Hallo,

mein Nachbar (65J) hat mich um Hilfe gebeten.

Seine Browser produzieren ständig POP-UPS.

Beim Systemstart öffnen sich Programme dich ich erst als seinen Versuch zur Eigenhilfe deutete, mitlerweile denke ich das es sich bei den Programmen selbst um Malware handelt. (RegClean, MyUpdater ... mehrer Programme weis nicht mehr genau was es alles war. Ich habe einiges schon Deinstalliert)

Avast hat 20 viren/probleme in die quarantäne geschoben.
Probleme bestehen dennoch weiterhin.

Nach einem kurzen überblick im Forum scheint das ein gängiges Problem zur Zeit zu sein jedoch wollte ich nicht auf eigene Faust einer anderen Anleitung aus einem anderen Thread folgen. Und vorallem nicht da es nicht mein Eigener PC ist.

Das beste an der Geschichte ist das er sagte er braucht den PC ja nur für Online Banking und seine Broker geschäfte.
Na dann Prost Mahlzeit Herr Nachbar

Naja wäre sehr froh wenn Ihr mir helft.

Gruß

Christian

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-02-2014 01
Ran by ubach (administrator) on HILDEGARD43 on 27-02-2014 18:56:18
Running from E:\
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRYSVC.EXE
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\bcmwltry.exe
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginService\PluginService.exe
(Cherished Technololgy LIMITED) C:\ProgramData\WPM\wprotectmanager.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\ProgramData\InternetUpdater\InternetUpdaterService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
() C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher64.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
() C:\Program Files (x86)\Mobogenie\MgAssist.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
() C:\monitor.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
() C:\Program Files (x86)\Re-markit\Re-markit_wd.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
() C:\Program Files (x86)\SaltarSmart\updateSaltarSmart.exe
() C:\Program Files (x86)\SaltarSmart\bin\utilSaltarSmart.exe
(ClickMeIn Limited) C:\Program Files (x86)\VuuPC\Connectivity.exe
(Wajam) C:\Program Files (x86)\Wajam\Updater\WajamUpdaterV3.exe
() C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Vodafone) C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe
(ClickMeIn Limited) C:\Program Files (x86)\VuuPC\remoteengine.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Objectify Media Inc) C:\Program Files (x86)\Web Protect\PCProtect.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.EXE
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(Updater) C:\ProgramData\Updater\updater.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Smart PC Solutions) C:\Program Files (x86)\PC Speed Maximizer\SPMSmartScan.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Smart PC Solutions) C:\Program Files (x86)\PC Speed Maximizer\SPMReminder.exe
(WatchDog) C:\ProgramData\RHelpers\ChromeHelper\ChromeHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(WatchDog) C:\ProgramData\RHelpers\FireFoxHelper\FireFoxHelper.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
(WatchDog) C:\ProgramData\RHelpers\IEHelper\IeHelper.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Vodafone) C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\brccMCtl.exe
(1und1 Mail und Media GmbH) C:\Program Files (x86)\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files (x86)\Bench\BService\bservice.exe
() C:\Program Files (x86)\Bench\Wd\wd.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_70.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_70.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\PMMUpdate.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\EgisUpdate.exe
(ClickMeIn Limited) C:\Program Files (x86)\VuuPC\RemoteEngineHelper.exe
(ClickMeIn Limited) C:\Program Files (x86)\VuuPC\RemoteEngineHelper.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12343400 2011-12-27] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1156712 2011-11-15] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2821936 2012-03-07] (ELAN Microelectronics Corp.)
HKLM\...\Run: [IntelTBRunOnce] - wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [Broadcom Wireless Manager UI] - C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.exe [7138816 2012-05-25] (Broadcom Corporation)
HKLM\...\Run: [Power Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1829768 2012-02-07] (Acer Incorporated)
HKLM\...\Run: [InstantUpdate] - C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuDaemon.exe [124520 2012-04-06] ()
HKLM-x32\...\Run: [SuiteTray] - C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [341360 2011-09-20] (Egis Technology Inc.)
HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-01] (Symantec Corporation)
HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [296984 2012-01-05] (NTI Corporation)
HKLM-x32\...\Run: [Dolby Home Theater v4] - C:\Dolby PCEE4\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1105488 2012-03-23] (Dritek System Inc.)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation)
HKLM-x32\...\Run: [ControlCenter3] - C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] - C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2621440 2010-02-09] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [MobileBroadband] - C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe [76288 2013-02-05] (Vodafone)
HKLM-x32\...\Run: [MailCheck IE Broker] - C:\Program Files (x86)\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe [1766464 2013-10-16] (1und1 Mail und Media GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [Updater] - C:\ProgramData\Updater\Updater.exe [481144 2013-11-12] (Updater)
HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe [766656 2014-01-09] ()
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-14] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [BService] - C:\Program Files (x86)\Bench\BService\bservice.exe [49664 2014-02-24] ()
HKLM-x32\...\Run: [Wd] - C:\Program Files (x86)\Bench\Wd\wd.exe [60416 2014-02-24] ()
HKLM-x32\...\Runonce: [Coupon Server-repairJob] - wscript.exe "C:\Users\ubach\AppData\Local\Coupon Server\repair.js" "Coupon Server-repairJob" [X]
HKLM-x32\...\Runonce: [Savings Wizard-repairJob] - wscript.exe "C:\Users\ubach\AppData\Local\Savings Wizard\repair.js" "Savings Wizard-repairJob" [X]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid}
HKU\S-1-5-19\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid}
HKU\S-1-5-20\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid}
HKU\S-1-5-21-847584245-1588873724-1552598581-1000\...\Run: [BackgroundContainer] - "C:\Windows\SysWOW64\Rundll32.exe" "C:\Users\ubach\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun <===== ATTENTION
HKU\S-1-5-21-847584245-1588873724-1552598581-1000\...\Run: [Updater] - C:\ProgramData\Updater\updater.exe [481144 2013-11-12] (Updater)
HKU\S-1-5-21-847584245-1588873724-1552598581-1000\...\Run: [NextLive] - C:\Windows\SysWOW64\rundll32.exe "C:\Users\ubach\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
HKU\S-1-5-21-847584245-1588873724-1552598581-1000\...\Run: [PC Speed Maximizer] - C:\Program Files (x86)\PC Speed Maximizer\SPMLauncher.exe [135792 2013-12-19] (Smart PC Solutions)
HKU\S-1-5-21-847584245-1588873724-1552598581-1000\...\Run: [Driver Pro] - C:\Program Files (x86)\Driver Pro\DPLauncher.exe [340512 2012-10-30] (PC Utilities Pro)
HKU\S-1-5-21-847584245-1588873724-1552598581-1000\...\Run: [GoogleChromeAutoLaunch_73C7711AA84B7814E23DBD985C19135B] - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [863184 2013-12-04] (Google Inc.)
HKU\S-1-5-21-847584245-1588873724-1552598581-1000\...\MountPoints2: F - F:\setup_vmb_lite.exe /checkApplicationPresence
HKU\S-1-5-21-847584245-1588873724-1552598581-1000\...\MountPoints2: {08215963-f9bb-11e2-81ad-b888e305472e} - F:\setup_vmb_lite.exe /checkApplicationPresence
HKU\S-1-5-21-847584245-1588873724-1552598581-1000\...\MountPoints2: {08215a31-f9bb-11e2-81ad-b888e305472e} - F:\setup_vmb_lite.exe /checkApplicationPresence
HKU\S-1-5-21-847584245-1588873724-1552598581-1000\...\MountPoints2: {bbb2169a-a64e-11e1-b23a-806e6f6e6963} - D:\autorun.exe /autorun
HKU\S-1-5-21-847584245-1588873724-1552598581-1000\...\MountPoints2: {deb2cbdf-7849-11e3-9608-b888e305472e} - E:\setup_vmb_lite.exe /checkApplicationPresence
Lsa: [Notification Packages] scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://feed.snapdo.com/?publisher=AdKnowledgeYB&dpid=AdKnowledgeYB&co=DE&userid=b5ab5f3a-1c58-d154-e65d-34092d08df62&searchtype=hp&installDate=16/11/2013
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=AdKnowledgeYB&dpid=AdKnowledgeYB&co=DE&userid=b5ab5f3a-1c58-d154-e65d-34092d08df62&searchtype=ds&q={searchTerms}&installDate=16/11/2013
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?publisher=AdKnowledgeYB&dpid=AdKnowledgeYB&co=DE&userid=b5ab5f3a-1c58-d154-e65d-34092d08df62&searchtype=ds&q={searchTerms}&installDate=16/11/2013
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1392150242&from=cor&uid=ST9500325AS_5VETE7SWXXXX5VETE7SW&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1392150242&from=cor&uid=ST9500325AS_5VETE7SWXXXX5VETE7SW&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1392150242&from=cor&uid=ST9500325AS_5VETE7SWXXXX5VETE7SW&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1392150242&from=cor&uid=ST9500325AS_5VETE7SWXXXX5VETE7SW&q={searchTerms}
URLSearchHook: HKLM-x32 - (No Name) - {fa23121f-ee7c-4bd8-8c06-123d087282c5} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://do-search.com/?type=sc&ts=1384604314&from=tugs&uid=ST9500325AS_5VETE7SWXXXX5VETE7SW
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1392150242&from=cor&uid=ST9500325AS_5VETE7SWXXXX5VETE7SW&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1392150242&from=cor&uid=ST9500325AS_5VETE7SWXXXX5VETE7SW&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1392150242&from=cor&uid=ST9500325AS_5VETE7SWXXXX5VETE7SW&q={searchTerms}
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=AdKnowledgeYB&dpid=AdKnowledgeYB&co=DE&userid=b5ab5f3a-1c58-d154-e65d-34092d08df62&searchtype=ds&q={searchTerms}&installDate=16/11/2013
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1392150242&from=cor&uid=ST9500325AS_5VETE7SWXXXX5VETE7SW&q={searchTerms}
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=AdKnowledgeYB&dpid=AdKnowledgeYB&co=DE&userid=b5ab5f3a-1c58-d154-e65d-34092d08df62&searchtype=ds&q={searchTerms}&installDate=16/11/2013
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=AdKnowledgeYB&dpid=AdKnowledgeYB&co=DE&userid=b5ab5f3a-1c58-d154-e65d-34092d08df62&searchtype=ds&q={searchTerms}&installDate=16/11/2013
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0Bzzzzzz0EtAtDyDyEyBtB0EtCzzyCyDtN0D0Tzu0SyByDtCtN1L2XzutBtFtBtFtCyDtFtCyDzytBtN1L1CzutDzytDtCtG1T&cr=97825655&ir=
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
SearchScopes: HKCU - {7639AC30-8816-4D10-B520-F77441DF46A3} URL = hxxp://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKCU - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3324329&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SPEE6AAD77-27CA-43B0-B895-631DDE45883A&q={searchTerms}&SSPV=
BHO: Plus-HD-2.5 - {11111111-1111-1111-1111-110311341138} - C:\Program Files (x86)\Plus-HD-2.5\Plus-HD-2.5-bho64.dll (Plus HD)
BHO: Feven 1.5 - {11111111-1111-1111-1111-110311851132} - C:\Program Files (x86)\Feven 1.5\Feven 1.5-bho64.dll (Feven)
BHO: MediaPlayerEnhance - {11111111-1111-1111-1111-110411411150} - C:\Program Files (x86)\MediaPlayerEnhance\MediaPlayerEnhance-bho64.dll (Feven)
BHO: TableeViEwwEer - {4DA0B632-7C99-8C1D-DCBF-BD0F1E2B1319} - C:\ProgramData\TableeViEwwEer\n.x64.dll ()
BHO: Savings Wizard BHO - {5682CA62-1A80-40AE-82A0-B67833CE75FF} - C:\Program Files (x86)\Savings Wizard\FrameworkBHO64.dll ()
BHO: easytoshhop - {5E6482C2-E829-088B-C304-78700836145C} - C:\ProgramData\easytoshhop\04H.x64.dll ()
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: ValueApps - {93DBF2BB-A2B3-4683-A92E-57E60751F346} - C:\Program Files\Conduit\ValueApps\IE\ValueAppsLoader.dll (Conduit Ltd.)
BHO: WEB.DE MailCheck BHO - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Program Files\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
BHO: savvinugatoyou - {CD6280C5-A9FE-7F27-3BBA-5AED114ECD02} - C:\ProgramData\savvinugatoyou\xFINLm4SF.x64.dll ()
BHO: Coupon Server BHO - {F791D8AE-47E8-40A5-A913-EB2D2AF29602} - C:\Program Files (x86)\Coupon Server\FrameworkBHO64.dll ()
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: SaveSense - {0f21b1e5-5afc-43c9-9c66-515046e92ec2} - C:\Program Files (x86)\SaveSense\SaveSenseIE.dll (SaveSense)
BHO-x32: IEOptimizer - {10AD2C61-0898-4348-8600-14A342F22AC3} - C:\Program Files (x86)\SavingsBull\IEOptimizer.dll ()
BHO-x32: Plus-HD-2.5 - {11111111-1111-1111-1111-110311341138} - C:\Program Files (x86)\Plus-HD-2.5\Plus-HD-2.5-bho.dll (Plus HD)
BHO-x32: MediaPlayerEnhance - {11111111-1111-1111-1111-110411411150} - C:\Program Files (x86)\MediaPlayerEnhance\MediaPlayerEnhance-bho.dll (Feven)
BHO-x32: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\SupTab\SupTab.dll (Thinknice Co. Limited)
BHO-x32: Tube Dimmer - {44ed99e2-16a6-4b89-80d6-5b21cf42e78b} - C:\ProgramData\TubeDimmer\IE\common.dll (Creative Island Media, LLC)
BHO-x32: Savings Wizard BHO - {5682CA62-1A80-40AE-82A0-B67833CE75FF} - C:\Program Files (x86)\Savings Wizard\FrameworkBHO.dll ()
BHO-x32: flash-Enhancer - {5A60B6BB-FA81-4EFA-AB9C-A820E2143736} - C:\Program Files (x86)\AmiExt\flashEnhancer\ie\flashEnhancer.dll ()
BHO-x32: SaltarSmart - {7547af2a-886e-4dd8-82f9-705a0859f72d} - C:\Program Files (x86)\SaltarSmart\SaltarSmartBHO.dll (SaltarSmart)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: ValueApps - {93DBF2BB-A2B3-4683-A92E-57E60751F346} - C:\Program Files (x86)\Conduit\ValueApps\IE\ValueAppsLoader.dll (Conduit Ltd.)
BHO-x32: Wajam - {A7A6995D-6EE1-4FD1-A258-49395D5BF99C} - C:\Program Files (x86)\Wajam\IE\priam_bho.dll (Wajam)
BHO-x32: DealPly Shopping - {ae48ed75-5a56-4c5f-bbce-6f1ac3875f66} - C:\Program Files (x86)\DealPly\DealPlyIE.dll (DealPly)
BHO-x32: WEB.DE MailCheck BHO - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Program Files (x86)\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
BHO-x32: SaltarSmart - {d99a4ec9-00bd-4fe4-85a5-4db018351265} - C:\Program Files (x86)\SaltarSmart\SaltarSmartBHO.dll (SaltarSmart)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Coupon Server BHO - {F791D8AE-47E8-40A5-A913-EB2D2AF29602} - C:\Program Files (x86)\Coupon Server\FrameworkBHO.dll ()
Toolbar: HKLM - WEB.DE MailCheck - {C424171E-592A-415a-9EB1-DFD6D95D3530} - C:\Program Files\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - WEB.DE MailCheck - {C424171E-592A-415a-9EB1-DFD6D95D3530} - C:\Program Files (x86)\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - WEB.DE MailCheck - {C424171E-592A-415A-9EB1-DFD6D95D3530} - C:\Program Files\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
Toolbar: HKCU - No Name - {FA23121F-EE7C-4BD8-8C06-123D087282C5} -  No File
Handler: webde - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: webde - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files (x86)\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
Winsock: Catalog9 01 C:\Windows\SysWOW64\PCProtect.dll [293984] (Objectify Media Inc)
Winsock: Catalog9 02 C:\Windows\SysWOW64\PCProtect.dll [293984] (Objectify Media Inc)
Winsock: Catalog9 03 C:\Windows\SysWOW64\PCProtect.dll [293984] (Objectify Media Inc)
Winsock: Catalog9 04 C:\Windows\SysWOW64\PCProtect.dll [293984] (Objectify Media Inc)
Winsock: Catalog9 16 C:\Windows\SysWOW64\PCProtect.dll [293984] (Objectify Media Inc)
Winsock: Catalog9-x64 01 C:\Windows\system32\PCProtect64.dll [330624] (Objectify Media Inc)
Winsock: Catalog9-x64 02 C:\Windows\system32\PCProtect64.dll [330624] (Objectify Media Inc)
Winsock: Catalog9-x64 03 C:\Windows\system32\PCProtect64.dll [330624] (Objectify Media Inc)
Winsock: Catalog9-x64 04 C:\Windows\system32\PCProtect64.dll [330624] (Objectify Media Inc)
Winsock: Catalog9-x64 16 C:\Windows\system32\PCProtect64.dll [330624] (Objectify Media Inc)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{3248080C-DCFD-4C11-B392-810312A86CBE}: [NameServer]139.7.30.125,139.7.30.126

FireFox:
========
FF ProfilePath: C:\Users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default
FF user.js: detected! => C:\Users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\user.js
FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml
FF DefaultSearchEngine: Web Search
FF SearchEngineOrder.1: Mysearchdial
FF SelectedSearchEngine: Web Search
FF Homepage: hxxp://feed.snapdo.com/?publisher=AdKnowledgeYB&dpid=AdKnowledgeYB&co=DE&userid=b5ab5f3a-1c58-d154-e65d-34092d08df62&searchtype=hp&installDate=16/11/2013
FF Keyword.URL: hxxp://feed.snapdo.com/?publisher=AdKnowledgeYB&dpid=AdKnowledgeYB&co=DE&userid=b5ab5f3a-1c58-d154-e65d-34092d08df62&searchtype=ds&installDate=16/11/2013&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.dpliveupdate.com/DealPlyLive Update;version=3 - C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll (DealPly Technologies Ltd)
FF Plugin-x32: @tools.dpliveupdate.com/DealPlyLive Update;version=9 - C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll (DealPly Technologies Ltd)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.updaterss.com/SaveSenseLive Update;version=3 - C:\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll (SaveSense)
FF Plugin-x32: @tools.updaterss.com/SaveSenseLive Update;version=9 - C:\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll (SaveSense)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll ( )
FF SearchPlugin: C:\Users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\searchplugins\ask-search.xml
FF SearchPlugin: C:\Users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\searchplugins\conduit-search.xml
FF SearchPlugin: C:\Users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\searchplugins\Mysearchdial.xml
FF SearchPlugin: C:\Users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\awesomehp.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\do-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Widget context - C:\Users\ubach\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{140A2D0E-85CC-4ed3-9BA5-8FA35DA7FABA}.xpi [2014-01-15]
FF Extension: MediaPlayerEnhance - C:\Users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\Extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com [2014-02-15]
FF Extension: Plus-HD-2.5 - C:\Users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\Extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com [2014-01-31]
FF Extension: SurFakeePit - C:\Users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\Extensions\eauyu@ouao-.org [2014-02-21]
FF Extension: mysearchdial.com - C:\Users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\Extensions\ffxtlbr@mysearchdial.com [2014-01-21]
FF Extension: savvinugatoyou - C:\Users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\Extensions\k13z.er@wl-ym.com [2014-01-29]
FF Extension: TableeViEwwEer - C:\Users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\Extensions\ofloueowzj@dbbdgiwin.co.uk [2014-02-21]
FF Extension: SavingsBull - C:\Users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\Extensions\SavingsBull@jetpack [2014-02-24]
FF Extension: Tube Dimmer - C:\Users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\Extensions\support@tubedimmerapp.com [2014-01-09]
FF Extension: easytoshhop - C:\Users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\Extensions\yoy6_bgg@fzo-pkghags.edu [2014-01-29]
FF Extension: Savings Wizard - C:\Users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\Extensions\{090AF4A1-CDA6-D91F-096A-378C214EE20C} [2014-01-29]
FF Extension: Coupon Server - C:\Users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\Extensions\{3C2422B0-C421-8DCF-B2EB-70B9B2B71607} [2014-02-17]
FF Extension: SaveSense - C:\Users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\Extensions\{8b337819-d1e8-48d3-8178-168ae8c99c36} [2014-01-18]
FF Extension: DealPly  Shopping - C:\Users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\Extensions\{906000a4-88d9-4d52-b209-7a772970d91f} [2013-11-16]
FF Extension: Value Apps - C:\Users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\Extensions\{94cd2cc3-083f-49ba-a218-4cda4b4829fd} [2014-02-11]
FF Extension: MySearchDial NewTab - C:\Users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\Extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8} [2014-01-21]
FF Extension: WEB.DE MailCheck - C:\Users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\Extensions\toolbar@web.de.xpi [2013-10-06]
FF HKLM-x32\...\Firefox\Extensions: [ext@flashenhancer.com] - C:\Program Files (x86)\AmiExt\flashEnhancer\ff
FF Extension: flash-Enhancer - C:\Program Files (x86)\AmiExt\flashEnhancer\ff [2014-01-29]
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaPlayerV1alpha4241.net] - C:\Program Files (x86)\MediaPlayerV1\MediaPlayerV1alpha4241\ff
FF Extension: Media Player - C:\Program Files (x86)\MediaPlayerV1\MediaPlayerV1alpha4241\ff [2014-02-14]
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewerV1alpha1415.net] - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha1415\ff
FF Extension: Media Viewer - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha1415\ff [2014-02-24]
FF HKCU\...\Firefox\Extensions: [{abdfcd24-f4a1-4248-b9c4-4ee53f915331}] - C:\Program Files (x86)\Re-markit\155.xpi
FF Extension: Re-markit - C:\Program Files (x86)\Re-markit\155.xpi [2014-02-21]

Chrome: 
=======
CHR HomePage: hxxp://feed.snapdo.com/?publisher=AdKnowledgeYB&dpid=AdKnowledgeYB&co=DE&userid=b5ab5f3a-1c58-d154-e65d-34092d08df62&searchtype=hp&installDate=16/11/2013
CHR RestoreOnStartup: "hxxp://feed.snapdo.com/?publisher=AdKnowledgeYB&dpid=AdKnowledgeYB&co=DE&userid=b5ab5f3a-1c58-d154-e65d-34092d08df62&searchtype=hp&installDate=16/11/2013"
CHR DefaultSearchKeyword: search.snapdo.com
CHR DefaultSearchProvider: Web
CHR DefaultSearchURL: hxxp://feed.snapdo.com/?publisher=AdKnowledgeYB&dpid=AdKnowledgeYB&co=DE&userid=b5ab5f3a-1c58-d154-e65d-34092d08df62&searchtype=ds&q={searchTerms}&installDate=16/11/2013
CHR DefaultNewTabURL: 
CHR Extension: (Savings Wizard) - C:\Users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajakpekbmnkgnjbpajgkdhimcbeoocam [2014-02-21]
CHR Extension: (TableeViEwwEer) - C:\Users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\apeienfgkgpkcdnonjlhegmcokdolfdk [2014-02-21]
CHR Extension: (flash-Enhancer) - C:\Users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbealecnakbhfoeeipcnoboempfkbjd [2014-01-29]
CHR Extension: (SaltarSmart) - C:\Users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\chdboodilddefglllfoimeceomkpmkbi [2014-02-01]
CHR Extension: (Re-markit) - C:\Users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcpfhaghaadpjpgocojgnlhjcieeooel [2013-11-18]
CHR Extension: (Coupon Server) - C:\Users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmcecclamecbinmplcolhaljlclhbgah [2014-01-20]
CHR Extension: (savvinugatoyou) - C:\Users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\eepdgobbljalafadnimmnheedphgdbaf [2014-01-29]
CHR Extension: (Media Player) - C:\Users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\eoehdaplkhmiefmjjlfkololafpfhnaj [2014-02-14]
CHR Extension: (Plus-HD-2.5) - C:\Users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd [2014-01-10]
CHR Extension: (Tube Dimmer) - C:\Users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb [2014-01-10]
CHR Extension: (SurFakeePit) - C:\Users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\inhjbehnbdinhcgllgihhmicfbjahhpn [2014-02-21]
CHR Extension: (Media Viewer) - C:\Users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfbhpohpeclegjggjgdijhhbkfenadbg [2014-02-24]
CHR Extension: (SaveSense) - C:\Users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\khcceooakamlehbimaepcldnnlnkcmfk [2014-01-18]
CHR Extension: (MediaPlayerEnhance) - C:\Users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo [2014-02-15]
CHR Extension: (DealPly Germany) - C:\Users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\mphpbdjcljebbcnfopfngmfdackbbdgf [2013-11-18]
CHR Extension: (SavingsBull) - C:\Users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngaeinfoeljecnggcbonnohnjpepenmb [2014-02-24]
CHR Extension: (Google Wallet) - C:\Users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-18]
CHR Extension: (Widget context) - C:\Users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\ombmmloebnfnpehgjnmkcgoegfachobp [2014-01-15]
CHR Extension: (MySearchDial) - C:\Users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff [2014-01-21]
CHR Extension: (easytoshhop) - C:\ProgramData\goknbmljcekledjmeinnfjghgjhkglff [2014-01-29]
CHR HKCU\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\ubach\AppData\Local\mysearchdial-speeddial.crx [2014-01-21]
CHR HKLM-x32\...\Chrome\Extension: [cgbealecnakbhfoeeipcnoboempfkbjd] - C:\Program Files (x86)\AmiExt\flashEnhancer\ch\flashEnhancer.crx [2014-01-12]
CHR HKLM-x32\...\Chrome\Extension: [chdboodilddefglllfoimeceomkpmkbi] - C:\Program Files (x86)\SaltarSmart\chdboodilddefglllfoimeceomkpmkbi.crx [2014-02-01]
CHR HKLM-x32\...\Chrome\Extension: [jfbhpohpeclegjggjgdijhhbkfenadbg] - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha1415\ch\MediaViewerV1alpha1415.crx [2014-02-23]
CHR HKLM-x32\...\Chrome\Extension: [mphpbdjcljebbcnfopfngmfdackbbdgf] - C:\Program Files (x86)\DealPly\DealPly.crx [2013-11-16]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-14] (Avira Operations GmbH & Co. KG)
S2 dealplylive; C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe [148000 2013-11-16] (DealPly Technologies Ltd)
S3 dealplylivem; C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe [148000 2013-11-16] (DealPly Technologies Ltd)
S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227936 2013-11-09] (WildTangent)
R2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe [508016 2014-01-14] (Cherished Technololgy LIMITED)
R2 InternetUpdater; C:\ProgramData\InternetUpdater\InternetUpdaterService.exe [40448 2013-12-06] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-08] (Intel Corporation)
R2 Level Quality Watcher; C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher64.exe [710976 2014-01-27] ()
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
R2 MgAssistService; C:\Program Files (x86)\Mobogenie\MgAssist.exe [63168 2014-01-28] ()
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256536 2012-01-05] (NTI Corporation)
R3 PCProtect; C:\Program Files (x86)\Web Protect\PCProtect.exe [1265608 2014-01-08] (Objectify Media Inc)
S2 ProtectMonitor; C:\monitorsvc.exe [34244 2014-02-13] ()
R2 RemoteEngineService; C:\Program Files (x86)\VuuPC\remoteengine.exe [2967568 2014-02-10] (ClickMeIn Limited)
S2 savesenselive; C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [146920 2014-01-18] (SaveSense)
S3 savesenselivem; C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [146920 2014-01-18] (SaveSense)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
S2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)
R2 Update SaltarSmart; C:\Program Files (x86)\SaltarSmart\updateSaltarSmart.exe [111904 2014-02-25] ()
R2 Util SaltarSmart; C:\Program Files (x86)\SaltarSmart\bin\utilSaltarSmart.exe [111904 2014-02-25] ()
R2 VuuPCConnectivity; C:\Program Files (x86)\VuuPC\Connectivity.exe [4747280 2014-02-10] (ClickMeIn Limited)
R2 WajamUpdaterV3; C:\Program Files (x86)\Wajam\Updater\WajamUpdaterV3.exe [114176 2013-11-11] (Wajam)
R2 wltrysvc; C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\bcmwltry.exe [5824512 2012-05-25] (Broadcom Corporation)
R2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [499856 2014-01-02] (Cherished Technololgy LIMITED)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2014-02-14] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2014-02-14] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-02-14] (Avira Operations GmbH & Co. KG)
S3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [163368 2012-03-21] (Broadcom Corporation.)
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [239104 2013-01-30] (Huawei Technologies Co., Ltd.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-27 18:45 - 2014-02-27 18:56 - 00000000 ____D () C:\FRST
2014-02-25 07:27 - 2014-02-25 07:27 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-02-24 23:12 - 2014-02-24 23:12 - 00000000 ____D () C:\Users\ubach\AppData\Roaming\Avira
2014-02-24 23:10 - 2014-02-24 23:10 - 00002070 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2014-02-24 23:10 - 2014-02-24 23:10 - 00000000 ____D () C:\ProgramData\Avira
2014-02-24 23:10 - 2014-02-24 23:10 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-02-24 23:10 - 2014-02-14 11:00 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-02-24 23:10 - 2014-02-14 11:00 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-02-24 23:10 - 2014-02-14 11:00 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-02-24 23:06 - 2014-02-27 18:50 - 00160428 _____ () C:\Windows\WindowsUpdate.log
2014-02-24 23:02 - 2014-02-27 18:32 - 00000224 _____ () C:\Windows\setupact.log
2014-02-24 23:02 - 2014-02-24 23:02 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-24 23:01 - 2014-02-26 03:17 - 00101456 _____ () C:\Windows\PFRO.log
2014-02-24 22:56 - 2014-02-24 22:54 - 137004504 _____ () C:\Users\ubach\Desktop\avira_free_antivirus1403_de.exe
2014-02-24 22:12 - 2014-02-24 22:12 - 00001113 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-24 22:12 - 2014-02-24 22:12 - 00000000 ____D () C:\Users\ubach\AppData\Roaming\Malwarebytes
2014-02-24 22:12 - 2014-02-24 22:12 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-24 22:12 - 2014-02-24 22:12 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-24 22:12 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-24 22:11 - 2014-02-21 10:02 - 00000918 _____ () C:\Windows\system32\Drivers\etc\hosts.20140224-221156.backup
2014-02-24 22:02 - 2014-02-24 23:04 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-02-24 22:02 - 2014-02-24 23:04 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-02-24 22:02 - 2014-02-24 22:02 - 00001383 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-02-24 22:02 - 2014-02-24 22:02 - 00000656 _____ () C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job
2014-02-24 22:02 - 2014-02-24 22:02 - 00000628 _____ () C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job
2014-02-24 22:02 - 2014-02-24 22:02 - 00000458 _____ () C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job
2014-02-24 22:02 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2014-02-24 22:01 - 2014-02-24 21:57 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\ubach\Desktop\spybot-2.2.25.exe
2014-02-24 22:01 - 2014-02-24 21:56 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\ubach\Desktop\mbam-setup-1.75.0.1300.exe
2014-02-24 20:38 - 2014-02-24 20:38 - 03645064 _____ (Piriform Ltd) C:\Users\ubach\Downloads\ccsetup410_slim(1).exe
2014-02-24 20:37 - 2014-02-24 20:37 - 03645064 _____ (Piriform Ltd) C:\Users\ubach\Downloads\ccsetup410_slim.exe
2014-02-24 20:36 - 2014-02-24 20:36 - 00000000 ____D () C:\Program Files (x86)\SurFakeePit
2014-02-24 20:35 - 2014-02-24 21:54 - 00000000 ____D () C:\AdwCleaner
2014-02-24 20:35 - 2014-02-24 20:35 - 01241888 _____ () C:\Users\ubach\Downloads\adwcleaner_3.0.1.9.exe
2014-02-24 20:21 - 2014-02-24 20:21 - 00381856 _____ () C:\Users\ubach\Downloads\Setup(41).exe
2014-02-24 20:15 - 2014-02-24 20:16 - 00295736 _____ (Setuprocess) C:\Users\ubach\Downloads\Setup(40).exe
2014-02-24 20:04 - 2014-02-24 20:04 - 00381864 _____ () C:\Users\ubach\Downloads\Setup(39).exe
2014-02-24 18:48 - 2014-02-24 18:48 - 00382576 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 866828.crdownload
2014-02-24 10:21 - 2014-02-24 10:21 - 17858952 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-02-24 10:11 - 2014-02-24 10:11 - 04960768 _____ (Systweak Inc ) C:\Users\ubach\Downloads\regclean_my582531.exe
2014-02-24 10:04 - 2014-02-24 10:04 - 00000000 ____D () C:\Program Files (x86)\SavingsBull
2014-02-24 10:04 - 2014-02-24 10:04 - 00000000 ____D () C:\Program Files (x86)\MediaViewerV1
2014-02-24 10:03 - 2014-02-27 18:33 - 00003370 _____ () C:\Windows\System32\Tasks\BackgroundContainer Startup Task
2014-02-22 12:54 - 2014-02-22 12:54 - 00000000 _____ () C:\Windows\SysWOW64\shoF22B.tmp
2014-02-21 01:42 - 2014-02-24 23:18 - 00000000 ____D () C:\ProgramData\TableeViEwwEer
2014-02-21 01:42 - 2014-02-24 20:36 - 00000000 ____D () C:\ProgramData\SurFakeePit
2014-02-21 01:42 - 2014-02-21 01:42 - 00000000 ____D () C:\Users\ubach\AppData\Local\Packages
2014-02-21 01:42 - 2014-02-21 01:42 - 00000000 ____D () C:\ProgramData\apeienfgkgpkcdnonjlhegmcokdolfdk
2014-02-21 01:33 - 2014-02-21 01:32 - 02163984 _____ () C:\Users\ubach\Downloads\PCPerformerSetup(5).exe
2014-02-21 01:30 - 2014-02-21 01:31 - 00371616 _____ () C:\Users\ubach\Downloads\Setup(38).exe
2014-02-21 01:25 - 2014-02-21 01:25 - 02163984 _____ () C:\Users\ubach\Downloads\PCPerformerSetup(4).exe
2014-02-21 01:07 - 2014-02-21 01:07 - 00372224 _____ () C:\Users\ubach\Downloads\Java(5).exe
2014-02-21 01:03 - 2014-02-27 18:34 - 00000384 _____ () C:\Windows\Tasks\Re-markit Update.job
2014-02-21 01:03 - 2014-02-27 18:33 - 00000370 _____ () C:\Windows\Tasks\Re-markit_wd.job
2014-02-21 01:03 - 2014-02-21 01:03 - 00003032 _____ () C:\Windows\System32\Tasks\Re-markit Update
2014-02-21 01:03 - 2014-02-21 01:03 - 00002958 _____ () C:\Windows\System32\Tasks\Re-markit_wd
2014-02-21 01:02 - 2014-02-25 22:42 - 00000000 ____D () C:\Program Files (x86)\Re-markit
2014-02-20 12:45 - 2014-02-20 12:45 - 00320416 _____ () C:\Users\ubach\Downloads\Setup(37).exe
2014-02-20 12:39 - 2014-02-20 12:39 - 00341920 _____ () C:\Users\ubach\Downloads\Setup(36).exe
2014-02-20 12:38 - 2014-02-20 12:38 - 00341920 _____ () C:\Users\ubach\Downloads\Setup(35).exe
2014-02-19 12:52 - 2014-02-19 12:52 - 02163984 _____ () C:\Users\ubach\Downloads\PCPerformerSetup(3).exe
2014-02-18 11:52 - 2014-02-18 11:53 - 00196448 _____ () C:\Users\ubach\Downloads\setup(34).exe
2014-02-17 10:17 - 2014-02-17 10:17 - 00321024 _____ () C:\Users\ubach\Downloads\Java(4).exe
2014-02-15 13:29 - 2014-02-15 13:29 - 00003976 _____ () C:\Windows\SysWOW64\PCProtect.ini
2014-02-15 13:29 - 2014-02-15 13:29 - 00002184 _____ () C:\Windows\SysWOW64\PCProtectOff.ini
2014-02-15 13:29 - 2014-02-15 13:29 - 00002184 _____ () C:\Windows\system32\PCProtectOff.ini
2014-02-15 13:28 - 2014-01-08 07:08 - 00330624 _____ (Objectify Media Inc) C:\Windows\system32\PCProtect64.dll
2014-02-15 13:28 - 2014-01-08 07:08 - 00293984 _____ (Objectify Media Inc) C:\Windows\SysWOW64\PCProtect.dll
2014-02-15 13:26 - 2014-02-27 18:34 - 00001606 _____ () C:\Windows\Tasks\MediaPlayerEnhance-updater.job
2014-02-15 13:26 - 2014-02-27 18:34 - 00001460 _____ () C:\Windows\Tasks\MediaPlayerEnhance-enabler.job
2014-02-15 13:26 - 2014-02-27 18:33 - 00002406 _____ () C:\Windows\Tasks\MediaPlayerEnhance-firefoxinstaller.job
2014-02-15 13:26 - 2014-02-27 18:33 - 00001562 _____ () C:\Windows\Tasks\MediaPlayerEnhance-codedownloader.job
2014-02-15 13:26 - 2014-02-15 13:26 - 00004636 _____ () C:\Windows\System32\Tasks\MediaPlayerEnhance-updater
2014-02-15 13:26 - 2014-02-15 13:26 - 00004592 _____ () C:\Windows\System32\Tasks\MediaPlayerEnhance-codedownloader
2014-02-15 13:26 - 2014-02-15 13:26 - 00004490 _____ () C:\Windows\System32\Tasks\MediaPlayerEnhance-enabler
2014-02-15 13:26 - 2014-02-15 13:26 - 00001117 _____ () C:\Users\Public\Desktop\NewPlayer.lnk
2014-02-15 13:25 - 2014-02-27 18:33 - 00003120 _____ () C:\Windows\Tasks\MediaPlayerEnhance-chromeinstaller.job
2014-02-15 13:25 - 2014-02-15 13:26 - 00000000 ____D () C:\Program Files (x86)\MediaPlayerEnhance
2014-02-15 13:24 - 2014-02-15 13:30 - 00000000 ____D () C:\Program Files (x86)\Web Protect
2014-02-15 13:21 - 2014-02-15 13:21 - 02151040 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 261312.crdownload
2014-02-15 13:19 - 2014-02-15 13:19 - 00330320 _____ () C:\Users\ubach\Downloads\Player Setup (6).exe
2014-02-15 13:18 - 2014-02-15 13:19 - 00330320 _____ () C:\Users\ubach\Downloads\Player Setup (5).exe
2014-02-15 13:17 - 2014-02-15 13:18 - 00730008 _____ (Reimage®) C:\Users\ubach\Downloads\ReimageRepair (1).exe
2014-02-15 13:04 - 2014-02-15 13:05 - 04960768 _____ (Systweak Inc ) C:\Users\ubach\Downloads\regclean_my366151.exe
2014-02-14 11:18 - 2014-02-14 11:18 - 00861600 _____ (AirInstaller ) C:\Users\ubach\Downloads\setup(33).exe
2014-02-14 11:18 - 2014-02-14 11:18 - 00861600 _____ (AirInstaller ) C:\Users\ubach\Downloads\setup(32).exe
2014-02-14 08:31 - 2014-02-14 08:31 - 00000000 ____D () C:\Program Files (x86)\MediaPlayerV1
2014-02-13 23:04 - 2014-02-13 23:04 - 00333392 _____ () C:\Users\ubach\Downloads\Player Setup (3).exe
2014-02-13 22:26 - 2014-02-13 22:26 - 00196448 _____ () C:\Users\ubach\Downloads\setup(31).exe
2014-02-13 22:24 - 2014-02-13 22:25 - 00196448 _____ () C:\Users\ubach\Downloads\setup(30).exe
2014-02-13 15:12 - 2014-02-13 15:12 - 00487517 _____ () C:\monitor.exe
2014-02-13 14:43 - 2014-02-13 14:43 - 00034244 _____ () C:\monitorsvc.exe
2014-02-12 15:34 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-12 15:34 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-12 15:33 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-12 15:33 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-12 15:33 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-12 15:33 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-12 15:33 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-12 15:33 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-12 15:33 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-12 15:33 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-12 15:33 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-12 15:33 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-12 15:33 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-12 15:33 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-12 15:33 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-12 15:33 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-12 15:33 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-12 15:33 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-12 15:33 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-12 15:33 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-12 15:33 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-12 15:33 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-12 15:33 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-12 15:33 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-12 15:33 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-12 15:33 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-12 15:33 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-12 15:33 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-12 15:33 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-12 15:33 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-12 15:33 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-12 15:33 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-12 15:33 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-12 15:33 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-12 15:33 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-12 15:33 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-12 15:33 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-12 15:33 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-12 15:33 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-12 15:33 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-12 15:33 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-12 14:08 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-12 14:08 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-12 14:08 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 14:08 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 14:08 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-12 14:08 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-12 14:08 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-12 14:08 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-12 14:08 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 14:08 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-12 14:08 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-12 14:08 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-12 14:08 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-12 14:08 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 14:08 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-12 14:08 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-12 14:08 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-12 14:08 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-12 14:08 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-12 14:08 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-12 14:08 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-12 14:08 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-12 14:08 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-12 14:08 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-12 14:06 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-12 14:06 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 14:06 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-12 14:06 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-12 12:03 - 2014-02-12 12:04 - 00500792 _____ () C:\Users\ubach\Downloads\Player_Setup(15).exe
2014-02-12 11:59 - 2014-02-12 11:59 - 00500792 _____ () C:\Users\ubach\Downloads\Player_Setup(14).exe
2014-02-12 11:57 - 2014-02-12 11:57 - 00500792 _____ () C:\Users\ubach\Downloads\Player_Setup(13).exe
2014-02-12 11:56 - 2014-02-12 11:56 - 00500792 _____ () C:\Users\ubach\Downloads\Player_Setup(12).exe
2014-02-12 11:53 - 2014-02-12 11:54 - 00500792 _____ () C:\Users\ubach\Downloads\Player_Setup(11).exe
2014-02-12 11:49 - 2014-02-12 11:49 - 00500792 _____ () C:\Users\ubach\Downloads\Player_Setup(10).exe
2014-02-12 11:47 - 2014-02-12 11:47 - 00500792 _____ () C:\Users\ubach\Downloads\Player_Setup(9).exe
2014-02-12 11:47 - 2014-02-12 11:47 - 00500792 _____ () C:\Users\ubach\Downloads\Player_Setup(8).exe
2014-02-12 11:42 - 2014-02-12 11:42 - 00500792 _____ () C:\Users\ubach\Downloads\Player_Setup(7).exe
2014-02-12 11:30 - 2014-02-12 11:30 - 00500792 _____ () C:\Users\ubach\Downloads\Player_Setup(6).exe
2014-02-12 10:51 - 2014-02-12 10:51 - 00500816 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 303727.crdownload
2014-02-12 09:51 - 2014-02-12 09:51 - 00500792 _____ () C:\Users\ubach\Downloads\Player_Setup(5).exe
2014-02-12 09:51 - 2014-02-12 09:51 - 00500792 _____ () C:\Users\ubach\Downloads\Player_Setup(4).exe
2014-02-12 09:51 - 2014-02-12 09:51 - 00000000 _____ () C:\Windows\SysWOW64\tmpresp.tmp
2014-02-11 21:52 - 2014-02-11 21:52 - 00500792 _____ () C:\Users\ubach\Downloads\Player_Setup(3).exe
2014-02-11 21:46 - 2014-02-11 21:46 - 00500792 _____ () C:\Users\ubach\Downloads\Player_Setup(2).exe
2014-02-11 21:24 - 2014-02-12 10:39 - 00000000 ____D () C:\Users\ubach\AppData\Roaming\sweet-page
2014-02-11 21:19 - 2014-02-11 21:19 - 00500816 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 869101.crdownload
2014-02-11 21:19 - 2014-02-11 21:19 - 00500816 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 774449.crdownload
2014-02-11 21:19 - 2014-02-11 21:19 - 00500816 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 171637.crdownload
2014-02-11 21:18 - 2014-02-11 21:18 - 00500816 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 323547.crdownload
2014-02-11 21:17 - 2014-02-11 21:17 - 00500816 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 782719.crdownload
2014-02-11 21:00 - 2014-02-11 21:00 - 00500816 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 712411.crdownload
2014-02-11 20:01 - 2014-02-11 20:01 - 00321104 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 528439.crdownload
2014-02-11 19:56 - 2014-02-11 19:56 - 00321104 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 977967.crdownload
2014-02-11 19:56 - 2014-02-11 19:56 - 00321104 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 625337.crdownload
2014-02-11 19:56 - 2014-02-11 19:56 - 00321104 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 465617.crdownload
2014-02-11 19:51 - 2014-02-11 19:51 - 00500816 _____ () C:\Users\ubach\Downloads\Player Setup (2).exe
2014-02-11 19:30 - 2014-02-11 19:31 - 00321104 _____ () C:\Users\ubach\Downloads\Player Setup.exe
2014-02-11 19:30 - 2014-02-11 19:31 - 00321104 _____ () C:\Users\ubach\Downloads\Player Setup (1).exe
2014-02-11 09:38 - 2014-02-11 09:38 - 00001935 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-02-09 13:57 - 2014-02-09 13:57 - 00320504 _____ () C:\Users\ubach\Downloads\JFileManager (12).exe
2014-02-09 13:56 - 2014-02-09 13:57 - 00320504 _____ () C:\Users\ubach\Downloads\JFileManager (11).exe
2014-02-09 13:56 - 2014-02-09 13:56 - 00320504 _____ () C:\Users\ubach\Downloads\JFileManager (8).exe
2014-02-09 13:56 - 2014-02-09 13:56 - 00320504 _____ () C:\Users\ubach\Downloads\JFileManager (7).exe
2014-02-08 12:20 - 2014-02-08 12:20 - 04960768 _____ (Systweak Inc ) C:\Users\ubach\Downloads\regclean_my439491.exe
2014-02-06 20:22 - 2014-02-06 20:22 - 02138896 _____ () C:\Users\ubach\Downloads\PCPerformerSetup(2).exe
2014-02-06 20:17 - 2014-02-06 20:17 - 02138896 _____ () C:\Users\ubach\Downloads\PCPerformerSetup.exe
2014-02-06 20:17 - 2014-02-06 20:17 - 02138896 _____ () C:\Users\ubach\Downloads\PCPerformerSetup(1).exe
2014-02-06 19:52 - 2014-02-06 19:52 - 00847344 _____ (Google Inc.) C:\Users\ubach\Downloads\ChromeSetup.exe
2014-02-06 18:56 - 2014-02-06 18:56 - 00320408 _____ () C:\Users\ubach\Downloads\Setup(29).exe
2014-02-06 18:56 - 2014-02-06 18:56 - 00320408 _____ () C:\Users\ubach\Downloads\Setup(28).exe
2014-02-06 18:52 - 2014-02-06 18:52 - 00320408 _____ () C:\Users\ubach\Downloads\Setup(27).exe
2014-02-06 18:51 - 2014-02-06 18:51 - 00320408 _____ () C:\Users\ubach\Downloads\Setup(26).exe
2014-02-06 10:30 - 2014-02-06 10:40 - 00321104 _____ () C:\Users\ubach\Downloads\Player Setup (4).exe
2014-02-05 12:04 - 2014-02-05 12:04 - 00320512 _____ () C:\Users\ubach\Downloads\Setup(25).exe
2014-02-05 11:46 - 2014-02-05 11:46 - 00319904 _____ () C:\Users\ubach\Downloads\Setup(24).exe
2014-02-05 11:45 - 2014-02-05 11:45 - 00319904 _____ () C:\Users\ubach\Downloads\Setup(23).exe
2014-02-03 21:20 - 2014-02-03 21:20 - 00723160 _____ (Reimage®) C:\Users\ubach\Downloads\ReimageRepair.exe
2014-02-03 21:20 - 2014-02-03 21:20 - 00723160 _____ (Reimage®) C:\Users\ubach\Downloads\ReimageRepair(1).exe
2014-02-03 04:11 - 2014-02-03 04:11 - 00165736 _____ () C:\Users\ubach\Downloads\FLVPlayerSetup-c0AHULu.exe
2014-02-03 03:10 - 2014-02-03 03:10 - 00165736 _____ () C:\Users\ubach\Downloads\FLVPlayerSetup-8iFMI1w.exe
2014-02-03 03:02 - 2014-02-03 03:02 - 02125952 _____ () C:\Users\ubach\Downloads\VideoPerformerSetup(2).exe
2014-02-03 02:50 - 2014-02-03 02:50 - 00138096 _____ () C:\Users\ubach\Downloads\setup(22).exe
2014-02-03 02:48 - 2014-02-03 02:48 - 00138096 _____ () C:\Users\ubach\Downloads\setup(21).exe
2014-02-03 02:47 - 2014-02-03 02:47 - 00319896 _____ () C:\Users\ubach\Downloads\Setup(20).exe
2014-02-02 22:52 - 2014-02-02 22:52 - 00320640 _____ () C:\Users\ubach\Downloads\Player.exe
2014-02-02 22:52 - 2014-02-02 22:52 - 00320640 _____ () C:\Users\ubach\Downloads\Player (1).exe
2014-02-02 22:32 - 2014-02-02 22:32 - 00319904 _____ () C:\Users\ubach\Downloads\JFileManager (4).exe
2014-02-02 22:32 - 2014-02-02 22:32 - 00319904 _____ () C:\Users\ubach\Downloads\JFileManager (3).exe
2014-02-02 22:32 - 2014-02-02 22:32 - 00319904 _____ () C:\Users\ubach\Downloads\JFileManager (2).exe
2014-02-02 22:31 - 2014-02-02 22:31 - 00319936 _____ () C:\Users\ubach\Downloads\Setup (12).exe
2014-01-31 11:42 - 2014-01-31 11:42 - 00319400 _____ () C:\Users\ubach\Downloads\JFileManager (1).exe
2014-01-31 11:41 - 2014-01-31 11:41 - 00319400 _____ () C:\Users\ubach\Downloads\JFileManager.exe
2014-01-31 00:51 - 2014-01-31 00:51 - 00000000 ____D () C:\Program Files\Level Quality Watcher
2014-01-30 01:38 - 2014-01-30 01:38 - 05095632 _____ (Systweak Inc ) C:\Users\ubach\Downloads\rcpsetup_saymg_saymg.exe
2014-01-30 01:35 - 2014-01-30 01:35 - 00321112 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 311484.crdownload
2014-01-30 01:32 - 2014-01-30 01:32 - 00321112 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 943889.crdownload
2014-01-30 01:26 - 2014-01-30 01:26 - 00138608 _____ () C:\Users\ubach\Downloads\setup(19).exe
2014-01-29 10:06 - 2014-02-25 19:49 - 00000000 ____D () C:\ProgramData\savvinugatoyou
2014-01-29 10:06 - 2014-02-25 19:49 - 00000000 ____D () C:\ProgramData\easytoshhop
2014-01-29 10:06 - 2014-02-24 20:36 - 00000000 ____D () C:\ProgramData\5ba49149aec33f1d
2014-01-29 10:06 - 2014-01-29 10:06 - 00000000 ____D () C:\ProgramData\goknbmljcekledjmeinnfjghgjhkglff
2014-01-29 03:56 - 2014-01-29 03:56 - 00000000 ____D () C:\Program Files (x86)\Lightspark 0.5.3-git
2014-01-29 03:55 - 2014-01-29 03:55 - 00000000 __SHD () C:\Windows\SysWOW64\AI_RecycleBin
2014-01-29 03:55 - 2014-01-29 03:55 - 00000000 ____D () C:\Users\ubach\Documents\RegistryDr
2014-01-29 03:55 - 2014-01-29 03:55 - 00000000 ____D () C:\Program Files (x86)\Registry Dr
2014-01-29 03:55 - 2014-01-29 03:55 - 00000000 ____D () C:\Program Files (x86)\AmiExt
2014-01-29 03:54 - 2014-01-29 03:55 - 00000000 ____D () C:\Users\ubach\AppData\Local\Savings Wizard
2014-01-29 03:54 - 2014-01-29 03:54 - 00000000 ____D () C:\Program Files (x86)\Savings Wizard
2014-01-28 22:30 - 2014-01-28 22:30 - 05095824 _____ (Systweak Inc ) C:\Users\ubach\Downloads\rcpafterdownloadcm_ad_13129_cm2.exe
2014-01-28 02:50 - 2014-01-28 02:50 - 00165736 _____ () C:\Users\ubach\Downloads\FLVPlayerSetup-aCVD4Hk.exe
2014-01-28 02:45 - 2014-01-28 02:45 - 00000000 ____D () C:\ProgramData\IePluginService
2014-01-28 02:45 - 2014-01-28 02:45 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-01-28 02:43 - 2014-01-28 02:43 - 00320032 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 876049.crdownload
2014-01-28 02:43 - 2014-01-28 02:43 - 00320032 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 302666.crdownload
2014-01-28 02:41 - 2014-01-28 02:41 - 00318880 _____ () C:\Users\ubach\Downloads\Java (2).exe
2014-01-28 02:40 - 2014-01-28 02:40 - 00318880 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 779816.crdownload

==================== One Month Modified Files and Folders =======

2014-02-27 18:56 - 2014-02-27 18:45 - 00000000 ____D () C:\FRST
2014-02-27 18:54 - 2013-11-16 13:49 - 00000904 _____ () C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job
2014-02-27 18:50 - 2014-02-24 23:06 - 00160428 _____ () C:\Windows\WindowsUpdate.log
2014-02-27 18:50 - 2014-01-18 13:45 - 00000930 _____ () C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job
2014-02-27 18:50 - 2012-11-15 11:11 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-27 18:46 - 2014-01-18 13:45 - 00000292 _____ () C:\Windows\Tasks\SaveSense.job
2014-02-27 18:46 - 2012-05-25 20:43 - 00700118 _____ () C:\Windows\system32\perfh007.dat
2014-02-27 18:46 - 2012-05-25 20:43 - 00149968 _____ () C:\Windows\system32\perfc007.dat
2014-02-27 18:46 - 2009-07-14 06:13 - 01644046 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-27 18:45 - 2012-05-25 11:06 - 01596508 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-27 18:42 - 2009-07-14 05:45 - 00016752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-27 18:42 - 2009-07-14 05:45 - 00016752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-27 18:35 - 2014-01-10 12:27 - 00000000 ____D () C:\Users\ubach\AppData\Roaming\newnext.me
2014-02-27 18:34 - 2014-02-21 01:03 - 00000384 _____ () C:\Windows\Tasks\Re-markit Update.job
2014-02-27 18:34 - 2014-02-15 13:26 - 00001606 _____ () C:\Windows\Tasks\MediaPlayerEnhance-updater.job
2014-02-27 18:34 - 2014-02-15 13:26 - 00001460 _____ () C:\Windows\Tasks\MediaPlayerEnhance-enabler.job
2014-02-27 18:34 - 2013-11-16 13:53 - 00000000 ____D () C:\Program Files (x86)\SaltarSmart
2014-02-27 18:34 - 2013-11-16 13:50 - 00001830 _____ () C:\Windows\Tasks\Plus-HD-2.5-firefoxinstaller.job
2014-02-27 18:34 - 2013-11-16 13:18 - 00001814 _____ () C:\Windows\Tasks\Feven 1.5-firefoxinstaller.job
2014-02-27 18:34 - 2013-11-16 13:18 - 00001284 _____ () C:\Windows\Tasks\Feven 1.5-updater.job
2014-02-27 18:33 - 2014-02-24 10:03 - 00003370 _____ () C:\Windows\System32\Tasks\BackgroundContainer Startup Task
2014-02-27 18:33 - 2014-02-21 01:03 - 00000370 _____ () C:\Windows\Tasks\Re-markit_wd.job
2014-02-27 18:33 - 2014-02-15 13:26 - 00002406 _____ () C:\Windows\Tasks\MediaPlayerEnhance-firefoxinstaller.job
2014-02-27 18:33 - 2014-02-15 13:26 - 00001562 _____ () C:\Windows\Tasks\MediaPlayerEnhance-codedownloader.job
2014-02-27 18:33 - 2014-02-15 13:25 - 00003120 _____ () C:\Windows\Tasks\MediaPlayerEnhance-chromeinstaller.job
2014-02-27 18:33 - 2014-01-21 09:04 - 00000000 ____D () C:\Program Files (x86)\VuuPC
2014-02-27 18:33 - 2014-01-18 13:45 - 00000926 _____ () C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job
2014-02-27 18:33 - 2014-01-08 23:33 - 00000292 _____ () C:\Windows\Tasks\AffiliatedUpdate.job
2014-02-27 18:33 - 2013-11-16 13:51 - 00001296 _____ () C:\Windows\Tasks\Plus-HD-2.5-updater.job
2014-02-27 18:33 - 2013-11-16 13:51 - 00001198 _____ () C:\Windows\Tasks\Plus-HD-2.5-codedownloader.job
2014-02-27 18:33 - 2013-11-16 13:51 - 00001098 _____ () C:\Windows\Tasks\Plus-HD-2.5-enabler.job
2014-02-27 18:33 - 2013-11-16 13:50 - 00001906 _____ () C:\Windows\Tasks\Plus-HD-2.5-chromeinstaller.job
2014-02-27 18:33 - 2013-11-16 13:49 - 00000900 _____ () C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job
2014-02-27 18:33 - 2013-11-16 13:18 - 00001890 _____ () C:\Windows\Tasks\Feven 1.5-chromeinstaller.job
2014-02-27 18:33 - 2013-11-16 13:18 - 00001186 _____ () C:\Windows\Tasks\Feven 1.5-codedownloader.job
2014-02-27 18:33 - 2013-11-16 13:18 - 00001086 _____ () C:\Windows\Tasks\Feven 1.5-enabler.job
2014-02-27 18:33 - 2012-11-15 11:11 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-27 18:32 - 2014-02-24 23:02 - 00000224 _____ () C:\Windows\setupact.log
2014-02-27 18:32 - 2014-01-09 02:36 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-02-27 18:32 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-26 23:21 - 2012-03-26 08:06 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-26 23:04 - 2014-01-21 09:04 - 00000292 _____ () C:\Windows\Tasks\MySearchDial.job
2014-02-26 23:01 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2014-02-26 20:11 - 2014-01-20 20:13 - 00000344 _____ () C:\Windows\Tasks\bench-sys.job
2014-02-26 19:55 - 2014-01-20 20:13 - 00000344 _____ () C:\Windows\Tasks\bench-S-1-5-21-847584245-1588873724-1552598581-1000.job
2014-02-26 09:38 - 2014-01-09 03:33 - 00000185 _____ () C:\Users\ubach\AppData\Roaming\WB.CFG
2014-02-26 03:17 - 2014-02-24 23:01 - 00101456 _____ () C:\Windows\PFRO.log
2014-02-25 23:45 - 2013-08-17 13:50 - 00000000 ____D () C:\Users\ubach\AppData\Roaming\Systweak
2014-02-25 22:42 - 2014-02-21 01:02 - 00000000 ____D () C:\Program Files (x86)\Re-markit
2014-02-25 21:27 - 2013-11-16 13:19 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro
2014-02-25 21:26 - 2012-08-11 12:08 - 00000000 ___RD () C:\Users\ubach\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-25 19:49 - 2014-01-29 10:06 - 00000000 ____D () C:\ProgramData\savvinugatoyou
2014-02-25 19:49 - 2014-01-29 10:06 - 00000000 ____D () C:\ProgramData\easytoshhop
2014-02-25 07:27 - 2014-02-25 07:27 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-02-25 07:27 - 2014-01-20 20:13 - 00003240 _____ () C:\Windows\System32\Tasks\bench-sys
2014-02-25 07:27 - 2014-01-20 20:13 - 00003218 _____ () C:\Windows\System32\Tasks\bench-S-1-5-21-847584245-1588873724-1552598581-1000
2014-02-25 07:27 - 2014-01-20 20:13 - 00000000 ____D () C:\Users\ubach\AppData\Local\Coupon Server
2014-02-25 07:27 - 2014-01-20 20:13 - 00000000 ____D () C:\Program Files (x86)\Coupon Server
2014-02-25 07:27 - 2014-01-20 20:13 - 00000000 ____D () C:\Program Files (x86)\Bench
2014-02-24 23:18 - 2014-02-21 01:42 - 00000000 ____D () C:\ProgramData\TableeViEwwEer
2014-02-24 23:18 - 2014-01-08 23:35 - 00000000 ____D () C:\Users\ubach\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLV Player
2014-02-24 23:18 - 2014-01-08 23:35 - 00000000 ____D () C:\Program Files (x86)\FLV Player
2014-02-24 23:18 - 2013-11-16 13:18 - 00000000 ____D () C:\Program Files (x86)\Feven 1.5
2014-02-24 23:12 - 2014-02-24 23:12 - 00000000 ____D () C:\Users\ubach\AppData\Roaming\Avira
2014-02-24 23:10 - 2014-02-24 23:10 - 00002070 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2014-02-24 23:10 - 2014-02-24 23:10 - 00000000 ____D () C:\ProgramData\Avira
2014-02-24 23:10 - 2014-02-24 23:10 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-02-24 23:04 - 2014-02-24 22:02 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-02-24 23:04 - 2014-02-24 22:02 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-02-24 23:02 - 2014-02-24 23:02 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-24 23:01 - 2012-11-15 11:11 - 00000000 ____D () C:\Program Files\Google
2014-02-24 23:01 - 2012-11-15 11:11 - 00000000 ____D () C:\Program Files (x86)\Google
2014-02-24 22:54 - 2014-02-24 22:56 - 137004504 _____ () C:\Users\ubach\Desktop\avira_free_antivirus1403_de.exe
2014-02-24 22:12 - 2014-02-24 22:12 - 00001113 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-24 22:12 - 2014-02-24 22:12 - 00000000 ____D () C:\Users\ubach\AppData\Roaming\Malwarebytes
2014-02-24 22:12 - 2014-02-24 22:12 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-24 22:12 - 2014-02-24 22:12 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-24 22:02 - 2014-02-24 22:02 - 00001383 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-02-24 22:02 - 2014-02-24 22:02 - 00000656 _____ () C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job
2014-02-24 22:02 - 2014-02-24 22:02 - 00000628 _____ () C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job
2014-02-24 22:02 - 2014-02-24 22:02 - 00000458 _____ () C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job
2014-02-24 21:57 - 2014-02-24 22:01 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\ubach\Desktop\spybot-2.2.25.exe
2014-02-24 21:56 - 2014-02-24 22:01 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\ubach\Desktop\mbam-setup-1.75.0.1300.exe
2014-02-24 21:54 - 2014-02-24 20:35 - 00000000 ____D () C:\AdwCleaner
2014-02-24 21:52 - 2012-11-15 11:11 - 00000000 ____D () C:\Users\ubach\AppData\Local\Google
2014-02-24 21:38 - 2014-01-04 12:00 - 00000000 ____D () C:\Windows\Minidump
2014-02-24 21:38 - 2007-07-12 02:49 - 00000000 ____D () C:\Windows\Panther
2014-02-24 20:38 - 2014-02-24 20:38 - 03645064 _____ (Piriform Ltd) C:\Users\ubach\Downloads\ccsetup410_slim(1).exe
2014-02-24 20:37 - 2014-02-24 20:37 - 03645064 _____ (Piriform Ltd) C:\Users\ubach\Downloads\ccsetup410_slim.exe
2014-02-24 20:36 - 2014-02-24 20:36 - 00000000 ____D () C:\Program Files (x86)\SurFakeePit
2014-02-24 20:36 - 2014-02-21 01:42 - 00000000 ____D () C:\ProgramData\SurFakeePit
2014-02-24 20:36 - 2014-01-29 10:06 - 00000000 ____D () C:\ProgramData\5ba49149aec33f1d
2014-02-24 20:35 - 2014-02-24 20:35 - 01241888 _____ () C:\Users\ubach\Downloads\adwcleaner_3.0.1.9.exe
2014-02-24 20:21 - 2014-02-24 20:21 - 00381856 _____ () C:\Users\ubach\Downloads\Setup(41).exe
2014-02-24 20:16 - 2014-02-24 20:15 - 00295736 _____ (Setuprocess) C:\Users\ubach\Downloads\Setup(40).exe
2014-02-24 20:04 - 2014-02-24 20:04 - 00381864 _____ () C:\Users\ubach\Downloads\Setup(39).exe
2014-02-24 18:48 - 2014-02-24 18:48 - 00382576 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 866828.crdownload
2014-02-24 10:21 - 2014-02-24 10:21 - 17858952 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-02-24 10:21 - 2012-03-26 08:06 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-24 10:21 - 2012-03-26 08:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-24 10:21 - 2012-03-26 08:06 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-24 10:11 - 2014-02-24 10:11 - 04960768 _____ (Systweak Inc ) C:\Users\ubach\Downloads\regclean_my582531.exe
2014-02-24 10:04 - 2014-02-24 10:04 - 00000000 ____D () C:\Program Files (x86)\SavingsBull
2014-02-24 10:04 - 2014-02-24 10:04 - 00000000 ____D () C:\Program Files (x86)\MediaViewerV1
2014-02-22 12:54 - 2014-02-22 12:54 - 00000000 _____ () C:\Windows\SysWOW64\shoF22B.tmp
2014-02-21 11:12 - 2013-11-16 13:47 - 00000000 ____D () C:\Program Files (x86)\Wajam
2014-02-21 10:02 - 2014-02-24 22:11 - 00000918 _____ () C:\Windows\system32\Drivers\etc\hosts.20140224-221156.backup
2014-02-21 10:02 - 2014-01-20 20:13 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-02-21 09:46 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-02-21 01:42 - 2014-02-21 01:42 - 00000000 ____D () C:\Users\ubach\AppData\Local\Packages
2014-02-21 01:42 - 2014-02-21 01:42 - 00000000 ____D () C:\ProgramData\apeienfgkgpkcdnonjlhegmcokdolfdk
2014-02-21 01:32 - 2014-02-21 01:33 - 02163984 _____ () C:\Users\ubach\Downloads\PCPerformerSetup(5).exe
2014-02-21 01:31 - 2014-02-21 01:30 - 00371616 _____ () C:\Users\ubach\Downloads\Setup(38).exe
2014-02-21 01:25 - 2014-02-21 01:25 - 02163984 _____ () C:\Users\ubach\Downloads\PCPerformerSetup(4).exe
2014-02-21 01:07 - 2014-02-21 01:07 - 00372224 _____ () C:\Users\ubach\Downloads\Java(5).exe
2014-02-21 01:03 - 2014-02-21 01:03 - 00003032 _____ () C:\Windows\System32\Tasks\Re-markit Update
2014-02-21 01:03 - 2014-02-21 01:03 - 00002958 _____ () C:\Windows\System32\Tasks\Re-markit_wd
2014-02-20 12:45 - 2014-02-20 12:45 - 00320416 _____ () C:\Users\ubach\Downloads\Setup(37).exe
2014-02-20 12:39 - 2014-02-20 12:39 - 00341920 _____ () C:\Users\ubach\Downloads\Setup(36).exe
2014-02-20 12:38 - 2014-02-20 12:38 - 00341920 _____ () C:\Users\ubach\Downloads\Setup(35).exe
2014-02-19 12:52 - 2014-02-19 12:52 - 02163984 _____ () C:\Users\ubach\Downloads\PCPerformerSetup(3).exe
2014-02-19 11:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-18 11:53 - 2014-02-18 11:52 - 00196448 _____ () C:\Users\ubach\Downloads\setup(34).exe
2014-02-17 13:38 - 2013-08-14 14:08 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-17 13:34 - 2012-08-15 20:48 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-17 10:17 - 2014-02-17 10:17 - 00321024 _____ () C:\Users\ubach\Downloads\Java(4).exe
2014-02-15 13:30 - 2014-02-15 13:24 - 00000000 ____D () C:\Program Files (x86)\Web Protect
2014-02-15 13:29 - 2014-02-15 13:29 - 00003976 _____ () C:\Windows\SysWOW64\PCProtect.ini
2014-02-15 13:29 - 2014-02-15 13:29 - 00002184 _____ () C:\Windows\SysWOW64\PCProtectOff.ini
2014-02-15 13:29 - 2014-02-15 13:29 - 00002184 _____ () C:\Windows\system32\PCProtectOff.ini
2014-02-15 13:26 - 2014-02-15 13:26 - 00004636 _____ () C:\Windows\System32\Tasks\MediaPlayerEnhance-updater
2014-02-15 13:26 - 2014-02-15 13:26 - 00004592 _____ () C:\Windows\System32\Tasks\MediaPlayerEnhance-codedownloader
2014-02-15 13:26 - 2014-02-15 13:26 - 00004490 _____ () C:\Windows\System32\Tasks\MediaPlayerEnhance-enabler
2014-02-15 13:26 - 2014-02-15 13:26 - 00001117 _____ () C:\Users\Public\Desktop\NewPlayer.lnk
2014-02-15 13:26 - 2014-02-15 13:25 - 00000000 ____D () C:\Program Files (x86)\MediaPlayerEnhance
2014-02-15 13:21 - 2014-02-15 13:21 - 02151040 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 261312.crdownload
2014-02-15 13:19 - 2014-02-15 13:19 - 00330320 _____ () C:\Users\ubach\Downloads\Player Setup (6).exe
2014-02-15 13:19 - 2014-02-15 13:18 - 00330320 _____ () C:\Users\ubach\Downloads\Player Setup (5).exe
2014-02-15 13:18 - 2014-02-15 13:17 - 00730008 _____ (Reimage®) C:\Users\ubach\Downloads\ReimageRepair (1).exe
2014-02-15 13:05 - 2014-02-15 13:04 - 04960768 _____ (Systweak Inc ) C:\Users\ubach\Downloads\regclean_my366151.exe
2014-02-14 11:18 - 2014-02-14 11:18 - 00861600 _____ (AirInstaller ) C:\Users\ubach\Downloads\setup(33).exe
2014-02-14 11:18 - 2014-02-14 11:18 - 00861600 _____ (AirInstaller ) C:\Users\ubach\Downloads\setup(32).exe
2014-02-14 11:00 - 2014-02-24 23:10 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-02-14 11:00 - 2014-02-24 23:10 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-02-14 11:00 - 2014-02-24 23:10 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-02-14 09:33 - 2014-01-08 23:33 - 00003238 _____ () C:\Windows\System32\Tasks\AffiliatedUpdate
2014-02-14 09:04 - 2014-01-21 09:04 - 00003234 _____ () C:\Windows\System32\Tasks\MySearchDial
2014-02-14 08:31 - 2014-02-14 08:31 - 00000000 ____D () C:\Program Files (x86)\MediaPlayerV1
2014-02-13 23:04 - 2014-02-13 23:04 - 00333392 _____ () C:\Users\ubach\Downloads\Player Setup (3).exe
2014-02-13 22:26 - 2014-02-13 22:26 - 00196448 _____ () C:\Users\ubach\Downloads\setup(31).exe
2014-02-13 22:25 - 2014-02-13 22:24 - 00196448 _____ () C:\Users\ubach\Downloads\setup(30).exe
2014-02-13 15:12 - 2014-02-13 15:12 - 00487517 _____ () C:\monitor.exe
2014-02-13 14:43 - 2014-02-13 14:43 - 00034244 _____ () C:\monitorsvc.exe
2014-02-13 09:45 - 2014-01-18 13:45 - 00003238 _____ () C:\Windows\System32\Tasks\SaveSense
2014-02-12 12:04 - 2014-02-12 12:03 - 00500792 _____ () C:\Users\ubach\Downloads\Player_Setup(15).exe
2014-02-12 11:59 - 2014-02-12 11:59 - 00500792 _____ () C:\Users\ubach\Downloads\Player_Setup(14).exe
2014-02-12 11:57 - 2014-02-12 11:57 - 00500792 _____ () C:\Users\ubach\Downloads\Player_Setup(13).exe
2014-02-12 11:56 - 2014-02-12 11:56 - 00500792 _____ () C:\Users\ubach\Downloads\Player_Setup(12).exe
2014-02-12 11:54 - 2014-02-12 11:53 - 00500792 _____ () C:\Users\ubach\Downloads\Player_Setup(11).exe
2014-02-12 11:49 - 2014-02-12 11:49 - 00500792 _____ () C:\Users\ubach\Downloads\Player_Setup(10).exe
2014-02-12 11:47 - 2014-02-12 11:47 - 00500792 _____ () C:\Users\ubach\Downloads\Player_Setup(9).exe
2014-02-12 11:47 - 2014-02-12 11:47 - 00500792 _____ () C:\Users\ubach\Downloads\Player_Setup(8).exe
2014-02-12 11:42 - 2014-02-12 11:42 - 00500792 _____ () C:\Users\ubach\Downloads\Player_Setup(7).exe
2014-02-12 11:30 - 2014-02-12 11:30 - 00500792 _____ () C:\Users\ubach\Downloads\Player_Setup(6).exe
2014-02-12 10:51 - 2014-02-12 10:51 - 00500816 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 303727.crdownload
2014-02-12 10:39 - 2014-02-11 21:24 - 00000000 ____D () C:\Users\ubach\AppData\Roaming\sweet-page
2014-02-12 10:39 - 2013-11-16 13:47 - 00002159 _____ () C:\Users\ubach\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-02-12 10:39 - 2013-07-30 19:29 - 00001958 _____ () C:\Users\ubach\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WEB.DE.lnk
2014-02-12 10:39 - 2013-03-12 20:10 - 00001151 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-02-12 10:39 - 2013-01-23 11:24 - 00001930 _____ () C:\Users\ubach\Desktop\Amazon.lnk
2014-02-12 10:39 - 2013-01-23 11:24 - 00001928 _____ () C:\Users\ubach\Desktop\WEB.DE.lnk
2014-02-12 10:39 - 2013-01-23 11:24 - 00001926 _____ () C:\Users\ubach\Desktop\eBay.lnk
2014-02-12 10:39 - 2012-08-11 12:08 - 00001425 _____ () C:\Users\ubach\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-12 09:51 - 2014-02-12 09:51 - 00500792 _____ () C:\Users\ubach\Downloads\Player_Setup(5).exe
2014-02-12 09:51 - 2014-02-12 09:51 - 00500792 _____ () C:\Users\ubach\Downloads\Player_Setup(4).exe
2014-02-12 09:51 - 2014-02-12 09:51 - 00000000 _____ () C:\Windows\SysWOW64\tmpresp.tmp
2014-02-11 21:52 - 2014-02-11 21:52 - 00500792 _____ () C:\Users\ubach\Downloads\Player_Setup(3).exe
2014-02-11 21:46 - 2014-02-11 21:46 - 00500792 _____ () C:\Users\ubach\Downloads\Player_Setup(2).exe
2014-02-11 21:40 - 2012-08-13 19:22 - 00000000 ____D () C:\Users\ubach\AppData\Local\Adobe
2014-02-11 21:19 - 2014-02-11 21:19 - 00500816 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 869101.crdownload
2014-02-11 21:19 - 2014-02-11 21:19 - 00500816 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 774449.crdownload
2014-02-11 21:19 - 2014-02-11 21:19 - 00500816 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 171637.crdownload
2014-02-11 21:18 - 2014-02-11 21:18 - 00500816 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 323547.crdownload
2014-02-11 21:17 - 2014-02-11 21:17 - 00500816 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 782719.crdownload
2014-02-11 21:00 - 2014-02-11 21:00 - 00500816 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 712411.crdownload
2014-02-11 20:01 - 2014-02-11 20:01 - 00321104 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 528439.crdownload
2014-02-11 19:56 - 2014-02-11 19:56 - 00321104 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 977967.crdownload
2014-02-11 19:56 - 2014-02-11 19:56 - 00321104 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 625337.crdownload
2014-02-11 19:56 - 2014-02-11 19:56 - 00321104 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 465617.crdownload
2014-02-11 19:51 - 2014-02-11 19:51 - 00500816 _____ () C:\Users\ubach\Downloads\Player Setup (2).exe
2014-02-11 19:31 - 2014-02-11 19:30 - 00321104 _____ () C:\Users\ubach\Downloads\Player Setup.exe
2014-02-11 19:31 - 2014-02-11 19:30 - 00321104 _____ () C:\Users\ubach\Downloads\Player Setup (1).exe
2014-02-11 19:20 - 2014-01-21 09:04 - 00003306 _____ () C:\Windows\System32\Tasks\VuuPCUpdate
2014-02-11 19:20 - 2014-01-21 09:04 - 00003120 _____ () C:\Windows\System32\Tasks\VuuPCUpdateLogin
2014-02-11 09:38 - 2014-02-11 09:38 - 00001935 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-02-11 09:37 - 2013-10-22 08:31 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-02-09 13:57 - 2014-02-09 13:57 - 00320504 _____ () C:\Users\ubach\Downloads\JFileManager (12).exe
2014-02-09 13:57 - 2014-02-09 13:56 - 00320504 _____ () C:\Users\ubach\Downloads\JFileManager (11).exe
2014-02-09 13:56 - 2014-02-09 13:56 - 00320504 _____ () C:\Users\ubach\Downloads\JFileManager (8).exe
2014-02-09 13:56 - 2014-02-09 13:56 - 00320504 _____ () C:\Users\ubach\Downloads\JFileManager (7).exe
2014-02-08 12:20 - 2014-02-08 12:20 - 04960768 _____ (Systweak Inc ) C:\Users\ubach\Downloads\regclean_my439491.exe
2014-02-06 20:22 - 2014-02-06 20:22 - 02138896 _____ () C:\Users\ubach\Downloads\PCPerformerSetup(2).exe
2014-02-06 20:17 - 2014-02-06 20:17 - 02138896 _____ () C:\Users\ubach\Downloads\PCPerformerSetup.exe
2014-02-06 20:17 - 2014-02-06 20:17 - 02138896 _____ () C:\Users\ubach\Downloads\PCPerformerSetup(1).exe
2014-02-06 19:52 - 2014-02-06 19:52 - 00847344 _____ (Google Inc.) C:\Users\ubach\Downloads\ChromeSetup.exe
2014-02-06 18:56 - 2014-02-06 18:56 - 00320408 _____ () C:\Users\ubach\Downloads\Setup(29).exe
2014-02-06 18:56 - 2014-02-06 18:56 - 00320408 _____ () C:\Users\ubach\Downloads\Setup(28).exe
2014-02-06 18:52 - 2014-02-06 18:52 - 00320408 _____ () C:\Users\ubach\Downloads\Setup(27).exe
2014-02-06 18:51 - 2014-02-06 18:51 - 00320408 _____ () C:\Users\ubach\Downloads\Setup(26).exe
2014-02-06 13:16 - 2014-02-12 15:33 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-12 15:33 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-12 15:33 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-12 15:33 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-12 15:33 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-12 15:33 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-12 15:33 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-12 15:33 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 11:52 - 2014-02-12 15:33 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 11:49 - 2014-02-12 15:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-12 15:33 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-12 15:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-12 15:33 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-12 15:33 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-12 15:33 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-12 15:33 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 11:11 - 2014-02-12 15:33 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-12 15:33 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-12 15:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-12 15:33 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-12 15:33 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-12 15:33 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-12 15:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-12 15:33 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:49 - 2014-02-12 15:33 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-06 10:47 - 2014-02-12 15:33 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-12 15:33 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 10:40 - 2014-02-06 10:30 - 00321104 _____ () C:\Users\ubach\Downloads\Player Setup (4).exe
2014-02-06 10:25 - 2014-02-12 15:33 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-12 15:33 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-12 15:33 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 10:22 - 2014-02-12 15:33 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-12 15:33 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-12 15:33 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-12 15:33 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-12 15:33 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-12 15:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-12 15:33 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-12 15:33 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-12 15:33 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-05 12:04 - 2014-02-05 12:04 - 00320512 _____ () C:\Users\ubach\Downloads\Setup(25).exe
2014-02-05 11:46 - 2014-02-05 11:46 - 00319904 _____ () C:\Users\ubach\Downloads\Setup(24).exe
2014-02-05 11:45 - 2014-02-05 11:45 - 00319904 _____ () C:\Users\ubach\Downloads\Setup(23).exe
2014-02-03 21:20 - 2014-02-03 21:20 - 00723160 _____ (Reimage®) C:\Users\ubach\Downloads\ReimageRepair.exe
2014-02-03 21:20 - 2014-02-03 21:20 - 00723160 _____ (Reimage®) C:\Users\ubach\Downloads\ReimageRepair(1).exe
2014-02-03 04:11 - 2014-02-03 04:11 - 00165736 _____ () C:\Users\ubach\Downloads\FLVPlayerSetup-c0AHULu.exe
2014-02-03 03:10 - 2014-02-03 03:10 - 00165736 _____ () C:\Users\ubach\Downloads\FLVPlayerSetup-8iFMI1w.exe
2014-02-03 03:02 - 2014-02-03 03:02 - 02125952 _____ () C:\Users\ubach\Downloads\VideoPerformerSetup(2).exe
2014-02-03 02:50 - 2014-02-03 02:50 - 00138096 _____ () C:\Users\ubach\Downloads\setup(22).exe
2014-02-03 02:48 - 2014-02-03 02:48 - 00138096 _____ () C:\Users\ubach\Downloads\setup(21).exe
2014-02-03 02:47 - 2014-02-03 02:47 - 00319896 _____ () C:\Users\ubach\Downloads\Setup(20).exe
2014-02-02 22:52 - 2014-02-02 22:52 - 00320640 _____ () C:\Users\ubach\Downloads\Player.exe
2014-02-02 22:52 - 2014-02-02 22:52 - 00320640 _____ () C:\Users\ubach\Downloads\Player (1).exe
2014-02-02 22:32 - 2014-02-02 22:32 - 00319904 _____ () C:\Users\ubach\Downloads\JFileManager (4).exe
2014-02-02 22:32 - 2014-02-02 22:32 - 00319904 _____ () C:\Users\ubach\Downloads\JFileManager (3).exe
2014-02-02 22:32 - 2014-02-02 22:32 - 00319904 _____ () C:\Users\ubach\Downloads\JFileManager (2).exe
2014-02-02 22:31 - 2014-02-02 22:31 - 00319936 _____ () C:\Users\ubach\Downloads\Setup (12).exe
2014-01-31 11:42 - 2014-01-31 11:42 - 00319400 _____ () C:\Users\ubach\Downloads\JFileManager (1).exe
2014-01-31 11:41 - 2014-01-31 11:41 - 00319400 _____ () C:\Users\ubach\Downloads\JFileManager.exe
2014-01-31 00:51 - 2014-01-31 00:51 - 00000000 ____D () C:\Program Files\Level Quality Watcher
2014-01-30 01:38 - 2014-01-30 01:38 - 05095632 _____ (Systweak Inc ) C:\Users\ubach\Downloads\rcpsetup_saymg_saymg.exe
2014-01-30 01:35 - 2014-01-30 01:35 - 00321112 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 311484.crdownload
2014-01-30 01:32 - 2014-01-30 01:32 - 00321112 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 943889.crdownload
2014-01-30 01:26 - 2014-01-30 01:26 - 00138608 _____ () C:\Users\ubach\Downloads\setup(19).exe
2014-01-29 10:06 - 2014-01-29 10:06 - 00000000 ____D () C:\ProgramData\goknbmljcekledjmeinnfjghgjhkglff
2014-01-29 03:56 - 2014-01-29 03:56 - 00000000 ____D () C:\Program Files (x86)\Lightspark 0.5.3-git
2014-01-29 03:55 - 2014-01-29 03:55 - 00000000 __SHD () C:\Windows\SysWOW64\AI_RecycleBin
2014-01-29 03:55 - 2014-01-29 03:55 - 00000000 ____D () C:\Users\ubach\Documents\RegistryDr
2014-01-29 03:55 - 2014-01-29 03:55 - 00000000 ____D () C:\Program Files (x86)\Registry Dr
2014-01-29 03:55 - 2014-01-29 03:55 - 00000000 ____D () C:\Program Files (x86)\AmiExt
2014-01-29 03:55 - 2014-01-29 03:54 - 00000000 ____D () C:\Users\ubach\AppData\Local\Savings Wizard
2014-01-29 03:54 - 2014-01-29 03:54 - 00000000 ____D () C:\Program Files (x86)\Savings Wizard
2014-01-28 22:30 - 2014-01-28 22:30 - 05095824 _____ (Systweak Inc ) C:\Users\ubach\Downloads\rcpafterdownloadcm_ad_13129_cm2.exe
2014-01-28 22:08 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-01-28 02:50 - 2014-01-28 02:50 - 00165736 _____ () C:\Users\ubach\Downloads\FLVPlayerSetup-aCVD4Hk.exe
2014-01-28 02:45 - 2014-01-28 02:45 - 00000000 ____D () C:\ProgramData\IePluginService
2014-01-28 02:45 - 2014-01-28 02:45 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-01-28 02:43 - 2014-01-28 02:43 - 00320032 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 876049.crdownload
2014-01-28 02:43 - 2014-01-28 02:43 - 00320032 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 302666.crdownload
2014-01-28 02:41 - 2014-01-28 02:41 - 00318880 _____ () C:\Users\ubach\Downloads\Java (2).exe
2014-01-28 02:40 - 2014-01-28 02:40 - 00318880 _____ () C:\Users\ubach\Downloads\Nicht bestätigt 779816.crdownload
2014-01-28 02:38 - 2014-01-10 12:26 - 00000000 ____D () C:\Program Files (x86)\Mobogenie
2014-01-28 02:35 - 2014-01-10 12:27 - 00000000 ____D () C:\Users\ubach\AppData\Local\cache

Some content of TEMP:
====================
C:\Users\ubach\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-19 11:45

==================== End Of Log ============================
         

--- --- ---

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-02-2014 01
Ran by ubach at 2014-02-27 18:56:58
Running from E:\
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

==================== Installed Programs ======================

 clear.fi SDK - MVP 2 (x32 Version: 2.0.1505 - CyberLink Corp.) Hidden
 clear.fi SDK- Movie 2 (x32 Version: 2.0.1502 - CyberLink Corp.) Hidden
Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.100 - NTI Corporation)
Acer Crystal Eye Webcam (HKLM-x32\...\InstallShield_{A0382E3C-7384-429A-9BFA-AF5888E5A193}) (Version: 1.5.2108.00 - CyberLink Corp.)
Acer Crystal Eye Webcam (x32 Version: 1.5.2108.00 - CyberLink Corp.) Hidden
Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 6.00.3010 - Acer Incorporated)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3507 - Acer Incorporated)
Acer Games (HKLM-x32\...\WildTangent acer Master Uninstall) (Version: 1.0.2.5 - WildTangent)
Acer Instant Update Service (HKLM\...\{36674AE9-6D3D-48D6-BC7B-209F556D65EE}) (Version: 1.00.3004 - Acer Incorporated)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3506 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 20.11.1107.1418 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3501 - Acer Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.4.0.2710 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.4.0.2710 - Adobe Systems Incorporated) Hidden
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.6 - Adobe Systems Incorporated)
Adobe Download Assistant (x32 Version: 1.2.6 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.338 - Avira)
Backup Manager V3 (x32 Version: 3.0.0.100 - NTI Corporation) Hidden
Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Broadcom Card Reader Driver Installer (HKLM\...\{4710662C-8204-4334-A977-B1AC9E547819}) (Version: 15.0.6.2 - Broadcom Corporation)
Broadcom NetLink Controller (HKLM\...\{C91DCB72-F5BB-410D-A91A-314F5D1B4284}) (Version: 15.0.7.1 - Broadcom Corporation)
Broadcom Wireless Utility (HKLM\...\Broadcom Wireless Utility) (Version: 5.100.82.120 - Broadcom Corporation)
Brother MFL-Pro Suite DCP-J125 (HKLM-x32\...\{FB83EAC4-E3F6-4666-B45B-44522F2344B6}) (Version: 1.0.3.0 - Brother Industries, Ltd.)
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.) Hidden
Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.) Hidden
Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.) Hidden
clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.00.3004 - Acer Incorporated)
clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.00.3004 - Acer Incorporated)
Coupon Server (HKLM-x32\...\35852_Coupon Server) (Version: 1.1 - Smart Apps) <==== ATTENTION
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DealPly (remove only) (HKLM-x32\...\DealPly) (Version: 4.8.7.2 - DealPly Technologies Ltd.) <==== ATTENTION
Dolby Home Theater v4 (HKLM-x32\...\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}) (Version: 7.2.7000.7 - Dolby Laboratories Inc)
Driver Pro v3.0 (HKLM-x32\...\Driver Pro_is1) (Version: 3.0 - PC Utilities Pro)
easytoshhop (HKLM-x32\...\{532970A2-464B-73CB-BBC4-F209EAD3EEBE}) (Version:  - Easytosshoip)
eBay Worldwide (HKLM-x32\...\{D3E5A972-9A15-427D-AE78-8181A5FD943C}) (Version: 2.2.0409 - OEM)
ETDWare PS/2-X64 10.6.9.9_WHQL (HKLM\...\Elantech) (Version: 10.6.9.9 - ELAN Microelectronic Corp.)
Evernote v. 4.5.2 (HKLM-x32\...\{F77EF646-19EB-11E1-9A9E-984BE15F174E}) (Version: 4.5.2.5866 - Evernote Corp.)
Extended Update (HKCU\...\AffiliatedUpdate) (Version:  - )
FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden
Feven 1.5 (HKLM-x32\...\Feven 1.5) (Version: 1.30.153.0 - Feven) <==== ATTENTION
Final Drive: Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden
Flash Player Pro V5.4 (HKLM-x32\...\Flash Player Pro_is1) (Version:  - FlashPlayerPro.com)
flash-Enhancer (HKLM-x32\...\flash-Enhancer) (Version: 2.1 - flash-Enhancer.com) <==== ATTENTION
FLV Player (HKCU\...\FLV Player) (Version:  - )
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 31.0.1650.63 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)
IePluginService12.27.0.3326 (HKLM-x32\...\IePlugins) (Version: 12.27.0.3326 - Cherished Technololgy LIMITED) <==== ATTENTION
Insaniquarium Deluxe (x32 Version: 2.2.0.97 - WildTangent) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.2.1410 - Intel Corporation)
Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version:  - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2653 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.1.0.1006 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.220 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{09536BA1-E498-4CC3-B834-D884A67D7E34}) (Version: 1.23.605.1 - Intel Corporation)
Internet Updater (HKLM-x32\...\InternetUpdater) (Version: 2.6.52 - Parallel Lines Development, LLC) <==== ATTENTION
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Jewel Quest Mysteries: The Seventh Gate Collector's Edition (x32 Version: 2.2.0.98 - WildTangent) Hidden
John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Launch Manager (HKLM-x32\...\LManager) (Version: 5.1.15 - Acer Inc.)
Lightspark 0.5.3-git (HKLM-x32\...\Lightspark) (Version: 0.5.3-git - Lightspark Team)
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Media Player (HKLM-x32\...\MediaPlayerV1alpha4241) (Version: 1.1 - Media Player)
Media Viewer (HKLM-x32\...\MediaViewerV1alpha1415) (Version: 1.1 - Media Viewer)
MediaPlayerEnhance (HKLM-x32\...\MediaPlayerEnhance) (Version: 1.34.2.13 - Feven)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.5139.5005 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mobogenie (HKLM-x32\...\Mobogenie) (Version:  - Mobogenie.com) <==== ATTENTION
Mozilla Firefox 25.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 25.0.1 (x86 de)) (Version: 25.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 25.0.1 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
Mysearchdial (HKCU\...\mysearchdial) (Version:  - Mysearchdial) <==== ATTENTION
MyWinLocker (Version: 4.0.14.27 - Egis Technology Inc.) Hidden
MyWinLocker 4 (x32 Version: 4.0.14.27 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.19 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 4.0.14.19 - Egis Technology Inc.) Hidden
NewPlayer (HKLM-x32\...\NewPlayer) (Version: v2.1.1.0 - TUGUU SL) <==== ATTENTION
newsXpresso (HKLM-x32\...\InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}) (Version: 1.0.0.40 - esobi Inc.)
newsXpresso (x32 Version: 1.0.0.40 - esobi Inc.) Hidden
Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation)
NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.9006 - NTI Corporation)
NTI Media Maker 9 (x32 Version: 9.0.2.9006 - NTI Corporation) Hidden
PC Speed Maximizer v3.2 (HKLM-x32\...\PC Speed Maximizer_is1) (Version: 3.2 - Smart PC Solutions)
Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden
Plus-HD-2.5 (HKLM-x32\...\Plus-HD-2.5) (Version: 1.30.153.0 - Plus HD) <==== ATTENTION
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6543 - Realtek Semiconductor Corp.)
Registry Dr (HKLM-x32\...\{13F65354-29C2-41B0-B0FE-E858FB622FDD}) (Version: 2.4.7 - EuroTrade A.L. Ltd)
Re-markit (HKLM-x32\...\54ed89b2-da2e-446b-bde7-8188f45dc639) (Version:  - Re-markit Software) <==== ATTENTION
SaltarSmart 2013.11.07.203707 (HKLM\...\SaltarSmart) (Version: 2013.11.07.203707 - SaltarSmart) <==== ATTENTION
SaveSense (HKCU\...\SaveSense) (Version:  - ) <==== ATTENTION
SaveSense (remove only) (HKLM-x32\...\SaveSense) (Version: 5.3.0.6 - SaveSense) <==== ATTENTION
Savings Wizard (HKLM-x32\...\38906_Savings Wizard) (Version: 1.0 - Smart Apps) <==== ATTENTION
SavingsBull (x32 Version: 1.0.0.0 - SavingsBull) Hidden
savvinugatoyou (HKLM-x32\...\{A2616871-3463-BCEE-5AFA-73773317A381}) (Version:  - savingtoyou)
Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Skype™ 5.10 (HKLM-x32\...\{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}) (Version: 5.10.116 - Skype Technologies S.A.)
Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.2.25 - Safer-Networking Ltd.)
SupTab (HKLM-x32\...\SupTab) (Version: 1.1.1.0 - ) <==== ATTENTION
TableeViEwwEer (HKLM-x32\...\{BC0E5951-1681-AA9C-C873-6E5108EE232C}) (Version:  - TableViEeweR)
Torchlight (x32 Version: 2.2.0.98 - WildTangent) Hidden
Tube Dimmer (HKLM-x32\...\TubeDimmer) (Version: 2.6.48 - Creative Island Media, LLC)
Überwachungstool für die Intel® Turbo-Boost-Technik 2.5 (HKLM\...\{6C9365EB-1F9E-4893-9196-3EC77C88D0C5}) (Version: 2.5.1.0 - Intel)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Updater (HKLM-x32\...\{D54E3D9F-FEB8-4D2D-A138-B69A5C80080B}) (Version: 2.6.48 - Creative Island Media, LLC) <==== ATTENTION
ValueApps (HKCU\...\ValueApps) (Version: 1.3.1.1 - Conduit) <==== ATTENTION
VideoPlayer v2.0.6 (HKLM-x32\...\VideoPlayer) (Version: v2.0.6 - TUGUU SL) <==== ATTENTION
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.97 - WildTangent) Hidden
VisualBee for Microsoft PowerPoint (HKCU\...\VisualBee for Microsoft PowerPoint) (Version: V4.1 - VisualBee.com)
Vodafone Mobile Broadband (HKLM-x32\...\{6C29152D-3FF9-43B2-84E4-9B35FC0BF5C2}) (Version: 10.3.401.43721 - Vodafone)
VuuPC, You're Always a Click Away! (HKLM-x32\...\VuuPC) (Version: 1.0.0.267 - VuuPC Limited)
Wajam (HKLM-x32\...\Wajam) (Version: 2.05 - Wajam) <==== ATTENTION
Web Protect for Windows (HKLM-x32\...\wp-tgu) (Version: 10.0.0 - Web Protect)
WEB.DE Desktop Icons (HKLM-x32\...\1&1 Mail & Media GmbH 1und1DesktopIconsInstaller) (Version: 3.0.3.0 - 1&1 Mail & Media GmbH)
WEB.DE MailCheck für Internet Explorer (HKLM-x32\...\1&1 Mail & Media GmbH Toolbar IE8) (Version: 2.4.0.0 - 1&1 Mail & Media GmbH)
WEB.DE Softwareaktualisierung (HKLM-x32\...\1&1 Mail & Media GmbH 1und1Softwareaktualisierung) (Version: 3.0.0.55 - 1&1 Mail & Media GmbH)
Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3507 - Acer Incorporated)
WIDCOMM Bluetooth Software (HKLM\...\{A1439D4F-FD46-47F2-A1D3-FEE097C29A09}) (Version: 6.5.1.2610 - Broadcom Corporation)
WildTangent Games App (x32 Version: 4.0.10.25 - WildTangent) Hidden
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogaléria (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalleri (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotótár (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Galeria de Fotos (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Galerija fotografija (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Корпорация Майкрософт) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 影像中心 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 程式集 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven sähköposti (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
WPM17.8.0.3297 (HKLM-x32\...\WPM) (Version: 17.8.0.3297 - Cherished Technololgy LIMITED) <==== ATTENTION
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Restore Points  =========================

24-02-2014 22:08:44 Windows Defender Checkpoint
26-02-2014 02:00:11 Windows Update
27-02-2014 17:38:04 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:34 - 2014-02-24 22:11 - 00000920 ____R C:\Windows\system32\Drivers\etc\hosts
54.204.28.26	dmcecclamecbinmplcolhaljlclhbgah
54.204.28.26	ajakpekbmnkgnjbpajgkdhimcbeoocam


==================== Scheduled Tasks (whitelisted) =============

Task: {098C7813-7E67-415D-ABC1-48D8173A749D} - System32\Tasks\bench-S-1-5-21-847584245-1588873724-1552598581-1000 => C:\Program Files (x86)\Bench\Updater\updater.exe [2014-01-15] () <==== ATTENTION
Task: {0D0520FC-9197-4709-83C2-C0C8E0C064F3} - System32\Tasks\SaveSenseLiveUpdateTaskMachineCore => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [2014-01-18] (SaveSense) <==== ATTENTION
Task: {0EFA5B35-9A04-4FBF-B434-0659B78A63C2} - System32\Tasks\SaveSenseLiveUpdateTaskMachineUA => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [2014-01-18] (SaveSense) <==== ATTENTION
Task: {10A5D775-4CDB-4D3B-A2C6-60A38F63142F} - System32\Tasks\DealPlyLiveUpdateTaskMachineCore => C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe [2013-11-16] (DealPly Technologies Ltd) <==== ATTENTION
Task: {1D35879A-1B15-4AE2-B4F9-F0016171AAB9} - System32\Tasks\Feven 1.5-chromeinstaller => C:\Program Files (x86)\Feven 1.5\Feven 1.5-chromeinstaller.exe [2013-11-16] (Feven) <==== ATTENTION
Task: {228D8740-54CF-445A-A138-9A47F69C3BD4} - System32\Tasks\DealPlyLiveUpdateTaskMachineUA => C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe [2013-11-16] (DealPly Technologies Ltd) <==== ATTENTION
Task: {25A5583E-4B77-4B07-A59A-D6F430D242CD} - System32\Tasks\MediaPlayerEnhance-chromeinstaller => C:\Program Files (x86)\MediaPlayerEnhance\MediaPlayerEnhance-chromeinstaller.exe [2014-02-15] (Feven)
Task: {25FA8F64-981B-4BF1-B108-44E00F44B1EF} - System32\Tasks\LaunchApp => C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe
Task: {2AD26FA2-03E3-4DB0-A531-177791B2EA85} - System32\Tasks\MediaPlayerEnhance-firefoxinstaller => C:\Program Files (x86)\MediaPlayerEnhance\MediaPlayerEnhance-firefoxinstaller.exe [2014-02-15] (Feven)
Task: {2B89A938-1EE8-4812-9210-24465C7F68C8} - System32\Tasks\AffiliatedUpdate => C:\Users\ubach\AppData\Roaming\AffiliatedUpdate\UpdateProc\UpdateTask.exe [2013-04-12] ()
Task: {2E290214-FA8A-4C1F-8568-87F05B99EF62} - System32\Tasks\Plus-HD-2.5-enabler => C:\Program Files (x86)\Plus-HD-2.5\Plus-HD-2.5-enabler.exe [2013-11-16] (Plus HD) <==== ATTENTION
Task: {38551797-9AF5-46CF-8861-0467FBED17A2} - System32\Tasks\Plus-HD-2.5-firefoxinstaller => C:\Program Files (x86)\Plus-HD-2.5\Plus-HD-2.5-firefoxinstaller.exe [2013-11-16] (Plus HD) <==== ATTENTION
Task: {3C6FEC70-38A9-482D-8310-5D221C269733} - System32\Tasks\Registration 1und1 Task => C:\Program Files (x86)\1und1Softwareaktualisierung\cdsupdclient.exe [2013-06-18] (1&1 Mail & Media GmbH)
Task: {5958ED50-E5F2-431D-920C-B431FBA37EB8} - System32\Tasks\Plus-HD-2.5-chromeinstaller => C:\Program Files (x86)\Plus-HD-2.5\Plus-HD-2.5-chromeinstaller.exe [2013-11-16] (Plus HD) <==== ATTENTION
Task: {6A378BBA-6FA4-47B6-A529-9E09F1F4B304} - System32\Tasks\Re-markit Update => C:\Program Files (x86)\Re-markit\ReMarkit_up.exe [2014-02-21] () <==== ATTENTION
Task: {6D0B2A8F-2B66-408A-9D7A-67A41C31F3B6} - System32\Tasks\{145D42D3-0416-4F85-8F77-DEE29E6B2548} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2012-07-13] (Skype Technologies S.A.)
Task: {78E387A9-76C9-4E13-807B-3935D2C6AD7B} - System32\Tasks\Plus-HD-2.5-updater => C:\Program Files (x86)\Plus-HD-2.5\Plus-HD-2.5-updater.exe [2013-11-16] (Plus HD) <==== ATTENTION
Task: {7C6C6E36-3232-4859-986F-406EC6778780} - System32\Tasks\bench-sys => C:\Program Files (x86)\Bench\Updater\updater.exe [2014-01-15] () <==== ATTENTION
Task: {8ED863A5-1D63-4978-901E-A55580904E4E} - System32\Tasks\Feven 1.5-firefoxinstaller => C:\Program Files (x86)\Feven 1.5\Feven 1.5-firefoxinstaller.exe [2013-11-16] (Feven) <==== ATTENTION
Task: {8F16DE7C-FDFF-47D0-8D41-ABF672704C18} - System32\Tasks\MediaPlayerEnhance-updater => C:\Program Files (x86)\MediaPlayerEnhance\MediaPlayerEnhance-updater.exe [2014-02-15] (Feven)
Task: {8FCCD5FC-865A-49C0-8A55-FF5E70DD5FA1} - System32\Tasks\PMMUpdate => C:\Program Files\EgisTec IPS\PMMUpdate.exe [2011-03-29] (Egis Technology Inc.)
Task: {9194D73D-1D90-42A9-A7C9-0B302258D612} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-11-15] (Google Inc.)
Task: {971552D5-FF5C-4EFE-8112-139D4AD5F086} - System32\Tasks\MySearchDial => C:\Users\ubach\AppData\Roaming\mysearchdial\UpdateProc\UpdateTask.exe [2013-04-12] () <==== ATTENTION
Task: {9EB81174-2897-41B5-8A29-74AFB621351B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-11-15] (Google Inc.)
Task: {9F2CD200-AD3A-49A1-AFD8-66E3891C21EE} - System32\Tasks\Feven 1.5-enabler => C:\Program Files (x86)\Feven 1.5\Feven 1.5-enabler.exe [2013-11-16] (Feven) <==== ATTENTION
Task: {A58A43FB-1E4A-47CF-877D-4D38573B366B} - System32\Tasks\MediaPlayerEnhance-codedownloader => C:\Program Files (x86)\MediaPlayerEnhance\MediaPlayerEnhance-codedownloader.exe [2014-02-15] (Feven)
Task: {A7945EE5-2823-4F05-8DCF-E1892D093FC3} - System32\Tasks\Re-markit_wd => C:\Program Files (x86)\Re-markit\Re-markit_wd.exe [2014-02-21] () <==== ATTENTION
Task: {AB61133F-D7B5-4CC2-A715-70342F2380C6} - System32\Tasks\EgisUpdate => C:\Program Files\EgisTec IPS\EgisUpdate.exe [2011-03-29] (Egis Technology Inc.)
Task: {B7742EE8-2E3D-4C95-B121-E2757F10802B} - System32\Tasks\Dealply => C:\Users\ubach\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {BE999CAE-012C-40E0-9733-6D6C86E8A7FF} - System32\Tasks\Feven 1.5-codedownloader => C:\Program Files (x86)\Feven 1.5\Feven 1.5-codedownloader.exe [2013-11-16] (Feven) <==== ATTENTION
Task: {C83CCC8B-EA98-4E78-880A-1D7F8C206FF1} - System32\Tasks\VuuPCUpdateLogin => C:\Program Files (x86)\VuuPC\VuuPCUpdater.exe [2014-02-10] (VuuPC Limited)
Task: {C8D7C8B1-4DCD-4325-8335-85B5A5EAF93A} - System32\Tasks\BackgroundContainer Startup Task => Rundll32.exe "C:\Users\ubach\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun <==== ATTENTION
Task: {D0909C32-A930-4AA5-AFF0-325B035E5926} - System32\Tasks\MediaPlayerEnhance-enabler => C:\Program Files (x86)\MediaPlayerEnhance\MediaPlayerEnhance-enabler.exe [2014-02-15] (Feven) <==== ATTENTION
Task: {D5666A2E-9AE1-47B6-B338-8C6CC8D91B72} - System32\Tasks\SaveSense => C:\Users\ubach\AppData\Roaming\SaveSense\UpdateProc\UpdateTask.exe [2013-04-12] () <==== ATTENTION
Task: {DC486354-47CF-4052-AE80-6927A3A7FB79} - System32\Tasks\UALU notificatin => C:\Program Files\Acer\Acer Updater\UALU.exe [2012-02-07] (Acer Incorporated)
Task: {DEC86738-675E-45E8-B4F5-2D2710B145C9} - System32\Tasks\Feven 1.5-updater => C:\Program Files (x86)\Feven 1.5\Feven 1.5-updater.exe [2013-11-16] (Feven) <==== ATTENTION
Task: {E0623CCD-6507-4E18-AC7B-0C482CC4CBEE} - System32\Tasks\VuuPCUpdate => C:\Program Files (x86)\VuuPC\VuuPCUpdater.exe [2014-02-10] (VuuPC Limited)
Task: {E619F16E-4C5A-432C-AD15-B006173E8CEF} - System32\Tasks\Plus-HD-2.5-codedownloader => C:\Program Files (x86)\Plus-HD-2.5\Plus-HD-2.5-codedownloader.exe [2013-11-16] (Plus HD) <==== ATTENTION
Task: {F1CF41AC-B867-40CB-9994-D8844AF977C5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-24] (Adobe Systems Incorporated)
Task: {F79047E9-4C18-46D9-8045-4745D7FA6CB8} - System32\Tasks\Recovery Management\Burn Notification => C:\Program Files\Acer\Acer eRecovery Management\NotificationCenter\Notification.exe [2012-01-19] (Acer)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AffiliatedUpdate.job => C:\Users\ubach\AppData\Roaming\AFFILI~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\Windows\Tasks\bench-S-1-5-21-847584245-1588873724-1552598581-1000.job => C:\Program Files (x86)\Bench\Updater\updater.exe <==== ATTENTION
Task: C:\Windows\Tasks\bench-sys.job => C:\Program Files (x86)\Bench\Updater\updater.exe <==== ATTENTION
Task: C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: C:\Windows\Tasks\Dealply.job => C:\Users\ubach\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job => C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe <==== ATTENTION
Task: C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job => C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe <==== ATTENTION
Task: C:\Windows\Tasks\Feven 1.5-chromeinstaller.job => C:\Program Files (x86)\Feven 1.5\Feven 1.5-chromeinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Feven 1.5-codedownloader.job => C:\Program Files (x86)\Feven 1.5\Feven 1.5-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\Feven 1.5-enabler.job => C:\Program Files (x86)\Feven 1.5\Feven 1.5-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\Feven 1.5-firefoxinstaller.job => C:\Program Files (x86)\Feven 1.5\Feven 1.5-firefoxinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Feven 1.5-updater.job => C:\Program Files (x86)\Feven 1.5\Feven 1.5-updater.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\MediaPlayerEnhance-chromeinstaller.job => C:\Program Files (x86)\MediaPlayerEnhance\MediaPlayerEnhance-chromeinstaller.exe
Task: C:\Windows\Tasks\MediaPlayerEnhance-codedownloader.job => C:\Program Files (x86)\MediaPlayerEnhance\MediaPlayerEnhance-codedownloader.exe
Task: C:\Windows\Tasks\MediaPlayerEnhance-enabler.job => C:\Program Files (x86)\MediaPlayerEnhance\MediaPlayerEnhance-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\MediaPlayerEnhance-firefoxinstaller.job => C:\Program Files (x86)\MediaPlayerEnhance\MediaPlayerEnhance-firefoxinstaller.exe
Task: C:\Windows\Tasks\MediaPlayerEnhance-updater.job => C:\Program Files (x86)\MediaPlayerEnhance\MediaPlayerEnhance-updater.exe
Task: C:\Windows\Tasks\MySearchDial.job => C:\Users\ubach\AppData\Roaming\MYSEAR~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-2.5-chromeinstaller.job => C:\Program Files (x86)\Plus-HD-2.5\Plus-HD-2.5-chromeinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-2.5-codedownloader.job => C:\Program Files (x86)\Plus-HD-2.5\Plus-HD-2.5-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-2.5-enabler.job => C:\Program Files (x86)\Plus-HD-2.5\Plus-HD-2.5-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-2.5-firefoxinstaller.job => C:\Program Files (x86)\Plus-HD-2.5\Plus-HD-2.5-firefoxinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-2.5-updater.job => C:\Program Files (x86)\Plus-HD-2.5\Plus-HD-2.5-updater.exe <==== ATTENTION
Task: C:\Windows\Tasks\Re-markit Update.job => C:\Program Files (x86)\Re-markit\ReMarkit_up.exe <==== ATTENTION
Task: C:\Windows\Tasks\Re-markit_wd.job => C:\Program Files (x86)\Re-markit\Re-markit_wd.exe <==== ATTENTION
Task: C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
Task: C:\Windows\Tasks\SaveSense.job => C:\Users\ubach\AppData\Roaming\SAVESE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe <==== ATTENTION
Task: C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe <==== ATTENTION
Task: C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe

==================== Loaded Modules (whitelisted) =============

2013-12-06 02:30 - 2013-12-06 02:30 - 00040448 _____ () C:\ProgramData\InternetUpdater\InternetUpdaterService.exe
2014-01-27 21:45 - 2014-01-27 21:45 - 00710976 _____ () C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher64.exe
2014-01-10 12:26 - 2014-01-28 02:32 - 00063168 _____ () C:\Program Files (x86)\Mobogenie\MgAssist.exe
2014-02-13 15:12 - 2014-02-13 15:12 - 00487517 _____ () C:\monitor.exe
2014-02-21 01:02 - 2014-02-21 01:02 - 00093184 _____ () C:\Program Files (x86)\Re-markit\Re-markit_wd.exe
2013-11-07 21:37 - 2014-02-25 11:59 - 00111904 _____ () C:\Program Files (x86)\SaltarSmart\updateSaltarSmart.exe
2013-11-18 09:32 - 2014-02-25 11:26 - 00111904 _____ () C:\Program Files (x86)\SaltarSmart\bin\utilSaltarSmart.exe
2014-01-10 12:26 - 2014-01-09 09:01 - 00766656 _____ () C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
2012-04-11 10:27 - 2012-02-14 18:53 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-02-24 22:14 - 2014-02-24 22:14 - 00049664 _____ () C:\Program Files (x86)\Bench\BService\bservice.exe
2014-02-24 22:14 - 2014-02-24 22:14 - 00060416 _____ () C:\Program Files (x86)\Bench\Wd\wd.exe
2012-04-06 19:29 - 2012-04-06 19:29 - 00040552 _____ () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe
2012-04-06 19:29 - 2012-04-06 19:29 - 00022120 _____ () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe
2014-02-24 23:10 - 2014-02-14 11:00 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2012-01-05 22:22 - 2012-01-05 22:22 - 00465344 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll
2012-01-05 22:22 - 2012-01-05 22:22 - 01081368 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll
2012-01-05 22:22 - 2012-01-05 22:22 - 00125464 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll
2014-01-10 12:26 - 2014-01-09 08:50 - 00061440 _____ () C:\Program Files (x86)\Mobogenie\Device.dll
2014-01-10 12:26 - 2014-01-09 08:51 - 00471040 _____ () C:\Program Files (x86)\Mobogenie\DCR.dll
2014-02-24 22:02 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2014-02-24 22:02 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2014-02-24 22:02 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2014-02-24 22:02 - 2013-05-16 10:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2014-02-24 22:02 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2014-01-28 18:23 - 2014-01-28 18:23 - 00823296 _____ () C:\Program Files (x86)\web protect\pcproxydll.dll
2014-02-24 22:14 - 2014-02-24 22:14 - 00049664 _____ () C:\Program Files (x86)\Bench\BService\bhelper.dll
2012-11-19 21:44 - 2009-02-27 16:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2009-07-13 22:03 - 2009-07-14 02:15 - 00364544 _____ () C:\Windows\SysWOW64\msjetoledb40.dll
2014-01-02 11:53 - 2013-12-04 03:47 - 00702416 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
2014-01-02 11:53 - 2013-12-04 03:47 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll
2014-01-02 11:53 - 2013-12-04 03:48 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll
2014-01-02 11:53 - 2013-12-04 03:48 - 00399312 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll
2014-01-02 11:53 - 2013-12-04 03:47 - 01619408 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll
2013-11-19 12:51 - 2013-11-19 12:51 - 03363952 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-02-24 10:21 - 2014-02-24 10:21 - 16265096 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll
2014-02-13 09:08 - 2014-02-13 09:08 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\00a0b4a9df6e4abf30ae2af3624a77ce\IsdiInterop.ni.dll
2012-03-26 07:37 - 2012-02-02 00:25 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2012-05-25 10:59 - 2012-02-08 02:39 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:373E1720
AlternateDataStreams: C:\ProgramData\Temp:AD022376
AlternateDataStreams: C:\Users\ubach\Documents\Rente.eml:OECustomProperty

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PCProtect => ""="service"

==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (02/27/2014 06:46:44 PM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - 1>Failed to compile: mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80070003

Error: (02/27/2014 06:44:31 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.

Error: (02/27/2014 06:34:15 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/26/2014 10:28:16 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 25.0.1.5064, Zeitstempel: 0x5282f18a
Name des fehlerhaften Moduls: NPSWF32_12_0_0_70.dll, Version: 12.0.0.70, Zeitstempel: 0x530164e1
Ausnahmecode: 0xc0000005
Fehleroffset: 0x007c0c5c
ID des fehlerhaften Prozesses: 0x6544
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3

Error: (02/26/2014 07:43:43 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: PCProtect.exe, Version: 2.2.8.4, Zeitstempel: 0x52ccc097
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x100b6f90
ID des fehlerhaften Prozesses: 0x10a4
Startzeit der fehlerhaften Anwendung: 0xPCProtect.exe0
Pfad der fehlerhaften Anwendung: PCProtect.exe1
Pfad des fehlerhaften Moduls: PCProtect.exe2
Berichtskennung: PCProtect.exe3

Error: (02/26/2014 03:18:17 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/25/2014 07:50:40 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/25/2014 06:32:10 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (02/25/2014 06:27:19 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: McUicnt.exe, Version: 5.9.2.0, Zeitstempel: 0x52309272
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521eaf24
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000055a41
ID des fehlerhaften Prozesses: 0x5f34
Startzeit der fehlerhaften Anwendung: 0xMcUicnt.exe0
Pfad der fehlerhaften Anwendung: McUicnt.exe1
Pfad des fehlerhaften Moduls: McUicnt.exe2
Berichtskennung: McUicnt.exe3

Error: (02/25/2014 03:26:14 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.


System errors:
=============
Error: (02/27/2014 06:34:20 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Spybot-S&D 2 Updating Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (02/27/2014 06:34:20 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Updating Service erreicht.

Error: (02/27/2014 06:33:46 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (02/27/2014 06:33:46 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht.

Error: (02/27/2014 06:33:16 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Protect Monitor" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (02/27/2014 06:33:16 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Protect Monitor erreicht.

Error: (02/27/2014 06:32:19 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎26.‎02.‎2014 um 23:28:09 unerwartet heruntergefahren.

Error: (02/26/2014 07:44:08 PM) (Source: DCOM) (User: )
Description: {94B83936-77EA-4708-8FC5-F3BBC55C2A32}

Error: (02/26/2014 05:01:12 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Level Quality Watcher" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 300000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (02/26/2014 04:59:46 PM) (Source: DCOM) (User: )
Description: C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}1450{C39EE728-D419-4BD4-A3EF-EDA059DBD935}


Microsoft Office Sessions:
=========================
Error: (02/27/2014 06:46:44 PM) (Source: .NET Runtime Optimization Service)(User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - 1>Failed to compile: mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80070003 
mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089

Error: (02/27/2014 06:44:31 PM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.

Error: (02/27/2014 06:34:15 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/26/2014 10:28:16 PM) (Source: Application Error)(User: )
Description: plugin-container.exe25.0.1.50645282f18aNPSWF32_12_0_0_70.dll12.0.0.70530164e1c0000005007c0c5c654401cf333878b52ed9C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dlle6fb998d-9f2c-11e3-8ff0-b888e305472e

Error: (02/26/2014 07:43:43 PM) (Source: Application Error)(User: )
Description: PCProtect.exe2.2.8.452ccc097unknown0.0.0.000000000c0000005100b6f9010a401cf329905e4eb63C:\Program Files (x86)\Web Protect\PCProtect.exeunknownea7bc51c-9f15-11e3-8ff0-b888e305472e

Error: (02/26/2014 03:18:17 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/25/2014 07:50:40 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/25/2014 06:32:10 PM) (Source: SideBySide)(User: )
Description: C:\Windows\system32\van.dllC:\Windows\system32\van.dll0

Error: (02/25/2014 06:27:19 PM) (Source: Application Error)(User: )
Description: McUicnt.exe5.9.2.052309272ntdll.dll6.1.7601.18247521eaf24c00000050000000000055a415f3401cf3202cbf23374C:\Program Files\McAfee Security Scan\3.8.141\McUicnt.exeC:\Windows\SYSTEM32\ntdll.dll136b4a00-9e42-11e3-a3a8-b888e305472e

Error: (02/25/2014 03:26:14 PM) (Source: SideBySide)(User: )
Description: C:\Windows\syswow64\SHLWAPI.dllC:\Windows\syswow64\SHLWAPI.dll0


CodeIntegrity Errors:
===================================
  Date: 2014-02-26 09:14:30.610
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Web Protect\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-26 09:14:30.463
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Web Protect\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-26 09:14:30.336
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Web Protect\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-26 03:51:35.540
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Web Protect\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-26 03:51:35.415
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Web Protect\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-26 03:51:35.275
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Web Protect\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-19 11:48:45.369
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Web Protect\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-19 11:48:45.276
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Web Protect\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-19 11:48:45.167
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Web Protect\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 64%
Total physical RAM: 3934.36 MB
Available physical RAM: 1407.32 MB
Total Pagefile: 7866.89 MB
Available Pagefile: 3845.74 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:447.66 GB) (Free:394.12 GB) NTFS
Drive e: (UDISK) (Removable) (Total:1.87 GB) (Free:1.86 GB) FAT

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: C51ECEBB)

Partition: GPT Partition Type.

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 2 GB) (Disk ID: C3072E18)

Partition: GPT Partition Type.

==================== End Of Log ============================
         

hi,

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

• WICHTIG: Speichere Combofix auf deinem Desktop.
• Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
• Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
• Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
• Wenn Combofix fertig ist, wird es ein Logfile erstellen.
• Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

ComboFix 14-02-24.02 - ubach 01.03.2014  11:30:57.1.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.3934.1464 [GMT 1:00]
ausgeführt von:: c:\users\ubach\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Desktop *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Spybot - Search and Destroy *Enabled/Outdated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\END
c:\program files (x86)\AmiExt\flashEnhancer\ie\flAShenhancer.dll
c:\program files (x86)\DealPly
c:\program files (x86)\DealPly\DealPly.crx
c:\program files (x86)\DealPly\DealPly.xpi
c:\program files (x86)\DealPly\DealPlyIE.dll
c:\program files (x86)\DealPly\DealPlyIE64.dll
c:\program files (x86)\DealPly\DealPlyUpdateVer.exe
c:\program files (x86)\DealPly\icon.ico
c:\program files (x86)\DealPly\uninst.exe
c:\program files (x86)\SaltarSmart\SaltarSmartBHO.dll
c:\program files (x86)\SaveSense
c:\program files (x86)\SaveSense\icon.ico
c:\program files (x86)\SaveSense\SaveSense.crx
c:\program files (x86)\SaveSense\SaveSense.xpi
c:\program files (x86)\SaveSense\SaveSenseIE.dll
c:\program files (x86)\SaveSense\SaveSenseIE64.dll
c:\program files (x86)\SaveSense\SaveSenseUpdateVer.exe
c:\program files (x86)\SaveSense\uninst.exe
c:\program files (x86)\SaveSenseLive
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdate.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_am.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_ar.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_bg.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_bn.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_ca.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_cs.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_da.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_de.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_el.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_en-GB.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_en.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_es-419.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_es.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_et.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_fa.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_fi.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_fil.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_fr.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_gu.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_hi.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_hr.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_hu.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_id.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_is.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_it.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_iw.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_ja.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_kn.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_ko.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_lt.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_lv.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_ml.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_mr.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_ms.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_nl.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_no.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_pl.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_pt-BR.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_pt-PT.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_ro.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_ru.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_sk.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_sl.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_sr.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_sv.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_sw.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_ta.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_te.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_th.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_tr.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_uk.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_ur.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_vi.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_zh-CN.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_zh-TW.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\psmachine.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\psuser.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\SaveSenseLive.exe
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\SaveSenseLiveBroker.exe
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\SaveSenseLiveHandler.exe
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\SaveSenseLiveHelper.msi
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\SaveSenseLiveOnDemand.exe
c:\program files (x86)\SaveSenseLive\Update\SaveSenseLive.exe
c:\programdata\SaveSenseLive
c:\programdata\SaveSenseLive\Update\Log\SaveSenseLive.log
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_iefogiieekeeeeaiklglonbockmhmkgd_0
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_iefogiieekeeeeaiklglonbockmhmkgd_0\2
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_lekgiimbfodefdaoofhlckefjbgpeilo_0
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_lekgiimbfodefdaoofhlckefjbgpeilo_0\5
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\apeienfgkgpkcdnonjlhegmcokdolfdk
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\apeienfgkgpkcdnonjlhegmcokdolfdk\1.4_0\background.html
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\apeienfgkgpkcdnonjlhegmcokdolfdk\1.4_0\content.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\apeienfgkgpkcdnonjlhegmcokdolfdk\1.4_0\lsdb.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\apeienfgkgpkcdnonjlhegmcokdolfdk\1.4_0\manifest.json
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\apeienfgkgpkcdnonjlhegmcokdolfdk\1.4_0\ZBP.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\eepdgobbljalafadnimmnheedphgdbaf
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\eepdgobbljalafadnimmnheedphgdbaf\2.1\background.html
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\eepdgobbljalafadnimmnheedphgdbaf\2.1\content.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\eepdgobbljalafadnimmnheedphgdbaf\2.1\H_d84H3ftFX.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\eepdgobbljalafadnimmnheedphgdbaf\2.1\lsdb.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\eepdgobbljalafadnimmnheedphgdbaf\2.1\manifest.json
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\background.html
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\crossriderManifest.json
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\manifest.xml
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins.json
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\1_base.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\102_dealply_m.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\103_intext_5_m.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\104_jollywallet_m.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\105_corticas_m.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\108_icm_m.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\119_similar_web_m.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\123_intext_adv_m.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\124_superfish_no_search_no_coupons_m.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\13_CrossriderAppUtils.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\14_CrossriderUtils.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\158_50onred_ads_only_no_fb_m.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\17_jQuery.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\177_crossriderDashboard.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\178_revizer_ws_dynamic_m.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\179_revizer_p_dynamic_m.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\180_bpo_serp_m.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\182_openUrl.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\183_tabsWrapper.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\184_noproblemppc_m.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\19_CHAppAPIWrapper.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\194_retargeting_bi_m.js.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\195_icm_convertmedia_m.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\208_gam_manager.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\21_debug.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\22_resources.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\28_initializer.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\4_jquery_1_7_1.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\47_resources_background.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\64_appApiMessage.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\7_hooks.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\72_appApiValidation.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\78_CrossriderInfo.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\80_CHPopupAppAPI.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\87_ginyas_wrapper.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\9_search_engine_hook.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\91_monetizationLoader.js.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\93_superfish_no_coupons_m.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\plugins\97_resourceApiWrapper.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\userCode\background.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\extensionData\userCode\extension.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\icons\actions\1.png
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\icons\icon128.png
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\icons\icon16.png
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\icons\icon48.png
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\js\api\chrome.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\js\api\cookie.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\js\api\message.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\js\api\pageAction.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\js\api\pageActionBG.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\js\background.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\js\lib\app_api.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\js\lib\bg_app_api.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\js\lib\consts.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\js\lib\cookie_store.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\js\lib\crossriderAPI.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\js\lib\delegate.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\js\lib\events.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\js\lib\extensionDataStore.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\js\lib\installer.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\js\lib\logFile.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\js\lib\logging.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\js\lib\onBGDocumentLoad.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\js\lib\popupResource\newPopup.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\js\lib\popupResource\popup.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\js\lib\reports.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\js\lib\storageWrapper.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\js\lib\updateManager.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\js\lib\util.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\js\lib\xhr.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\js\main.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\js\platformVersion.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\manifest.json
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.26.134_0\popup.html
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\inhjbehnbdinhcgllgihhmicfbjahhpn
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\inhjbehnbdinhcgllgihhmicfbjahhpn\8.1\background.html
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\inhjbehnbdinhcgllgihhmicfbjahhpn\8.1\content.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\inhjbehnbdinhcgllgihhmicfbjahhpn\8.1\lsdb.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\inhjbehnbdinhcgllgihhmicfbjahhpn\8.1\manifest.json
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\inhjbehnbdinhcgllgihhmicfbjahhpn\8.1\QtX6f2.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\background.html
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\chromeCoreFilesIndex.txt
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\crossriderManifest.json
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\manifest.xml
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins.json
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\1_base.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\102_dealply_m.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\103_intext_5_m.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\104_jollywallet_m.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\13_CrossriderAppUtils.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\14_CrossriderUtils.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\155_ibario_pops_m.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\17_jQuery.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\177_crossriderDashboard.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\182_openUrl.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\183_tabsWrapper.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\184_noproblemppc_m.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\19_CHAppAPIWrapper.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\190_pops_5_m.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\191_ciuvo_m.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\207_dbWrapper.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\21_debug.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\22_resources.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\230_revizer_ws_dynamic_b2b_2_m.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\233_revizer_p_dynamic_b2b_2_m.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\28_initializer.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\4_jquery_1_7_1.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\47_resources_background.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\64_appApiMessage.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\72_appApiValidation.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\78_CrossriderInfo.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\80_CHPopupAppAPI.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\91_monetizationLoader.js.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\93_superfish_no_coupons_m.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\97_resourceApiWrapper.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\userCode\background.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\userCode\extension.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\icons\actions\1.png
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\icons\icon128.png
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\icons\icon16.png
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\icons\icon48.png
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\api\chrome.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\api\cookie.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\api\message.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\api\monitor.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\api\pageAction.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\api\pageActionBG.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\background.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\app_api.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\bg_app_api.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\consts.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\cookie_store.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\crossriderAPI.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\delegate.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\events.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\extensionDataStore.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\installer.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\logFile.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\logging.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\onBGDocumentLoad.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\popupResource\newPopup.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\popupResource\popup.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\reports.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\storageWrapper.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\updateManager.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\util.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\xhr.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\main.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\platformVersion.js
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\manifest.json
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\popup.html
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\iefogiieekeeeeaiklglonbockmhmkgd
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\iefogiieekeeeeaiklglonbockmhmkgd\000714.ldb
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\iefogiieekeeeeaiklglonbockmhmkgd\000719.ldb
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\iefogiieekeeeeaiklglonbockmhmkgd\000720.log
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\iefogiieekeeeeaiklglonbockmhmkgd\CURRENT
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\iefogiieekeeeeaiklglonbockmhmkgd\LOCK
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\iefogiieekeeeeaiklglonbockmhmkgd\LOG
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\iefogiieekeeeeaiklglonbockmhmkgd\LOG.old
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\iefogiieekeeeeaiklglonbockmhmkgd\MANIFEST-000718
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lekgiimbfodefdaoofhlckefjbgpeilo
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lekgiimbfodefdaoofhlckefjbgpeilo\000109.ldb
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lekgiimbfodefdaoofhlckefjbgpeilo\000111.ldb
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lekgiimbfodefdaoofhlckefjbgpeilo\000114.ldb
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lekgiimbfodefdaoofhlckefjbgpeilo\000120.ldb
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lekgiimbfodefdaoofhlckefjbgpeilo\000121.log
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lekgiimbfodefdaoofhlckefjbgpeilo\CURRENT
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lekgiimbfodefdaoofhlckefjbgpeilo\LOCK
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lekgiimbfodefdaoofhlckefjbgpeilo\LOG
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lekgiimbfodefdaoofhlckefjbgpeilo\LOG.old
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lekgiimbfodefdaoofhlckefjbgpeilo\MANIFEST-000119
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_apeienfgkgpkcdnonjlhegmcokdolfdk_0.localstorage-journal
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_apeienfgkgpkcdnonjlhegmcokdolfdk_0.localstorage
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eepdgobbljalafadnimmnheedphgdbaf_0.localstorage-journal
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eepdgobbljalafadnimmnheedphgdbaf_0.localstorage
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_iefogiieekeeeeaiklglonbockmhmkgd_0.localstorage
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_inhjbehnbdinhcgllgihhmicfbjahhpn_0.localstorage-journal
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_inhjbehnbdinhcgllgihhmicfbjahhpn_0.localstorage
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_lekgiimbfodefdaoofhlckefjbgpeilo_0.localstorage-journal
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_lekgiimbfodefdaoofhlckefjbgpeilo_0.localstorage
c:\users\ubach\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\ubach\AppData\Local\Temp\nsy2FA9.tmp\inetc.dll
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome.manifest
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\api.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\api\asyncDB.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\api\background.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\api\browserAction.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\api\contextMenu.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\api\dbManager.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\api\dom_bg.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\api\fileManager.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\api\firefox.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\api\firefoxNotifications.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\api\firefoxOmnibox.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\api\message.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\api\pageAction.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\api\request.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\api\tabs.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\api\webRequest.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\api\windowsMessagingHandler.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\background.html
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\baseObject.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\browser.xul
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\core\addressBarChangeObserver.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\core\console.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\core\consts.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\core\delegate.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\core\extensionDataStore.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\core\folderIOWrapper.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\core\httpObserver.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\core\IDBWrapper.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\core\installer.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\core\logFile.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\core\prefs.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\core\progressListenerObserver.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\core\registry.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\core\reloadObserver.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\core\reports.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\core\requestObject.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\core\searchSettings.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\core\uninstallObserver.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\core\updateManager.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\core\utils.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\core\xhr.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\dialog.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\ffCoreFilesIndex.txt
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\main.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\options.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\options.xul
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\platformVersion.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\chrome\content\search_dialog.xul
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\defaults\preferences\prefs.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\manifest.xml
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\plugins.json
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\plugins\1_base.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\plugins\102_dealply_m.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\plugins\103_intext_5_m.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\plugins\104_jollywallet_m.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\plugins\13_CrossriderAppUtils.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\plugins\14_CrossriderUtils.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\plugins\155_ibario_pops_m.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\plugins\16_FFAppAPIWrapper.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\plugins\17_jQuery.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\plugins\177_crossriderDashboard.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\plugins\182_openUrl.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\plugins\183_tabsWrapper.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\plugins\184_noproblemppc_m.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\plugins\190_pops_5_m.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\plugins\191_ciuvo_m.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\plugins\207_dbWrapper.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\plugins\21_debug.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\plugins\22_resources.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\plugins\230_revizer_ws_dynamic_b2b_2_m.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\plugins\233_revizer_p_dynamic_b2b_2_m.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\plugins\28_initializer.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\plugins\4_jquery_1_7_1.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\plugins\47_resources_background.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\plugins\64_appApiMessage.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\plugins\72_appApiValidation.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\plugins\78_CrossriderInfo.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\plugins\91_monetizationLoader.js.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\plugins\93_superfish_no_coupons_m.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\plugins\98_omniCommands.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\userCode\background.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\extensionData\userCode\extension.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\install.rdf
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\locale\en-US\translations.dtd
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\skin\button1.png
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\skin\button2.png
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\skin\button3.png
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\skin\button4.png
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\skin\button5.png
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\skin\crossrider_statusbar.png
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\skin\icon128.png
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\skin\icon16.png
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\skin\icon24.png
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\skin\icon48.png
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\skin\panelarrow-up.png
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\skin\popup.html
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\skin\skin.css
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com\skin\update.css
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome.manifest
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\api.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\api\asyncDB.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\api\background.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\api\browserAction.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\api\contextMenu.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\api\dbManager.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\api\dom_bg.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\api\fileManager.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\api\firefox.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\api\firefoxNotifications.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\api\firefoxOmnibox.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\api\message.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\api\pageAction.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\api\request.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\api\tabs.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\api\webRequest.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\api\windowsMessagingHandler.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\background.html
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\baseObject.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\browser.xul
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\core\addressBarChangeObserver.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\core\console.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\core\consts.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\core\delegate.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\core\extensionDataStore.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\core\folderIOWrapper.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\core\httpObserver.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\core\IDBWrapper.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\core\installer.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\core\logFile.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\core\prefs.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\core\progressListenerObserver.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\core\registry.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\core\reloadObserver.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\core\reports.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\core\requestObject.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\core\searchSettings.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\core\uninstallObserver.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\core\updateManager.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\core\utils.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\core\xhr.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\dialog.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\ffCoreFilesIndex.txt
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\main.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\options.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\options.xul
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\platformVersion.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\chrome\content\search_dialog.xul
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\defaults\preferences\prefs.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\manifest.xml
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins.json
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\1_base.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\102_dealply_m.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\103_intext_5_m.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\104_jollywallet_m.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\105_corticas_m.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\108_icm_m.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\119_similar_web_m.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\123_intext_adv_m.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\124_superfish_no_search_no_coupons_m.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\13_CrossriderAppUtils.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\14_CrossriderUtils.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\155_ibario_pops_m.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\158_50onred_ads_only_no_fb_m.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\16_FFAppAPIWrapper.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\17_jQuery.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\177_crossriderDashboard.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\178_revizer_ws_dynamic_m.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\179_revizer_p_dynamic_m.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\180_bpo_serp_m.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\182_openUrl.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\183_tabsWrapper.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\184_noproblemppc_m.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\190_pops_5_m.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\191_ciuvo_m.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\194_retargeting_bi_m.js.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\195_icm_convertmedia_m.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\207_dbWrapper.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\208_gam_manager.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\21_debug.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\22_resources.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\220_icm_base_m.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\221_icm_downloads_m.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\226_set_campaign_id_m.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\28_initializer.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\4_jquery_1_7_1.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\47_resources_background.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\64_appApiMessage.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\7_hooks.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\72_appApiValidation.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\78_CrossriderInfo.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\87_ginyas_wrapper.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\9_search_engine_hook.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\91_monetizationLoader.js.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\93_superfish_no_coupons_m.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\plugins\98_omniCommands.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\userCode\background.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\extensionData\userCode\extension.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\install.rdf
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\locale\en-US\translations.dtd
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\skin\button1.png
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\skin\button2.png
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\skin\button3.png
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\skin\button4.png
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\skin\button5.png
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\skin\crossrider_statusbar.png
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\skin\icon128.png
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\skin\icon16.png
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\skin\icon24.png
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\skin\icon48.png
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\skin\panelarrow-up.png
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\skin\popup.html
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\skin\skin.css
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com\skin\update.css
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\eauyu@ouao-.org
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\eauyu@ouao-.org\bootstrap.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\eauyu@ouao-.org\chrome.manifest
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\eauyu@ouao-.org\content\bg.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\eauyu@ouao-.org\install.rdf
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\k13z.er@wl-ym.com
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\k13z.er@wl-ym.com\bootstrap.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\k13z.er@wl-ym.com\chrome.manifest
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\k13z.er@wl-ym.com\content\bg.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\k13z.er@wl-ym.com\install.rdf
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\ofloueowzj@dbbdgiwin.co.uk
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\ofloueowzj@dbbdgiwin.co.uk\bootstrap.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\ofloueowzj@dbbdgiwin.co.uk\chrome.manifest
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\ofloueowzj@dbbdgiwin.co.uk\content\bg.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\ofloueowzj@dbbdgiwin.co.uk\install.rdf
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\yoy6_bgg@fzo-pkghags.edu
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\yoy6_bgg@fzo-pkghags.edu\bootstrap.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\yoy6_bgg@fzo-pkghags.edu\chrome.manifest
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\yoy6_bgg@fzo-pkghags.edu\content\bg.js
c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\yoy6_bgg@fzo-pkghags.edu\install.rdf
c:\users\ubach\AppData\Roaming\SaveSense
c:\users\ubach\AppData\Roaming\SaveSense\UpdateProc\config.dat
c:\users\ubach\AppData\Roaming\SaveSense\UpdateProc\info.dat
c:\users\ubach\AppData\Roaming\SaveSense\UpdateProc\STTL.DAT
c:\users\ubach\AppData\Roaming\SaveSense\UpdateProc\TTL.DAT
c:\users\ubach\AppData\Roaming\SaveSense\UpdateProc\UpdateTask.exe
.
.
(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_Level Quality Watcher
-------\Service_savesenselive
-------\Service_savesenselivem
-------\Service_savesenselivem
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-02-01 bis 2014-03-01  ))))))))))))))))))))))))))))))
.
.
2014-03-01 10:39 . 2014-03-01 10:39	0	---ha-w-	c:\users\ubach\AppData\Local\BIT5A4F.tmp
2014-03-01 10:36 . 2014-03-01 10:36	--------	d-----w-	c:\users\Default\AppData\Local\temp
2014-02-27 17:45 . 2014-02-27 17:57	--------	d-----w-	C:\FRST
2014-02-27 17:42 . 2014-02-27 17:42	--------	d-----w-	c:\windows\Migration
2014-02-25 06:27 . 2014-02-25 06:27	84720	----a-w-	c:\windows\system32\drivers\avnetflt.sys
2014-02-24 22:12 . 2014-02-24 22:12	--------	d-----w-	c:\users\ubach\AppData\Roaming\Avira
2014-02-24 22:10 . 2014-02-14 10:00	28600	----a-w-	c:\windows\system32\drivers\avkmgr.sys
2014-02-24 22:10 . 2014-02-14 10:00	131576	----a-w-	c:\windows\system32\drivers\avipbb.sys
2014-02-24 22:10 . 2014-02-14 10:00	108440	----a-w-	c:\windows\system32\drivers\avgntflt.sys
2014-02-24 22:10 . 2014-02-24 22:10	--------	d-----w-	c:\programdata\Avira
2014-02-24 22:10 . 2014-02-24 22:10	--------	d-----w-	c:\program files (x86)\Avira
2014-02-24 21:12 . 2014-02-24 21:12	--------	d-----w-	c:\users\ubach\AppData\Roaming\Malwarebytes
2014-02-24 21:12 . 2014-02-24 21:12	--------	d-----w-	c:\programdata\Malwarebytes
2014-02-24 21:12 . 2013-04-04 13:50	25928	----a-w-	c:\windows\system32\drivers\mbam.sys
2014-02-24 21:12 . 2014-02-24 21:12	--------	d-----w-	c:\program files (x86)\Malwarebytes' Anti-Malware
2014-02-24 21:02 . 2013-09-20 09:49	21040	----a-w-	c:\windows\system32\sdnclean64.exe
2014-02-24 21:02 . 2014-02-24 22:04	--------	d-----w-	c:\programdata\Spybot - Search & Destroy
2014-02-24 21:02 . 2014-02-24 22:04	--------	d-----w-	c:\program files (x86)\Spybot - Search & Destroy 2
2014-02-24 19:36 . 2014-02-24 19:36	--------	d-----w-	c:\program files (x86)\SurFakeePit
2014-02-24 19:35 . 2014-02-24 20:54	--------	d-----w-	C:\AdwCleaner
2014-02-24 09:21 . 2014-02-24 09:21	17858952	----a-w-	c:\windows\SysWow64\FlashPlayerInstaller.exe
2014-02-24 09:04 . 2014-02-24 09:04	--------	d-----w-	c:\program files (x86)\MediaViewerV1
2014-02-24 09:04 . 2014-02-24 09:04	--------	d-----w-	c:\program files (x86)\SavingsBull
2014-02-22 11:54 . 2014-02-22 11:54	0	----a-w-	c:\windows\SysWow64\shoF22B.tmp
2014-02-21 08:52 . 2014-02-06 09:01	10536864	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{5995A018-EFCD-43B7-8EEC-5732C9438F3F}\mpengine.dll
2014-02-21 00:42 . 2014-02-24 19:36	--------	d-----w-	c:\programdata\SurFakeePit
2014-02-21 00:42 . 2014-02-21 00:42	--------	d-----w-	c:\users\ubach\AppData\Local\Packages
2014-02-21 00:42 . 2014-02-24 22:18	--------	d-----w-	c:\programdata\TableeViEwwEer
2014-02-21 00:42 . 2014-02-21 00:42	--------	d-----w-	c:\programdata\apeienfgkgpkcdnonjlhegmcokdolfdk
2014-02-21 00:02 . 2014-02-25 21:42	--------	d-----w-	c:\program files (x86)\Re-markit
2014-02-15 12:28 . 2014-01-08 06:08	330624	----a-w-	c:\windows\system32\PCProtect64.dll
2014-02-15 12:28 . 2014-01-08 06:08	293984	----a-w-	c:\windows\SysWow64\PCProtect.dll
2014-02-15 12:25 . 2014-02-15 12:26	--------	d-----w-	c:\program files (x86)\MediaPlayerEnhance
2014-02-15 12:24 . 2014-02-15 12:30	--------	d-----w-	c:\program files (x86)\Web Protect
2014-02-14 07:31 . 2014-02-14 07:31	--------	d-----w-	c:\program files (x86)\MediaPlayerV1
2014-02-13 14:12 . 2014-02-13 14:12	487517	----a-w-	C:\monitor.exe
2014-02-13 13:43 . 2014-02-13 13:43	34244	----a-w-	C:\monitorsvc.exe
2014-02-12 14:34 . 2013-12-21 09:53	548864	----a-w-	c:\windows\system32\vbscript.dll
2014-02-12 14:34 . 2013-12-21 08:56	454656	----a-w-	c:\windows\SysWow64\vbscript.dll
2014-02-12 13:08 . 2013-12-06 02:30	1882112	----a-w-	c:\windows\system32\msxml3.dll
2014-02-12 13:06 . 2013-12-24 23:09	1987584	----a-w-	c:\windows\SysWow64\d3d10warp.dll
2014-02-12 13:06 . 2013-12-24 22:48	2565120	----a-w-	c:\windows\system32\d3d10warp.dll
2014-02-12 13:06 . 2013-11-26 08:16	3419136	----a-w-	c:\windows\SysWow64\d2d1.dll
2014-02-12 13:06 . 2013-11-22 22:48	3928064	----a-w-	c:\windows\system32\d2d1.dll
2014-02-12 08:51 . 2014-02-12 08:51	0	----a-w-	c:\windows\SysWow64\tmpresp.tmp
2014-02-11 20:24 . 2014-02-12 09:39	--------	d-----w-	c:\users\ubach\AppData\Roaming\sweet-page
2014-01-30 23:51 . 2014-02-24 09:03	--------	d-----w-	C:\temp
2014-01-30 23:51 . 2014-01-30 23:51	--------	d-----w-	c:\program files\Level Quality Watcher
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-02-24 09:21 . 2012-03-26 07:06	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-02-24 09:21 . 2012-03-26 07:06	692616	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2014-02-17 12:34 . 2012-08-15 19:48	88567024	----a-w-	c:\windows\system32\MRT.exe
2014-01-04 11:58 . 2013-12-01 12:21	893552	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
2014-01-04 11:55 . 2013-12-01 12:21	42168	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
2014-01-02 10:43 . 2014-01-02 10:43	893552	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll
2014-01-02 10:42 . 2014-01-02 10:42	42168	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll
2014-01-02 10:42 . 2014-01-02 10:42	1236816	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2013-12-27 17:10 . 2013-08-17 12:50	20312	----a-w-	c:\windows\system32\roboot64.exe
2013-12-18 20:09 . 2014-01-22 11:13	96168	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-12-18 05:13 . 2010-11-21 03:27	270496	------w-	c:\windows\system32\MpSigStub.exe
2013-12-01 12:20 . 2013-12-01 12:20	1236816	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{10AD2C61-0898-4348-8600-14A342F22AC3}]
2014-02-18 09:17	86800	----a-w-	c:\program files (x86)\SavingsBull\IEOptimizer.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{11111111-1111-1111-1111-110311341138}]
2013-11-16 12:51	641384	----a-w-	c:\program files (x86)\Plus-HD-2.5\Plus-HD-2.5-bho.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{11111111-1111-1111-1111-110411411150}]
2014-02-15 12:26	636632	----a-w-	c:\program files (x86)\MediaPlayerEnhance\MediaPlayerEnhance-bho.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}]
2014-01-14 09:04	513136	----a-w-	c:\program files (x86)\SupTab\SupTab.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{44ed99e2-16a6-4b89-80d6-5b21cf42e78b}]
2013-11-12 18:45	409464	----a-w-	c:\programdata\TubeDimmer\IE\common.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{5682CA62-1A80-40AE-82A0-B67833CE75FF}]
2014-01-29 02:26	258088	----a-w-	c:\program files (x86)\Savings Wizard\FrameworkBHO.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{93DBF2BB-A2B3-4683-A92E-57E60751F346}]
2014-01-27 08:30	128800	----a-w-	c:\program files (x86)\Conduit\ValueApps\IE\ValueAppsLoader.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{F791D8AE-47E8-40A5-A913-EB2D2AF29602}]
2014-02-25 06:05	258088	----a-w-	c:\program files (x86)\Coupon Server\FrameworkBHO.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BackgroundContainer"="c:\users\ubach\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll" [2013-10-14 319264]
"Updater"="c:\programdata\Updater\updater.exe" [2013-11-12 481144]
"NextLive"="c:\users\ubach\AppData\Roaming\newnext.me\nengine.dll" [2014-01-06 1283584]
"PC Speed Maximizer"="c:\program files (x86)\PC Speed Maximizer\SPMLauncher.exe" [2013-12-19 135792]
"Driver Pro"="c:\program files (x86)\Driver Pro\DPLauncher.exe" [2012-10-30 340512]
"GoogleChromeAutoLaunch_73C7711AA84B7814E23DBD985C19135B"="c:\program files (x86)\Google\Chrome\Application\chrome.exe" [2013-12-04 863184]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SuiteTray"="c:\program files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [2011-09-20 341360]
"Norton Online Backup"="c:\program files (x86)\Symantec\Norton Online Backup\NOBuClient.exe" [2010-06-01 1155928]
"BackupManagerTray"="c:\program files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" [2012-01-05 296984]
"Dolby Home Theater v4"="c:\dolby pcee4\pcee4.exe" [2011-06-01 506712]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2012-03-23 1105488]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-02-27 291608]
"ControlCenter3"="c:\program files (x86)\Brother\ControlCenter3\brctrcen.exe" [2008-12-24 114688]
"BrStsMon00"="c:\program files (x86)\Browny02\Brother\BrStMonW.exe" [2010-02-09 2621440]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"MobileBroadband"="c:\program files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe" [2013-02-05 76288]
"MailCheck IE Broker"="c:\program files (x86)\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe" [2013-10-16 1766464]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"Updater"="c:\programdata\Updater\Updater.exe" [2013-11-12 481144]
"mobilegeni daemon"="c:\program files (x86)\Mobogenie\DaemonProcess.exe" [2014-01-09 766656]
"SDTray"="c:\program files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [2013-07-25 5624784]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2014-02-14 689744]
"BService"="c:\program files (x86)\Bench\BService\bservice.exe" [2014-02-24 49664]
"Wd"="c:\program files (x86)\Bench\Wd\wd.exe" [2014-02-24 60416]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"Coupon Server-repairJob"="wscript.exe" [2013-10-12 141824]
"Savings Wizard-repairJob"="wscript.exe" [2013-10-12 141824]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"IsMyWinLockerReboot"="msiexec.exe" [2010-11-21 73216]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2012-3-21 1390368]
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\3.8.141\SSScheduler.exe [2014-1-16 329944]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="userinit.exe"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute	REG_MULTI_SZ   	autocheck autochk *\0\0sdnclean64.exe
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages	REG_MULTI_SZ   	scecli c:\program files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 dealplylive;DealPly Live-Dienst (dealplylive);c:\program files (x86)\DealPlyLive\Update\DealPlyLive.exe;c:\program files (x86)\DealPlyLive\Update\DealPlyLive.exe [x]
R2 ProtectMonitor;Protect Monitor;c:\monitorsvc.exe;c:\monitorsvc.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 bcbtums;Bluetooth RAM Firmware Download USB Filter;c:\windows\system32\drivers\bcbtums.sys;c:\windows\SYSNATIVE\drivers\bcbtums.sys [x]
R3 BrYNSvc;BrYNSvc;c:\program files (x86)\Browny02\BrYNSvc.exe;c:\program files (x86)\Browny02\BrYNSvc.exe [x]
R3 btwampfl;btwampfl Bluetooth filter driver;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
R3 dealplylivem;DealPly Live-Dienst (dealplylivem);c:\program files (x86)\DealPlyLive\Update\DealPlyLive.exe;c:\program files (x86)\DealPlyLive\Update\DealPlyLive.exe [x]
R3 EgisTec Ticket Service;EgisTec Ticket Service;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [x]
R3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:\windows\system32\DRIVERS\ew_hwusbdev.sys;c:\windows\SYSNATIVE\DRIVERS\ew_hwusbdev.sys [x]
R3 ew_usbenumfilter;huawei_CompositeFilter;c:\windows\system32\DRIVERS\ew_usbenumfilter.sys;c:\windows\SYSNATIVE\DRIVERS\ew_usbenumfilter.sys [x]
R3 GamesAppIntegrationService;GamesAppIntegrationService;c:\program files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [x]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x]
R3 huawei_cdcacm;huawei_cdcacm;c:\windows\system32\DRIVERS\ew_jucdcacm.sys;c:\windows\SYSNATIVE\DRIVERS\ew_jucdcacm.sys [x]
R3 huawei_ext_ctrl;huawei_ext_ctrl;c:\windows\system32\DRIVERS\ew_juextctrl.sys;c:\windows\SYSNATIVE\DRIVERS\ew_juextctrl.sys [x]
R3 huawei_wwanecm;huawei_wwanecm;c:\windows\system32\DRIVERS\ew_juwwanecm.sys;c:\windows\SYSNATIVE\DRIVERS\ew_juwwanecm.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\3.8.141\McCHSvc.exe;c:\program files\McAfee Security Scan\3.8.141\McCHSvc.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.5;c:\program files\Intel\TurboBoost\TurboBoost.exe;c:\program files\Intel\TurboBoost\TurboBoost.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 iusb3hcs;Intel(R) USB 3.0 Hostcontroller-Switchtreiber;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDFilter.sys [x]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDNServ.sys [x]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDVDisk.sys [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe;c:\program files (x86)\Launch Manager\dsiwmis.exe [x]
S2 ePowerSvc;ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [x]
S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe;c:\program files (x86)\Acer\Registration\GREGsvc.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 IePluginService;IePlugin Service;c:\programdata\IePluginService\PluginService.exe;c:\programdata\IePluginService\PluginService.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 InternetUpdater;Internet Updater;c:\programdata\InternetUpdater\InternetUpdaterService.exe;c:\programdata\InternetUpdater\InternetUpdaterService.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 Live Updater Service;Live Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x]
S2 MgAssistService;MgAssist Service;c:\program files (x86)\Mobogenie\MgAssist.exe;c:\program files (x86)\Mobogenie\MgAssist.exe [x]
S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe;c:\program files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [x]
S2 RemoteEngineService;VuuPC RemoteEngine Service;c:\program files (x86)\VuuPC\remoteengine.exe;c:\program files (x86)\VuuPC\remoteengine.exe [x]
S2 SDScannerService;Spybot-S&D 2 Scanner Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [x]
S2 SDUpdateService;Spybot-S&D 2 Updating Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [x]
S2 SDWSCService;Spybot-S&D 2 Security Center Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [x]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys;c:\windows\SYSNATIVE\DRIVERS\TurboB.sys [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 Update SaltarSmart;Update SaltarSmart;c:\program files (x86)\SaltarSmart\updateSaltarSmart.exe;c:\program files (x86)\SaltarSmart\updateSaltarSmart.exe [x]
S2 Util SaltarSmart;Util SaltarSmart;c:\program files (x86)\SaltarSmart\bin\utilSaltarSmart.exe;c:\program files (x86)\SaltarSmart\bin\utilSaltarSmart.exe [x]
S2 VmbService;Vodafone-Mobile-Broadband-Dienst;c:\program files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe;c:\program files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe [x]
S2 VuuPCConnectivity;VuuPC Connectivity;c:\program files (x86)\VuuPC\Connectivity.exe;c:\program files (x86)\VuuPC\Connectivity.exe [x]
S2 WajamUpdaterV3;WajamUpdaterV3;c:\program files (x86)\Wajam\Updater\WajamUpdaterV3.exe;c:\program files (x86)\Wajam\Updater\WajamUpdaterV3.exe [x]
S2 Wpm;Wpm Service;c:\programdata\WPM\wprotectmanager.exe;c:\programdata\WPM\wprotectmanager.exe [x]
S3 b57xdbd;Broadcom xD Picture Bus Driver Service;c:\windows\system32\DRIVERS\b57xdbd.sys;c:\windows\SYSNATIVE\DRIVERS\b57xdbd.sys [x]
S3 b57xdmp;Broadcom xD Picture vstorp client drv;c:\windows\system32\DRIVERS\b57xdmp.sys;c:\windows\SYSNATIVE\DRIVERS\b57xdmp.sys [x]
S3 BcmVWL;Broadcom Virtual Wireless;c:\windows\system32\DRIVERS\bcmvwl64.sys;c:\windows\SYSNATIVE\DRIVERS\bcmvwl64.sys [x]
S3 bScsiMSa;bScsiMSa;c:\windows\system32\DRIVERS\bScsiMSa.sys;c:\windows\SYSNATIVE\DRIVERS\bScsiMSa.sys [x]
S3 bScsiSDa;bScsiSDa;c:\windows\system32\DRIVERS\bScsiSDa.sys;c:\windows\SYSNATIVE\DRIVERS\bScsiSDa.sys [x]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x]
S3 huawei_enumerator;huawei_enumerator;c:\windows\system32\DRIVERS\ew_jubusenum.sys;c:\windows\SYSNATIVE\DRIVERS\ew_jubusenum.sys [x]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 iusb3hub;Intel(R) USB 3.0-Hubtreiber;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible-Hostcontrollertreiber;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys;c:\windows\SYSNATIVE\DRIVERS\k57nd60a.sys [x]
S3 PCProtect;PCProtect;c:\program files (x86)\Web Protect\PCProtect.exe;c:\program files (x86)\Web Protect\PCProtect.exe [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-01-02 10:51	1210320	----a-w-	c:\program files (x86)\Google\Chrome\Application\31.0.1650.63\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-03-01 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-26 09:21]
.
2014-03-01 c:\windows\Tasks\bench-S-1-5-21-847584245-1588873724-1552598581-1000.job
- c:\program files (x86)\Bench\Updater\updater.exe [2014-01-15 20:38]
.
2014-03-01 c:\windows\Tasks\bench-sys.job
- c:\program files (x86)\Bench\Updater\updater.exe [2014-01-15 20:38]
.
2014-02-24 c:\windows\Tasks\Check for updates (Spybot - Search & Destroy).job
- c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-02-24 09:57]
.
2014-03-01 c:\windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job
- c:\program files (x86)\DealPlyLive\Update\DealPlyLive.exe [2013-11-16 12:48]
.
2014-03-01 c:\windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job
- c:\program files (x86)\DealPlyLive\Update\DealPlyLive.exe [2013-11-16 12:48]
.
2014-03-01 c:\windows\Tasks\Feven 1.5-chromeinstaller.job
- c:\program files (x86)\Feven 1.5\Feven 1.5-chromeinstaller.exe [2013-11-16 12:18]
.
2014-03-01 c:\windows\Tasks\Feven 1.5-codedownloader.job
- c:\program files (x86)\Feven 1.5\Feven 1.5-codedownloader.exe [2013-11-16 12:18]
.
2014-03-01 c:\windows\Tasks\Feven 1.5-enabler.job
- c:\program files (x86)\Feven 1.5\Feven 1.5-enabler.exe [2013-11-16 12:18]
.
2014-03-01 c:\windows\Tasks\Feven 1.5-firefoxinstaller.job
- c:\program files (x86)\Feven 1.5\Feven 1.5-firefoxinstaller.exe [2013-11-16 12:18]
.
2014-03-01 c:\windows\Tasks\Feven 1.5-updater.job
- c:\program files (x86)\Feven 1.5\Feven 1.5-updater.exe [2013-11-16 12:18]
.
2014-03-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-11-15 10:11]
.
2014-03-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-11-15 10:11]
.
2014-03-01 c:\windows\Tasks\MediaPlayerEnhance-chromeinstaller.job
- c:\program files (x86)\MediaPlayerEnhance\MediaPlayerEnhance-chromeinstaller.exe [2014-02-15 12:25]
.
2014-03-01 c:\windows\Tasks\MediaPlayerEnhance-codedownloader.job
- c:\program files (x86)\MediaPlayerEnhance\MediaPlayerEnhance-codedownloader.exe [2014-02-15 12:26]
.
2014-03-01 c:\windows\Tasks\MediaPlayerEnhance-enabler.job
- c:\program files (x86)\MediaPlayerEnhance\MediaPlayerEnhance-enabler.exe [2014-02-15 12:26]
.
2014-03-01 c:\windows\Tasks\MediaPlayerEnhance-firefoxinstaller.job
- c:\program files (x86)\MediaPlayerEnhance\MediaPlayerEnhance-firefoxinstaller.exe [2014-02-15 12:26]
.
2014-03-01 c:\windows\Tasks\MediaPlayerEnhance-updater.job
- c:\program files (x86)\MediaPlayerEnhance\MediaPlayerEnhance-updater.exe [2014-02-15 12:26]
.
2014-03-01 c:\windows\Tasks\Plus-HD-2.5-chromeinstaller.job
- c:\program files (x86)\Plus-HD-2.5\Plus-HD-2.5-chromeinstaller.exe [2013-11-16 12:50]
.
2014-03-01 c:\windows\Tasks\Plus-HD-2.5-codedownloader.job
- c:\program files (x86)\Plus-HD-2.5\Plus-HD-2.5-codedownloader.exe [2013-11-16 12:50]
.
2014-03-01 c:\windows\Tasks\Plus-HD-2.5-enabler.job
- c:\program files (x86)\Plus-HD-2.5\Plus-HD-2.5-enabler.exe [2013-11-16 12:51]
.
2014-03-01 c:\windows\Tasks\Plus-HD-2.5-firefoxinstaller.job
- c:\program files (x86)\Plus-HD-2.5\Plus-HD-2.5-firefoxinstaller.exe [2013-11-16 12:50]
.
2014-03-01 c:\windows\Tasks\Plus-HD-2.5-updater.job
- c:\program files (x86)\Plus-HD-2.5\Plus-HD-2.5-updater.exe [2013-11-16 12:51]
.
2014-03-01 c:\windows\Tasks\Re-markit Update.job
- c:\program files (x86)\Re-markit\ReMarkit_up.exe [2013-11-16 00:02]
.
2014-03-01 c:\windows\Tasks\Re-markit_wd.job
- c:\program files (x86)\Re-markit\Re-markit_wd.exe [2014-02-21 00:02]
.
2014-02-24 c:\windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job
- c:\program files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2014-02-24 09:49]
.
2014-02-24 c:\windows\Tasks\Scan the system (Spybot - Search & Destroy).job
- c:\program files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2014-02-24 09:51]
.
.
         

--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{11111111-1111-1111-1111-110311851132}]
2013-11-16 12:18	966504	----a-w-	c:\program files (x86)\Feven 1.5\Feven 1.5-bho64.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{4DA0B632-7C99-8C1D-DCBF-BD0F1E2B1319}]
2014-02-21 00:42	473600	----a-w-	c:\programdata\TableeViEwwEer\n.x64.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{5E6482C2-E829-088B-C304-78700836145C}]
2014-01-29 09:06	476672	----a-w-	c:\programdata\easytoshhop\04H.x64.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{CD6280C5-A9FE-7F27-3BBA-5AED114ECD02}]
2014-01-29 09:06	476672	----a-w-	c:\programdata\savvinugatoyou\xFINLm4SF.x64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-02-20 170264]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-02-20 398616]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-02-20 440600]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-12-27 12343400]
"RtHDVBg_Dolby"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2011-11-15 1156712]
"IntelTBRunOnce"="wscript.exe" [2013-10-12 168960]
"Broadcom Wireless Manager UI"="c:\program files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.exe" [2012-05-25 7138816]
"Power Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2012-02-07 1829768]
"InstantUpdate"="c:\program files\Acer\Acer Instant Service\InstantUpdate\iuDaemon.exe" [2012-04-06 124520]
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://feed.snapdo.com/?publisher=AdKnowledgeYB&dpid=AdKnowledgeYB&co=DE&userid=b5ab5f3a-1c58-d154-e65d-34092d08df62&searchtype=hp&installDate=16/11/2013
uLocal Page = c:\windows\system32\blank.htm
mDefault_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1392150242&from=cor&uid=ST9500325AS_5VETE7SWXXXX5VETE7SW&q={searchTerms}
mDefault_Page_URL = about:blank
mStart Page = about:blank
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1392150242&from=cor&uid=ST9500325AS_5VETE7SWXXXX5VETE7SW&q={searchTerms}
uSearchAssistant = hxxp://feed.snapdo.com/?publisher=AdKnowledgeYB&dpid=AdKnowledgeYB&co=DE&userid=b5ab5f3a-1c58-d154-e65d-34092d08df62&searchtype=ds&q={searchTerms}&installDate=16/11/2013
TCP: DhcpNameServer = 192.168.2.1
TCP: Interfaces\{3248080C-DCFD-4C11-B392-810312A86CBE}: NameServer = 139.7.30.125,139.7.30.126
Handler: webde - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - c:\program files (x86)\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll
FF - ProfilePath - c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\
FF - prefs.js: browser.search.selectedEngine - Web Search
FF - prefs.js: browser.startup.homepage - hxxp://feed.snapdo.com/?publisher=AdKnowledgeYB&dpid=AdKnowledgeYB&co=DE&userid=b5ab5f3a-1c58-d154-e65d-34092d08df62&searchtype=hp&installDate=16/11/2013
FF - prefs.js: keyword.URL - hxxp://feed.snapdo.com/?publisher=AdKnowledgeYB&dpid=AdKnowledgeYB&co=DE&userid=b5ab5f3a-1c58-d154-e65d-34092d08df62&searchtype=ds&installDate=16/11/2013&q=
FF - ExtSQL: 2014-01-10 12:27; {94cd2cc3-083f-49ba-a218-4cda4b4829fd}; c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\{94cd2cc3-083f-49ba-a218-4cda4b4829fd}
FF - ExtSQL: 2014-01-18 13:45; {8b337819-d1e8-48d3-8178-168ae8c99c36}; c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\{8b337819-d1e8-48d3-8178-168ae8c99c36}
FF - ExtSQL: 2014-01-21 09:04; {ad9a41d2-9a49-4fa6-a79e-71a0785364c8}; c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}
FF - ExtSQL: 2014-01-21 09:04; ffxtlbr@mysearchdial.com; c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\ffxtlbr@mysearchdial.com
FF - ExtSQL: 2014-01-29 03:55; ext@flashenhancer.com; c:\program files (x86)\AmiExt\flashEnhancer\ff
FF - ExtSQL: 2014-01-29 10:44; yoy6_bgg@fzo-pkghags.edu; c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\yoy6_bgg@fzo-pkghags.edu
FF - ExtSQL: 2014-01-29 10:44; k13z.er@wl-ym.com; c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\k13z.er@wl-ym.com
FF - ExtSQL: 2014-02-14 08:31; ext@MediaPlayerV1alpha4241.net; c:\program files (x86)\MediaPlayerV1\MediaPlayerV1alpha4241\ff
FF - ExtSQL: 2014-02-15 13:28; 0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com; c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com
FF - ExtSQL: 2014-02-21 01:02; {abdfcd24-f4a1-4248-b9c4-4ee53f915331}; c:\program files (x86)\Re-markit\155.xpi
FF - ExtSQL: 2014-02-21 10:47; ofloueowzj@dbbdgiwin.co.uk; c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\ofloueowzj@dbbdgiwin.co.uk
FF - ExtSQL: 2014-02-21 10:47; eauyu@ouao-.org; c:\users\ubach\AppData\Roaming\Mozilla\Firefox\Profiles\latyl6j5.default\extensions\eauyu@ouao-.org
FF - ExtSQL: 2014-02-24 10:04; ext@MediaViewerV1alpha1415.net; c:\program files (x86)\MediaViewerV1\MediaViewerV1alpha1415\ff
FF - user.js: extensions.mysearchdial.hmpg - true
FF - user.js: extensions.mysearchdial.hmpgUrl - hxxp://start.mysearchdial.com/?f=1&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0Bzzzzzz0EtAtDyDyEyBtB0EtCzzyCyDtN0D0Tzu0SyByDtCtN1L2XzutBtFtBtFtCyDtFtCyDzytBtN1L1CzutDzytDtCtG1T&cr=97825655&ir=
FF - user.js: extensions.mysearchdial.dfltSrch - true
FF - user.js: extensions.mysearchdial.srchPrvdr - Mysearchdial
FF - user.js: extensions.mysearchdial.dnsErr - true
FF - user.js: extensions.mysearchdial_i.newTab - false
FF - user.js: extensions.mysearchdial.newTabUrl - hxxp://start.mysearchdial.com/?f=2&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0Bzzzzzz0EtAtDyDyEyBtB0EtCzzyCyDtN0D0Tzu0SyByDtCtN1L2XzutBtFtBtFtCyDtFtCyDzytBtN1L1CzutDzytDtCtG1T&cr=97825655&ir=
FF - user.js: extensions.mysearchdial.tlbrSrchUrl - hxxp://start.mysearchdial.com/?f=3&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0Bzzzzzz0EtAtDyDyEyBtB0EtCzzyCyDtN0D0Tzu0SyByDtCtN1L2XzutBtFtBtFtCyDtFtCyDzytBtN1L1CzutDzytDtCtG1T&cr=97825655&ir=&q=
FF - user.js: extensions.mysearchdial.id - B888E305472E1865
FF - user.js: extensions.mysearchdial.instlDay - 16091
FF - user.js: extensions.mysearchdial.vrsn - 1.8.21.0
FF - user.js: extensions.mysearchdial.vrsni - 1.8.21.0
FF - user.js: extensions.mysearchdial_i.vrsnTs - 1.8.21.09:4:23
FF - user.js: extensions.mysearchdial.prtnrId - mysearchdial
FF - user.js: extensions.mysearchdial.prdct - mysearchdial
FF - user.js: extensions.mysearchdial.aflt - irmsd0101
FF - user.js: extensions.mysearchdial_i.smplGrp - none
FF - user.js: extensions.mysearchdial.tlbrId - base
FF - user.js: extensions.mysearchdial.instlRef - 
FF - user.js: extensions.mysearchdial.dfltLng - 
FF - user.js: extensions.mysearchdial.appId - {CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}
FF - user.js: extensions.mysearchdial.excTlbr - false
FF - user.js: extensions.mysearchdial_i.hmpg - true
FF - user.js: extensions.mysearchdial.cr - 97825655
FF - user.js: extensions.mysearchdial.cd - 2XzuyEtN2Y1L1Qzu0Bzzzzzz0EtAtDyDyEyBtB0EtCzzyCyDtN0D0Tzu0SyByDtCtN1L2XzutBtFtBtFtCyDtFtCyDzytBtN1L1CzutDzytDtCtG1T
FF - user.js: extensions.mysearchdial.AL - 2
FF - user.js: extensions.irmysearch.aflt - irmsd0101
FF - user.js: extensions.irmysearch.instlRef - 
FF - user.js: extensions.irmysearch.cr - 97825655
FF - user.js: extensions.irmysearch.cd - 2XzuyEtN2Y1L1Qzu0Bzzzzzz0EtAtDyDyEyBtB0EtCzzyCyDtN0D0Tzu0SyByDtCtN1L2XzutBtFtBtFtCyDtFtCyDzytBtN1L1CzutDzytDtCtG1T
FF - user.js: extensions.autoDisableScopes - 0
FF - user.js: extensions.shownSelectionUI - true
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
BHO-{0f21b1e5-5afc-43c9-9c66-515046e92ec2} - c:\program files (x86)\SaveSense\SaveSenseIE.dll
BHO-{5A60B6BB-FA81-4EFA-AB9C-A820E2143736} - c:\program files (x86)\AmiExt\flashEnhancer\ie\flashEnhancer.dll
BHO-{7547af2a-886e-4dd8-82f9-705a0859f72d} - c:\program files (x86)\SaltarSmart\SaltarSmartBHO.dll
BHO-{ae48ed75-5a56-4c5f-bbce-6f1ac3875f66} - c:\program files (x86)\DealPly\DealPlyIE.dll
BHO-{d99a4ec9-00bd-4fe4-85a5-4db018351265} - c:\program files (x86)\SaltarSmart\SaltarSmartBHO.dll
Toolbar-Locked - (no file)
Notify-SDWinLogon - SDWinLogon.dll
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
WebBrowser-{FA23121F-EE7C-4BD8-8C06-123D087282C5} - (no file)
HKLM-Run-ETDCtrl - c:\program files (x86)\Elantech\ETDCtrl.exe
AddRemove-DealPly - c:\program files (x86)\DealPly\uninst.exe
AddRemove-SaveSense - c:\program files (x86)\SaveSense\uninst.exe
AddRemove-{532970A2-464B-73CB-BBC4-F209EAD3EEBE} - c:\programdata\easytoshhop\04H.exe
AddRemove-{A2616871-3463-BCEE-5AFA-73773317A381} - c:\programdata\savvinugatoyou\xFINLm4SF.exe
AddRemove-FLV Player - c:\program files (x86)\FLV Player\Uninstall\__Uninstall_.exe
AddRemove-SaveSense - c:\users\ubach\AppData\Roaming\SaveSense\UpdateProc\UpdateTask.exe
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_70_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_70_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_70_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_70_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_70.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.12"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_70.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_70.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_70.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\Launch Manager\LMutilps32.exe
C:\monitor.exe
c:\windows\SysWOW64\Rundll32.exe
c:\program files (x86)\VuuPC\RemoteEngineHelper.exe
c:\program files (x86)\VuuPC\RemoteEngineHelper.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2014-03-01  11:44:26 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2014-03-01 10:44
.
Vor Suchlauf: 10 Verzeichnis(se), 422.176.256.000 Bytes frei
Nach Suchlauf: 18 Verzeichnis(se), 421.669.576.704 Bytes frei
.
- - End Of File - - 0E5B7CAE08E002D7F03F9CB0EBEB9D29
         

[/CODE]

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.