Hidden
CyberLink Power2Go (x32 Version: 7.0.0.1126 - CyberLink Corp.)
CyberLink Power2Go (x32 Version: 7.0.0.1126 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Deadtime Stories (x32 Version:  - Oberon Media)
DivX-Setup (x32 Version: 2.6.1.24 - DivX, LLC)
Dokan Library 0.6.0 (x32 Version:  - )
Dortmund City (x32 Version: 3.0 - Bahrometrix)
Download Navigator (x32 Version: 1.1.0 - SEIKO EPSON CORPORATION)
Dream Day First Home (x32 Version:  - Oberon Media)
Dream Vacation Solitaire (x32 Version:  - Oberon Media)
Dropbox (HKCU Version: 2.6.2 - Dropbox, Inc.)
Druckerdeinstallation für EPSON WP-4525 Series (Version:  - SEIKO EPSON Corporation)
easySales CRM (x32 Version: 4.7.0 - maytec.net GmbH Germany) Hidden
Epson Event Manager (x32 Version: 2.50.0000 - SEIKO EPSON CORPORATION)
Epson FAX Utility (x32 Version: 1.20.00 - SEIKO EPSON CORPORATION)
Epson PC-FAX Driver (x32 Version:  - )
EPSON Scan (x32 Version:  - Seiko Epson Corporation)
EpsonNet Print (x32 Version: 2.4j - SEIKO EPSON CORPORATION)
Farm Frenzy 3 - Madagascar (x32 Version:  - Oberon Media)
Fast Boot (Version: 1.0.10 - ASUS)
FileParade bundle uninstaller (x32 Version: 1.0.0.0 - FileParade)
Firebird 2.0.1 (x32 Version:  - Firebird Project)
FoxTab PDF Creator (HKCU Version:  - ) <==== ATTENTION
Fraps (remove only) (x32 Version:  - )
Galapago (x32 Version:  - Oberon Media)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Game Park Console (x32 Version: 1.2.4.431 - Oberon Media Inc.)
Gigaset QuickSync (Version: 8.3.0868.3 - Gigaset Communications GmbH)
Go Go Gourmet Chef of the Year (x32 Version:  - Oberon Media)
Google Chrome (x32 Version: 32.0.1700.107 - Google Inc.)
Google Earth Plug-in (x32 Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden
Intel(R) Control Center (x32 Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1118 - Intel Corporation)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2932 - Intel Corporation)
Intel(R) Turbo Boost Technology Monitor 2.0 (Version: 2.1.23.0 - Intel)
Internet Manager (x32 Version: 22.001.18.00.748 - Huawei Technologies Co.,Ltd)
iTunes (Version: 11.0.5.5 - Apple Inc.)
Java 7 Update 51 (x32 Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Kaspersky Internet Security 2012 (x32 Version: 12.0.0.374 - Kaspersky Lab)
Kaspersky Internet Security 2012 (x32 Version: 12.0.0.374 - Kaspersky Lab) Hidden
Mahjong Memoirs (x32 Version:  - Oberon Media)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
métier Scan2PDF Professional (Version 10) (x32 Version: 10.0.3.888 - métier 2000 - Softwareenwicklung GmbH)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Flight Simulator X (x32 Version: 10.0.60905 - Microsoft Game Studios) Hidden
Microsoft Flight Simulator X: Acceleration (x32 Version: 10.0.61637.0 - Microsoft Game Studios)
Microsoft Flight Simulator X: Acceleration (x32 Version: 10.0.61637.0 - Microsoft Game Studios) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Outlook 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40820 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40825 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU (Version: 10.0.40820 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (Version: 10.0.40820 - Microsoft Corporation)
Mozilla Firefox 19.0.2 (x86 de) (x32 Version: 19.0.2 - Mozilla)
Mozilla Firefox 27.0 (x86 de) (HKCU Version: 27.0 - Mozilla)
Mozilla Firefox 27.0 (x86 de) (x32 Version: 27.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 27.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser und SDK (x32 Version: 4.20.9818.0 - Microsoft Corporation)
Netzwerkhandbuch EPSON WP-4525 Series (x32 Version:  - )
Notepad++ (x32 Version: 6.5.2 - Notepad++ Team)
Nuance PDF Reader (x32 Version: 6.00.0041 - Nuance Communications, Inc.)
NVIDIA Grafiktreiber 311.44 (Version: 311.44 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.109.706 - NVIDIA Corporation) Hidden
NVIDIA Optimus 1.11.3 (Version: 1.11.3 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 311.44 (Version: 311.44 - NVIDIA Corporation) Hidden
NVIDIA Update 1.11.3 (Version: 1.11.3 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.11.3 - NVIDIA Corporation) Hidden
OMC ModPack Version 0.8.11.0 (x32 Version: 0.8.11.0 - Odem Mortis)
OpenAL (x32 Version:  - )
Paint.NET v3.5.11 (Version: 3.61.0 - dotPDN LLC)
PDF Architect (x32 Version: 1.0.41.8362 - pdfforge)
PDFCreator (x32 Version: 1.7.2 - pdfforge)
Personal Backup 5.3 (x32 Version: 5.3 - J. Rathlev)
Pinnacle Studio 12 (x32 Version: 12.0.1.6173 - Pinnacle Systems)
Pinnacle Video Treiber (Version: 12.00.0017 - Pinnacle Systems)
Plants vs Zombies (x32 Version:  - Oberon Media)
QuteScoop (x32 Version: 2.0rc21 - QuteScoop)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Radio.fx (x32 Version:  - Tobit.Software)
Ralink RT2860 Wireless LAN Card (x32 Version: 1.5.9.0 - Ralink)
Readiris Pro 10 (x32 Version:  - )
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6418 - Realtek Semiconductor Corp.)
Samsung CLX-3170 Series (x32 Version:  - Samsung Electronics CO.,LTD)
Samsung Kies (x32 Version: 2.3.1.12044_18 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.3.1.12044_18 - Samsung Electronics Co., Ltd.) Hidden
Samsung Mobile phone USB driver Drive Software (Version:  - )
Samsung PC Studio 3 USB Driver Installer (x32 Version: 3.2.0.70701 - Samsung Electronics Co., Ltd.)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.4.0 - SAMSUNG Electronics Co., Ltd.)
Skype Click to Call (x32 Version: 6.3.11079 - Skype Technologies S.A.)
Skype™ 6.1 (x32 Version: 6.1.129 - Skype Technologies S.A.)
SmarThru 4 (x32 Version:  - )
SmarThru PC Fax (x32 Version:  - )
Sonic Focus (x32 Version: 1.0.0.4 - Synopsys )
SopCast 3.5.0 (x32 Version: 3.5.0 - www.sopcast.com)
SquawkBox (x32 Version:  - )
Synaptics Pointing Device Driver (Version: 15.3.6.0 - Synaptics Incorporated)
TeamSpeak 3 Client (Version: 3.0.10 - TeamSpeak Systems GmbH)
TeamViewer 8 (x32 Version: 8.0.17396 - TeamViewer)
Tinypic 3.18 (x32 Version: Tinypic 3.18 - E. Fiedler)
Turbo Fiesta (x32 Version:  - Oberon Media)
TV - Wartezimmer Programmdirektor 2010 (x32 Version: 1.03 - TV-Wartezimmer GmbH)
TVUPlayer 2.5.3.1 (x32 Version: 2.5.3.1 - TVU networks)
Update for 2007 Microsoft Office System (KB967642) (x32 Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2850085) 32-Bit Edition (x32 Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32 Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (x32 Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32 Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (x32 Version:  - Microsoft)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Version 2.0 (x32 Version:  - Ulrich Loehl)
VirtualDJ Home FREE (x32 Version: 7.0.5 - Atomix Productions)
VLC media player 2.0.1 (x32 Version: 2.0.1 - VideoLAN)
Windows 7 Codec Pack 4.0.2 (x32 Version: 4.0.2 - Windows 7 Codec Pack)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3538.0513 - Microsoft Corporation)
Windows Live Family Safety (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Корпорация Майкрософт) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 影像中心 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 程式集 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
WinFlash (x32 Version: 2.31.1 - ASUS)
WinRAR 4.20 (64-Bit) (Version: 4.20.0 - win.rar GmbH)
Wireless Console 3 (x32 Version: 3.0.21 - ASUS)
WISO Steuer-Sparbuch 2011 (x32 Version: 18.09.7121 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2012 (x32 Version: 19.03.7334 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2013 (x32 Version: 20.05.8246 - Buhl Data Service GmbH)
World of Goo (x32 Version:  - Oberon Media)
World of Tanks (x32 Version:  - Wargaming.net)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Restore Points  =========================

11-02-2014 18:37:29 Windows Update
11-02-2014 18:48:56 Free Driver Scout
12-02-2014 16:51:18 Installed Java 7 Update 51

==================== Hosts content: ==========================

2009-07-14 03:34 - 2014-02-11 19:44 - 00000871 ____A C:\Windows\system32\Drivers\etc\hosts
54.204.28.26	gcbkfpidjhchgnokamccdemjfamackdh

==================== Scheduled Tasks (whitelisted) =============

Task: {02FBDA7C-B5A9-4714-B5BE-0C597FC9BB94} - System32\Tasks\{57B2289B-EE0B-425F-99D2-8981F94FA8E8} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {03729B3E-D0EF-492F-9629-E449ABCBCA41} - System32\Tasks\{BE64DCA8-B551-45D0-83FE-F3AEC68A55CC} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {07BCD87A-219D-4D01-B1A5-43185D276058} - System32\Tasks\{30E2B7A7-43C8-45E8-88A2-D609A7A537E1} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {0B38509A-30E2-4AB7-9667-A45311364505} - System32\Tasks\{402CBA02-A162-456A-8457-9ED28E1B55D6} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {0ED22CD9-0002-477E-8447-435B8D825199} - System32\Tasks\{0B9C756C-E818-4B31-AB1F-8CB4EE283C3D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {1485643C-F2D0-4421-8DB5-5A1CF106A3C8} - System32\Tasks\{B4411E7A-5C35-4980-918B-993EEF1A5A6B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {1718C7F9-2F00-4794-9368-1E71C55D4D3B} - System32\Tasks\{2B1CEE50-8F66-4F30-B62F-9DB0B96D32FF} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {17FB95A0-BBDA-4FFD-806D-AACCD69D6FEA} - System32\Tasks\{0C2F02D8-A584-4CCF-9898-AE25FF9D51C6} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {1881D383-400A-495D-A7ED-838D4092F8A5} - System32\Tasks\{99D25EE6-2E88-4126-AD7C-5C11CD03FD9D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {1888C400-74EF-462F-9C32-0251B40F40F2} - System32\Tasks\{422D40A5-738D-4AF9-87C9-DF7A62FFA5AA} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {195F94F4-A76A-4473-8DB9-DE04768A7BF5} - System32\Tasks\{E07556F8-8671-432E-9A47-AFE5EDCE52E0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {1A3102A9-3B88-4CC0-BB19-E0149D3F7A2E} - System32\Tasks\{F9FF6E15-551B-4AE3-89F0-FDEFAC26A52A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {1A561B09-25E0-434C-9D74-9953F9BCFED1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-05-22] (Google Inc.)
Task: {20F367C4-F7ED-4324-890E-D01BA4C13858} - System32\Tasks\{53B3A3A4-7C4A-40FE-BE8B-0F301A8C1746} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {21B7D91A-6758-4AED-B045-8D4311E223AE} - System32\Tasks\{12E87A2A-76B1-4E64-80D3-53DA234AAF8A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {22145976-B506-4441-94E3-1FAD009D0C77} - System32\Tasks\{A1DABD05-AB5B-4D96-B7D8-2B6E164C3E19} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {23241D4C-802B-4983-9604-4D3B458A75DD} - System32\Tasks\{69933CD2-3DCC-470F-9249-EAF2694B003D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {233D142D-0B8A-4157-821B-D2184090F3FC} - System32\Tasks\{1EC0DB20-BE0E-4EBF-8874-F3F0314085DA} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {23D073DC-943D-4583-95A3-860B5C2AF5B6} - System32\Tasks\{9B825274-EA00-43D7-850C-3024389DBB75} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {23FBB2C6-DF60-4CBD-9985-E5E388DEFB57} - System32\Tasks\{934E1E6D-9774-4B90-B5F3-D8470E53F465} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {258CDF17-5C27-44C3-9FD3-44DFA13C937B} - System32\Tasks\{CCE157FC-348D-4790-801B-1FD183623A2D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {2AF152E1-A76F-4684-9E01-7EB81A87A13F} - System32\Tasks\{50DD258D-832B-48BC-8EA9-4E6DC3D19552} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {2BD2247A-9AF5-4C23-9082-DF44E2990AFE} - System32\Tasks\{C1DA7344-242D-4AD2-959B-E69A634DF86F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {2C70FA8B-E4A9-40F3-831A-911998614340} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2011-07-22] (ASUS)
Task: {3146C1A4-0088-47A0-8CC7-BEB658F3536C} - System32\Tasks\{EBCD17CC-A4C0-4074-82C8-EEFCA2D1A811} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {31E714E8-5A2B-4131-97E7-199DB3AA3FD2} - System32\Tasks\{3CF312DB-C655-42B6-B4AC-0A844A23209A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {3302603B-B397-496F-9B18-04E336A5E8B9} - System32\Tasks\{264A5620-16A8-4789-A7F4-4AC6DC64F27C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {33B94B51-F4D1-41F9-9540-45A1F6CD0B6B} - \FreeDriverScout No Task File
Task: {33E343EA-AB16-48EA-B5E6-F9C93ABB2CE8} - System32\Tasks\{EA4DBDFC-40E3-4937-99E8-51F82C1062DE} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {343CBE81-C8B7-4C22-B52D-10797939B387} - System32\Tasks\{C24922CC-1BAF-4906-83AE-B85384EACD3E} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {36BD0BDC-1E92-462A-8C50-0C1598D05D2D} - System32\Tasks\{E86C58A9-2A7A-4E60-AEBE-5F389EE4D101} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {375A1F1B-6B76-48E7-AF9E-801E486D36A1} - System32\Tasks\{CBA676BB-904A-4AF7-96B0-83BCA40BAEB0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {38C7344A-D905-4E70-AC6E-B1595C66D5D8} - System32\Tasks\{1C6F2053-1B4E-42A1-987D-96718750DFDC} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {3A803132-D609-4CA8-9FE7-BD491A09E98D} - System32\Tasks\{58B175C3-7320-4289-A6B8-B10BB1076134} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {3AAF3673-4AA1-40A3-88A3-5EEBEE50AB40} - System32\Tasks\{14286DD1-09AC-4CEE-918D-183B53DDB7F3} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {3DD14338-79B3-4CBB-8046-7C8B0548E550} - System32\Tasks\{346141DD-2C99-4762-9F96-5AEC6766186E} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {3E988631-7E3F-4C19-A76D-D14DCA27C935} - System32\Tasks\{7227B3A1-63D7-40A1-9672-A4D078C896CB} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {403E89C9-329B-414C-A918-1A5FEC33C0C2} - System32\Tasks\{ED7E0A6A-7DF1-48EC-8D28-EFEFCFFF2CD5} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {4188386A-29E4-4E18-A15B-89D90ABB66AD} - System32\Tasks\{2ADB0CFA-82B5-4CAE-AD7A-5C7B37BAC0C4} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {41F33890-9303-42EC-9962-1A2CFA0DC8A2} - System32\Tasks\{9779E185-8438-4F4E-9AEA-3276B18F1867} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {440C3346-2055-4220-ABD5-3BE75F358F78} - System32\Tasks\{D6F87733-0992-4C65-8BCA-A7A99D8EC3AE} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {443B6F60-302E-4CCE-9111-73E2F0661E05} - System32\Tasks\{A0347913-0116-4B60-9203-1F66542EC971} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {44D07839-4E02-42BE-B146-969963616127} - System32\Tasks\{6E0BB519-D470-4BAE-A07D-CA27888E514C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {461809C1-E991-45F6-B6BB-A7B22A77F188} - System32\Tasks\{541F10F3-049F-4CA2-A2CE-F3EA401B1C24} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {47F57930-B8D4-4B63-B512-BCEEDC34C313} - System32\Tasks\{78E6803F-FDD6-41DD-B94F-EF122D457F88} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {48B41B0C-078D-4C21-9DFD-FA45EE05B69D} - System32\Tasks\{87E8AAC3-E26A-4031-9FA9-77655C426854} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {4BC21A0B-7478-4EAE-B6F1-B3DF21BF288D} - System32\Tasks\{6FC22F08-65A1-41FF-BBA3-81872E99B113} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {4C121AED-47C4-4023-940B-1F01F30D65F2} - System32\Tasks\{CEEDF8CB-F99C-4BAA-AA47-C862942A3042} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {4D895DDE-BF3F-4AC5-B420-A54051E2365E} - System32\Tasks\{1D452BA5-32AD-4098-A4EF-41608384D570} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {50766107-0883-4993-AE6A-67DD19DA4494} - System32\Tasks\{AC0029CB-C908-42F8-A515-181CBE2B54B9} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {524737D6-84E8-4D24-8C84-FC68F6B238AF} - System32\Tasks\{55EBE7F9-9630-4CF5-853E-33426680A481} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {53498138-01B4-4386-B017-F241AEF0307E} - System32\Tasks\{DBCCEF7A-BA80-442A-A6BD-34FB0BF3FC5C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {54053826-026B-49A3-B7A9-025DDAFF9AB3} - System32\Tasks\{36261655-D82B-41A1-9281-AE61975B34A0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {565CBE18-7BD1-4E35-A1A8-80FE78BA046A} - System32\Tasks\{BFC2C9FF-5ED5-4B3F-8FC1-C1E0E57F8B15} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {59BDC51D-CE9B-481B-BBCC-63572B48BFD8} - System32\Tasks\{44C44271-4C0F-4119-ACC6-C7F1E6D785E0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {5B00844D-D5AF-46F6-B2A1-BC831274FBB2} - System32\Tasks\{BFC560FD-9796-437A-90AE-2C415FBB575F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {5BEA5E42-90C0-4648-95AF-B7D362AFED82} - System32\Tasks\{E5213A92-7609-4B4E-9A44-37B40B049E0E} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {5BEB40FE-1797-46E8-B69D-374E1995BF73} - System32\Tasks\{60204FC2-1403-406B-BE2C-83A6838EE0DF} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {5E4968F4-E0AB-4CC1-86EA-0F04A16BBEAD} - System32\Tasks\{55BA4ACD-9BB8-4E28-9A84-376740ECC72F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {5F24D0C3-8B1F-48C3-AFC5-5614EC39A5F8} - System32\Tasks\{FF6A1F30-0070-4177-82B4-AF1BED8E6AF5} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {63E8F336-FD77-4F1A-8D20-D0C3FC6B5172} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2011-09-01] (ASUSTeK Computer Inc.)
Task: {67B7677D-B6AF-4AE7-8A0A-E651EEF232C0} - System32\Tasks\{8BC8A25C-58FA-4E28-9712-5882DD0FE245} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {6879B677-2C56-419C-A361-D5D64644E01C} - System32\Tasks\{CF73CD97-B8E3-4821-94B8-C79A1554261A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {6AB337EB-34EA-412B-94D4-E2BFC12BA807} - System32\Tasks\{BC3EA546-97AB-45A0-9D10-A095478B5217} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {6CB53526-165D-45A7-B309-9584A64BD0F6} - System32\Tasks\{4AC0E7BD-0353-41B8-AAB5-7F8CB4A5A674} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {6D0D3269-A706-4101-8042-42A591969204} - System32\Tasks\{447BE823-FAEA-44FF-83B5-0B24B1E7EBD0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {6DE78048-12FC-4AA3-B9EB-33FCF8B21CBE} - System32\Tasks\{4E416516-1EF9-4BA4-BE22-11A55AE583D3} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {6E986057-308E-4424-9E75-8D7180F4B597} - System32\Tasks\{F44A831D-8CB6-4616-BDF9-6BCDCCDE1235} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {70AFCD64-C5C2-47FE-91C6-AB6CBBC918C5} - System32\Tasks\{9F2F39EB-9BEF-41C4-BBFB-EFF2ECC00FA7} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {728A722C-6C80-4FE1-AD1D-9D6E8DFB6D6B} - System32\Tasks\{CC707497-1345-437A-924E-DA7477C90252} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {72A292C0-0675-49D7-B34B-DDC1C476DA83} - System32\Tasks\{AC16838C-63F8-4819-8748-5CC291CF22DB} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {72CF65E2-1929-4608-909C-8B0A5698EE5D} - System32\Tasks\{44EBD0E7-F719-4867-94E8-822F83E540CF} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {72E22F26-C5CF-4198-818F-500B2EE2A364} - System32\Tasks\{3AFD4A20-A601-4E2D-B815-368FFAC5EB43} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {72F5A593-9B93-4093-94E9-121682ED66AB} - System32\Tasks\{5DBB0861-4439-460D-9EE8-74E7B90DD092} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {73B3027F-A7ED-43F8-AE84-7A4234C493EF} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2011-05-30] (ASUS)
Task: {750032E3-A0D5-4DEB-B402-EF1BCC067C9F} - System32\Tasks\{12F89958-A4B8-4086-8161-486C79052B2B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {75150D25-DBF2-46F2-81D7-CD1BAA3FE92F} - System32\Tasks\{22257E59-7A43-4451-8A2A-E87FC76328B8} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {752D2A58-9F62-4B39-A545-4FC29B363AF0} - System32\Tasks\{DA9B4BDB-B74C-4EE6-BC8B-40D057ECAC80} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {75B98BB8-1DFC-4860-84C1-467D6823C86D} - System32\Tasks\{06AF810A-E13B-4592-93FE-DBD45E001748} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {772A3628-FD55-4293-8650-F05B9925DDC8} - System32\Tasks\{29159D93-074D-44AF-BC66-9F4C909D6E8B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {77330C3C-07CF-420A-8568-5A619D7E1F07} - System32\Tasks\{B290572C-C329-42D3-9096-9FAEE53813F7} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7C5F9CE1-57A6-416A-B342-D486D3F84E6E} - System32\Tasks\{BCBF460B-9681-46DB-A257-6D032D233CBD} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7CC5D150-FCA9-48A0-98DC-7B59BAE4C1D7} - System32\Tasks\{43B90152-B3C9-4A39-ACFC-0DBF5637F9A5} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7D7F5E4E-2F92-4F14-AF24-175AE3959729} - System32\Tasks\{591ABD68-30A9-4672-AE71-71267C48A19B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7D996E24-55F1-42E9-BC17-FB31D2D93CBC} - System32\Tasks\{970067E6-1F7B-4DDF-8FC2-0C64EEFB8758} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7DCE0180-E60D-430E-9B93-CE3014267FA5} - System32\Tasks\{A2303708-CDE7-4B33-A458-8A5FB8527508} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7E84AC67-D0DA-4ADE-859A-E8F6F48AD457} - System32\Tasks\{59646A83-77EA-4C51-9529-23367BB706B7} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7F5F346A-3968-4C76-ACD7-F93CA347C605} - System32\Tasks\{4C3B9AE0-CB9F-4DED-8F0F-1E01E01EB4B6} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7FA0D6C8-C5BA-4143-91CF-5B2A076555FC} - System32\Tasks\{67E06D3C-5894-4FBD-963A-E6098B8246D1} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7FCDDB93-2693-4971-9A51-AA73A38A0C83} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2011-06-01] (ASUS)
Task: {7FD8893B-5461-4CE7-B8C4-D07D75A5EF47} - System32\Tasks\{89EE7B51-4A71-4401-A64E-89D834CB7D14} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {82CB6B51-9529-49BD-8D4E-64E6AC4E0647} - System32\Tasks\{6185242A-BD38-4060-A04B-D80188EA04E0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {8B913491-3CB8-4E95-A975-65593588E252} - System32\Tasks\{262525F8-7A3F-40D7-B9BE-DFD7CAE99B95} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {8C6C592F-F32D-4EF1-9BE7-FA93E2776152} - System32\Tasks\{6BF57BF0-D030-4096-BB98-3D106B1A7101} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {8DB5A7FF-FE3A-4C76-912A-F16EAFEC87ED} - System32\Tasks\{371E9896-5C13-47A4-AE8F-556261510EC9} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {8E9D7DA1-C1E3-4EF5-9D58-34EE3E553001} - System32\Tasks\{1402D502-A3F0-4981-9F9C-54C5FCA5B174} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {8EB3187C-E554-4C0C-BA15-3FCD96338D2D} - System32\Tasks\{56D601D1-D94D-4D30-B609-58760C697754} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {8F0E9971-9E52-4590-BF04-16E7392D8F5D} - System32\Tasks\{AD61692C-37A4-4226-96B5-77C00A2925D2} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {9272361E-93CE-48A5-A0D5-7E3E99E92A87} - System32\Tasks\{8EA103E7-5582-4650-839F-58A0775773CD} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {92AC888D-B924-4363-92D0-62402BFB63F4} - System32\Tasks\{4F13CE67-4BCC-4B68-9F98-AE57B9E56C7F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {92CDBE1A-43A4-40E8-A0C1-F8A3DB186451} - System32\Tasks\{2EE7F5CF-78B0-4A65-95DD-2CE2C1E86519} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {93697528-ECE0-4AE5-8437-2F87F3B6C29F} - System32\Tasks\{C3C6AB74-48F0-43CE-ABDE-BCAA474596E2} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {9735DAD5-22DC-4418-AA3A-BF00F8FCBC1D} - System32\Tasks\{0204776C-0B09-4881-B0C1-11BDE8923BD0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {97E5C56A-904C-4D37-A146-B9A388DCB495} - System32\Tasks\{02B4C897-37DB-4370-A43A-BCE1B2ACE6D0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {98D027A6-E3CB-4C4C-83AF-C87FCDB098CA} - System32\Tasks\{BA67E044-D980-47FD-B489-8399854CC93E} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {99C1B8C5-620D-4C04-9762-2D194213CE78} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {9A636DA1-C345-4232-AB5D-013E95BA2014} - System32\Tasks\{E78D89F5-C201-4FBC-AA4B-3565383B21BC} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {9A7EC952-2326-4DA0-BA0A-CBF675A7CE3C} - System32\Tasks\{4CAC17B7-95C4-4B11-8AC8-AE825CB212A1} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {9AFB6C32-8B23-43F3-B83D-B9595E80CBD7} - System32\Tasks\{C96C579C-6B72-46A6-9AB1-CFF7972AF157} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {9B09EA89-8237-4265-BCB7-1BD78099F1CE} - System32\Tasks\{4E09221F-3EA4-4B6F-86AD-B564B3145A7D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {9C88CDDD-93B4-4BAB-A2A0-90DB21623246} - System32\Tasks\{0A1F6D30-8996-488B-A498-A944E5F8B406} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {9CDE879A-C066-4D77-9E13-ACAA8A208F31} - System32\Tasks\{D1FD2B34-7948-4FD7-8D89-60F2B6AF5E5F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {9E40A66B-7F3E-41B6-95FB-6304027D7455} - System32\Tasks\{A6C1A95D-FA5E-4249-ABDB-3CEAE36FAD9A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {9F196820-6EA8-4A6B-B060-9837C0DD20E5} - System32\Tasks\{FDCD47E4-6D35-4E74-A14E-037A59342465} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A46A558E-9C99-45CC-A1D1-A0493DEE50B0} - System32\Tasks\{2162936D-B261-4547-9DDA-921AB166ADBD} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A89BEE7E-5874-4EA3-AC78-F56E736E86D9} - System32\Tasks\{D2A99E27-2154-4EE2-B1A1-E4551AE9B5D0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {AA7C68B6-4B1F-45D5-9F8E-7493A0A9DB86} - System32\Tasks\{452C7932-FBA9-425A-9907-02F5C97ABF5A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {AAD0FC57-4F74-43AB-9235-83A9F0744333} - System32\Tasks\{C83B68B8-7C0F-4574-A24B-4F4906E0C574} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {ACFD0E1D-32F9-4399-A06B-FB1AA23D8DAE} - System32\Tasks\{97B22445-A4D6-4367-9F3B-378DF13AE515} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {AE63C644-7F69-4C5F-A731-2EEC8707728B} - System32\Tasks\{018D86C0-83D6-4925-9BD9-4AB50802B4AB} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {AE6D565E-7E73-441A-852C-0E5DC12BD40A} - System32\Tasks\{CC637CB0-05EA-4F56-BB1F-4833C0E122EF} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {B02A8ADE-14E4-4018-9888-03AD15A27A74} - System32\Tasks\{C7DBD00A-9B82-42FD-B5B1-1D0BB623E15C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {B0D3969E-8E83-4742-9EB3-94E7736DDCB1} - System32\Tasks\{71BE034D-9481-47B7-84D2-3F8456F5D526} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {B4218601-BB37-4033-9E9D-B64CF94FC234} - System32\Tasks\{0BED9DB7-5BEF-4832-8960-98D25A4B13B9} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {B840A0CC-15B9-467A-BC5F-5583CA6309E3} - System32\Tasks\{385C20B1-DB59-4D63-8711-29BF4FFF79E3} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {BC858253-4665-462C-8B67-F547024C9F3A} - System32\Tasks\{A0EFC368-0288-4DCB-AF03-58FD9FC8C1C7} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {BCB12C32-23D0-49F2-A2AB-BE0619BDE26C} - System32\Tasks\{F4693379-643F-46C6-801C-601D52CE6583} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {C0E552D4-1E9C-40DA-93B3-C6C209893FFB} - System32\Tasks\{456F1A00-9500-4568-BC02-782332A23A96} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {C2C05702-7BBF-4775-A072-94AE77242176} - System32\Tasks\{848B79E1-E392-45FB-874D-0F04B77E76DA} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {C36DB922-42A8-41F9-A415-C889828F032A} - System32\Tasks\{3FA7DEA1-8B41-47E0-8AF9-C26E6676144A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {C45B695E-71D1-44B6-9AA5-D2EC90FB23AB} - System32\Tasks\{9A35E514-68E5-486A-A5C2-47666DEB08DF} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {C52FF211-E8D7-4BC3-99F3-E49AE400457B} - System32\Tasks\{71F01976-3B27-45C4-A209-B4F43DC3A0E3} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {C715609B-9063-4C8D-97F0-9C6D4BE342D3} - System32\Tasks\{120E23BB-E203-46D3-8ECA-F28CA0773029} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {C771EB55-789E-4671-ACCA-9BDDACA0A367} - System32\Tasks\{5D6A60B5-C433-4C2D-AE1D-63D1E7AA8E39} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {CBA08B7F-BB6B-4D9F-8DDF-E598DB5FB9CD} - System32\Tasks\{CCB9CC8E-7185-4F0F-A867-B9E94F4E379F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {CD5FA29E-E680-4681-B9BF-A33146E04DCD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-05-22] (Google Inc.)
Task: {CF3FE68B-8B8C-42A2-9F3E-0C7970C1400B} - System32\Tasks\{BD85FBF3-B8CD-40F5-974D-717998C78035} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {CF756979-2D36-47AD-BB7F-F9719F5ED6C0} - System32\Tasks\{DD8A567B-78CF-4572-863D-D0B3B6471402} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D02A490E-A3BB-4158-8C15-53B6FAA62329} - System32\Tasks\{7CFA2F52-29BE-439F-B38A-F57AA1B5527B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D3427726-EE0B-4D04-9744-9ADC28F9EE6B} - System32\Tasks\{AA438A8F-C64B-4518-8740-9E45F1B50C3B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D410F3CB-32D9-4EE9-924A-822F958836F0} - System32\Tasks\{81E1ECAB-3A49-402C-8A94-4748A74984FE} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D43E922E-57EB-46DE-BA68-5308292FB6E4} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {D6D5E185-A4B8-4BDB-BA21-DD1504592EC3} - System32\Tasks\{72F74758-BE39-4CC7-870A-B704871DC27F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D92E78D2-BB62-4244-9707-D509B9D1A705} - System32\Tasks\{BDA102A7-0B78-4A19-B14D-B07F93DE2678} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {DA4BA731-6E39-4756-9591-AC5A8A866162} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2010-11-15] (ASUS)
Task: {DCBFF97E-7107-4A1A-9039-B44EC870A15E} - System32\Tasks\{37EBF134-500E-4F39-842C-371FA47DC2AC} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {DCD7BD3C-7837-410B-847A-0EB3ED722691} - System32\Tasks\{90ADD009-F564-4984-8EC6-9E6D296211A5} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {DD315D3B-1C44-4AF6-95BD-BDE5DC0A1203} - System32\Tasks\{3A13DACD-808C-4C95-82A3-33259B22F87F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {DF241B39-F429-4DDA-B65D-80AF50C06FE4} - \Software Updater No Task File
Task: {E0BDA8BB-A433-4289-941A-DF4B0FD4FFF1} - System32\Tasks\{3C21A8C0-AD0C-4210-90E6-70ED685216E2} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {E153D8C9-6875-499A-A55A-0EF2723063C7} - System32\Tasks\{7B0FB42F-F5C0-45CD-8DDC-3B87E4B2D5A6} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {E272D46D-04CC-42E7-9B95-3222F912AD03} - System32\Tasks\{1D217EED-18DF-465D-9097-C20D49D6F0C0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {E2F89515-7811-4F00-9AAC-44944F186A6B} - System32\Tasks\{B72CB510-5AF1-4845-916A-89971DFFED96} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {E765D6E9-62D0-4450-A2FC-F225E37AC1B3} - System32\Tasks\{6A8E63E3-908A-4852-962C-DDA4E6C83988} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {E7B232B1-CE4D-492F-B37D-E17598183C09} - System32\Tasks\{1C97B5B7-3B50-44CB-B15E-2FCD6B223323} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {EB837C3C-7E1A-459C-809F-F3157B6F1376} - System32\Tasks\{9BCA3757-766F-4DF1-902A-FAB819F49461} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {EC317FCD-008D-43FD-A2B9-4B5D8E06B8F9} - System32\Tasks\{BB866033-902A-43EA-BB2E-C37880E655E1} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {F2CDCBDC-6E09-4685-91B4-AFB6377CD938} - System32\Tasks\{EA76A80A-A932-4274-9406-A980A20E2534} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {F606CD8B-A511-44E9-94BE-100C28D5DFD0} - System32\Tasks\{7E6A3E39-14CA-4B7D-A08C-EBC05981CFB5} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {F6970B82-9A01-4320-A1D0-8A5DDD140134} - System32\Tasks\{01CAB436-18F7-4D00-BF89-70BF174D2719} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {F7F71B25-7A75-4131-90D3-52A7101D43AE} - System32\Tasks\{FE88EA1E-730D-465B-ACA6-ADF145D9FB22} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {F8AA7842-93DF-47E5-B68F-0ADAA50893DB} - System32\Tasks\{176C9FB3-1095-4B63-B6BB-45448E657B8E} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {F8BD7961-FE69-44BE-BBE4-25BC2C17E193} - System32\Tasks\{9D0F0384-8A95-4A5A-A6C2-4BC78C51D162} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {FD7F5C20-7E4A-4F57-8D18-3341D4EC0976} - System32\Tasks\{2B039FB9-0780-47C3-99DF-52FD83EF3266} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {FEDA3845-0D71-4A62-813B-4A8DEE965896} - System32\Tasks\{224CEF70-2983-4E15-8B4B-A98DBEBE4321} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {FF8BA1CC-BBBD-44AB-982A-A5B1F5601EA0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-05] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2010-07-15 01:11 - 2010-07-15 01:11 - 00031360 ____H () C:\Program Files\P4G\DevMng.dll
2011-10-13 02:36 - 2011-05-05 13:30 - 00057640 ____H () C:\Program Files\Synaptics\SynTP\SynTPEnhPS.dll
2011-10-13 02:35 - 2011-07-26 08:37 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-04-27 01:13 - 2012-05-28 18:27 - 00021416 _____ () D:\Program Files (x86)\Kies\External\FirmwareUpdate\KiesPDLR.exe
2013-12-15 14:10 - 2013-12-12 20:56 - 03145536 _____ () C:\Users\Laptop Michael Rebbe\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe
2011-11-01 23:26 - 2011-11-01 23:26 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2011-11-01 23:26 - 2011-11-01 23:26 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2011-01-10 13:49 - 2011-01-10 13:49 - 00014848 _____ () C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe
2012-07-25 12:35 - 2012-07-25 12:34 - 00224096 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe
2012-07-25 12:35 - 2012-07-25 12:34 - 00011362 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\mingwm10.dll
2012-07-25 12:35 - 2012-07-25 12:34 - 00043008 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\libgcc_s_dw2-1.dll
2012-07-25 12:35 - 2012-07-25 12:34 - 02415104 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\QtCore4.dll
2012-07-25 12:35 - 2012-07-25 12:34 - 01148416 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\QtNetwork4.dll
2012-07-28 17:23 - 2013-06-03 12:06 - 03999512 _____ () D:\Tobit Radio.fx\Server\rfx-server.exe
2010-08-20 18:57 - 2010-08-20 18:57 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2010-08-20 18:57 - 2010-08-20 18:57 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2011-05-30 22:48 - 2011-05-30 22:48 - 00009216 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
2013-12-04 20:38 - 2013-12-04 20:38 - 00115137 _____ () C:\Users\Laptop Michael Rebbe\AppData\Local\Temp\c25e8b3d-33a7-42bf-85e6-6880c6753136\CliSecureRT.dll
2011-06-10 19:49 - 2011-06-10 19:49 - 01163264 _____ () C:\Program Files (x86)\ASUS\Wireless Console 3\acAuth.dll
2014-02-14 20:16 - 2014-02-14 20:16 - 00041984 _____ () C:\Users\Laptop Michael Rebbe\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp7jlubt.dll
2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\Laptop Michael Rebbe\AppData\Roaming\Dropbox\bin\libcef.dll
2011-12-28 12:19 - 2011-09-28 11:32 - 00004096 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
2011-04-24 23:13 - 2011-04-24 23:13 - 02118032 _____ () D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\QtCore4.dll
2011-04-24 23:13 - 2011-04-24 23:13 - 07008656 _____ () D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\QtGui4.dll
2011-04-24 23:13 - 2011-04-24 23:13 - 02089360 _____ () D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\QtDeclarative4.dll
2011-04-24 23:13 - 2011-04-24 23:13 - 01270160 _____ () D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\QtScript4.dll
2011-04-24 23:13 - 2011-04-24 23:13 - 00192912 _____ () D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\QtSql4.dll
2011-04-24 23:13 - 2011-04-24 23:13 - 00758160 _____ () D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\QtNetwork4.dll
2011-04-20 19:56 - 2011-04-20 19:56 - 00025088 _____ () D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\imageformats\qgif4.dll
2014-02-12 20:03 - 2014-02-02 00:41 - 00715592 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libglesv2.dll
2014-02-12 20:03 - 2014-02-02 00:41 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libegl.dll
2014-02-12 20:03 - 2014-02-02 00:42 - 04055368 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll
2014-02-12 20:03 - 2014-02-02 00:42 - 00399688 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll
2014-02-12 20:03 - 2014-02-02 00:41 - 01634632 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ffmpegsumo.dll
2014-02-12 20:03 - 2014-02-02 00:42 - 13616456 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:5D458568

==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupreg: ASUS Screen Saver Protector => C:\Windows\AsScrPro.exe
MSCONFIG\startupreg: CLMLServer => "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (02/13/2014 05:54:46 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 6576206

Error: (02/13/2014 05:54:46 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 6576206

Error: (02/13/2014 05:54:46 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/12/2014 05:50:56 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: MsiExec.exe, Version: 5.0.7601.17514, Zeitstempel: 0x4ce792c4
Name des fehlerhaften Moduls: MSI2A51.tmp, Version: 7.0.510.13, Zeitstempel: 0x52b286eb
Ausnahmecode: 0xc0000417
Fehleroffset: 0x0001732e
ID des fehlerhaften Prozesses: 0x12bc
Startzeit der fehlerhaften Anwendung: 0xMsiExec.exe0
Pfad der fehlerhaften Anwendung: MsiExec.exe1
Pfad des fehlerhaften Moduls: MsiExec.exe2
Berichtskennung: MsiExec.exe3

Error: (02/11/2014 04:00:09 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 15475

Error: (02/11/2014 04:00:09 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 15475

Error: (02/11/2014 04:00:07 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/10/2014 09:03:25 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: easySalesCRM.exe, Version: 4.7.0.209, Zeitstempel: 0x2a425e19
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1116
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000ec9e
ID des fehlerhaften Prozesses: 0x1550
Startzeit der fehlerhaften Anwendung: 0xeasySalesCRM.exe0
Pfad der fehlerhaften Anwendung: easySalesCRM.exe1
Pfad des fehlerhaften Moduls: easySalesCRM.exe2
Berichtskennung: easySalesCRM.exe3

Error: (02/08/2014 01:39:40 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 7176

Error: (02/08/2014 01:39:40 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 7176


System errors:
=============
Error: (02/14/2014 08:17:04 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (02/14/2014 08:17:04 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (02/14/2014 08:14:12 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Internet Manager. OUC" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (02/14/2014 08:14:12 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Internet Manager. OUC erreicht.

Error: (02/14/2014 08:14:10 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%20

Error: (02/14/2014 08:14:06 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Haspnt" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275

Error: (02/14/2014 08:14:06 PM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Windows\SysWow64\drivers\Haspnt.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (02/14/2014 02:30:13 PM) (Source: NetBT) (User: )
Description: Der Name "WORKGROUP      :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.222.50
registriert werden. Der Computer mit IP-Adresse 192.168.222.29 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.

Error: (02/14/2014 02:25:03 PM) (Source: NetBT) (User: )
Description: Der Name "WORKGROUP      :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.222.50
registriert werden. Der Computer mit IP-Adresse 192.168.222.29 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.

Error: (02/14/2014 02:19:53 PM) (Source: NetBT) (User: )
Description: Der Name "WORKGROUP      :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.222.50
registriert werden. Der Computer mit IP-Adresse 192.168.222.29 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.


Microsoft Office Sessions:
=========================
Error: (01/13/2014 10:07:41 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 2 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (12/09/2013 09:40:01 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 5043 seconds with 1500 seconds of active time.  This session ended with a crash.

Error: (04/15/2013 06:24:53 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 7 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (03/22/2013 11:09:39 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 1133 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (01/28/2013 00:12:30 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 0 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (10/10/2012 02:04:08 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6661.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 3 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (08/22/2012 11:21:18 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6661.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 766 seconds with 720 seconds of active time.  This session ended with a crash.


==================== Memory info =========================== 

Percentage of memory in use: 32%
Total physical RAM: 8098.14 MB
Available physical RAM: 5505.57 MB
Total Pagefile: 16194.47 MB
Available Pagefile: 12784.52 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:119.24 GB) (Free:24.28 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (DATA) (Fixed) (Total:153.85 GB) (Free:87.63 GB) NTFS
Drive e: (SDATA1) (Fixed) (Total:149.04 GB) (Free:137.06 GB) NTFS
Drive f: (SDATA2) (Fixed) (Total:149.05 GB) (Free:146.35 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: E3102A4B)
Partition 1: (Not Active) - (Size=25 GB) - (Type=1C)
Partition 2: (Active) - (Size=119 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=154 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 298 GB) (Disk ID: BBC58B91)
Partition 1: (Not Active) - (Size=149 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=149 GB) - (Type=07 NTFS)

==================== End Of Log ============================

schrauber · 16.02.2014, 07:50

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

rebbi60 · 16.02.2014, 18:49

Hi,jede Menge Arbeit, aber ich hab alles so gemacht.

Es sieht so aus als seien keine versteckten Links mehr in den websites. Allerdings steht der Bee Coupon immer noch bei Chrom in den Erweiterungen als nicht deaktivierbar und nicht löschbar. Allerdings ist das "Bee" Icon durch ein Puzzleteil ersetzt. siege Harcopy

So hier jetzt die ganzen Logfiles:

Code:

ATTFilter

 Malwarebytes Anti-Malware  (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.02.16.03

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Laptop Michael Rebbe :: LAPTOP-MRE [Administrator]

Schutz: Deaktiviert

16.02.2014 16:04:22
mbam-log-2014-02-16 (16-04-22).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 274923
Laufzeit: 5 Minute(n), 16 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 3
HKCR\CLSID\{489EDE47-55B0-4218-81F3-9B10A3A63E22} (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Bee Coupons (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.bench.nmhost (PUP.Optional.Bench.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 8
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0 (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\AppFramework (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\CanvasFramework (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\framework (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\framework-ui (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\icons (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\includes (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateien: 46
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\background.html (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\extension_info.json (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\manifest.json (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\AppFramework\appAPI_bg.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\AppFramework\appAPI_browseraction.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\AppFramework\appAPI_common.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\AppFramework\appAPI_content.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\AppFramework\appAPI_settings.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\AppFramework\appAPI_webrequest.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\AppFramework\jquery.min.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\CanvasFramework\canvasscript_engine.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\CanvasFramework\canvas_bg.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\CanvasFramework\webrequest.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\framework\backgroundscript_engine.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\framework\base.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\framework\browser.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\framework\console.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\framework\framework.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\framework\i18n.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\framework\initialize.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\framework\invoke_async.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\framework\io.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\framework\lang.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\framework\legacy.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\framework\message_target.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\framework\messaging.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\framework\storage.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\framework\timer.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\framework\userscript_client.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\framework\userscript_engine.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\framework\utils.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\framework\xhr.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\framework-ui\browser_button.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\framework-ui\context_menu.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\framework-ui\framework_api.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\framework-ui\notifications.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\framework-ui\options.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\framework-ui\remote_popup_host.html (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\framework-ui\remote_popup_host.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\framework-ui\ui_base.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\icons\button.png (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\icons\icon100.png (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\icons\icon128.png (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\icons\icon32.png (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\icons\icon48.png (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbkfpidjhchgnokamccdemjfamackdh\1.0_0\includes\content.js (PUP.Optional.BeeCoupons.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

Code:

ATTFilter

# AdwCleaner v3.018 - Bericht erstellt am 16/02/2014 um 16:19:54
# Updated 28/01/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Laptop Michael Rebbe - LAPTOP-MRE
# Gestartet von : C:\Users\Laptop Michael Rebbe\Downloads\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v0.0.0.0


-\\ Mozilla Firefox v27.0 (de)

[ Datei : C:\Users\Laptop Michael Rebbe\AppData\Roaming\Mozilla\Firefox\Profiles\5hstnu5u.default\prefs.js ]


-\\ Google Chrome v32.0.1700.107

[ Datei : C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [29516 octets] - [12/02/2014 10:28:29]
AdwCleaner[R1].txt - [1127 octets] - [12/02/2014 12:23:28]
AdwCleaner[R2].txt - [1163 octets] - [16/02/2014 16:18:01]
AdwCleaner[S0].txt - [28643 octets] - [12/02/2014 10:38:03]
AdwCleaner[S1].txt - [1085 octets] - [16/02/2014 16:19:54]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1145 octets] ##########

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.1 (02.04.2014:1)
OS: Windows 7 Home Premium x64
Ran by Laptop Michael Rebbe on 16.02.2014 at 16:29:03,38
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\optprostart_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\optprostart_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\mconduitinstaller_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\mconduitinstaller_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\mconduitinstaller_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\mconduitinstaller_RASMANCS
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{101E48B1-2339-40C4-8709-238D8843D875}



~~~ Files



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\Laptop Michael Rebbe\appdata\local\{399DAFDB-AB51-4025-8C00-34B18EEFBE1D}
Successfully deleted: [Empty Folder] C:\Users\Laptop Michael Rebbe\appdata\local\{39E7D8F3-0E75-4EA2-A5A5-B06DFB3853A4}
Successfully deleted: [Empty Folder] C:\Users\Laptop Michael Rebbe\appdata\local\{4986E28C-8F5E-4B1A-9ED3-7BDCBB0113B4}
Successfully deleted: [Empty Folder] C:\Users\Laptop Michael Rebbe\appdata\local\{652223BA-F1B8-414F-AFD7-B639B5448431}
Successfully deleted: [Empty Folder] C:\Users\Laptop Michael Rebbe\appdata\local\{7A3C1F90-3DEF-4B89-8F24-20E37B70A0F3}
Successfully deleted: [Empty Folder] C:\Users\Laptop Michael Rebbe\appdata\local\{7DCE54BB-91C5-4AF9-80A7-493619677A67}
Successfully deleted: [Empty Folder] C:\Users\Laptop Michael Rebbe\appdata\local\{DF530FA3-D848-4506-AE06-DE5689242EBC}



~~~ FireFox

Successfully deleted: [File] C:\user.js
Successfully deleted the following from C:\Users\Laptop Michael Rebbe\AppData\Roaming\mozilla\firefox\profiles\5hstnu5u.default\prefs.js

user_pref("iminent.LayoutId", "1");
user_pref("iminent.registerToolbarEvent102", "1384336049393");
user_pref("iminent.version", "7.43.4.1");
user_pref("iminent.versioning", "{\"CurrentVersion\":\"7.43.4.1\",\"InstallEventCTime\":1384336046347,\"InstallEvent\":\"True\"}");
Emptied folder: C:\Users\Laptop Michael Rebbe\AppData\Roaming\mozilla\firefox\profiles\5hstnu5u.default\minidumps [287 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 16.02.2014 at 16:39:00,05
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-02-2014 01
Ran by Laptop Michael Rebbe (administrator) on LAPTOP-MRE on 16-02-2014 17:22:43
Running from C:\Users\Laptop Michael Rebbe\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Kaspersky Lab ZAO) D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE
(FirebirdSQL Project) C:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbguard.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
() C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe
(Malwarebytes Corporation) D:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\ConversionService.exe
() D:\Tobit Radio.fx\Server\rfx-server.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(TeamViewer GmbH) D:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(FirebirdSQL Project) C:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbserver.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(ASUS) C:\Program Files\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() D:\Program Files (x86)\Kies\External\FirmwareUpdate\KiesPDLR.exe
(ASUS) C:\Windows\AsScrPro.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIHFE.EXE
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
() C:\Users\Laptop Michael Rebbe\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(ASUS) C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(Kaspersky Lab ZAO) D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe
(Dropbox, Inc.) C:\Users\Laptop Michael Rebbe\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Samsung Electronics Co., Ltd.) D:\Program Files (x86)\Kies\KiesTrayAgent.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(Apple Inc.) D:\Program Files (x86)\iTunes\iTunesHelper.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\FAX Utility\FUFAXRCV.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\FAX Utility\FUFAXSTM.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2264168 2011-07-13] (Realtek Semiconductor)
HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [324096 2010-08-11] (Alcor Micro Corp.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2785064 2011-05-05] (Synaptics Incorporated)
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4526 2010-11-29] ()
HKLM\...\Run: [SynAsusAcpi] - C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [97064 2011-05-05] (Synaptics Incorporated)
HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3331312 2011-10-19] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUSWebStorage] - C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe [737104 2011-07-29] (ecareme)
HKLM-x32\...\Run: [SonicMasterTray] - C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe [984400 2010-07-10] (Virage Logic Corporation / Sonic Focus)
HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5716608 2011-07-22] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2255360 2011-06-10] (ASUS)
HKLM-x32\...\Run: [Samsung PanelMgr] - C:\Windows\Samsung\PanelMgr\SSMMgr.exe [606208 2009-10-13] ()
HKLM-x32\...\Run: [ITSecMng] - C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [83336 2009-07-22] (TOSHIBA CORPORATION)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [avp] - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe [206448 2012-10-31] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [KiesTrayAgent] - D:\Program Files (x86)\Kies\KiesTrayAgent.exe [3521424 2012-04-27] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] - D:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)
HKLM-x32\...\Run: [FUFAXRCV] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [495616 2011-03-08] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [FUFAXSTM] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [856064 2011-03-08] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [EEventManager] - C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [979328 2010-10-12] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\klogon: C:\Windows\System32\klogon.dll (Kaspersky Lab ZAO)
HKU\.DEFAULT\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [18705664 2013-01-08] (Skype Technologies S.A.)
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\Run: [KiesHelper] - D:\Program Files (x86)\Kies\KiesHelper.exe [955280 2012-04-27] (Samsung)
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\Run: [KiesPDLR] - D:\Program Files (x86)\Kies\External\FirmwareUpdate\KiesPDLR.exe [21416 2012-05-28] ()
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\Run: [rfxsrvtray] - D:\Tobit Radio.fx\Client\rfx-tray.exe [1838872 2013-02-07] (Tobit.Software)
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\Run: [EPLTarget\P0000000000000000] - C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIHFE.EXE [241280 2012-07-12] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\Run: [Amazon Cloud Player] - C:\Users\Laptop Michael Rebbe\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe [3145536 2013-12-12] ()
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\MountPoints2: H - H:\AutoRun.exe
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\MountPoints2: {1cb66dd1-f738-11e1-8507-c8600001845d} - H:\AutoRun.exe
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\MountPoints2: {3d38e903-da2c-11e2-b5d4-c8600001845d} - H:\AutoRun.exe
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\MountPoints2: {9ca96f7f-dedf-11e1-81f3-c8600001845d} - H:\AutoRun.exe
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\MountPoints2: {b3805e48-940f-11e1-98e6-c8600001845d} - H:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\MountPoints2: {decbd0cf-d484-11e1-9e09-c8600001845d} - H:\AutoRun.exe
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\MountPoints2: {decbd0e4-d484-11e1-9e09-c8600001845d} - H:\AutoRun.exe
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [245872 2013-04-08] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [201576 2013-04-08] (NVIDIA Corporation)
Startup: C:\Users\Laptop Michael Rebbe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Laptop Michael Rebbe\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Laptop Michael Rebbe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.
BHO: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\ievkbd.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\klwtbbho.dll (Kaspersky Lab ZAO)
BHO: Bee Coupons BHO - {FC4DBA8C-2CC8-4741-BCE5-ADAC3EEA50B0} - C:\Program Files (x86)\Bee Coupons\FrameworkBHO64.dll No File
BHO-x32: Browser Guard - {02a0d829-4393-46fc-a37e-126263035883} - C:\Program Files (x86)\Browser Guard\browserguard.dll No File
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GbR)
BHO-x32: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM - Bee Coupons - {814C44E6-B2BA-4413-AEB3-F958AD419DB4} - C:\Program Files (x86)\Bee Coupons\FrameworkBHO64.dll No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: 54.204.28.26	gcbkfpidjhchgnokamccdemjfamackdh
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{70EE0C7C-6F1F-45CC-935D-C82E51049ED7}: [NameServer]10.74.210.210 10.74.210.211
Tcpip\..\Interfaces\{A897705E-AA56-488D-A6C7-E38D3CED4898}: [NameServer]10.74.210.210 10.74.210.211
Tcpip\..\Interfaces\{D534E621-75BE-4191-BEC1-904739C2A010}: [NameServer]10.74.210.210 10.74.210.211
Tcpip\..\Interfaces\{F2A1458F-44BF-427F-92CE-EF12C4530881}: [NameServer]10.74.210.210 10.74.210.211

FireFox:
========
FF ProfilePath: C:\Users\Laptop Michael Rebbe\AppData\Roaming\Mozilla\Firefox\Profiles\5hstnu5u.default
FF SearchEngineOrder.user_pref("browser.search.order.1,S", "");: user_pref("browser.search.order.1,S", "");
FF SelectedSearchEngine: Google
FF Homepage: https://www.google.de/?gws_rd=cr&ei=rdiVUrDDIqm2yAPI3YGADw
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - D:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pages.tvunetworks.com/WebPlayer - D:\Program Files (x86)\TVUPlayer\npTVUAx.dll (TVU networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - D:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Laptop Michael Rebbe\AppData\Roaming\Mozilla\Firefox\Profiles\5hstnu5u.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-08-27]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Laptop Michael Rebbe\AppData\Roaming\Mozilla\Firefox\Profiles\5hstnu5u.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-21]
FF Extension: DownThemAll! - C:\Users\Laptop Michael Rebbe\AppData\Roaming\Mozilla\Firefox\Profiles\5hstnu5u.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2012-02-18]
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru
FF Extension: Kaspersky Virtual Keyboard - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru [2012-02-17]
FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\linkfilter@kaspersky.ru
FF Extension: Kaspersky URL Advisor - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\linkfilter@kaspersky.ru [2012-02-17]
FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files\T-Mobile\InternetManager_H\OCx64\addon
FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\KavAntiBanner@Kaspersky.ru
FF Extension: Anti-Banner - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\KavAntiBanner@Kaspersky.ru [2012-02-17]
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-01-08]
FF HKLM-x32\...\Firefox\Extensions: [{20d1f7b3-7721-4da0-b6f3-78bb4d7248f4}] - C:\Program Files (x86)\Browser Guard\browserguard.xpi

Chrome: 
=======
CHR HomePage: 
CHR Extension: (Google Docs) - C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-12]
CHR Extension: (Google Drive) - C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-12]
CHR Extension: (YouTube) - C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-12]
CHR Extension: (Google-Suche) - C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-12]
CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2014-02-12]
CHR Extension: (Virtuelle Tastatur) - C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2014-02-12]
CHR Extension: (Google Wallet) - C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-12]
CHR Extension: (Google Mail) - C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-12]
CHR Extension: (Anti-Banner) - C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2014-02-12]
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ChromeExt\urladvisor.crx [2011-04-25]
CHR HKLM-x32\...\Chrome\Extension: [iemmnakfifhlfhkmdddbojpkkmlecfhe] - C:\ProgramData\SaveByclick\iemmnakfifhlfhkmdddbojpkkmlecfhe.crx [2011-04-25]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ChromeExt\virtkbd.crx [2011-04-25]
CHR HKLM-x32\...\Chrome\Extension: [kfepagcelbegkpkcjgfeecmlnmkedjin] - C:\Program Files (x86)\Browser Guard\browserguard.crx [2011-04-25]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ChromeExt\ab.crx [2011-04-25]

==================== Services (Whitelisted) =================

R2 AVP; D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe [206448 2012-10-31] (Kaspersky Lab ZAO)
R2 DokanMounter; C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe [14848 2011-01-10] ()
R2 FirebirdGuardianDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbguard.exe [81920 2007-03-02] (FirebirdSQL Project)
R3 FirebirdServerDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbserver.exe [1994752 2007-03-02] (FirebirdSQL Project)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [344928 2011-01-28] ()
S2 Internet Manager. RunOuc; D:\Program Files (x86)\Stick\UpdateDog\ouc.exe [224096 2012-07-25] ()
R2 MBAMScheduler; D:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; D:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1522312 2012-11-22] (pdfforge GbR)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [905864 2012-11-22] (pdfforge GbR)
R2 Radio.fx; D:\Tobit Radio.fx\Server\rfx-server.exe [3999512 2013-06-03] ()
R2 TeamViewer8; D:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [3560288 2013-03-06] (TeamViewer GmbH)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)
S3 MozillaMaintenance; "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe" [X]

==================== Drivers (Whitelisted) ====================

S3 aksusb; C:\Windows\System32\DRIVERS\aksusb.sys [21120 2011-08-09] (SafeNet Inc.)
S3 ASUSProcObsrv; C:\eSupport\eDriver\I386\AsPrOb64.sys [12416 2010-05-26] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2012-07-08] ()
R0 BMLoad; C:\Windows\System32\drivers\BMLoad.sys [16512 2012-07-25] (Bytemobile, Inc.)
S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [53816 2009-03-25] (Samsung Electronics Co., Ltd.)
R2 Dokan; C:\Windows\system32\drivers\dokan.sys [120408 2011-01-10] (Windows (R) Win 7 DDK provider)
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [321536 2011-10-07] (SafeNet Inc.)
S2 Haspnt; C:\Windows\SysWOW64\drivers\Haspnt.sys [47616 2012-03-14] (Aladdin Knowledge Systems)
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [212992 2012-07-25] (Huawei Technologies Co., Ltd.)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [460888 2011-03-04] (Kaspersky Lab ZAO)
R1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [11864 2011-03-04] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [637272 2012-10-31] (Kaspersky Lab)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29488 2011-03-10] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [22544 2009-11-02] (Kaspersky Lab)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2012-07-08] ()
R2 lirsgt; C:\Windows\SysWOW64\DRIVERS\lirsgt.sys [18048 2012-06-06] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R1 tcpipBM; C:\Windows\system32\drivers\tcpipBM.sys [39552 2012-07-25] (Bytemobile, Inc.)
S3 cpuz130; \??\C:\Users\LAPTOP~1\AppData\Local\Temp\cpuz130\cpuz_x64.sys [X]
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-16 17:22 - 2014-02-16 17:22 - 00025823 _____ () C:\Users\Laptop Michael Rebbe\Downloads\FRST.txt
2014-02-16 16:28 - 2014-02-16 16:28 - 01037530 _____ (Thisisu) C:\Users\Laptop Michael Rebbe\Downloads\JRT.exe
2014-02-16 16:28 - 2014-02-16 16:28 - 00000000 ____D () C:\Windows\ERUNT
2014-02-16 16:17 - 2014-02-16 16:17 - 01166132 _____ () C:\Users\Laptop Michael Rebbe\Downloads\adwcleaner.exe
2014-02-16 16:14 - 2014-02-16 17:12 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Desktop\Trojaner Board
2014-02-15 16:50 - 2014-02-16 17:22 - 00000000 ____D () C:\FRST
2014-02-15 16:50 - 2014-02-15 16:50 - 02152960 _____ (Farbar) C:\Users\Laptop Michael Rebbe\Downloads\FRST64.exe
2014-02-14 20:11 - 2014-02-14 20:11 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\Microsoft\Windows\Start Menu\OMC ModPack
2014-02-14 19:26 - 2014-02-14 20:10 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Documents\OMC ModPack
2014-02-14 19:22 - 2014-02-14 19:22 - 01787096 _____ (Odem Mortis ) C:\Users\Laptop Michael Rebbe\Downloads\OMC_ModPack_0.8.11.exe
2014-02-14 19:14 - 2014-02-14 19:14 - 00093285 _____ () C:\Users\Laptop Michael Rebbe\Downloads\Crakker-s-Sniper-Zoom-ScopeShodow-remove-Mod-Zoomstufe.rar
2014-02-14 19:14 - 2014-02-14 19:14 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\Crakker-s-Sniper-Zoom-ScopeShodow-remove-Mod-Zoomstufe
2014-02-14 10:16 - 2014-02-14 13:32 - 04878848 _____ () C:\Users\Laptop Michael Rebbe\Desktop\Barth_Wipro_DachsPro20ST.xls
2014-02-12 20:03 - 2014-02-12 20:03 - 00002205 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-12 19:59 - 2014-02-14 20:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-12 19:59 - 2014-02-12 19:59 - 00001105 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-02-12 19:59 - 2014-02-12 19:59 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-12 18:15 - 2014-02-12 18:15 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\xvm-5.1.0
2014-02-12 17:52 - 2014-02-12 17:52 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-02-12 17:52 - 2014-02-12 17:52 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-02-12 17:52 - 2014-02-12 17:52 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-02-12 17:52 - 2014-02-12 17:52 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-02-12 12:41 - 2014-02-12 12:41 - 00000846 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-12 12:41 - 2014-02-12 12:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\Malwarebytes
2014-02-12 12:41 - 2014-02-12 12:41 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-12 12:41 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-12 10:28 - 2014-02-16 16:20 - 00000000 ____D () C:\AdwCleaner
2014-02-11 19:45 - 2014-02-11 19:45 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-02-11 18:41 - 2014-02-11 18:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\locastans Minimap_3rdGen_811
2014-02-11 18:41 - 2014-02-11 18:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\J1mB0s_Crosshair_Mod_v1.36
2014-02-11 18:41 - 2014-02-11 18:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\0.8.11White_Dead_Tanks
2014-02-07 22:41 - 2014-02-07 22:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\updated
2014-02-04 11:40 - 2014-02-04 12:10 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Local\Deployment
2014-02-04 11:40 - 2014-02-04 11:40 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Local\Apps\2.0
2014-02-03 14:35 - 2014-02-03 14:35 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\ab_excel_2007_wipro_v_13_04_1
2014-02-02 10:19 - 2014-02-12 14:15 - 00000000 ____D () C:\Program Files (x86)\Bench
2014-02-02 10:19 - 2014-02-02 10:19 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Local\emaze
2014-01-24 07:15 - 2014-01-24 07:15 - 00005327 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-21 15:08 - 2014-01-21 15:08 - 00000788 _____ () C:\Users\Public\Desktop\PDFCreator.lnk
2014-01-21 15:08 - 2013-04-09 14:13 - 00110264 _____ (pdfforge GmbH) C:\Windows\system32\pdfcmon.dll
2014-01-21 15:08 - 2012-05-05 10:54 - 00662288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCT2.OCX
2014-01-21 15:08 - 2012-05-05 10:54 - 00137000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMAPI32.OCX
2014-01-21 15:08 - 2012-05-05 10:54 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPIDE.DLL
2014-01-21 15:08 - 1998-07-06 17:55 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCMCDE.DLL
2014-01-21 15:08 - 1998-07-06 17:55 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCC2DE.DLL
2014-01-21 09:19 - 2014-01-21 09:19 - 00001060 _____ () C:\Users\Laptop Michael Rebbe\Desktop\Dropbox.lnk
2014-01-21 09:17 - 2014-01-21 09:19 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\DropboxMaster
2014-01-21 09:16 - 2014-01-21 09:16 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

==================== One Month Modified Files and Folders =======

2014-02-16 17:23 - 2014-02-16 17:22 - 00025823 _____ () C:\Users\Laptop Michael Rebbe\Downloads\FRST.txt
2014-02-16 17:22 - 2014-02-15 16:50 - 00000000 ____D () C:\FRST
2014-02-16 17:21 - 2012-03-05 09:18 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Documents\Mein Steuer-Sparbuch Heute
2014-02-16 17:20 - 2012-06-10 12:55 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\Dropbox
2014-02-16 17:20 - 2012-02-17 05:55 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-02-16 17:19 - 2012-05-22 15:35 - 00001134 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-16 17:16 - 2012-06-08 21:20 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-02-16 17:15 - 2011-12-28 12:11 - 01583221 _____ () C:\Windows\WindowsUpdate.log
2014-02-16 17:15 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-16 17:15 - 2009-07-14 05:51 - 00224312 _____ () C:\Windows\setupact.log
2014-02-16 17:12 - 2014-02-16 16:14 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Desktop\Trojaner Board
2014-02-16 17:07 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2014-02-16 17:04 - 2012-05-22 15:35 - 00001138 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-16 16:59 - 2012-03-31 04:38 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-16 16:32 - 2009-07-14 05:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-16 16:32 - 2009-07-14 05:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-16 16:28 - 2014-02-16 16:28 - 01037530 _____ (Thisisu) C:\Users\Laptop Michael Rebbe\Downloads\JRT.exe
2014-02-16 16:28 - 2014-02-16 16:28 - 00000000 ____D () C:\Windows\ERUNT
2014-02-16 16:20 - 2014-02-12 10:28 - 00000000 ____D () C:\AdwCleaner
2014-02-16 16:17 - 2014-02-16 16:17 - 01166132 _____ () C:\Users\Laptop Michael Rebbe\Downloads\adwcleaner.exe
2014-02-16 14:29 - 2014-01-06 08:00 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\ActiveDossierUploader
2014-02-15 16:50 - 2014-02-15 16:50 - 02152960 _____ (Farbar) C:\Users\Laptop Michael Rebbe\Downloads\FRST64.exe
2014-02-15 06:09 - 2013-03-20 07:46 - 00651776 ___SH () C:\Users\Laptop Michael Rebbe\Desktop\Thumbs.db
2014-02-14 20:17 - 2013-09-30 14:45 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Desktop\WOT
2014-02-14 20:15 - 2012-02-14 19:53 - 00105936 _____ () C:\Users\Laptop Michael Rebbe\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-14 20:15 - 2012-02-14 19:53 - 00045056 _____ () C:\Windows\SysWOW64\acovcnt.exe
2014-02-14 20:14 - 2009-07-14 05:45 - 00402112 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-14 20:13 - 2014-02-12 19:59 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-14 20:13 - 2011-10-19 04:20 - 01089910 _____ () C:\Windows\PFRO.log
2014-02-14 20:11 - 2014-02-14 20:11 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\Microsoft\Windows\Start Menu\OMC ModPack
2014-02-14 20:10 - 2014-02-14 19:26 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Documents\OMC ModPack
2014-02-14 19:22 - 2014-02-14 19:22 - 01787096 _____ (Odem Mortis ) C:\Users\Laptop Michael Rebbe\Downloads\OMC_ModPack_0.8.11.exe
2014-02-14 19:14 - 2014-02-14 19:14 - 00093285 _____ () C:\Users\Laptop Michael Rebbe\Downloads\Crakker-s-Sniper-Zoom-ScopeShodow-remove-Mod-Zoomstufe.rar
2014-02-14 19:14 - 2014-02-14 19:14 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\Crakker-s-Sniper-Zoom-ScopeShodow-remove-Mod-Zoomstufe
2014-02-14 13:35 - 2011-02-19 05:24 - 00809028 _____ () C:\Windows\system32\perfh007.dat
2014-02-14 13:35 - 2011-02-19 05:24 - 00186594 _____ () C:\Windows\system32\perfc007.dat
2014-02-14 13:35 - 2009-07-14 06:13 - 01890364 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-14 13:32 - 2014-02-14 10:16 - 04878848 _____ () C:\Users\Laptop Michael Rebbe\Desktop\Barth_Wipro_DachsPro20ST.xls
2014-02-14 09:46 - 2012-04-28 08:58 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Documents\DachsWelt
2014-02-13 17:59 - 2012-05-22 15:35 - 00004134 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-13 17:59 - 2012-05-22 15:35 - 00003882 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-12 20:03 - 2014-02-12 20:03 - 00002205 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-12 20:03 - 2012-05-22 15:35 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Local\Google
2014-02-12 20:03 - 2012-05-22 15:35 - 00000000 ____D () C:\Program Files (x86)\Google
2014-02-12 19:59 - 2014-02-12 19:59 - 00001105 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-02-12 19:59 - 2014-02-12 19:59 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-12 18:15 - 2014-02-12 18:15 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\xvm-5.1.0
2014-02-12 17:52 - 2014-02-12 17:52 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-02-12 17:52 - 2014-02-12 17:52 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-02-12 17:52 - 2014-02-12 17:52 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-02-12 17:52 - 2014-02-12 17:52 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-02-12 17:52 - 2013-10-16 10:17 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-12 14:27 - 2011-12-28 12:24 - 00001591 _____ () C:\Windows\system32\ServiceFilter.ini
2014-02-12 14:15 - 2014-02-02 10:19 - 00000000 ____D () C:\Program Files (x86)\Bench
2014-02-12 12:53 - 2012-02-14 19:53 - 00000000 ____D () C:\Users\Laptop Michael Rebbe
2014-02-12 12:41 - 2014-02-12 12:41 - 00000846 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-12 12:41 - 2014-02-12 12:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\Malwarebytes
2014-02-12 12:41 - 2014-02-12 12:41 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-12 11:39 - 2012-02-16 06:30 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\Maytec.net
2014-02-12 10:38 - 2012-02-14 19:54 - 00000000 ___RD () C:\Users\Laptop Michael Rebbe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-11 21:21 - 2013-12-21 08:11 - 02215424 _____ (Marius Czyz aka Phalynx) C:\Users\Laptop Michael Rebbe\Downloads\ActiveDossierUploader.exe
2014-02-11 19:45 - 2014-02-11 19:45 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-02-11 19:44 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-02-11 19:44 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-02-11 18:41 - 2014-02-11 18:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\locastans Minimap_3rdGen_811
2014-02-11 18:41 - 2014-02-11 18:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\J1mB0s_Crosshair_Mod_v1.36
2014-02-11 18:41 - 2014-02-11 18:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\0.8.11White_Dead_Tanks
2014-02-09 15:19 - 2012-02-14 20:49 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\uninstall
2014-02-09 15:11 - 2013-05-23 10:43 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\browser
2014-02-09 15:11 - 2013-04-12 16:42 - 00028272 _____ (Mozilla Corporation) C:\Users\Laptop Michael Rebbe\plugin-hang-ui.exe
2014-02-09 15:11 - 2012-10-19 23:07 - 00170960 _____ (Mozilla Corporation) C:\Users\Laptop Michael Rebbe\webapp-uninstaller.exe
2014-02-09 15:11 - 2012-10-19 23:07 - 00093808 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\webapprt-stub.exe
2014-02-09 15:11 - 2012-10-19 23:07 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\webapprt
2014-02-09 15:11 - 2012-10-06 14:58 - 00075376 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\breakpadinjector.dll
2014-02-09 15:11 - 2012-05-08 20:44 - 00194552 _____ (Mozilla Corporation) C:\Users\Laptop Michael Rebbe\maintenanceservice_installer.exe
2014-02-09 15:11 - 2012-05-08 20:44 - 00118896 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\maintenanceservice.exe
2014-02-09 15:11 - 2012-05-08 20:44 - 00000132 _____ () C:\Users\Laptop Michael Rebbe\update-settings.ini
2014-02-09 15:11 - 2012-03-21 21:29 - 03494512 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\gkmedias.dll
2014-02-09 15:11 - 2012-03-21 21:29 - 00142960 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\mozglue.dll
2014-02-09 15:11 - 2012-02-18 22:19 - 08484775 _____ () C:\Users\Laptop Michael Rebbe\omni.ja
2014-02-09 15:11 - 2012-02-14 20:49 - 22777456 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\xul.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 03583600 _____ () C:\Users\Laptop Michael Rebbe\mozjs.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 01786480 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\nss3.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 00647280 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\libGLESv2.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 00398960 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\nssckbi.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 00307824 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\freebl3.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 00276592 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\updater.exe
2014-02-09 15:11 - 2012-02-14 20:49 - 00152688 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\softokn3.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 00117360 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\crashreporter.exe
2014-02-09 15:11 - 2012-02-14 20:49 - 00092784 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\nssdbm3.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 00053360 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\libEGL.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 00020080 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\AccessibleMarshal.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 00018544 _____ (Mozilla Corporation) C:\Users\Laptop Michael Rebbe\plugin-container.exe
2014-02-09 15:11 - 2012-02-14 20:49 - 00017008 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\mozalloc.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 00001928 _____ () C:\Users\Laptop Michael Rebbe\precomplete
2014-02-09 15:11 - 2012-02-14 20:49 - 00000899 _____ () C:\Users\Laptop Michael Rebbe\softokn3.chk
2014-02-09 15:11 - 2012-02-14 20:49 - 00000899 _____ () C:\Users\Laptop Michael Rebbe\nssdbm3.chk
2014-02-09 15:11 - 2012-02-14 20:49 - 00000899 _____ () C:\Users\Laptop Michael Rebbe\freebl3.chk
2014-02-09 15:11 - 2012-02-14 20:49 - 00000662 _____ () C:\Users\Laptop Michael Rebbe\application.ini
2014-02-09 15:11 - 2012-02-14 20:49 - 00000140 _____ () C:\Users\Laptop Michael Rebbe\platform.ini
2014-02-07 22:41 - 2014-02-07 22:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\updated
2014-02-07 07:23 - 2013-12-21 08:11 - 02215424 _____ (Marius Czyz aka Phalynx) C:\Users\Laptop Michael Rebbe\Downloads\ActiveDossierUploader.exe_OLD
2014-02-05 07:59 - 2012-03-31 04:38 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-05 07:59 - 2012-03-31 04:38 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-05 07:59 - 2012-02-16 21:58 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-04 12:10 - 2014-02-04 11:40 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Local\Deployment
2014-02-04 12:03 - 2012-02-14 22:10 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Local\Microsoft Help
2014-02-04 11:40 - 2014-02-04 11:40 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Local\Apps\2.0
2014-02-03 14:35 - 2014-02-03 14:35 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\ab_excel_2007_wipro_v_13_04_1
2014-02-02 10:22 - 2009-07-14 04:20 - 00000000 ___HD () C:\Program Files\Common Files\Microsoft Shared
2014-02-02 10:19 - 2014-02-02 10:19 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Local\emaze
2014-01-24 07:15 - 2014-01-24 07:15 - 00005327 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-24 07:15 - 2013-08-16 14:10 - 00000000 ____D () C:\Program Files (x86)\Java
2014-01-21 15:08 - 2014-01-21 15:08 - 00000788 _____ () C:\Users\Public\Desktop\PDFCreator.lnk
2014-01-21 09:19 - 2014-01-21 09:19 - 00001060 _____ () C:\Users\Laptop Michael Rebbe\Desktop\Dropbox.lnk
2014-01-21 09:19 - 2014-01-21 09:17 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\DropboxMaster
2014-01-21 09:16 - 2014-01-21 09:16 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-17 14:00 - 2013-12-11 17:54 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Desktop\Akquise 12.12.2013
2014-01-17 14:00 - 2013-12-10 16:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Desktop\Akquise 11.12.2013
2014-01-17 11:21 - 2012-02-17 22:11 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\plugins

Files to move or delete:
====================
C:\Users\Laptop Michael Rebbe\AccessibleMarshal.dll
C:\Users\Laptop Michael Rebbe\breakpadinjector.dll
C:\Users\Laptop Michael Rebbe\crashreporter.exe
C:\Users\Laptop Michael Rebbe\D3DCompiler_43.dll
C:\Users\Laptop Michael Rebbe\freebl3.dll
C:\Users\Laptop Michael Rebbe\gkmedias.dll
C:\Users\Laptop Michael Rebbe\libEGL.dll
C:\Users\Laptop Michael Rebbe\libGLESv2.dll
C:\Users\Laptop Michael Rebbe\maintenanceservice.exe
C:\Users\Laptop Michael Rebbe\maintenanceservice_installer.exe
C:\Users\Laptop Michael Rebbe\mozalloc.dll
C:\Users\Laptop Michael Rebbe\mozglue.dll
C:\Users\Laptop Michael Rebbe\mozjs.dll
C:\Users\Laptop Michael Rebbe\msvcp100.dll
C:\Users\Laptop Michael Rebbe\msvcr100.dll
C:\Users\Laptop Michael Rebbe\nss3.dll
C:\Users\Laptop Michael Rebbe\nssckbi.dll
C:\Users\Laptop Michael Rebbe\nssdbm3.dll
C:\Users\Laptop Michael Rebbe\plugin-container.exe
C:\Users\Laptop Michael Rebbe\plugin-hang-ui.exe
C:\Users\Laptop Michael Rebbe\softokn3.dll
C:\Users\Laptop Michael Rebbe\updater.exe
C:\Users\Laptop Michael Rebbe\webapp-uninstaller.exe
C:\Users\Laptop Michael Rebbe\webapprt-stub.exe
C:\Users\Laptop Michael Rebbe\xul.dll


Some content of TEMP:
====================
C:\Users\Laptop Michael Rebbe\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpfli1zw.dll
C:\Users\Laptop Michael Rebbe\AppData\Local\Temp\information.exe
C:\Users\Laptop Michael Rebbe\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Laptop Michael Rebbe\AppData\Local\Temp\jre_setup.exe
C:\Users\Laptop Michael Rebbe\AppData\Local\Temp\jre_setup_1.7.0.51.exe
C:\Users\Laptop Michael Rebbe\AppData\Local\Temp\npp.6.5.2.Installer.exe
C:\Users\Laptop Michael Rebbe\AppData\Local\Temp\Quarantine.exe
C:\Users\Laptop Michael Rebbe\AppData\Local\Temp\SendMsg.dll
C:\Users\Laptop Michael Rebbe\AppData\Local\Temp\Unipack_Installer.exe
C:\Users\Laptop Michael Rebbe\AppData\Local\Temp\xmlUpdater.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-08 19:43

==================== End Of Log ============================

--- --- ---

--- --- ---

uff!

schrauber · 17.02.2014, 13:49

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

rebbi60 · 19.02.2014, 17:02

Hallo, hier die Log files in der gewünschten Reihenfolge.

Code:

ATTFilter

C:\$Recycle.Bin\S-1-5-21-109693576-1980429444-54150481-1001\$RM27JAL\gpedit.exe	Win32/AdWare.SmartApps.A application
C:\$Recycle.Bin\S-1-5-21-109693576-1980429444-54150481-1001\$RM27JAL\SoftwareDetector.exe	Win32/AdWare.SmartApps.A application
C:\$Recycle.Bin\S-1-5-21-109693576-1980429444-54150481-1001\$RM27JAL\Uninstall.exe	Win32/AdWare.SmartApps.A application
C:\Users\Laptop Michael Rebbe\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5DGHI61O\Bee Coupons[1].exe	Win32/AdWare.SmartApps.A application
C:\Users\Laptop Michael Rebbe\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\68ZVA7UC\OptimizerPro[1].exe	a variant of Win32/AdWare.SpeedingUpMyPC.E application
C:\Users\Laptop Michael Rebbe\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YT7ZIAUV\BeeCoupons-it-es-de[1].exe	a variant of Win32/AdWare.SmartApps.A application
C:\Users\Laptop Michael Rebbe\updated\AppData\Local\Bee Coupons\gpedit.exe	Win32/AdWare.SmartApps.A application
C:\Users\Laptop Michael Rebbe\updated\AppData\Local\Bee Coupons\SoftwareDetector.exe	Win32/AdWare.SmartApps.A application
C:\Users\Laptop Michael Rebbe\updated\AppData\Local\Bee Coupons\Uninstall.exe	Win32/AdWare.SmartApps.A application
C:\Users\Laptop Michael Rebbe\updated\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5DGHI61O\Bee Coupons[1].exe	Win32/AdWare.SmartApps.A application
C:\Users\Laptop Michael Rebbe\updated\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\68ZVA7UC\OptimizerPro[1].exe	a variant of Win32/AdWare.SpeedingUpMyPC.E application
C:\Users\Laptop Michael Rebbe\updated\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YT7ZIAUV\BeeCoupons-it-es-de[1].exe	a variant of Win32/AdWare.SmartApps.A application

Code:

ATTFilter

 Results of screen317's Security Check version 0.99.79  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Kaspersky Internet Security   
 Antivirus up to date!  (On Access scanning disabled!) 
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 Java 7 Update 51  
 Adobe Flash Player 11.9.900.170  
 Adobe Reader XI  
 Mozilla Firefox (27.0) 
 Google Chrome 32.0.1700.107  
````````Process Check: objlist.exe by Laurent````````  
 Malwarebytes' Anti-Malware mbamscheduler.exe   
 Internet Manager OnlineUpdate ouc.exe  
 Kaspersky Lab Kaspersky Internet Security 2012 avp.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-02-2014
Ran by Laptop Michael Rebbe (administrator) on LAPTOP-MRE on 19-02-2014 14:46:47
Running from C:\Users\Laptop Michael Rebbe\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Kaspersky Lab ZAO) D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE
(FirebirdSQL Project) C:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbguard.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
() C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe
(Malwarebytes Corporation) D:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\ConversionService.exe
() D:\Tobit Radio.fx\Server\rfx-server.exe
(TeamViewer GmbH) D:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(FirebirdSQL Project) C:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbserver.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(ASUS) C:\Windows\AsScrPro.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIHFE.EXE
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
() C:\Users\Laptop Michael Rebbe\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Dropbox, Inc.) C:\Users\Laptop Michael Rebbe\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(ASUS) C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(Kaspersky Lab ZAO) D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe
(Samsung Electronics Co., Ltd.) D:\Program Files (x86)\Kies\KiesTrayAgent.exe
(Apple Inc.) D:\Program Files (x86)\iTunes\iTunesHelper.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\tosBtProc.exe
(Microsoft Corporation) C:\Windows\system32\prevhost.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2264168 2011-07-13] (Realtek Semiconductor)
HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [324096 2010-08-11] (Alcor Micro Corp.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2785064 2011-05-05] (Synaptics Incorporated)
HKLM\...\Run: [IntelTBRunOnce] - wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [SynAsusAcpi] - C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [97064 2011-05-05] (Synaptics Incorporated)
HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3331312 2011-10-19] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUSWebStorage] - C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe [737104 2011-07-29] (ecareme)
HKLM-x32\...\Run: [SonicMasterTray] - C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe [984400 2010-07-10] (Virage Logic Corporation / Sonic Focus)
HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5716608 2011-07-22] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2255360 2011-06-10] (ASUS)
HKLM-x32\...\Run: [Samsung PanelMgr] - C:\Windows\Samsung\PanelMgr\SSMMgr.exe [606208 2009-10-13] ()
HKLM-x32\...\Run: [ITSecMng] - C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [83336 2009-07-22] (TOSHIBA CORPORATION)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [KiesTrayAgent] - D:\Program Files (x86)\Kies\KiesTrayAgent.exe [3521424 2012-04-27] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] - D:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)
HKLM-x32\...\Run: [FUFAXRCV] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [495616 2011-03-08] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [FUFAXSTM] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [856064 2011-03-08] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [EEventManager] - C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [979328 2010-10-12] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\klogon: C:\Windows\System32\klogon.dll (Kaspersky Lab ZAO)
HKU\.DEFAULT\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [18705664 2013-01-08] (Skype Technologies S.A.)
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\Run: [KiesHelper] - D:\Program Files (x86)\Kies\KiesHelper.exe [955280 2012-04-27] (Samsung)
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\Run: [KiesPDLR] - D:\Program Files (x86)\Kies\External\FirmwareUpdate\KiesPDLR.exe [21416 2012-05-28] ()
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\Run: [rfxsrvtray] - D:\Tobit Radio.fx\Client\rfx-tray.exe [1838872 2013-02-07] (Tobit.Software)
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\Run: [EPLTarget\P0000000000000000] - C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIHFE.EXE [241280 2012-07-12] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\Run: [Amazon Cloud Player] - C:\Users\Laptop Michael Rebbe\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe [3145536 2013-12-12] ()
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\MountPoints2: H - H:\AutoRun.exe
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\MountPoints2: {1cb66dd1-f738-11e1-8507-c8600001845d} - H:\AutoRun.exe
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\MountPoints2: {3d38e903-da2c-11e2-b5d4-c8600001845d} - H:\AutoRun.exe
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\MountPoints2: {9ca96f7f-dedf-11e1-81f3-c8600001845d} - H:\AutoRun.exe
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\MountPoints2: {b3805e48-940f-11e1-98e6-c8600001845d} - H:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\MountPoints2: {decbd0cf-d484-11e1-9e09-c8600001845d} - H:\AutoRun.exe
HKU\S-1-5-21-109693576-1980429444-54150481-1001\...\MountPoints2: {decbd0e4-d484-11e1-9e09-c8600001845d} - H:\AutoRun.exe
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [245872 2013-04-08] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [201576 2013-04-08] (NVIDIA Corporation)
Startup: C:\Users\Laptop Michael Rebbe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Laptop Michael Rebbe\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Laptop Michael Rebbe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.
BHO: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\ievkbd.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\klwtbbho.dll (Kaspersky Lab ZAO)
BHO: Bee Coupons BHO - {FC4DBA8C-2CC8-4741-BCE5-ADAC3EEA50B0} - C:\Program Files (x86)\Bee Coupons\FrameworkBHO64.dll No File
BHO-x32: Browser Guard - {02a0d829-4393-46fc-a37e-126263035883} - C:\Program Files (x86)\Browser Guard\browserguard.dll No File
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GbR)
BHO-x32: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM - Bee Coupons - {814C44E6-B2BA-4413-AEB3-F958AD419DB4} - C:\Program Files (x86)\Bee Coupons\FrameworkBHO64.dll No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: 54.204.28.26	gcbkfpidjhchgnokamccdemjfamackdh
Tcpip\Parameters: [DhcpNameServer] 192.168.222.1
Tcpip\..\Interfaces\{70EE0C7C-6F1F-45CC-935D-C82E51049ED7}: [NameServer]10.74.210.210 10.74.210.211
Tcpip\..\Interfaces\{A897705E-AA56-488D-A6C7-E38D3CED4898}: [NameServer]10.74.210.210 10.74.210.211
Tcpip\..\Interfaces\{D534E621-75BE-4191-BEC1-904739C2A010}: [NameServer]10.74.210.210 10.74.210.211
Tcpip\..\Interfaces\{F2A1458F-44BF-427F-92CE-EF12C4530881}: [NameServer]10.74.210.210 10.74.210.211

FireFox:
========
FF ProfilePath: C:\Users\Laptop Michael Rebbe\AppData\Roaming\Mozilla\Firefox\Profiles\5hstnu5u.default
FF SearchEngineOrder.user_pref("browser.search.order.1,S", "");: user_pref("browser.search.order.1,S", "");
FF SelectedSearchEngine: Google
FF Homepage: https://www.google.de/?gws_rd=cr&ei=rdiVUrDDIqm2yAPI3YGADw
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - D:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pages.tvunetworks.com/WebPlayer - D:\Program Files (x86)\TVUPlayer\npTVUAx.dll (TVU networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - D:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Laptop Michael Rebbe\AppData\Roaming\Mozilla\Firefox\Profiles\5hstnu5u.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-08-27]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Laptop Michael Rebbe\AppData\Roaming\Mozilla\Firefox\Profiles\5hstnu5u.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-21]
FF Extension: DownThemAll! - C:\Users\Laptop Michael Rebbe\AppData\Roaming\Mozilla\Firefox\Profiles\5hstnu5u.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2012-02-18]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-01-03]
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru
FF Extension: Kaspersky Virtual Keyboard - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru [2012-02-17]
FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\linkfilter@kaspersky.ru
FF Extension: Kaspersky URL Advisor - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\linkfilter@kaspersky.ru [2012-02-17]
FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files\T-Mobile\InternetManager_H\OCx64\addon
FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\KavAntiBanner@Kaspersky.ru
FF Extension: Anti-Banner - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\KavAntiBanner@Kaspersky.ru [2012-02-17]
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-01-08]
FF HKLM-x32\...\Firefox\Extensions: [{20d1f7b3-7721-4da0-b6f3-78bb4d7248f4}] - C:\Program Files (x86)\Browser Guard\browserguard.xpi

Chrome: 
=======
CHR HomePage: 
CHR Extension: (Google Docs) - C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-12]
CHR Extension: (Google Drive) - C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-12]
CHR Extension: (YouTube) - C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-12]
CHR Extension: (Google-Suche) - C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-12]
CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2014-02-12]
CHR Extension: (Virtuelle Tastatur) - C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2014-02-12]
CHR Extension: (Skype Click to Call) - C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-02-17]
CHR Extension: (Google Wallet) - C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-12]
CHR Extension: (Google Mail) - C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-12]
CHR Extension: (Anti-Banner) - C:\Users\Laptop Michael Rebbe\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2014-02-12]
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ChromeExt\urladvisor.crx [2011-04-25]
CHR HKLM-x32\...\Chrome\Extension: [iemmnakfifhlfhkmdddbojpkkmlecfhe] - C:\ProgramData\SaveByclick\iemmnakfifhlfhkmdddbojpkkmlecfhe.crx [2011-04-25]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ChromeExt\virtkbd.crx [2011-04-25]
CHR HKLM-x32\...\Chrome\Extension: [kfepagcelbegkpkcjgfeecmlnmkedjin] - C:\Program Files (x86)\Browser Guard\browserguard.crx [2011-04-25]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-01-03]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ChromeExt\ab.crx [2011-04-25]

==================== Services (Whitelisted) =================

R3 AVP; D:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe [206448 2012-10-31] (Kaspersky Lab ZAO)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1363616 2014-01-03] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1748640 2014-01-03] (Microsoft Corporation)
R2 DokanMounter; C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe [14848 2011-01-10] ()
R2 FirebirdGuardianDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbguard.exe [81920 2007-03-02] (FirebirdSQL Project)
R3 FirebirdServerDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbserver.exe [1994752 2007-03-02] (FirebirdSQL Project)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [344928 2011-01-28] ()
S2 Internet Manager. RunOuc; D:\Program Files (x86)\Stick\UpdateDog\ouc.exe [224096 2012-07-25] ()
R2 MBAMScheduler; D:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; D:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1522312 2012-11-22] (pdfforge GbR)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [905864 2012-11-22] (pdfforge GbR)
R2 Radio.fx; D:\Tobit Radio.fx\Server\rfx-server.exe [3999512 2013-06-03] ()
R2 TeamViewer8; D:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [3560288 2013-03-06] (TeamViewer GmbH)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)
S3 MozillaMaintenance; "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe" [X]

==================== Drivers (Whitelisted) ====================

S3 aksusb; C:\Windows\System32\DRIVERS\aksusb.sys [21120 2011-08-09] (SafeNet Inc.)
S3 ASUSProcObsrv; C:\eSupport\eDriver\I386\AsPrOb64.sys [12416 2010-05-26] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2012-07-08] ()
R0 BMLoad; C:\Windows\System32\drivers\BMLoad.sys [16512 2012-07-25] (Bytemobile, Inc.)
S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [53816 2009-03-25] (Samsung Electronics Co., Ltd.)
R2 Dokan; C:\Windows\system32\drivers\dokan.sys [120408 2011-01-10] (Windows (R) Win 7 DDK provider)
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [321536 2011-10-07] (SafeNet Inc.)
S2 Haspnt; C:\Windows\SysWOW64\drivers\Haspnt.sys [47616 2012-03-14] (Aladdin Knowledge Systems)
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [212992 2012-07-25] (Huawei Technologies Co., Ltd.)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [460888 2011-03-04] (Kaspersky Lab ZAO)
R1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [11864 2011-03-04] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [637272 2012-10-31] (Kaspersky Lab)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29488 2011-03-10] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [22544 2009-11-02] (Kaspersky Lab)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2012-07-08] ()
R2 lirsgt; C:\Windows\SysWOW64\DRIVERS\lirsgt.sys [18048 2012-06-06] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R1 tcpipBM; C:\Windows\system32\drivers\tcpipBM.sys [39552 2012-07-25] (Bytemobile, Inc.)
S3 cpuz130; \??\C:\Users\LAPTOP~1\AppData\Local\Temp\cpuz130\cpuz_x64.sys [X]
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-19 14:46 - 2014-02-19 14:46 - 00027685 _____ () C:\Users\Laptop Michael Rebbe\Downloads\FRST.txt
2014-02-19 14:46 - 2014-02-19 14:46 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\FRST-OlderVersion
2014-02-19 14:44 - 2014-02-19 14:44 - 00000951 _____ () C:\Users\Laptop Michael Rebbe\Desktop\checkup.txt
2014-02-19 14:40 - 2014-02-19 14:40 - 00987425 _____ () C:\Users\Laptop Michael Rebbe\Downloads\SecurityCheck.exe
2014-02-19 13:03 - 2014-02-19 13:03 - 00001813 _____ () C:\Users\Laptop Michael Rebbe\Desktop\Eset.txt
2014-02-19 08:07 - 2014-02-19 08:07 - 00128800 _____ () C:\Users\Laptop Michael Rebbe\Downloads\Bewerbungen.rar
2014-02-16 16:28 - 2014-02-16 16:28 - 01037530 _____ (Thisisu) C:\Users\Laptop Michael Rebbe\Downloads\JRT.exe
2014-02-16 16:28 - 2014-02-16 16:28 - 00000000 ____D () C:\Windows\ERUNT
2014-02-16 16:17 - 2014-02-16 16:17 - 01166132 _____ () C:\Users\Laptop Michael Rebbe\Downloads\adwcleaner.exe
2014-02-16 16:14 - 2014-02-16 18:39 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Desktop\Trojaner Board
2014-02-15 16:50 - 2014-02-19 14:46 - 02153472 _____ (Farbar) C:\Users\Laptop Michael Rebbe\Downloads\FRST64.exe
2014-02-15 16:50 - 2014-02-19 14:46 - 00000000 ____D () C:\FRST
2014-02-14 20:11 - 2014-02-14 20:11 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\Microsoft\Windows\Start Menu\OMC ModPack
2014-02-14 19:26 - 2014-02-14 20:10 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Documents\OMC ModPack
2014-02-14 19:22 - 2014-02-14 19:22 - 01787096 _____ (Odem Mortis ) C:\Users\Laptop Michael Rebbe\Downloads\OMC_ModPack_0.8.11.exe
2014-02-14 19:14 - 2014-02-14 19:14 - 00093285 _____ () C:\Users\Laptop Michael Rebbe\Downloads\Crakker-s-Sniper-Zoom-ScopeShodow-remove-Mod-Zoomstufe.rar
2014-02-14 19:14 - 2014-02-14 19:14 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\Crakker-s-Sniper-Zoom-ScopeShodow-remove-Mod-Zoomstufe
2014-02-14 10:16 - 2014-02-14 13:32 - 04878848 _____ () C:\Users\Laptop Michael Rebbe\Desktop\Barth_Wipro_DachsPro20ST.xls
2014-02-12 20:03 - 2014-02-12 20:03 - 00002205 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-12 19:59 - 2014-02-14 20:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-12 19:59 - 2014-02-12 19:59 - 00001105 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-02-12 19:59 - 2014-02-12 19:59 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-12 18:15 - 2014-02-12 18:15 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\xvm-5.1.0
2014-02-12 17:52 - 2014-02-12 17:52 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-02-12 17:52 - 2014-02-12 17:52 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-02-12 17:52 - 2014-02-12 17:52 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-02-12 17:52 - 2014-02-12 17:52 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-02-12 12:41 - 2014-02-12 12:41 - 00000846 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-12 12:41 - 2014-02-12 12:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\Malwarebytes
2014-02-12 12:41 - 2014-02-12 12:41 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-12 12:41 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-12 10:28 - 2014-02-16 16:20 - 00000000 ____D () C:\AdwCleaner
2014-02-11 19:45 - 2014-02-11 19:45 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-02-11 18:41 - 2014-02-11 18:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\locastans Minimap_3rdGen_811
2014-02-11 18:41 - 2014-02-11 18:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\J1mB0s_Crosshair_Mod_v1.36
2014-02-11 18:41 - 2014-02-11 18:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\0.8.11White_Dead_Tanks
2014-02-07 22:41 - 2014-02-07 22:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\updated
2014-02-04 11:40 - 2014-02-04 12:10 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Local\Deployment
2014-02-04 11:40 - 2014-02-04 11:40 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Local\Apps\2.0
2014-02-03 14:35 - 2014-02-03 14:35 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\ab_excel_2007_wipro_v_13_04_1
2014-02-02 10:19 - 2014-02-12 14:15 - 00000000 ____D () C:\Program Files (x86)\Bench
2014-02-02 10:19 - 2014-02-02 10:19 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Local\emaze
2014-01-24 07:15 - 2014-01-24 07:15 - 00005327 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-21 15:08 - 2014-01-21 15:08 - 00000788 _____ () C:\Users\Public\Desktop\PDFCreator.lnk
2014-01-21 15:08 - 2013-04-09 14:13 - 00110264 _____ (pdfforge GmbH) C:\Windows\system32\pdfcmon.dll
2014-01-21 15:08 - 2012-05-05 10:54 - 00662288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCT2.OCX
2014-01-21 15:08 - 2012-05-05 10:54 - 00137000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMAPI32.OCX
2014-01-21 15:08 - 2012-05-05 10:54 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPIDE.DLL
2014-01-21 15:08 - 1998-07-06 17:55 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCMCDE.DLL
2014-01-21 15:08 - 1998-07-06 17:55 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCC2DE.DLL
2014-01-21 09:19 - 2014-01-21 09:19 - 00001060 _____ () C:\Users\Laptop Michael Rebbe\Desktop\Dropbox.lnk
2014-01-21 09:17 - 2014-01-21 09:19 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\DropboxMaster
2014-01-21 09:16 - 2014-01-21 09:16 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

==================== One Month Modified Files and Folders =======

2014-02-19 14:47 - 2014-02-19 14:46 - 00027685 _____ () C:\Users\Laptop Michael Rebbe\Downloads\FRST.txt
2014-02-19 14:46 - 2014-02-19 14:46 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\FRST-OlderVersion
2014-02-19 14:46 - 2014-02-15 16:50 - 02153472 _____ (Farbar) C:\Users\Laptop Michael Rebbe\Downloads\FRST64.exe
2014-02-19 14:46 - 2014-02-15 16:50 - 00000000 ____D () C:\FRST
2014-02-19 14:45 - 2012-02-17 05:55 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-02-19 14:44 - 2014-02-19 14:44 - 00000951 _____ () C:\Users\Laptop Michael Rebbe\Desktop\checkup.txt
2014-02-19 14:40 - 2014-02-19 14:40 - 00987425 _____ () C:\Users\Laptop Michael Rebbe\Downloads\SecurityCheck.exe
2014-02-19 14:40 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2014-02-19 14:04 - 2012-05-22 15:35 - 00001138 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-19 13:59 - 2012-03-31 04:38 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-19 13:56 - 2011-12-28 12:11 - 01635885 _____ () C:\Windows\WindowsUpdate.log
2014-02-19 13:03 - 2014-02-19 13:03 - 00001813 _____ () C:\Users\Laptop Michael Rebbe\Desktop\Eset.txt
2014-02-19 08:10 - 2009-07-14 05:51 - 00224592 _____ () C:\Windows\setupact.log
2014-02-19 08:07 - 2014-02-19 08:07 - 00128800 _____ () C:\Users\Laptop Michael Rebbe\Downloads\Bewerbungen.rar
2014-02-18 21:31 - 2012-05-22 15:35 - 00001134 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-18 09:50 - 2011-02-19 05:24 - 00809028 _____ () C:\Windows\system32\perfh007.dat
2014-02-18 09:50 - 2011-02-19 05:24 - 00186594 _____ () C:\Windows\system32\perfc007.dat
2014-02-18 09:50 - 2009-07-14 06:13 - 01890364 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-17 23:38 - 2012-03-05 09:18 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Documents\Mein Steuer-Sparbuch Heute
2014-02-17 23:37 - 2009-07-14 05:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-17 23:37 - 2009-07-14 05:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-17 23:31 - 2012-06-10 12:55 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\Dropbox
2014-02-17 23:29 - 2012-12-24 21:24 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-02-17 23:29 - 2012-04-09 19:44 - 00000000 ____D () C:\ProgramData\Skype
2014-02-17 23:29 - 2012-02-14 20:49 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\extensions
2014-02-17 23:27 - 2012-06-08 21:20 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-02-17 23:27 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-16 18:39 - 2014-02-16 16:14 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Desktop\Trojaner Board
2014-02-16 16:28 - 2014-02-16 16:28 - 01037530 _____ (Thisisu) C:\Users\Laptop Michael Rebbe\Downloads\JRT.exe
2014-02-16 16:28 - 2014-02-16 16:28 - 00000000 ____D () C:\Windows\ERUNT
2014-02-16 16:20 - 2014-02-12 10:28 - 00000000 ____D () C:\AdwCleaner
2014-02-16 16:17 - 2014-02-16 16:17 - 01166132 _____ () C:\Users\Laptop Michael Rebbe\Downloads\adwcleaner.exe
2014-02-16 14:29 - 2014-01-06 08:00 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\ActiveDossierUploader
2014-02-15 06:09 - 2013-03-20 07:46 - 00651776 ___SH () C:\Users\Laptop Michael Rebbe\Desktop\Thumbs.db
2014-02-14 20:17 - 2013-09-30 14:45 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Desktop\WOT
2014-02-14 20:15 - 2012-02-14 19:53 - 00105936 _____ () C:\Users\Laptop Michael Rebbe\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-14 20:15 - 2012-02-14 19:53 - 00045056 _____ () C:\Windows\SysWOW64\acovcnt.exe
2014-02-14 20:14 - 2009-07-14 05:45 - 00402112 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-14 20:13 - 2014-02-12 19:59 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-14 20:13 - 2011-10-19 04:20 - 01089910 _____ () C:\Windows\PFRO.log
2014-02-14 20:11 - 2014-02-14 20:11 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\Microsoft\Windows\Start Menu\OMC ModPack
2014-02-14 20:10 - 2014-02-14 19:26 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Documents\OMC ModPack
2014-02-14 19:22 - 2014-02-14 19:22 - 01787096 _____ (Odem Mortis ) C:\Users\Laptop Michael Rebbe\Downloads\OMC_ModPack_0.8.11.exe
2014-02-14 19:14 - 2014-02-14 19:14 - 00093285 _____ () C:\Users\Laptop Michael Rebbe\Downloads\Crakker-s-Sniper-Zoom-ScopeShodow-remove-Mod-Zoomstufe.rar
2014-02-14 19:14 - 2014-02-14 19:14 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\Crakker-s-Sniper-Zoom-ScopeShodow-remove-Mod-Zoomstufe
2014-02-14 13:32 - 2014-02-14 10:16 - 04878848 _____ () C:\Users\Laptop Michael Rebbe\Desktop\Barth_Wipro_DachsPro20ST.xls
2014-02-14 09:46 - 2012-04-28 08:58 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Documents\DachsWelt
2014-02-13 17:59 - 2012-05-22 15:35 - 00004134 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-13 17:59 - 2012-05-22 15:35 - 00003882 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-12 20:03 - 2014-02-12 20:03 - 00002205 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-12 20:03 - 2012-05-22 15:35 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Local\Google
2014-02-12 20:03 - 2012-05-22 15:35 - 00000000 ____D () C:\Program Files (x86)\Google
2014-02-12 19:59 - 2014-02-12 19:59 - 00001105 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-02-12 19:59 - 2014-02-12 19:59 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-12 18:15 - 2014-02-12 18:15 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\xvm-5.1.0
2014-02-12 17:52 - 2014-02-12 17:52 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-02-12 17:52 - 2014-02-12 17:52 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-02-12 17:52 - 2014-02-12 17:52 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-02-12 17:52 - 2014-02-12 17:52 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-02-12 17:52 - 2013-10-16 10:17 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-12 14:27 - 2011-12-28 12:24 - 00001591 _____ () C:\Windows\system32\ServiceFilter.ini
2014-02-12 14:15 - 2014-02-02 10:19 - 00000000 ____D () C:\Program Files (x86)\Bench
2014-02-12 12:53 - 2012-02-14 19:53 - 00000000 ____D () C:\Users\Laptop Michael Rebbe
2014-02-12 12:41 - 2014-02-12 12:41 - 00000846 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-12 12:41 - 2014-02-12 12:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\Malwarebytes
2014-02-12 12:41 - 2014-02-12 12:41 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-12 11:39 - 2012-02-16 06:30 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\Maytec.net
2014-02-12 10:38 - 2012-02-14 19:54 - 00000000 ___RD () C:\Users\Laptop Michael Rebbe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-11 21:21 - 2013-12-21 08:11 - 02215424 _____ (Marius Czyz aka Phalynx) C:\Users\Laptop Michael Rebbe\Downloads\ActiveDossierUploader.exe
2014-02-11 19:45 - 2014-02-11 19:45 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-02-11 19:44 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-02-11 19:44 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-02-11 18:41 - 2014-02-11 18:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\locastans Minimap_3rdGen_811
2014-02-11 18:41 - 2014-02-11 18:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\J1mB0s_Crosshair_Mod_v1.36
2014-02-11 18:41 - 2014-02-11 18:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\0.8.11White_Dead_Tanks
2014-02-09 15:19 - 2012-02-14 20:49 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\uninstall
2014-02-09 15:11 - 2013-05-23 10:43 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\browser
2014-02-09 15:11 - 2013-04-12 16:42 - 00028272 _____ (Mozilla Corporation) C:\Users\Laptop Michael Rebbe\plugin-hang-ui.exe
2014-02-09 15:11 - 2012-10-19 23:07 - 00170960 _____ (Mozilla Corporation) C:\Users\Laptop Michael Rebbe\webapp-uninstaller.exe
2014-02-09 15:11 - 2012-10-19 23:07 - 00093808 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\webapprt-stub.exe
2014-02-09 15:11 - 2012-10-19 23:07 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\webapprt
2014-02-09 15:11 - 2012-10-06 14:58 - 00075376 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\breakpadinjector.dll
2014-02-09 15:11 - 2012-05-08 20:44 - 00194552 _____ (Mozilla Corporation) C:\Users\Laptop Michael Rebbe\maintenanceservice_installer.exe
2014-02-09 15:11 - 2012-05-08 20:44 - 00118896 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\maintenanceservice.exe
2014-02-09 15:11 - 2012-05-08 20:44 - 00000132 _____ () C:\Users\Laptop Michael Rebbe\update-settings.ini
2014-02-09 15:11 - 2012-03-21 21:29 - 03494512 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\gkmedias.dll
2014-02-09 15:11 - 2012-03-21 21:29 - 00142960 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\mozglue.dll
2014-02-09 15:11 - 2012-02-18 22:19 - 08484775 _____ () C:\Users\Laptop Michael Rebbe\omni.ja
2014-02-09 15:11 - 2012-02-14 20:49 - 22777456 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\xul.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 03583600 _____ () C:\Users\Laptop Michael Rebbe\mozjs.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 01786480 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\nss3.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 00647280 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\libGLESv2.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 00398960 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\nssckbi.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 00307824 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\freebl3.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 00276592 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\updater.exe
2014-02-09 15:11 - 2012-02-14 20:49 - 00152688 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\softokn3.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 00117360 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\crashreporter.exe
2014-02-09 15:11 - 2012-02-14 20:49 - 00092784 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\nssdbm3.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 00053360 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\libEGL.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 00020080 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\AccessibleMarshal.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 00018544 _____ (Mozilla Corporation) C:\Users\Laptop Michael Rebbe\plugin-container.exe
2014-02-09 15:11 - 2012-02-14 20:49 - 00017008 _____ (Mozilla Foundation) C:\Users\Laptop Michael Rebbe\mozalloc.dll
2014-02-09 15:11 - 2012-02-14 20:49 - 00001928 _____ () C:\Users\Laptop Michael Rebbe\precomplete
2014-02-09 15:11 - 2012-02-14 20:49 - 00000899 _____ () C:\Users\Laptop Michael Rebbe\softokn3.chk
2014-02-09 15:11 - 2012-02-14 20:49 - 00000899 _____ () C:\Users\Laptop Michael Rebbe\nssdbm3.chk
2014-02-09 15:11 - 2012-02-14 20:49 - 00000899 _____ () C:\Users\Laptop Michael Rebbe\freebl3.chk
2014-02-09 15:11 - 2012-02-14 20:49 - 00000662 _____ () C:\Users\Laptop Michael Rebbe\application.ini
2014-02-09 15:11 - 2012-02-14 20:49 - 00000140 _____ () C:\Users\Laptop Michael Rebbe\platform.ini
2014-02-07 22:41 - 2014-02-07 22:41 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\updated
2014-02-07 07:23 - 2013-12-21 08:11 - 02215424 _____ (Marius Czyz aka Phalynx) C:\Users\Laptop Michael Rebbe\Downloads\ActiveDossierUploader.exe_OLD
2014-02-05 07:59 - 2012-03-31 04:38 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-05 07:59 - 2012-03-31 04:38 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-05 07:59 - 2012-02-16 21:58 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-04 12:10 - 2014-02-04 11:40 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Local\Deployment
2014-02-04 12:03 - 2012-02-14 22:10 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Local\Microsoft Help
2014-02-04 11:40 - 2014-02-04 11:40 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Local\Apps\2.0
2014-02-03 14:35 - 2014-02-03 14:35 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\Downloads\ab_excel_2007_wipro_v_13_04_1
2014-02-02 10:22 - 2009-07-14 04:20 - 00000000 ___HD () C:\Program Files\Common Files\Microsoft Shared
2014-02-02 10:19 - 2014-02-02 10:19 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Local\emaze
2014-01-24 07:15 - 2014-01-24 07:15 - 00005327 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-24 07:15 - 2013-08-16 14:10 - 00000000 ____D () C:\Program Files (x86)\Java
2014-01-21 15:08 - 2014-01-21 15:08 - 00000788 _____ () C:\Users\Public\Desktop\PDFCreator.lnk
2014-01-21 09:19 - 2014-01-21 09:19 - 00001060 _____ () C:\Users\Laptop Michael Rebbe\Desktop\Dropbox.lnk
2014-01-21 09:19 - 2014-01-21 09:17 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\DropboxMaster
2014-01-21 09:16 - 2014-01-21 09:16 - 00000000 ____D () C:\Users\Laptop Michael Rebbe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

Files to move or delete:
====================
C:\Users\Laptop Michael Rebbe\AccessibleMarshal.dll
C:\Users\Laptop Michael Rebbe\breakpadinjector.dll
C:\Users\Laptop Michael Rebbe\crashreporter.exe
C:\Users\Laptop Michael Rebbe\D3DCompiler_43.dll
C:\Users\Laptop Michael Rebbe\freebl3.dll
C:\Users\Laptop Michael Rebbe\gkmedias.dll
C:\Users\Laptop Michael Rebbe\libEGL.dll
C:\Users\Laptop Michael Rebbe\libGLESv2.dll
C:\Users\Laptop Michael Rebbe\maintenanceservice.exe
C:\Users\Laptop Michael Rebbe\maintenanceservice_installer.exe
C:\Users\Laptop Michael Rebbe\mozalloc.dll
C:\Users\Laptop Michael Rebbe\mozglue.dll
C:\Users\Laptop Michael Rebbe\mozjs.dll
C:\Users\Laptop Michael Rebbe\msvcp100.dll
C:\Users\Laptop Michael Rebbe\msvcr100.dll
C:\Users\Laptop Michael Rebbe\nss3.dll
C:\Users\Laptop Michael Rebbe\nssckbi.dll
C:\Users\Laptop Michael Rebbe\nssdbm3.dll
C:\Users\Laptop Michael Rebbe\plugin-container.exe
C:\Users\Laptop Michael Rebbe\plugin-hang-ui.exe
C:\Users\Laptop Michael Rebbe\softokn3.dll
C:\Users\Laptop Michael Rebbe\updater.exe
C:\Users\Laptop Michael Rebbe\webapp-uninstaller.exe
C:\Users\Laptop Michael Rebbe\webapprt-stub.exe
C:\Users\Laptop Michael Rebbe\xul.dll


Some content of TEMP:
====================
C:\Users\Laptop Michael Rebbe\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpo0dovf.dll
C:\Users\Laptop Michael Rebbe\AppData\Local\Temp\information.exe
C:\Users\Laptop Michael Rebbe\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Laptop Michael Rebbe\AppData\Local\Temp\jre_setup.exe
C:\Users\Laptop Michael Rebbe\AppData\Local\Temp\jre_setup_1.7.0.51.exe
C:\Users\Laptop Michael Rebbe\AppData\Local\Temp\npp.6.5.2.Installer.exe
C:\Users\Laptop Michael Rebbe\AppData\Local\Temp\Quarantine.exe
C:\Users\Laptop Michael Rebbe\AppData\Local\Temp\SendMsg.dll
C:\Users\Laptop Michael Rebbe\AppData\Local\Temp\Unipack_Installer.exe
C:\Users\Laptop Michael Rebbe\AppData\Local\Temp\xmlUpdater.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-18 07:49

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

Sieht so aus als müsste ich da noch manuell etwas löschen. Kannst Du mir die zu löschenden Stellen anmarkern?

schrauber · 20.02.2014, 14:14

Einfach den Papierkorb leeren, Rest mache ich jetzt.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

C:\Users\Laptop Michael Rebbe\updated\AppData\Local\Bee Coupons
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop.
Schließe nun alle offenen Programme und trenne Dich von dem Internet.
Doppelklick auf die TFC.exe und drücke auf Start.
Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen.

Fertig

Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun

Hier noch ein paar Tipps zur Absicherung deines Systems.

Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
WinPatrol
Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

SpywareBlaster
Eine kurze Einführung findest du Hier
MVPs hosts file
Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
WOT (Web of trust)
Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )

Don'ts

Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

rebbi60 · 21.02.2014, 12:00

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 20-02-2014
Ran by Laptop Michael Rebbe at 2014-02-21 11:13:37 Run:1
Running from C:\Users\Laptop Michael Rebbe\Downloads
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
C:\Users\Laptop Michael Rebbe\updated\AppData\Local\Bee Coupons
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
*****************

C:\Users\Laptop Michael Rebbe\updated\AppData\Local\Bee Coupons => Moved successfully.
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.


The system needs a manual reboot. 

==== End of Fixlog ====

Code:

ATTFilter

# DelFix v10.6 - Datei am 21/02/2014 um 11:36:28 erstellt
# Aktualisiert am 11/11/2013 von Xplode
# Benutzer : Laptop Michael Rebbe - LAPTOP-MRE
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

~ Aktiviere die Benutzerkontensteuerung ... OK

~ Entferne die Bereinigungsprogramme ...

Gelöscht : C:\FRST
Gelöscht : C:\AdwCleaner
Gelöscht : C:\Users\Laptop Michael Rebbe\Desktop\TFC.exe
Gelöscht : C:\Users\Laptop Michael Rebbe\Downloads\adwcleaner.exe
Gelöscht : C:\Users\Laptop Michael Rebbe\Downloads\Fixlog.txt
Gelöscht : C:\Users\Laptop Michael Rebbe\Downloads\FRST64.exe
Gelöscht : C:\Users\Laptop Michael Rebbe\Downloads\JRT.exe
Gelöscht : C:\Users\Laptop Michael Rebbe\Downloads\SecurityCheck.exe
Gelöscht : HKLM\SOFTWARE\OldTimer Tools
Gelöscht : HKLM\SOFTWARE\AdwCleaner

~ Erstelle ein Backup der Registrierungsdatenbank ... OK

~ Lösche die Wiederherstellungspunkte ...

Gelöscht : RP #452 [Geplanter Prüfpunkt | 02/21/2014 07:47:29]

Ein neuer Wiederherstellungspunkt wurde erstellt !

~ Stelle die Systemeinstellungen wieder her ... OK

########## - EOF - ##########

Jetzt ist alles wieder bestens!

Also für mich einfach eine ganz ganz tolle Leistung von Dir! Hut ab. Besten Dank nochmal

schrauber · 22.02.2014, 13:21

Gern Geschehen

22.02.2014, 13:21	#10
schrauber /// the machine /// TB-Ausbilder	Bee Coupon hartnäckiger geworden! Gern Geschehen __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

Bee Coupon hartnäckiger geworden!

Plagegeister aller Art und deren Bekämpfung: Bee Coupon hartnäckiger geworden!