Hoel Media Player

Blondie17 · 28.02.2014, 14:12

Habe seit gestern Abend das Problem das mir in allen Browsern (IE,FF,Chrome und Opera) immer der Link "Hole Media Player" angezeigt wird. Habe schon alles mögliche, als Bsp. Adcleaner selber getestet, aber nichts hat geholfen.
Ich brauche Hilfe, was kann ich tun?
LG Blondie

cosinus · 28.02.2014, 14:46

Hallo und

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!

Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Blondie17 · 28.02.2014, 15:02

Ich bin zu blöd dazu, diese Logfiles zu exportieren

cosinus · 28.02.2014, 15:07

Was willst du da exportieren, genauer bitte, ich bin kein

Blondie17 · 28.02.2014, 19:37

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-02-2014 02
Ran by Tina (administrator) on TINA-PC on 28-02-2014 19:28:49
Running from C:\Users\Tina\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Adobe Systems Incorporated) c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Acer Incorporated) C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
(McAfee, Inc.) C:\Windows\system32\mfevtps.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
() c:\Program Files\SavingsbullFilter\SavingsbullFilterService64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe
(Acer Group) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesApp64.exe
(PixArt Imaging Incorporation) C:\Windows\PixArt\PAC7311\Monitor.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Google Inc.) C:\Users\Tina\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Tina\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Tina\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Tina\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Tina\AppData\Local\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [PAC7311_Monitor] - C:\Windows\PixArt\PAC7311\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation)
HKLM-x32\...\Run: [mcui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-01-28] (McAfee, Inc.)
HKLM-x32\...\Run: [mcpltui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-01-28] (McAfee, Inc.)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2640103502-2235371180-2021522901-1001\...\Run: [TomTomHOME.exe] - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [248208 2013-08-27] (TomTom)
HKU\S-1-5-21-2640103502-2235371180-2021522901-1001\...\Run: [APISupport] - "C:\Windows\SysWOW64\Rundll32.exe" "C:\Users\Tina\AppData\Local\Conduit\APISupport\APISupport.dll",DLLRunAPISupport <===== ATTENTION
HKU\S-1-5-21-2640103502-2235371180-2021522901-1001\...\MountPoints2: {5fc510bd-e24b-11e1-ac98-c89cdc283f74} - G:\LaunchU3.exe -a

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKCU - DefaultScope {59A13F7D-7D6F-4446-A64D-7B6C6C9FA4A8} URL = hxxp://de.search.yahoo.com/search?fr=mcafee&p={SearchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {59A13F7D-7D6F-4446-A64D-7B6C6C9FA4A8} URL = hxxp://de.search.yahoo.com/search?fr=mcafee&p={SearchTerms}
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\Program Files (x86)\FlashFXP\IEFlash.dll (IniCom Networks, Inc.)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\McAfee\MSC\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\MSC\McSnIePl.dll (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Tina\AppData\Roaming\Mozilla\Firefox\Profiles\6i3cqqff.default
FF DefaultSearchEngine: Sichere Suche
FF SelectedSearchEngine: Sichere Suche
FF Keyword.URL: hxxp://de.search.yahoo.com/search?fr=mcafee&type=A111DE739&p=
FF SearchEngineOrder.1: Sichere Suche
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Tina\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Tina\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\awesomehp.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2014-02-27]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2014-02-27]

Chrome: 
=======
CHR HomePage: hxxp://google.de/
CHR Extension: (WEB.DE MailCheck) - C:\Users\Tina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo [2014-02-21]
CHR Extension: (Google Wallet) - C:\Users\Tina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR HKCU\...\Chrome\Extension: [caloheeledhajihipjihanmihhegodlc] - C:\Users\Tina\AppData\Local\CRE\caloheeledhajihipjihanmihhegodlc.crx [2013-08-22]
CHR HKCU\...\Chrome\Extension: [engeblojhfeingnjnfpiceofljnjpldp] - C:\Users\Tina\AppData\Local\CRE\engeblojhfeingnjnfpiceofljnjpldp.crx [2013-03-27]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Users\Tina\AppData\Roaming\DVDVideoSoft\dvsYoutubeDownload.crx [2012-09-12]
CHR HKLM-x32\...\Chrome\Extension: [caloheeledhajihipjihanmihhegodlc] - C:\Users\Tina\AppData\Local\CRE\caloheeledhajihipjihanmihhegodlc.crx [2012-09-12]
CHR HKLM-x32\...\Chrome\Extension: [engeblojhfeingnjnfpiceofljnjpldp] - C:\Users\Tina\AppData\Local\CRE\engeblojhfeingnjnfpiceofljnjpldp.crx [2013-03-27]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2014-02-27]
CHR HKLM-x32\...\Chrome\Extension: [pelmeidfhdlhlbjimpabfcbnnojbboma] - C:\Users\Tina\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv2.crx [2014-02-27]
CHR StartMenuInternet: Google Chrome - C:\Users\Tina\AppData\Local\Google\Chrome\Application\chrome.exe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 GREGService; C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe [23584 2010-01-08] (Acer Incorporated)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178528 2014-01-28] (McAfee, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [602944 2013-08-02] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1025232 2013-12-11] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-01-27] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [185792 2014-01-27] (McAfee, Inc.)
R2 MOBKbackup; C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe [231224 2010-04-13] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3993576 2011-11-17] (INCA Internet Co., Ltd.)
R2 SavingsbullFilterService64; c:\Program Files\SavingsbullFilter\SavingsbullFilterService64.exe [210432 2014-02-12] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2123584 2011-12-14] (TuneUp Software)
R2 Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [243232 2010-01-29] (Acer Group)
S2 NewPlayerUpdaterService; "C:\Program Files (x86)\NewPlayer\NewPlayerUpdaterService.exe" [X]

==================== Drivers (Whitelisted) ====================

R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70592 2014-01-27] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R2 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [180272 2014-01-27] (McAfee, Inc.)
R2 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311600 2014-01-27] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [520696 2014-01-27] (McAfee, Inc.)
R2 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [783864 2014-01-27] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [411944 2013-11-26] (McAfee, Inc.)
S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [96112 2013-11-26] (McAfee, Inc.)
R2 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [344688 2014-01-27] (McAfee, Inc.)
R1 MOBKFilter; C:\Windows\System32\DRIVERS\MOBK.sys [66040 2010-04-13] (Mozy, Inc.)
R1 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [61592 2013-12-17] (NetFilterSDK.com)
S3 NPPTNT2; C:\Windows\SysWOW64\npptNT2.sys [4682 2004-12-31] (INCA Internet Co., Ltd.)
R3 PAC7311; C:\Windows\System32\DRIVERS\PA707UCM.SYS [524800 2007-03-14] (PixArt Imaging Inc.)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [11856 2011-12-12] (TuneUp Software)
S3 dump_wmimmc; \??\C:\Program Files (x86)\ShotOnline\GameGuard\dump_wmimmc.sys [X]
S3 PCDSRVC{1368CD8C-A2A5DE4D-06020101}_0; \??\c:\users\admini~1\appdata\local\temp\ksyl9fm2qzjt\pcdrdiag\bin\pcdsrvc_x64.pkms [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-28 19:28 - 2014-02-28 19:30 - 00018717 _____ () C:\Users\Tina\Downloads\FRST.txt
2014-02-28 19:28 - 2014-02-28 19:28 - 02155520 _____ (Farbar) C:\Users\Tina\Downloads\FRST64.exe
2014-02-28 19:28 - 2014-02-28 19:28 - 00000000 ____D () C:\FRST
2014-02-28 19:26 - 2014-02-28 19:27 - 04892480 _____ (WinZip International LLC ) C:\Users\Tina\Downloads\wzmp_8 (2).exe
2014-02-28 15:01 - 2014-02-28 15:01 - 00003154 _____ () C:\Users\Tina\Desktop\log.xml
2014-02-28 14:57 - 2014-02-28 19:25 - 00000000 ____D () C:\Users\Tina\AppData\Roaming\Nico Mak Computing
2014-02-28 14:57 - 2014-02-28 14:57 - 04892480 _____ (WinZip International LLC ) C:\Users\Tina\Downloads\wzmp_8 (1).exe
2014-02-28 14:42 - 2014-02-28 14:42 - 00003114 _____ () C:\Windows\System32\Tasks\{A8ADE526-7CC9-4F86-BB3D-F6393CD7B753}
2014-02-28 14:41 - 2014-02-28 14:41 - 00668792 _____ () C:\Users\Tina\Downloads\bremove.exe
2014-02-28 14:29 - 2014-02-28 14:29 - 00669304 _____ () C:\Users\Tina\Downloads\kremove.exe
2014-02-28 14:18 - 2014-02-28 14:18 - 04892480 _____ (WinZip International LLC ) C:\Users\Tina\Downloads\wzmp_8.exe
2014-02-28 13:46 - 2014-02-28 13:46 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-02-28 13:33 - 2014-02-28 13:33 - 00000169 _____ () C:\Users\Tina\Desktop\Fixlist.txt
2014-02-28 13:20 - 2014-02-28 13:20 - 00001316 _____ () C:\Users\Tina\Desktop\AdwCleaner[S2].txt
2014-02-28 13:16 - 2014-02-28 13:16 - 00001324 _____ () C:\Users\Tina\Desktop\AdwCleaner[S1].txt
2014-02-28 13:11 - 2014-02-28 13:11 - 00032551 _____ () C:\Users\Tina\Desktop\AdwCleaner[S0].txt
2014-02-28 13:03 - 2014-02-28 14:55 - 00000000 ____D () C:\AdwCleaner
2014-02-28 13:02 - 2014-02-28 13:02 - 01244192 _____ () C:\Users\Tina\Downloads\adwcleaner_3.0.2.0.exe
2014-02-28 12:36 - 2014-02-28 12:36 - 00003162 _____ () C:\Windows\System32\Tasks\{0D24DEA7-A800-4555-B9B2-FD9475AFFE5C}
2014-02-28 12:36 - 2014-02-28 12:36 - 00002635 _____ () C:\Users\Tina\Downloads\legitcheck.hta
2014-02-28 12:35 - 2014-02-28 12:35 - 25842736 _____ (Microsoft Corporation) C:\Users\Tina\Downloads\wmp11-windowsxp-x86-DE-DE (2).exe
2014-02-28 12:27 - 2014-02-28 12:27 - 00003162 _____ () C:\Windows\System32\Tasks\{CDA5129A-6E85-4CB8-8EF1-2DF541A7C27F}
2014-02-28 12:26 - 2014-02-28 12:27 - 25842736 _____ (Microsoft Corporation) C:\Users\Tina\Downloads\wmp11-windowsxp-x86-DE-DE (1).exe
2014-02-28 11:07 - 2014-02-28 12:36 - 00003025 _____ () C:\Windows\wmsetup.log
2014-02-28 11:07 - 2014-02-28 11:07 - 00003150 _____ () C:\Windows\System32\Tasks\{D6EE7DE4-54CE-4AB8-9051-9BC0935D73B1}
2014-02-28 11:06 - 2014-02-28 11:07 - 25842736 _____ (Microsoft Corporation) C:\Users\Tina\Downloads\wmp11-windowsxp-x86-DE-DE.exe
2014-02-27 22:44 - 2014-02-28 18:21 - 00001856 _____ () C:\Users\Public\Desktop\McAfee Internet Security.lnk
2014-02-27 22:44 - 2013-09-23 13:49 - 00197704 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\HipShieldK.sys
2014-02-27 22:43 - 2014-02-28 07:09 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-02-27 22:43 - 2014-02-27 22:43 - 00000000 ____D () C:\Program Files\McAfee.com
2014-02-27 22:43 - 2014-02-27 22:43 - 00000000 ____D () C:\Program Files (x86)\McAfee.com
2014-02-27 22:37 - 2014-01-27 08:37 - 00185792 _____ (McAfee, Inc.) C:\Windows\system32\mfevtps.exe
2014-02-27 22:30 - 2014-02-27 22:30 - 05143616 _____ (McAfee, Inc.) C:\Users\Tina\Downloads\McAfeeSetup.exe
2014-02-27 22:29 - 2014-02-27 22:32 - 00000000 ____D () C:\Program Files\stinger
2014-02-27 21:45 - 2014-02-27 21:45 - 00000000 ____D () C:\Users\Tina\AppData\Local\Tuguu_SL
2014-02-27 21:44 - 2014-02-27 22:13 - 00000000 ____D () C:\Users\Tina\AppData\Local\cache
2014-02-27 21:44 - 2014-02-27 21:44 - 00000000 ____D () C:\Users\Tina\.android
2014-02-27 21:44 - 2014-02-27 21:44 - 00000000 _____ () C:\Users\Tina\daemonprocess.txt
2014-02-27 21:39 - 2014-02-27 21:39 - 00391152 _____ () C:\Users\Tina\Downloads\Setup.exe
2014-02-27 21:26 - 2014-02-28 19:30 - 12115884 _____ () C:\Windows\system32\SavingsBullFilterService.log
2014-02-27 21:26 - 2014-02-27 21:26 - 00000000 _____ () C:\Windows\SysWOW64\Service.log
2014-02-27 21:26 - 2014-02-27 21:26 - 00000000 _____ () C:\Windows\system32\Service.log
2014-02-27 19:11 - 2014-02-27 19:11 - 00000000 ____D () C:\Users\Tina\AppData\Local\{9FBE7332-70E3-4053-99AC-D575B013CE76}
2014-02-27 19:07 - 2014-02-27 19:10 - 00000000 ____D () C:\Users\Tina\Desktop\Bewerbungen
2014-02-25 20:17 - 2014-01-09 03:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-02-25 20:17 - 2014-01-03 23:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-02-25 19:32 - 2014-02-25 19:32 - 00740864 _____ () C:\Users\Tina\Downloads\game_HalloweenPuzzle_HMv32.tar
2014-02-25 19:30 - 2014-02-25 19:30 - 02265600 _____ () C:\Users\Tina\Downloads\game_theelevatorofthedeadv2Marsu.tar
2014-02-25 19:28 - 2014-02-25 19:28 - 00723456 _____ () C:\Users\Tina\Downloads\game_HidStars-FantasyNightAS3hitman.tar
2014-02-25 19:26 - 2014-02-25 19:26 - 00375808 _____ () C:\Users\Tina\Downloads\game_penguinbrothers_v32HM.tar
2014-02-23 18:54 - 2014-02-23 19:19 - 00000809 _____ () C:\Users\Tina\Desktop\Neues Textdokument.txt
2014-02-22 22:47 - 2014-02-22 22:47 - 05627904 _____ () C:\Users\Tina\Downloads\BubbleWitchAS3v2DOT.tar
2014-02-22 22:36 - 2014-02-22 22:36 - 01841664 _____ () C:\Users\Tina\Downloads\mahjonggdarkdimensionsv32Ph.tar
2014-02-22 11:43 - 2014-02-22 15:57 - 00023156 _____ () C:\Users\Tina\Desktop\ESt2013_Schlechte_Sascha.elfo
2014-02-21 20:32 - 2014-02-21 20:32 - 00000000 ____D () C:\Program Files (x86)\SavingsBull
2014-02-16 08:02 - 2014-02-16 10:08 - 00145629 _____ () C:\Users\Tina\ESt2013_Ballakowski_Alexander_und_Nina.elfo
2014-02-15 10:02 - 2014-02-15 10:02 - 00620544 _____ () C:\Users\Tina\Downloads\BalloonsBlastv2AS3Buzz.tar
2014-02-15 10:00 - 2014-02-15 10:00 - 02308096 _____ () C:\Users\Tina\Downloads\BakersGamev2AS3Buzz.tar
2014-02-14 22:27 - 2014-02-14 22:27 - 06267392 _____ () C:\Users\Tina\Downloads\Boingz3v2AS3TyRO.tar
2014-02-14 10:19 - 2014-02-14 10:19 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-02-14 10:19 - 2014-02-14 10:19 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-02-12 21:32 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-02-12 21:32 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-02-12 21:32 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-02-12 21:32 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-02-12 21:32 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-02-12 21:32 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-02-12 21:32 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-02-12 21:32 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-02-12 21:32 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-02-12 21:32 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-02-12 21:32 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-02-12 21:32 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-02-12 21:32 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-02-12 21:32 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-02-12 21:32 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-02-12 21:32 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-02-12 21:31 - 2013-09-25 03:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-02-12 21:31 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-02-12 21:14 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-12 21:14 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-12 21:13 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-12 21:13 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-12 21:13 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-12 21:13 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-12 21:13 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-12 21:13 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-12 21:13 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-12 21:13 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-12 21:13 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-12 21:13 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-12 21:13 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-12 21:13 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-12 21:13 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-12 21:13 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-12 21:13 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-12 21:13 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-12 21:13 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-12 21:13 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-12 21:13 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-12 21:13 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-12 21:13 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-12 21:13 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-12 21:13 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-12 21:13 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-12 21:13 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-12 21:13 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-12 21:13 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-12 21:13 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-12 21:13 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-12 21:13 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-12 21:13 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-12 21:13 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-12 21:13 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-12 21:13 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-12 21:13 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-12 21:13 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-12 21:13 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-12 21:13 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-12 21:13 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-12 17:45 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-12 17:45 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-12 17:45 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 17:45 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 17:45 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-12 17:45 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-12 17:44 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-12 17:44 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 17:44 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-12 17:44 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-12 17:44 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 17:44 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-12 17:44 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-12 17:44 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-12 17:44 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-12 17:44 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 17:44 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-12 17:44 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-12 17:44 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-12 17:44 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-12 17:44 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-12 17:44 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-12 17:44 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-12 17:44 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-12 17:44 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-12 17:44 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-12 17:44 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-12 17:44 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-06 23:27 - 2014-02-14 10:19 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-02-06 23:27 - 2014-02-14 10:19 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-02-06 23:27 - 2014-02-06 23:27 - 00005933 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-02-06 20:09 - 2014-02-13 22:07 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-02-06 20:09 - 2014-02-06 20:09 - 00000000 ____D () C:\Users\Tina\AppData\Roaming\Opera Software
2014-02-06 20:09 - 2014-02-06 20:09 - 00000000 ____D () C:\Users\Tina\AppData\Local\Opera Software
2014-02-06 19:58 - 2014-02-27 21:26 - 00000000 ____D () C:\Program Files\SavingsbullFilter
2014-02-05 20:04 - 2014-02-05 20:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-05 20:04 - 2014-02-05 20:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-05 20:03 - 2014-02-05 20:03 - 00283120 _____ (Mozilla) C:\Users\Tina\Desktop\Firefox Setup Stub 27.0.exe
2014-02-05 19:21 - 2014-02-05 19:21 - 00062519 _____ () C:\Users\Tina\ESt2013_Cotterill_Kimberley_Jenniferneu.elfo
2014-02-04 19:48 - 2014-02-04 19:49 - 00061590 _____ () C:\Users\Tina\ESt2013_Cotterill_Kimberley_Jennifer.elfo
2014-02-04 19:26 - 2014-02-04 19:26 - 00001205 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk
2014-02-04 19:25 - 2014-02-14 18:22 - 00000000 ____D () C:\Program Files (x86)\ElsterFormular
2014-02-04 19:23 - 2014-02-04 19:24 - 78303584 _____ (Landesfinanzdirektion Thüringen) C:\Users\Tina\Desktop\ElsterFormular-15.0.20140117p.exe
2014-02-02 08:51 - 2014-02-14 22:07 - 00135008 _____ () C:\Windows\system32\GDIPFONTCACHEV1.DAT
2014-02-01 07:42 - 2014-02-01 07:42 - 00476024 _____ (1&1 Mail & Media GmbH) C:\Users\Tina\Downloads\WEB.DE_MailCheck_chrome_setup (1).exe
2014-01-30 22:27 - 2014-01-30 22:27 - 00000000 ____D () C:\Users\Tina\Documents\Meine Paletten
2014-01-30 22:26 - 2014-01-30 22:26 - 00000000 ____D () C:\Users\Tina\AppData\Roaming\Corel
2014-01-30 22:26 - 2014-01-30 22:26 - 00000000 ____D () C:\ProgramData\Protexis
2014-01-30 22:23 - 2014-01-30 22:26 - 00000000 ____D () C:\Users\Tina\Documents\Corel
2014-01-30 22:23 - 2014-01-30 22:23 - 00000000 ____D () C:\Users\Tina\Documents\Visual Studio 2008
2014-01-30 22:22 - 2014-01-30 22:36 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 9.0
2014-01-30 22:21 - 2014-01-31 08:12 - 00000000 ____D () C:\ProgramData\Corel
2014-01-30 22:17 - 2014-01-30 22:26 - 00000000 ____D () C:\ProgramData\CorelDRAW Graphics Suite X6
2014-01-30 22:06 - 2014-01-30 22:16 - 539881744 _____ (Acresso Software Inc. ) C:\Users\Tina\CorelDRAWGraphicsSuiteX6Installer_DE32Bit.exe

==================== One Month Modified Files and Folders =======

2014-02-28 19:30 - 2014-02-28 19:28 - 00018717 _____ () C:\Users\Tina\Downloads\FRST.txt
2014-02-28 19:30 - 2014-02-27 21:26 - 12115884 _____ () C:\Windows\system32\SavingsBullFilterService.log
2014-02-28 19:28 - 2014-02-28 19:28 - 02155520 _____ (Farbar) C:\Users\Tina\Downloads\FRST64.exe
2014-02-28 19:28 - 2014-02-28 19:28 - 00000000 ____D () C:\FRST
2014-02-28 19:27 - 2014-02-28 19:26 - 04892480 _____ (WinZip International LLC ) C:\Users\Tina\Downloads\wzmp_8 (2).exe
2014-02-28 19:25 - 2014-02-28 14:57 - 00000000 ____D () C:\Users\Tina\AppData\Roaming\Nico Mak Computing
2014-02-28 19:18 - 2011-08-12 16:38 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2640103502-2235371180-2021522901-1001UA.job
2014-02-28 19:02 - 2011-08-12 17:52 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2640103502-2235371180-2021522901-1002UA.job
2014-02-28 18:54 - 2012-12-10 18:51 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-28 18:42 - 2012-04-22 09:44 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-28 18:21 - 2014-02-27 22:44 - 00001856 _____ () C:\Users\Public\Desktop\McAfee Internet Security.lnk
2014-02-28 18:20 - 2009-07-14 05:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-28 18:20 - 2009-07-14 05:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-28 18:17 - 2012-12-10 18:51 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-28 18:17 - 2011-07-27 09:05 - 01782745 _____ () C:\Windows\WindowsUpdate.log
2014-02-28 18:13 - 2012-02-16 21:53 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-02-28 18:13 - 2011-07-27 09:07 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-28 18:13 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-28 18:13 - 2009-07-14 05:51 - 00081800 _____ () C:\Windows\setupact.log
2014-02-28 18:13 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2014-02-28 18:12 - 2011-07-29 12:24 - 00530912 _____ () C:\Windows\PFRO.log
2014-02-28 15:01 - 2014-02-28 15:01 - 00003154 _____ () C:\Users\Tina\Desktop\log.xml
2014-02-28 14:57 - 2014-02-28 14:57 - 04892480 _____ (WinZip International LLC ) C:\Users\Tina\Downloads\wzmp_8 (1).exe
2014-02-28 14:55 - 2014-02-28 13:03 - 00000000 ____D () C:\AdwCleaner
2014-02-28 14:42 - 2014-02-28 14:42 - 00003114 _____ () C:\Windows\System32\Tasks\{A8ADE526-7CC9-4F86-BB3D-F6393CD7B753}
2014-02-28 14:41 - 2014-02-28 14:41 - 00668792 _____ () C:\Users\Tina\Downloads\bremove.exe
2014-02-28 14:29 - 2014-02-28 14:29 - 00669304 _____ () C:\Users\Tina\Downloads\kremove.exe
2014-02-28 14:19 - 2013-12-06 21:28 - 00135008 _____ () C:\Windows\SysWOW64\GDIPFONTCACHEV1.DAT
2014-02-28 14:18 - 2014-02-28 14:18 - 04892480 _____ (WinZip International LLC ) C:\Users\Tina\Downloads\wzmp_8.exe
2014-02-28 14:15 - 2013-11-29 23:10 - 00000000 ____D () C:\Users\Tina\Documents\Outlook-Dateien
2014-02-28 13:46 - 2014-02-28 13:46 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-02-28 13:39 - 2013-02-02 23:38 - 00003918 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{C18B6624-D95B-4C1A-8482-B5A666EFA20F}
2014-02-28 13:33 - 2014-02-28 13:33 - 00000169 _____ () C:\Users\Tina\Desktop\Fixlist.txt
2014-02-28 13:20 - 2014-02-28 13:20 - 00001316 _____ () C:\Users\Tina\Desktop\AdwCleaner[S2].txt
2014-02-28 13:16 - 2014-02-28 13:16 - 00001324 _____ () C:\Users\Tina\Desktop\AdwCleaner[S1].txt
2014-02-28 13:11 - 2014-02-28 13:11 - 00032551 _____ () C:\Users\Tina\Desktop\AdwCleaner[S0].txt
2014-02-28 13:02 - 2014-02-28 13:02 - 01244192 _____ () C:\Users\Tina\Downloads\adwcleaner_3.0.2.0.exe
2014-02-28 12:36 - 2014-02-28 12:36 - 00003162 _____ () C:\Windows\System32\Tasks\{0D24DEA7-A800-4555-B9B2-FD9475AFFE5C}
2014-02-28 12:36 - 2014-02-28 12:36 - 00002635 _____ () C:\Users\Tina\Downloads\legitcheck.hta
2014-02-28 12:36 - 2014-02-28 11:07 - 00003025 _____ () C:\Windows\wmsetup.log
2014-02-28 12:35 - 2014-02-28 12:35 - 25842736 _____ (Microsoft Corporation) C:\Users\Tina\Downloads\wmp11-windowsxp-x86-DE-DE (2).exe
2014-02-28 12:27 - 2014-02-28 12:27 - 00003162 _____ () C:\Windows\System32\Tasks\{CDA5129A-6E85-4CB8-8EF1-2DF541A7C27F}
2014-02-28 12:27 - 2014-02-28 12:26 - 25842736 _____ (Microsoft Corporation) C:\Users\Tina\Downloads\wmp11-windowsxp-x86-DE-DE (1).exe
2014-02-28 12:18 - 2011-08-12 16:38 - 00001064 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2640103502-2235371180-2021522901-1001Core.job
2014-02-28 11:07 - 2014-02-28 11:07 - 00003150 _____ () C:\Windows\System32\Tasks\{D6EE7DE4-54CE-4AB8-9051-9BC0935D73B1}
2014-02-28 11:07 - 2014-02-28 11:06 - 25842736 _____ (Microsoft Corporation) C:\Users\Tina\Downloads\wmp11-windowsxp-x86-DE-DE.exe
2014-02-28 08:10 - 2010-04-13 19:11 - 00004018 _____ () C:\Windows\MOBK.blk
2014-02-28 08:10 - 2010-04-13 19:11 - 00001446 _____ () C:\Windows\MOBK.flt
2014-02-28 07:46 - 2012-08-24 08:17 - 00000000 ____D () C:\ProgramData\McAfee
2014-02-28 07:09 - 2014-02-27 22:43 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-02-27 22:44 - 2013-04-06 14:09 - 00000000 ____D () C:\Program Files\McAfee
2014-02-27 22:44 - 2013-03-31 08:54 - 00000000 ____D () C:\Program Files\Common Files\McAfee
2014-02-27 22:43 - 2014-02-27 22:43 - 00000000 ____D () C:\Program Files\McAfee.com
2014-02-27 22:43 - 2014-02-27 22:43 - 00000000 ____D () C:\Program Files (x86)\McAfee.com
2014-02-27 22:32 - 2014-02-27 22:29 - 00000000 ____D () C:\Program Files\stinger
2014-02-27 22:30 - 2014-02-27 22:30 - 05143616 _____ (McAfee, Inc.) C:\Users\Tina\Downloads\McAfeeSetup.exe
2014-02-27 22:13 - 2014-02-27 21:44 - 00000000 ____D () C:\Users\Tina\AppData\Local\cache
2014-02-27 21:52 - 2011-08-12 16:34 - 00000000 ___RD () C:\Users\Tina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-27 21:46 - 2011-08-12 16:34 - 00001437 _____ () C:\Users\Tina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-27 21:45 - 2014-02-27 21:45 - 00000000 ____D () C:\Users\Tina\AppData\Local\Tuguu_SL
2014-02-27 21:44 - 2014-02-27 21:44 - 00000000 ____D () C:\Users\Tina\.android
2014-02-27 21:44 - 2014-02-27 21:44 - 00000000 _____ () C:\Users\Tina\daemonprocess.txt
2014-02-27 21:44 - 2011-08-12 16:34 - 00000000 ____D () C:\Users\Tina
2014-02-27 21:39 - 2014-02-27 21:39 - 00391152 _____ () C:\Users\Tina\Downloads\Setup.exe
2014-02-27 21:26 - 2014-02-27 21:26 - 00000000 _____ () C:\Windows\SysWOW64\Service.log
2014-02-27 21:26 - 2014-02-27 21:26 - 00000000 _____ () C:\Windows\system32\Service.log
2014-02-27 21:26 - 2014-02-06 19:58 - 00000000 ____D () C:\Program Files\SavingsbullFilter
2014-02-27 19:11 - 2014-02-27 19:11 - 00000000 ____D () C:\Users\Tina\AppData\Local\{9FBE7332-70E3-4053-99AC-D575B013CE76}
2014-02-27 19:11 - 2011-08-12 17:43 - 00000000 ___HD () C:\Users\Tina\AppData\Local\Windows Live
2014-02-27 19:10 - 2014-02-27 19:07 - 00000000 ____D () C:\Users\Tina\Desktop\Bewerbungen
2014-02-25 19:32 - 2014-02-25 19:32 - 00740864 _____ () C:\Users\Tina\Downloads\game_HalloweenPuzzle_HMv32.tar
2014-02-25 19:30 - 2014-02-25 19:30 - 02265600 _____ () C:\Users\Tina\Downloads\game_theelevatorofthedeadv2Marsu.tar
2014-02-25 19:28 - 2014-02-25 19:28 - 00723456 _____ () C:\Users\Tina\Downloads\game_HidStars-FantasyNightAS3hitman.tar
2014-02-25 19:26 - 2014-02-25 19:26 - 00375808 _____ () C:\Users\Tina\Downloads\game_penguinbrothers_v32HM.tar
2014-02-23 19:19 - 2014-02-23 18:54 - 00000809 _____ () C:\Users\Tina\Desktop\Neues Textdokument.txt
2014-02-23 16:02 - 2013-12-10 15:57 - 00001068 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2640103502-2235371180-2021522901-1002Core1cef5b819f90838.job
2014-02-22 22:47 - 2014-02-22 22:47 - 05627904 _____ () C:\Users\Tina\Downloads\BubbleWitchAS3v2DOT.tar
2014-02-22 22:36 - 2014-02-22 22:36 - 01841664 _____ () C:\Users\Tina\Downloads\mahjonggdarkdimensionsv32Ph.tar
2014-02-22 15:57 - 2014-02-22 11:43 - 00023156 _____ () C:\Users\Tina\Desktop\ESt2013_Schlechte_Sascha.elfo
2014-02-21 22:42 - 2012-04-22 09:44 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-21 22:42 - 2012-04-22 09:44 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-21 22:42 - 2011-10-06 20:11 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-21 20:55 - 2011-09-20 18:13 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-02-21 20:32 - 2014-02-21 20:32 - 00000000 ____D () C:\Program Files (x86)\SavingsBull
2014-02-19 20:27 - 2012-07-17 18:26 - 00000000 ____D () C:\Users\David\Desktop\Bewerbungen
2014-02-19 20:10 - 2011-10-12 18:33 - 00000000 ____D () C:\Users\Tina\Desktop\Tina
2014-02-19 17:11 - 2013-10-25 15:27 - 00000000 ____D () C:\Originale
2014-02-17 12:13 - 2011-08-12 16:38 - 00004088 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2640103502-2235371180-2021522901-1001UA
2014-02-17 12:13 - 2011-08-12 16:38 - 00003692 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2640103502-2235371180-2021522901-1001Core
2014-02-17 06:25 - 2011-09-20 18:13 - 00000000 ____D () C:\ProgramData\Skype
2014-02-17 06:24 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-02-16 10:08 - 2014-02-16 08:02 - 00145629 _____ () C:\Users\Tina\ESt2013_Ballakowski_Alexander_und_Nina.elfo
2014-02-15 14:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-15 10:02 - 2014-02-15 10:02 - 00620544 _____ () C:\Users\Tina\Downloads\BalloonsBlastv2AS3Buzz.tar
2014-02-15 10:00 - 2014-02-15 10:00 - 02308096 _____ () C:\Users\Tina\Downloads\BakersGamev2AS3Buzz.tar
2014-02-14 22:27 - 2014-02-14 22:27 - 06267392 _____ () C:\Users\Tina\Downloads\Boingz3v2AS3TyRO.tar
2014-02-14 22:07 - 2014-02-02 08:51 - 00135008 _____ () C:\Windows\system32\GDIPFONTCACHEV1.DAT
2014-02-14 18:22 - 2014-02-04 19:25 - 00000000 ____D () C:\Program Files (x86)\ElsterFormular
2014-02-14 10:19 - 2014-02-14 10:19 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-02-14 10:19 - 2014-02-14 10:19 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-02-14 10:19 - 2014-02-06 23:27 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-02-14 10:19 - 2014-02-06 23:27 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-02-13 23:49 - 2012-12-10 18:51 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-13 23:49 - 2012-12-10 18:51 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-13 22:07 - 2014-02-06 20:09 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-02-12 21:22 - 2013-10-06 09:48 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-02-12 21:21 - 2013-08-14 22:30 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-12 21:20 - 2011-10-07 19:12 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-12 21:16 - 2011-10-12 17:09 - 01595580 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-12 21:16 - 2011-07-27 18:56 - 00699884 _____ () C:\Windows\system32\perfh007.dat
2014-02-12 21:16 - 2011-07-27 18:56 - 00149766 _____ () C:\Windows\system32\perfc007.dat
2014-02-12 21:16 - 2009-07-14 06:13 - 01595580 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-12 21:14 - 2009-07-14 03:34 - 00000536 _____ () C:\Windows\win.ini
2014-02-11 10:26 - 2012-05-24 07:38 - 00000000 ____D () C:\Users\David\AppData\Roaming\SoftGrid Client
2014-02-11 10:19 - 2011-12-31 14:56 - 00000000 ____D () C:\Users\David\AppData\Local\CrashDumps
2014-02-11 10:19 - 2011-08-12 17:51 - 00135008 _____ () C:\Users\David\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-11 10:19 - 2011-08-12 17:51 - 00000000 ____D () C:\Users\David\AppData\Roaming\Adobe
2014-02-11 08:55 - 2011-08-12 17:54 - 00002371 _____ () C:\Users\David\Desktop\Google Chrome.lnk
2014-02-07 09:43 - 2012-09-21 23:15 - 00003694 _____ () C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2014-02-07 09:41 - 2013-08-08 18:08 - 00000000 ____D () C:\Users\Tina\Desktop\Excel2010-Übungen
2014-02-06 23:35 - 2012-01-16 16:41 - 00000000 ___HD () C:\Users\Tina\AppData\Local\CrashDumps
2014-02-06 23:27 - 2014-02-06 23:27 - 00005933 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-02-06 23:27 - 2013-07-29 14:31 - 00000000 ____D () C:\Program Files (x86)\Java
2014-02-06 20:09 - 2014-02-06 20:09 - 00000000 ____D () C:\Users\Tina\AppData\Roaming\Opera Software
2014-02-06 20:09 - 2014-02-06 20:09 - 00000000 ____D () C:\Users\Tina\AppData\Local\Opera Software
2014-02-06 13:16 - 2014-02-12 21:13 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-12 21:13 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-12 21:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-12 21:13 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-12 21:13 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-12 21:13 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-12 21:13 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-12 21:13 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 11:52 - 2014-02-12 21:13 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 11:49 - 2014-02-12 21:13 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-12 21:13 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-12 21:13 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-12 21:13 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-12 21:13 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-12 21:13 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-12 21:13 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 11:11 - 2014-02-12 21:13 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-12 21:13 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-12 21:13 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-12 21:13 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-12 21:13 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-12 21:13 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-12 21:13 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-12 21:13 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:49 - 2014-02-12 21:13 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-06 10:47 - 2014-02-12 21:13 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-12 21:13 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-12 21:13 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-12 21:13 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-12 21:13 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 10:22 - 2014-02-12 21:13 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-12 21:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-12 21:13 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-12 21:13 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-12 21:13 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-12 21:13 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-12 21:13 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-12 21:13 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-12 21:13 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-05 20:04 - 2014-02-05 20:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-05 20:04 - 2014-02-05 20:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-05 20:04 - 2013-07-05 12:36 - 00000000 ____D () C:\Users\Tina\AppData\Roaming\Mozilla
2014-02-05 20:04 - 2013-07-05 12:36 - 00000000 ____D () C:\Users\Tina\AppData\Local\Mozilla
2014-02-05 20:04 - 2011-08-13 22:08 - 00004810 _____ () C:\Windows\wininit.ini
2014-02-05 20:03 - 2014-02-05 20:03 - 00283120 _____ (Mozilla) C:\Users\Tina\Desktop\Firefox Setup Stub 27.0.exe
2014-02-05 19:21 - 2014-02-05 19:21 - 00062519 _____ () C:\Users\Tina\ESt2013_Cotterill_Kimberley_Jenniferneu.elfo
2014-02-04 19:49 - 2014-02-04 19:48 - 00061590 _____ () C:\Users\Tina\ESt2013_Cotterill_Kimberley_Jennifer.elfo
2014-02-04 19:26 - 2014-02-04 19:26 - 00001205 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk
2014-02-04 19:26 - 2013-04-01 07:31 - 00000000 ____D () C:\Users\Tina\AppData\Roaming\elsterformular
2014-02-04 19:24 - 2014-02-04 19:23 - 78303584 _____ (Landesfinanzdirektion Thüringen) C:\Users\Tina\Desktop\ElsterFormular-15.0.20140117p.exe
2014-02-01 07:42 - 2014-02-01 07:42 - 00476024 _____ (1&1 Mail & Media GmbH) C:\Users\Tina\Downloads\WEB.DE_MailCheck_chrome_setup (1).exe
2014-01-31 15:33 - 2013-10-13 00:36 - 00000000 ____D () C:\Users\Tina\Downloads\bereits installiert
2014-01-31 09:41 - 2011-04-07 10:47 - 00000000 ____D () C:\ProgramData\Adobe
2014-01-31 08:14 - 2014-01-04 19:55 - 00000000 ____D () C:\Users\Tina\AppData\Roaming\IrfanView
2014-01-31 08:12 - 2014-01-30 22:21 - 00000000 ____D () C:\ProgramData\Corel
2014-01-31 08:10 - 2011-08-12 16:37 - 00000000 ____D () C:\Users\Tina\AppData\Roaming\Adobe
2014-01-31 07:34 - 2011-04-07 10:46 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-01-31 05:33 - 2009-07-14 05:45 - 00499168 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-30 22:36 - 2014-01-30 22:22 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 9.0
2014-01-30 22:27 - 2014-01-30 22:27 - 00000000 ____D () C:\Users\Tina\Documents\Meine Paletten
2014-01-30 22:26 - 2014-01-30 22:26 - 00000000 ____D () C:\Users\Tina\AppData\Roaming\Corel
2014-01-30 22:26 - 2014-01-30 22:26 - 00000000 ____D () C:\ProgramData\Protexis
2014-01-30 22:26 - 2014-01-30 22:23 - 00000000 ____D () C:\Users\Tina\Documents\Corel
2014-01-30 22:26 - 2014-01-30 22:17 - 00000000 ____D () C:\ProgramData\CorelDRAW Graphics Suite X6
2014-01-30 22:23 - 2014-01-30 22:23 - 00000000 ____D () C:\Users\Tina\Documents\Visual Studio 2008
2014-01-30 22:16 - 2014-01-30 22:06 - 539881744 _____ (Acresso Software Inc. ) C:\Users\Tina\CorelDRAWGraphicsSuiteX6Installer_DE32Bit.exe

Files to move or delete:
====================
C:\ProgramData\TempMOBK-update-4ec82966293498cc5bd9350557ef54e8.exe
C:\Users\Public\AlexaNSISPlugin.5024.dll
C:\Users\Tina\CorelDRAWGraphicsSuiteX6Installer_DE32Bit.exe


Some content of TEMP:
====================
C:\Users\David\AppData\Local\Temp\c2pk2w-x.dll
C:\Users\David\AppData\Local\Temp\FileSystemView.dll
C:\Users\David\AppData\Local\Temp\SkypeSetup.exe
C:\Users\David\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\David\AppData\Local\Temp\temp.exe
C:\Users\Tina\AppData\Local\Temp\BackupSetup.exe
C:\Users\Tina\AppData\Local\Temp\vcredist_x64.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-22 08:03

==================== End Of Log ============================

--- --- ---

--- --- ---

Und nun die Addition
[CODEAdditional scan result of Farbar Recovery Scan Tool (x64) Version: 27-02-2014 02
Ran by Tina at 2014-02-28 19:30:32
Running from C:\Users\Tina\Downloads
Boot Mode: Normal
==========================================================

==================== Security Center ========================

AV: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {ADA629C7-7F48-5689-624A-3B76997E0892}
AS: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {16C7C823-5972-5907-58FA-0004E2F9422F}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee Firewall (Enabled) {959DA8E2-3527-57D1-4915-924367AD4FE9}

==================== Installed Programs ======================

Google Chrome (HKCU\...\Google Chrome) (Version: 33.0.1750.117 - Google Inc.)
HP Deskjet 2050 J510 series - Grundlegende Software für das Gerät (HKLM\...\{D7716C7E-75F1-4C51-A2D5-C6A1E8311D53}) (Version: 20.0.771.0 - Hewlett-Packard Co.)
McAfee Internet Security (HKLM-x32\...\MSC) (Version: 12.8.934 - McAfee, Inc.)
McAfee Online Backup (Version: 1.16.4.0 - McAfee, Inc.) Hidden
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.130.8 - McAfee, Inc.)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
NVIDIA 3D Vision Treiber 331.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 331.65 - NVIDIA Corporation)
NVIDIA Grafiktreiber 331.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 331.65 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.26.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.26.4 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 331.65 (Version: 331.65 - NVIDIA Corporation) Hidden
NVIDIA Update 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.11.3 - NVIDIA Corporation) Hidden
SavingsbullFilter (Version: 1.0.0.0 - SavingsBull Filter) Hidden <==== ATTENTION
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Windows Live Family Safety (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden

==================== Restore Points =========================

16-02-2014 18:00:15 Windows-Sicherung
21-02-2014 19:54:26 Removed Skype Click to Call
23-02-2014 18:00:14 Windows-Sicherung
25-02-2014 21:52:50 Windows Update
27-02-2014 20:47:29 Removed Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
27-02-2014 20:50:23 Removed Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {292D0930-F922-49D5-AEF5-AB07E13A7A33} - System32\Tasks\Freemium1ClickMaint => C:\Program Files (x86)\Covus Freemium\Free System Utilities\1Click.exe
Task: {2996991B-0849-4DF4-BA68-14B77C4CFC74} - System32\Tasks\Google Updater and Installer => C:\Users\Tina\AppData\Local\Google\Update\GoogleUpdate.exe [2011-08-12] (Google Inc.)
Task: {2C8B4990-920E-4CD8-85E3-AABB4434E883} - \HQ-Video-Profession-1.3-chromeinstaller No Task File
Task: {39B43A65-9725-4406-95ED-83AC1097D231} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-10] (Google Inc.)
Task: {45C642BD-CDE6-4900-8FD8-1BFF4D43E8A9} - System32\Tasks\Test TimeTrigger => C:\Users\Tina\AppData\Local\Temp\Runner.exe <==== ATTENTION
Task: {4725BE6B-0115-4BEE-99E8-C7DCCC8924CE} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation)
Task: {4A6DF0FD-05CD-4CDE-8FD7-926441588D48} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2640103502-2235371180-2021522901-1001
Task: {6B8BF7C8-E3EC-4BB1-A80B-93EC50712FFF} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2640103502-2235371180-2021522901-1001Core => C:\Users\Tina\AppData\Local\Google\Update\GoogleUpdate.exe [2011-08-12] (Google Inc.)
Task: {7DA53F1D-778E-4BDB-BE86-0A71F91D1822} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-21] (Adobe Systems Incorporated)
Task: {85953CD8-B2B9-4FF3-803E-A72705C12389} - \Advanced System Protector_startup No Task File
Task: {88DB4BBC-4394-4A2A-ABE8-1C07DAEBE11D} - \DSite No Task File
Task: {9218C584-E44C-4893-8704-CB50099F4299} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-12-21] (Adobe Systems Incorporated)
Task: {93192E87-FD52-4BD8-AEFF-E764C01D6B17} - \HQ-Video-Profession-1.3-enabler No Task File
Task: {949F3B1D-5C1D-4BB3-A53C-0756BA0ED011} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2640103502-2235371180-2021522901-1002Core1cef5b819f90838 => C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe [2011-08-12] (Google Inc.)
Task: {989FB099-4EE6-45A9-83DB-058F872C64DF} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2640103502-2235371180-2021522901-1001UA => C:\Users\Tina\AppData\Local\Google\Update\GoogleUpdate.exe [2011-08-12] (Google Inc.)
Task: {B9062692-3126-4E90-9093-9FA8FC8B74DA} - \Software Updater Ui No Task File
Task: {BE75FBB4-5856-4671-8E2D-7115864C0DED} - \DealPly No Task File
Task: {C1D3DDB7-31C1-4D54-9414-A3535A3EC315} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2640103502-2235371180-2021522901-1002UA => C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe [2011-08-12] (Google Inc.)
Task: {C6E26580-727D-4C73-88F3-462111BA6823} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2008-12-08] (Hewlett-Packard)
Task: {CABACB3F-0F6D-4ABE-BA12-0E981CD02015} - \HQ-Video-Profession-1.3-firefoxinstaller No Task File
Task: {D3234F4F-55AA-4494-A434-45338253FE80} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-10] (Google Inc.)
Task: {D5354982-87F1-4343-ABBB-20309E6D5D54} - \Software Updater No Task File
Task: {E814286E-1DF5-4DD0-B469-10EF44E8506B} - System32\Tasks\{1BA7E5E3-5979-4A6C-B175-F695D3CE72C9} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2013-02-28] (Skype Technologies S.A.)
Task: {F1BA3AB6-8000-4E6B-8CF6-2641A0FF8D91} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2012 => C:\Program Files (x86)\TuneUp Utilities 2012\OneClick.exe [2011-12-14] (TuneUp Software)
Task: {F6220BEE-8F75-40B6-81BB-94203E65EFEC} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2640103502-2235371180-2021522901-1001Core.job => C:\Users\Tina\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2640103502-2235371180-2021522901-1001UA.job => C:\Users\Tina\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2640103502-2235371180-2021522901-1002Core1cef5b819f90838.job => C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2640103502-2235371180-2021522901-1002UA.job => C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-11-18 03:02 - 2013-10-23 09:20 - 00102176 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-02-12 14:16 - 2014-02-12 14:16 - 00210432 _____ () c:\Program Files\SavingsbullFilter\SavingsbullFilterService64.exe
2014-02-02 11:26 - 2014-02-02 11:26 - 00317952 _____ () c:\Program Files\SavingsbullFilter\ProtocolFilters.dll
2013-11-19 00:42 - 2013-11-19 00:42 - 00110080 _____ () c:\Program Files\SavingsbullFilter\nfapi.dll
2010-04-13 19:11 - 2010-04-13 19:11 - 00083256 _____ () C:\Program Files (x86)\McAfee Online Backup\librs2.dll
2014-02-13 06:20 - 2014-02-13 06:20 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\aa739380ca2b2fc7366d464d2f2301ac\IsdiInterop.ni.dll
2011-07-27 09:14 - 2010-09-13 17:28 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2014-02-21 21:21 - 2014-02-20 02:02 - 00051016 _____ () C:\Users\Tina\AppData\Local\Google\Chrome\Application\33.0.1750.117\chrome_elf.dll
2014-02-21 21:21 - 2014-02-20 02:03 - 04060488 _____ () C:\Users\Tina\AppData\Local\Google\Chrome\Application\33.0.1750.117\pdf.dll
2014-02-21 21:21 - 2014-02-20 02:03 - 00394568 _____ () C:\Users\Tina\AppData\Local\Google\Chrome\Application\33.0.1750.117\ppGoogleNaClPluginChrome.dll
2014-02-21 21:21 - 2014-02-20 02:02 - 01647432 _____ () C:\Users\Tina\AppData\Local\Google\Chrome\Application\33.0.1750.117\ffmpegsumo.dll
2014-02-21 21:21 - 2014-02-20 02:03 - 13632840 _____ () C:\Users\Tina\AppData\Local\Google\Chrome\Application\33.0.1750.117\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:02F30776
AlternateDataStreams: C:\ProgramData\TEMP:041ED421
AlternateDataStreams: C:\ProgramData\TEMP:164561C8
AlternateDataStreams: C:\ProgramData\TEMP:2216A431
AlternateDataStreams: C:\ProgramData\TEMP:26499772
AlternateDataStreams: C:\ProgramData\TEMP:2652902F
AlternateDataStreams: C:\ProgramData\TEMP:2B40A7DB
AlternateDataStreams: C:\ProgramData\TEMP:2C86E2AD
AlternateDataStreams: C:\ProgramData\TEMP:3086B95F
AlternateDataStreams: C:\ProgramData\TEMP:4E79C4F8
AlternateDataStreams: C:\ProgramData\TEMP:4F7FE589
AlternateDataStreams: C:\ProgramData\TEMP:553056F1
AlternateDataStreams: C:\ProgramData\TEMP:58E38390
AlternateDataStreams: C:\ProgramData\TEMP:5E8C18F1
AlternateDataStreams: C:\ProgramData\TEMP:762408BA
AlternateDataStreams: C:\ProgramData\TEMP:7C8AA9A6
AlternateDataStreams: C:\ProgramData\TEMP:85376176
AlternateDataStreams: C:\ProgramData\TEMP:87A3A233
AlternateDataStreams: C:\ProgramData\TEMP:9E05DEB0
AlternateDataStreams: C:\ProgramData\TEMP:AFC732F7
AlternateDataStreams: C:\ProgramData\TEMP:B6D84F71
AlternateDataStreams: C:\ProgramData\TEMP:BACD3198
AlternateDataStreams: C:\ProgramData\TEMP

1B5B4F1
AlternateDataStreams: C:\ProgramData\TEMP:E40D7F76
AlternateDataStreams: C:\ProgramData\TEMP:E5BA9ADD
AlternateDataStreams: C:\ProgramData\TEMP:EC3A9923
AlternateDataStreams: C:\ProgramData\TEMP:ECF3C50F
AlternateDataStreams: C:\ProgramData\TEMP:F3591DDB
AlternateDataStreams: C:\ProgramData\TEMP:F6A0889A

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"

==================== Disabled items from MSCONFIG ==============

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: McAfee Inc. mfeapfk
Description: McAfee Inc. mfeapfk
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: mfeapfk
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

==================== Event log errors: =========================

Application errors:
==================
Error: (02/28/2014 01:56:11 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (02/28/2014 01:56:05 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (02/28/2014 01:46:42 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (02/28/2014 01:46:37 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (02/28/2014 01:14:40 PM) (Source: AVLogEvent) (User: NT-AUTORITÄT)
Description: McShield encountered error while stopping.
Error Code:a7f40610

Error: (02/28/2014 08:10:23 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.

Vorgang:
Generatordaten werden gesammelt

Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {ab8dc986-4708-4d3c-a2e8-50dfe64daf3e}

Error: (02/28/2014 08:10:23 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "ConvertStringSidToSid(S-1-5-21-2640103502-2235371180-2021522901-1000.bak)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
.

Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt

Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {e1059276-a1f7-455e-a9f8-eab55a0ec114}

Error: (02/28/2014 08:09:53 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "Error calling CreateFile on volume '\\?\Volume{9cb95b8d-f4eb-11e0-8253-c89cdc283f74}\'" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.

Vorgang:
Überprüfen, ob das Volume vom Anbieter unterstützt wird
Volume einem Schattenkopiesatz hinzufügen

Kontext:
Ausführungskontext: Coordinator
Anbieter-ID: {00000000-0000-0000-0000-000000000000}
Volumename: \\?\Volume{9cb95b8d-f4eb-11e0-8253-c89cdc283f74}\
Ausführungskontext: Coordinator

Error: (02/28/2014 08:09:47 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.

Vorgang:
Generatordaten werden gesammelt

Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {ab8dc986-4708-4d3c-a2e8-50dfe64daf3e}

Error: (02/28/2014 08:09:47 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "ConvertStringSidToSid(S-1-5-21-2640103502-2235371180-2021522901-1000.bak)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
.

Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt

Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {e1059276-a1f7-455e-a9f8-eab55a0ec114}

System errors:
=============
Error: (02/28/2014 06:15:33 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069

Error: (02/28/2014 06:15:33 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1326

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (02/28/2014 06:13:08 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NewPlayer Updater Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (02/28/2014 06:13:08 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "McAfee Inc. mfeapfk" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1243

Error: (02/28/2014 01:23:13 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069

Error: (02/28/2014 01:23:13 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1326

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (02/28/2014 01:19:26 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NewPlayer Updater Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (02/28/2014 01:19:26 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "McAfee Inc. mfeapfk" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1243

Error: (02/28/2014 01:17:48 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069

Error: (02/28/2014 01:17:48 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1326

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Microsoft Office Sessions:
=========================
Error: (02/28/2014 01:56:11 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Tina\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7UT46V23\esetsmartinstaller_enu.exe

Error: (02/28/2014 01:56:05 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Tina\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7UT46V23\esetsmartinstaller_enu.exe

Error: (02/28/2014 01:46:42 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Tina\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\11YWG3P4\esetsmartinstaller_enu.exe

Error: (02/28/2014 01:46:37 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Tina\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\11YWG3P4\esetsmartinstaller_enu.exe

Error: (02/28/2014 01:14:40 PM) (Source: AVLogEvent)(User: NT-AUTORITÄT)
Description: a7f40610

Error: (02/28/2014 08:10:23 AM) (Source: VSS)(User: )
Description: 0x80070005, Zugriff verweigert

Vorgang:
Generatordaten werden gesammelt

Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {ab8dc986-4708-4d3c-a2e8-50dfe64daf3e}

Error: (02/28/2014 08:10:23 AM) (Source: VSS)(User: )
Description: ConvertStringSidToSid(S-1-5-21-2640103502-2235371180-2021522901-1000.bak)0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.

Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt

Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {e1059276-a1f7-455e-a9f8-eab55a0ec114}

Error: (02/28/2014 08:09:53 AM) (Source: VSS)(User: )
Description: Error calling CreateFile on volume '\\?\Volume{9cb95b8d-f4eb-11e0-8253-c89cdc283f74}\'0x80070005, Zugriff verweigert

Vorgang:
Überprüfen, ob das Volume vom Anbieter unterstützt wird
Volume einem Schattenkopiesatz hinzufügen

Kontext:
Ausführungskontext: Coordinator
Anbieter-ID: {00000000-0000-0000-0000-000000000000}
Volumename: \\?\Volume{9cb95b8d-f4eb-11e0-8253-c89cdc283f74}\
Ausführungskontext: Coordinator

Error: (02/28/2014 08:09:47 AM) (Source: VSS)(User: )
Description: 0x80070005, Zugriff verweigert

Vorgang:
Generatordaten werden gesammelt

Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {ab8dc986-4708-4d3c-a2e8-50dfe64daf3e}

Error: (02/28/2014 08:09:47 AM) (Source: VSS)(User: )
Description: ConvertStringSidToSid(S-1-5-21-2640103502-2235371180-2021522901-1000.bak)0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.

Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt

Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {e1059276-a1f7-455e-a9f8-eab55a0ec114}

==================== Memory info ===========================

Percentage of memory in use: 49%
Total physical RAM: 4078.02 MB
Available physical RAM: 2058.77 MB
Total Pagefile: 8154.21 MB
Available Pagefile: 6023.77 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (Packard Bell) (Fixed) (Total:456.26 GB) (Free:370.45 GB) NTFS
Drive d: (DATA) (Fixed) (Total:456.6 GB) (Free:236.21 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 4989BDF0)
Partition 1: (Not Active) - (Size=19 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=456 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=457 GB) - (Type=07 NTFS)

==================== End Of Log ============================][/CODE]

cosinus · 28.02.2014, 20:37

Was ist mit den anderen Logs, adwCleaner usw? Außerdem fragte ich nach bisherigen Funden deines Virenscanners, wenn es Funde gab bitte auch dazu die Logs posten

Blondie17 · 28.02.2014, 20:42

Adw cleaner SO

Code:

ATTFilter

# AdwCleaner v3.020 - Bericht erstellt am 28/02/2014 um 13:05:55
# Aktualisiert 27/02/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Tina - TINA-PC
# Gestartet von : C:\Users\Tina\Downloads\adwcleaner_3.0.2.0.exe
# Option : Löschen

***** [ Dienste ] *****

Dienst Gelöscht : IePluginService
Dienst Gelöscht : Level Quality Watcher
Dienst Gelöscht : MgAssistService
[#] Dienst Gelöscht : SystemStoreService

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\apn
Ordner Gelöscht : C:\ProgramData\Ask
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\BasicSeek
Ordner Gelöscht : C:\ProgramData\boost_interprocess
Ordner Gelöscht : C:\ProgramData\BrowserDefender
Ordner Gelöscht : C:\ProgramData\IBUpdaterService
Ordner Gelöscht : C:\ProgramData\IePluginService
Ordner Gelöscht : C:\ProgramData\Systweak
Ordner Gelöscht : C:\ProgramData\Tarma Installer
Ordner Gelöscht : C:\ProgramData\WPM
Ordner Gelöscht : C:\ProgramData\Alawar
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System Protector
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DealPly
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NewPlayer
Ordner Gelöscht : C:\Program Files (x86)\Advanced System Protector
Ordner Gelöscht : C:\Program Files (x86)\BasicSeek
Ordner Gelöscht : C:\Program Files (x86)\BrowserCompanion
Ordner Gelöscht : C:\Program Files (x86)\Conduit
Ordner Gelöscht : C:\Program Files (x86)\Mobogenie
Ordner Gelöscht : C:\Program Files (x86)\NewPlayer
Ordner Gelöscht : C:\Program Files (x86)\Protected Search
Ordner Gelöscht : C:\Program Files (x86)\SoftwareUpdater
Ordner Gelöscht : C:\Program Files (x86)\SupTab
Ordner Gelöscht : C:\Program Files (x86)\Yontoo
Ordner Gelöscht : C:\Program Files (x86)\HQ-Video-Profession-1.3
Ordner Gelöscht : C:\Program Files (x86)\Common Files\DVDVideoSoft\TB
Ordner Gelöscht : C:\Program Files\Level Quality Watcher
Ordner Gelöscht : C:\Users\Tina\AppData\Local\Conduit
Ordner Gelöscht : C:\Users\Tina\AppData\Local\DownloadGuide
Ordner Gelöscht : C:\Users\Tina\AppData\Local\genienext
Ordner Gelöscht : C:\Users\Tina\AppData\Local\Giant Savings Extension
Ordner Gelöscht : C:\Users\Tina\AppData\Local\Ilivid Player
Ordner Gelöscht : C:\Users\Tina\AppData\Local\Mobogenie
Ordner Gelöscht : C:\Users\Tina\AppData\Local\NewPlayer
Ordner Gelöscht : C:\Users\Tina\AppData\Local\SearchProtect
Ordner Gelöscht : C:\Users\Tina\AppData\Local\Software_Updater
Ordner Gelöscht : C:\Users\Tina\AppData\Local\SoftwareUpdater
Ordner Gelöscht : C:\Users\Tina\AppData\LocalLow\bbrs_002.tb
Ordner Gelöscht : C:\Users\Tina\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\Tina\AppData\LocalLow\Delta
Ordner Gelöscht : C:\Users\Tina\AppData\LocalLow\FlagFox
Ordner Gelöscht : C:\Users\Tina\AppData\LocalLow\PriceGong
Ordner Gelöscht : C:\Users\Tina\AppData\LocalLow\searchquband
Ordner Gelöscht : C:\Users\Tina\AppData\LocalLow\SimplyTech
Ordner Gelöscht : C:\Users\Tina\AppData\Roaming\awesomehp
Ordner Gelöscht : C:\Users\Tina\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Tina\AppData\Roaming\BrowserCompanion
Ordner Gelöscht : C:\Users\Tina\AppData\Roaming\DSite
Ordner Gelöscht : C:\Users\Tina\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\Tina\AppData\Roaming\OpenCandy
Ordner Gelöscht : C:\Users\Tina\AppData\Roaming\pdfforge
Ordner Gelöscht : C:\Users\Tina\AppData\Roaming\SupTab
Ordner Gelöscht : C:\Users\Tina\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\Tina\AppData\Roaming\Alawar
Ordner Gelöscht : C:\Users\Tina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie
Ordner Gelöscht : C:\Users\Tina\Documents\Mobogenie
Ordner Gelöscht : C:\Users\Tina\Documents\Optimizer Pro
Ordner Gelöscht : C:\Users\David\AppData\Local\Software_Updater
Ordner Gelöscht : C:\Users\David\AppData\LocalLow\appbario8
Ordner Gelöscht : C:\Users\David\AppData\LocalLow\AskToolbar
Ordner Gelöscht : C:\Users\David\AppData\LocalLow\bbrs_002.tb
Ordner Gelöscht : C:\Users\David\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\David\AppData\LocalLow\PriceGong
Ordner Gelöscht : C:\Users\David\AppData\Roaming\pdfforge
Ordner Gelöscht : C:\Users\David\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\Tina\AppData\Roaming\Mozilla\Firefox\Profiles\6i3cqqff.default\Extensions\13c471d9-6cbb-4c08-9dd1-8dc16c66bb1f@cf5065af-ca24-464a-a637-af7582a82514.com
Ordner Gelöscht : C:\Users\Tina\AppData\Roaming\Mozilla\Firefox\Profiles\6i3cqqff.default\Extensions\quick_start@gmail.com
Ordner Gelöscht : C:\Users\Tina\AppData\Roaming\Mozilla\Firefox\Profiles\6i3cqqff.default\Extensions\SavingsBull@jetpack
Ordner Gelöscht : C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\bodddioamolcibagionmmobehnbhiakf
Datei Gelöscht : C:\END
Datei Gelöscht : C:\Windows\System32\roboot64.exe
Datei Gelöscht : C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data
Datei Gelöscht : C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
Datei Gelöscht : C:\Users\Tina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eooncjejnppfjjklapaamhcdmjbilmde_0.localstorage
Datei Gelöscht : C:\Windows\System32\Tasks\Advanced System Protector_startup
Datei Gelöscht : C:\Windows\System32\Tasks\Dealply
Datei Gelöscht : C:\Windows\System32\Tasks\DSite
Datei Gelöscht : C:\Windows\System32\Tasks\Software Updater Ui
Datei Gelöscht : C:\Windows\System32\Tasks\Software Updater
Datei Gelöscht : C:\Windows\Tasks\HQ-Video-Profession-1.3-chromeinstaller.job
Datei Gelöscht : C:\Windows\System32\Tasks\HQ-Video-Profession-1.3-chromeinstaller
Datei Gelöscht : C:\Windows\Tasks\HQ-Video-Profession-1.3-enabler.job
Datei Gelöscht : C:\Windows\System32\Tasks\HQ-Video-Profession-1.3-enabler
Datei Gelöscht : C:\Windows\Tasks\HQ-Video-Profession-1.3-firefoxinstaller.job
Datei Gelöscht : C:\Windows\System32\Tasks\HQ-Video-Profession-1.3-firefoxinstaller

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [quick_start@gmail.com]
Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\bhphemoobgnikcoofkgackkaimpfmenm
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\bhphemoobgnikcoofkgackkaimpfmenm
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\bodddioamolcibagionmmobehnbhiakf
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\cfdfamfnacokbbbnmpdfmhonipnhmbid
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc
Schlüssel Gelöscht : HKCU\Software\Classes\pokki
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\tdataprotocol.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\updatebho.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\wit4ie.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\base64
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\chrome
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\prox
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\tdataprotocol.CTData
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\tdataprotocol.CTData.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\updatebho.TimerBHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\updatebho.TimerBHO.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wit4ie.WitBHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wit4ie.WitBHO.2
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\YontooIEClient.Api
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\YontooIEClient.Api.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\YontooIEClient.Layers
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\YontooIEClient.Layers.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Giant Savings Extension_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Giant Savings Extension_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Giant Savings Extension-InternalInstaller_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Giant Savings Extension-InternalInstaller_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\HomeTab_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\HomeTab_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Savings Sidekick_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Savings Sidekick_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Searchqu Toolbar uninstall_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Searchqu Toolbar uninstall_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\systweakasp_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\systweakasp_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WiseConvert_1_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WiseConvert_1_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Mobogenie.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0051578.BHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0051578.BHO.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0051578.Sandbox
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0051578.Sandbox.1
Schlüssel Gelöscht : HKCU\Software\5b08ddab76de846
Schlüssel Gelöscht : HKLM\SOFTWARE\5b08ddab76de846
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_pdf24-creator_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_pdf24-creator_RASDLG
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_pdf24-creator_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_pdfcreator_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_pdfcreator_RASDLG
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_pdfcreator_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_postbox-express_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_postbox-express_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{20EDC024-43C5-423E-B7F5-FD93523E0D9F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{373ED12D-B306-43AC-9485-A7C5133DC34C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{50F7F0BE-31BA-4145-BD8B-6B0DECFED804}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{ED6535E7-F778-48A5-A060-549D30024511}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00CBB66B-1D3B-46D3-9577-323A336ACB50}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{10AD2C61-0898-4348-8600-14A342F22AC3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5ACE96C0-C70A-4A4D-AF14-2E7B869345E1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{963B125B-8B21-49A2-A3A8-E37092276531}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{99066096-8989-4612-841F-621A01D54AD7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{BA7B8F39-DF7F-4A98-83E9-57CE6ED9CA24}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511151178}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522152278}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{817923CB-4744-4216-B250-CF7EDA8F1767}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9F0C17EB-EF2C-4278-9136-2D547656BC03}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555155578}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566156678}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{830B56CB-FD22-44AA-9887-7898F4F4158D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{8830DDF0-3042-404D-A62C-384A85E34833}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{955B782E-CDC8-4CEE-B6F6-AD7D541A8D8A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{D372567D-67C1-4B29-B3F0-159B52B3E967}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544154478}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00CBB66B-1D3B-46D3-9577-323A336ACB50}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10AD2C61-0898-4348-8600-14A342F22AC3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{963B125B-8B21-49A2-A3A8-E37092276531}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA7B8F39-DF7F-4A98-83E9-57CE6ED9CA24}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511151178}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00CBB66B-1D3B-46D3-9577-323A336ACB50}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{10AD2C61-0898-4348-8600-14A342F22AC3}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{963B125B-8B21-49A2-A3A8-E37092276531}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BA7B8F39-DF7F-4A98-83E9-57CE6ED9CA24}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511151178}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{00CBB66B-1D3B-46D3-9577-323A336ACB50}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{10AD2C61-0898-4348-8600-14A342F22AC3}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{963B125B-8B21-49A2-A3A8-E37092276531}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9D717F81-9148-4F12-8568-69135F087DB0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BA7B8F39-DF7F-4A98-83E9-57CE6ED9CA24}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CFD485F0-96BD-47CD-BB6D-CD7DDA95F102}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{004d3b8b-3cdb-4f66-a71c-f6fc1e9cb498}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6a4a589b-1a81-4d4e-af10-72ab28606e40}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511151178}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522152278}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0923E315-2D8B-48CE-A37C-AE9A42F9711C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1A1BBE49-C6F1-40EA-9D2F-262F0AF6DDE3}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2022154E-7E3E-4809-871E-1B45A6FC7058}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{292ECB89-350E-45D2-816F-52C15305B144}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{36CC2180-B6BF-4951-9578-6B0C40044AAA}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{44A36944-22C6-4A08-BC7C-161F3E540DBF}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{6247DD2C-8CF9-4041-A235-93691D71B8B4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{817923CB-4744-4216-B250-CF7EDA8F1767}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{835BED79-DF7E-4096-B355-ED43FA2EA87B}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8E863BD6-50DE-47D0-A6F1-3C1F6DB72451}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9DD36F1E-5111-41C5-ADED-A2A11A2FF3E4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9F0C17EB-EF2C-4278-9136-2D547656BC03}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A2FB8217-E320-434E-BA79-513E357AD54F}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A9CEBBF4-9129-479A-9231-E833ED3D3A8F}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{AFD4D1F9-167C-4884-95AE-B5A9797B0D16}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B3EAD50C-ECB0-459A-9EDA-F505AB99675B}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C47788B1-9604-4D7A-A684-F4D450F2D7D2}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{CA3B41D0-D4C1-4808-B248-75DA27238828}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D4A2FF6C-087F-4D40-8DFE-92AAD484BFB8}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D88B9D5C-A9CF-4C69-906D-1CCA5D85A2EF}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F83AF01C-AA2F-469F-8BE7-D178FB15FD07}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555155578}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566156678}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511151178}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{004d3b8b-3cdb-4f66-a71c-f6fc1e9cb498}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6a4a589b-1a81-4d4e-af10-72ab28606e40}
Daten Wiederhergestellt : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Schlüssel Gelöscht : HKCU\Software\Alexa Internet
Schlüssel Gelöscht : HKCU\Software\BabSolution
Schlüssel Gelöscht : HKCU\Software\Blabbers       
Schlüssel Gelöscht : HKCU\Software\Blabbers
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\DataMngr
[#] Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar
Schlüssel Gelöscht : HKCU\Software\distromatic
Schlüssel Gelöscht : HKCU\Software\dsiteproducts
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\installedbrowserextensions
Schlüssel Gelöscht : HKCU\Software\SmartBar
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\LyricsContainer
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\PriceGong
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\searchqutoolbar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\simplytech
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\HQ-Video-Profession-1.3
Schlüssel Gelöscht : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gelöscht : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gelöscht : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Schlüssel Gelöscht : HKLM\Software\Babylon
Schlüssel Gelöscht : HKLM\Software\BasicSeek
Schlüssel Gelöscht : HKLM\Software\BrowserCompanion
Schlüssel Gelöscht : HKLM\Software\Conduit
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\Iminent
Schlüssel Gelöscht : HKLM\Software\SimplyGen
Schlüssel Gelöscht : HKLM\Software\supTab
Schlüssel Gelöscht : HKLM\Software\supWPM
Schlüssel Gelöscht : HKLM\Software\systweak
Schlüssel Gelöscht : HKLM\Software\Uniblue
Schlüssel Gelöscht : HKLM\Software\Wpm
Schlüssel Gelöscht : HKLM\Software\HQ-Video-Profession-1.3
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\DataMngr
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Tarma Installer
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16518

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Default_Page_URL]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Default_Page_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Bar]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Start Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Start Default_Page_URL]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Search Bar]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Search Page]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Start Page]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Start Default_Page_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Default_Search_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Search Bar]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Search Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [(Default)]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [(Default)]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Mozilla Firefox v27.0 (de)

[ Datei : C:\Users\Tina\AppData\Roaming\Mozilla\Firefox\Profiles\6i3cqqff.default\prefs.js ]

Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://www.awesomehp.com/newtab/?type=nt&ts=1393533639&from=tugs&uid=ST31000524AS_6VPCTNRVXXXX6VPCTNRV");
Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://www.awesomehp.com/?type=hp&ts=1393533639&from=tugs&uid=ST31000524AS_6VPCTNRVXXXX6VPCTNRV");

-\\ Google Chrome v

[ Datei : C:\Users\Tina\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ Datei : C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [39396 octets] - [28/02/2014 13:03:17]
AdwCleaner[S0].txt - [32185 octets] - [28/02/2014 13:05:55]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [32246 octets] ##########

Adw cleaner S1

Code:

ATTFilter

# AdwCleaner v3.020 - Bericht erstellt am 28/02/2014 um 13:14:21
# Aktualisiert 27/02/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Tina - TINA-PC
# Gestartet von : C:\Users\Tina\Downloads\adwcleaner_3.0.2.0 (1).exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\bodddioamolcibagionmmobehnbhiakf

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16518


-\\ Mozilla Firefox v27.0 (de)

[ Datei : C:\Users\Tina\AppData\Roaming\Mozilla\Firefox\Profiles\6i3cqqff.default\prefs.js ]


-\\ Google Chrome v

[ Datei : C:\Users\Tina\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ Datei : C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [39396 octets] - [28/02/2014 13:03:17]
AdwCleaner[R1].txt - [1263 octets] - [28/02/2014 13:13:13]
AdwCleaner[S0].txt - [32551 octets] - [28/02/2014 13:05:55]
AdwCleaner[S1].txt - [1184 octets] - [28/02/2014 13:14:21]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1244 octets] ##########

Adw Cleaner S2

Code:

ATTFilter

# AdwCleaner v3.020 - Bericht erstellt am 28/02/2014 um 13:18:21
# Aktualisiert 27/02/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Tina - TINA-PC
# Gestartet von : C:\Users\Tina\Downloads\adwcleaner_3.0.2.0.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16518


-\\ Mozilla Firefox v27.0 (de)

[ Datei : C:\Users\Tina\AppData\Roaming\Mozilla\Firefox\Profiles\6i3cqqff.default\prefs.js ]


-\\ Google Chrome v

[ Datei : C:\Users\Tina\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ Datei : C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [39396 octets] - [28/02/2014 13:03:17]
AdwCleaner[R1].txt - [1263 octets] - [28/02/2014 13:13:13]
AdwCleaner[R2].txt - [1254 octets] - [28/02/2014 13:17:17]
AdwCleaner[S0].txt - [32551 octets] - [28/02/2014 13:05:55]
AdwCleaner[S1].txt - [1324 octets] - [28/02/2014 13:14:21]
AdwCleaner[S2].txt - [1176 octets] - [28/02/2014 13:18:21]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1236 octets] ##########

Mc Afee sagt nur 3 Trojaner isoliert

cosinus · 28.02.2014, 20:47

Zitat:

Mc Afee sagt nur 3 Trojaner isoliert

Schau mal nach ob du dazu mehr Details findest. Außerdem fehlt noch das Log von JRT.

Blondie17 · 28.02.2014, 21:04

Habe MC Afee soweit ich konnte in anhängender Datei eingefügt.
Und anbei JRT Log

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 7 Home Premium x64
Ran by Tina on 28.02.2014 at 20:54:36,69
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Suspicious HKCU\..\Run entries found. Trojan:JS/Medfos.B?

    Value Name          Type                             Value Data                     
========================================================================================
    APISupport    REG_SZ    "C:\Windows\SysWOW64\Rundll32.exe" "C:\Users\Tina\AppData\Local\Conduit\APISupport\APISupport.dll",DLLRunAPISupport




~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2640103502-2235371180-2021522901-1001\Software\sweetim
Successfully deleted: [Registry Key] HKEY_USERS\.DEFAULT\Software\bProtector
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110211181110}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011501160}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110211181110}



~~~ Files

Successfully deleted: [File] "C:\Users\Tina\appdata\locallow\microsoft\silverlight\outofbrowser\index\portal.qtrax.com"
Successfully deleted: [File] C:\Windows\syswow64\shoA8DE.tmp



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\big fish games"
Successfully deleted: [Folder] "C:\Users\Tina\AppData\Roaming\big fish games"
Successfully deleted: [Folder] "C:\Users\Tina\music\qtrax media library"
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{0B9F2C13-EAC9-4922-A593-B8E5D87BE063}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{0DDBDF44-2EF8-40B9-91DD-A744FA99FB57}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{0EF0281B-A188-4169-9433-EB65A5F4695F}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{1733D957-62D5-409D-AE07-088FD6184A5A}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{183AAD23-6432-4931-9C22-8FE409ADA6C7}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{1F9A13E3-CFF9-4EEA-93A8-9884FF1A2592}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{24600C1D-3BAC-487F-A305-CE52F8216D3E}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{251F6A50-EAA4-4200-8397-EE2CCB24CA28}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{27B8C626-334D-48A2-8D5F-54ECFF49AB72}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{3766C02B-4968-4D3A-98E3-67C9AF5532DE}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{3B2BC943-36C6-48D4-9C24-E09F74E72606}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{428D4D90-B56D-40FB-A384-123C6B5E6DED}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{56A0AF83-5B2B-454D-A8C5-57F0C99C43DB}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{57DDEDA6-3B54-4A01-96CF-6CD239AC932F}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{58C3B777-2699-44C1-958E-1B38A81BD44B}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{6274BCD1-2BED-4C19-AE34-2E557DA2B748}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{65263AE3-7189-4197-8C2D-1CB47E815FC9}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{67BBFCC9-4622-47A2-9378-C98864FEAE0F}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{690AF24A-6AF5-4E2E-A4D5-DC3593BDB1F3}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{6B9DA622-CDA2-478D-A8DA-0C9982F6BBFE}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{92638188-FD3F-4E37-A8D5-D9B26FD6D5D1}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{99891439-DA6C-49F2-85D5-AC07F9196249}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{9DBC9E42-6242-4869-9045-71FCFC10F655}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{9F0090F4-0FC7-4BE4-8FDE-93BBDF83807C}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{9FBE7332-70E3-4053-99AC-D575B013CE76}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{A37CF4D6-C47F-46FC-A97B-BFAB48A447FF}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{A3866EA7-F6E5-457C-8CE3-BD26D1A16BE5}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{B01795CB-CAC5-405F-AB37-7A45D3D4525C}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{B90679B4-1EEC-4A02-BABF-A57837EAB4EC}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{BBC70093-915C-4C26-A6B2-34BA22448AC6}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{DF9E3CE6-1F2E-4DF2-8A42-25DE4B5CE3E5}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{EF9B41E0-B1C7-4A72-8366-D598BCCD4494}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{F1F6F82A-46D1-49E8-A560-9D2C143FC301}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{F40FBC43-1374-48CA-90B3-96EA32E3FB98}
Successfully deleted: [Empty Folder] C:\Users\Tina\appdata\local\{F58CFAF8-BDF4-4B40-AE20-D9AC1B383803}



~~~ FireFox

Successfully deleted: [File] C:\user.js



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 28.02.2014 at 21:04:01,70
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

cosinus · 28.02.2014, 21:18

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

C:\ProgramData\TempMOBK-update-4ec82966293498cc5bd9350557ef54e8.exe
C:\Users\Public\AlexaNSISPlugin.5024.dll
C:\Users\Tina\CorelDRAWGraphicsSuiteX6Installer_DE32Bit.exe
C:\Users\David\AppData\Local\Temp\c2pk2w-x.dll
C:\Users\David\AppData\Local\Temp\FileSystemView.dll
C:\Users\David\AppData\Local\Temp\SkypeSetup.exe
C:\Users\David\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\David\AppData\Local\Temp\temp.exe
C:\Users\Tina\AppData\Local\Temp\BackupSetup.exe
C:\Users\Tina\AppData\Local\Temp\vcredist_x64.exe
C:\Program Files (x86)\SavingsBull
C:\Windows\system32\SavingsBullFilterService.log
R2 SavingsbullFilterService64; c:\Program Files\SavingsbullFilter\SavingsbullFilterService64.exe [210432 2014-02-12] ()
c:\Program Files\SavingsbullFilter
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\awesomehp.xml
Task: {2C8B4990-920E-4CD8-85E3-AABB4434E883} - \HQ-Video-Profession-1.3-chromeinstaller No Task File
Task: {45C642BD-CDE6-4900-8FD8-1BFF4D43E8A9} - System32\Tasks\Test TimeTrigger => C:\Users\Tina\AppData\Local\Temp\Runner.exe <==== ATTENTION
C:\Users\Tina\AppData\Local\Temp\Runner.exe
Task: {85953CD8-B2B9-4FF3-803E-A72705C12389} - \Advanced System Protector_startup No Task File
Task: {88DB4BBC-4394-4A2A-ABE8-1C07DAEBE11D} - \DSite No Task File

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Blondie17 · 28.02.2014, 21:23

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 27-02-2014 02
Ran by Tina at 2014-02-28 21:22:43 Run:1
Running from C:\Users\Tina\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
C:\ProgramData\TempMOBK-update-4ec82966293498cc5bd9350557ef54e8.exe
C:\Users\Public\AlexaNSISPlugin.5024.dll
C:\Users\Tina\CorelDRAWGraphicsSuiteX6Installer_DE32Bit.exe
C:\Users\David\AppData\Local\Temp\c2pk2w-x.dll
C:\Users\David\AppData\Local\Temp\FileSystemView.dll
C:\Users\David\AppData\Local\Temp\SkypeSetup.exe
C:\Users\David\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\David\AppData\Local\Temp\temp.exe
C:\Users\Tina\AppData\Local\Temp\BackupSetup.exe
C:\Users\Tina\AppData\Local\Temp\vcredist_x64.exe
C:\Program Files (x86)\SavingsBull
C:\Windows\system32\SavingsBullFilterService.log
R2 SavingsbullFilterService64; c:\Program Files\SavingsbullFilter\SavingsbullFilterService64.exe [210432 2014-02-12] ()
c:\Program Files\SavingsbullFilter
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\awesomehp.xml
Task: {2C8B4990-920E-4CD8-85E3-AABB4434E883} - \HQ-Video-Profession-1.3-chromeinstaller No Task File
Task: {45C642BD-CDE6-4900-8FD8-1BFF4D43E8A9} - System32\Tasks\Test TimeTrigger => C:\Users\Tina\AppData\Local\Temp\Runner.exe <==== ATTENTION
C:\Users\Tina\AppData\Local\Temp\Runner.exe
Task: {85953CD8-B2B9-4FF3-803E-A72705C12389} - \Advanced System Protector_startup No Task File
Task: {88DB4BBC-4394-4A2A-ABE8-1C07DAEBE11D} - \DSite No Task File
         
*****************

C:\ProgramData\TempMOBK-update-4ec82966293498cc5bd9350557ef54e8.exe => Moved successfully.
C:\Users\Public\AlexaNSISPlugin.5024.dll => Moved successfully.
C:\Users\Tina\CorelDRAWGraphicsSuiteX6Installer_DE32Bit.exe => Moved successfully.
C:\Users\David\AppData\Local\Temp\c2pk2w-x.dll => Moved successfully.
C:\Users\David\AppData\Local\Temp\FileSystemView.dll => Moved successfully.
C:\Users\David\AppData\Local\Temp\SkypeSetup.exe => Moved successfully.
C:\Users\David\AppData\Local\Temp\swt-win32-3349.dll => Moved successfully.
C:\Users\David\AppData\Local\Temp\temp.exe => Moved successfully.
C:\Users\Tina\AppData\Local\Temp\BackupSetup.exe => Moved successfully.
C:\Users\Tina\AppData\Local\Temp\vcredist_x64.exe => Moved successfully.
C:\Program Files (x86)\SavingsBull => Moved successfully.
C:\Windows\system32\SavingsBullFilterService.log => Moved successfully.
SavingsbullFilterService64 => Service deleted successfully.
c:\Program Files\SavingsbullFilter => Moved successfully.
HKLM\SOFTWARE\Policies\Google => Key deleted successfully.
C:\Program Files (x86)\mozilla firefox\browser\searchplugins\awesomehp.xml => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{2C8B4990-920E-4CD8-85E3-AABB4434E883} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2C8B4990-920E-4CD8-85E3-AABB4434E883} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\HQ-Video-Profession-1.3-chromeinstaller => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{45C642BD-CDE6-4900-8FD8-1BFF4D43E8A9} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{45C642BD-CDE6-4900-8FD8-1BFF4D43E8A9} => Key deleted successfully.
C:\Windows\System32\Tasks\Test TimeTrigger => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Test TimeTrigger => Key deleted successfully.
"C:\Users\Tina\AppData\Local\Temp\Runner.exe" => File/Directory not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{85953CD8-B2B9-4FF3-803E-A72705C12389} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{85953CD8-B2B9-4FF3-803E-A72705C12389} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Advanced System Protector_startup => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{88DB4BBC-4394-4A2A-ABE8-1C07DAEBE11D} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{88DB4BBC-4394-4A2A-ABE8-1C07DAEBE11D} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DSite => Key deleted successfully.


The system needs a manual reboot. 

==== End of Fixlog ====

cosinus · 28.02.2014, 21:27

Rechner neustarten, danach frische FRST Logs bitte. Haken setzen bei additions

Blondie17 · 28.02.2014, 21:35

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-02-2014 02
Ran by Tina (administrator) on TINA-PC on 28-02-2014 21:31:10
Running from C:\Users\Tina\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Adobe Systems Incorporated) c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
(Acer Incorporated) C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
(McAfee, Inc.) C:\Windows\system32\mfevtps.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe
(Acer Group) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
(Microsoft Corporation) C:\Windows\system32\userinit.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesApp64.exe
(PixArt Imaging Incorporation) C:\Windows\PixArt\PAC7311\Monitor.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [PAC7311_Monitor] - C:\Windows\PixArt\PAC7311\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation)
HKLM-x32\...\Run: [mcui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-01-28] (McAfee, Inc.)
HKLM-x32\...\Run: [mcpltui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-01-28] (McAfee, Inc.)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2640103502-2235371180-2021522901-1001\...\Run: [TomTomHOME.exe] - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [248208 2013-08-27] (TomTom)
HKU\S-1-5-21-2640103502-2235371180-2021522901-1001\...\Run: [APISupport] - "C:\Windows\SysWOW64\Rundll32.exe" "C:\Users\Tina\AppData\Local\Conduit\APISupport\APISupport.dll",DLLRunAPISupport <===== ATTENTION
HKU\S-1-5-21-2640103502-2235371180-2021522901-1001\...\MountPoints2: {5fc510bd-e24b-11e1-ac98-c89cdc283f74} - G:\LaunchU3.exe -a

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKCU - DefaultScope {59A13F7D-7D6F-4446-A64D-7B6C6C9FA4A8} URL = hxxp://de.search.yahoo.com/search?fr=mcafee&p={SearchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {59A13F7D-7D6F-4446-A64D-7B6C6C9FA4A8} URL = hxxp://de.search.yahoo.com/search?fr=mcafee&p={SearchTerms}
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\Program Files (x86)\FlashFXP\IEFlash.dll (IniCom Networks, Inc.)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\McAfee\MSC\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\MSC\McSnIePl.dll (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Tina\AppData\Roaming\Mozilla\Firefox\Profiles\6i3cqqff.default
FF DefaultSearchEngine: Sichere Suche
FF SelectedSearchEngine: Sichere Suche
FF Keyword.URL: hxxp://de.search.yahoo.com/search?fr=mcafee&type=A111DE739&p=
FF SearchEngineOrder.1: Sichere Suche
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Tina\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Tina\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2014-02-27]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2014-02-27]

Chrome: 
=======
CHR HomePage: hxxp://google.de/
CHR Extension: (WEB.DE MailCheck) - C:\Users\Tina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo [2014-02-21]
CHR Extension: (Google Wallet) - C:\Users\Tina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR HKCU\...\Chrome\Extension: [caloheeledhajihipjihanmihhegodlc] - C:\Users\Tina\AppData\Local\CRE\caloheeledhajihipjihanmihhegodlc.crx [2013-08-22]
CHR HKCU\...\Chrome\Extension: [engeblojhfeingnjnfpiceofljnjpldp] - C:\Users\Tina\AppData\Local\CRE\engeblojhfeingnjnfpiceofljnjpldp.crx [2013-03-27]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Users\Tina\AppData\Roaming\DVDVideoSoft\dvsYoutubeDownload.crx [2012-09-12]
CHR HKLM-x32\...\Chrome\Extension: [caloheeledhajihipjihanmihhegodlc] - C:\Users\Tina\AppData\Local\CRE\caloheeledhajihipjihanmihhegodlc.crx [2012-09-12]
CHR HKLM-x32\...\Chrome\Extension: [engeblojhfeingnjnfpiceofljnjpldp] - C:\Users\Tina\AppData\Local\CRE\engeblojhfeingnjnfpiceofljnjpldp.crx [2013-03-27]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2014-02-27]
CHR HKLM-x32\...\Chrome\Extension: [pelmeidfhdlhlbjimpabfcbnnojbboma] - C:\Users\Tina\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv2.crx [2014-02-27]
CHR StartMenuInternet: Google Chrome - C:\Users\Tina\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

R2 GREGService; C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe [23584 2010-01-08] (Acer Incorporated)
S2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178528 2014-01-28] (McAfee, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S2 McNaiAnn; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [602944 2013-08-02] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1025232 2013-12-11] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-01-27] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [185792 2014-01-27] (McAfee, Inc.)
S2 MOBKbackup; C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe [231224 2010-04-13] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3993576 2011-11-17] (INCA Internet Co., Ltd.)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2123584 2011-12-14] (TuneUp Software)
R2 Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [243232 2010-01-29] (Acer Group)
S2 NewPlayerUpdaterService; "C:\Program Files (x86)\NewPlayer\NewPlayerUpdaterService.exe" [X]

==================== Drivers (Whitelisted) ====================

R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70592 2014-01-27] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R2 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [180272 2014-01-27] (McAfee, Inc.)
R2 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311600 2014-01-27] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [520696 2014-01-27] (McAfee, Inc.)
R2 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [783864 2014-01-27] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [411944 2013-11-26] (McAfee, Inc.)
S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [96112 2013-11-26] (McAfee, Inc.)
R2 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [344688 2014-01-27] (McAfee, Inc.)
R1 MOBKFilter; C:\Windows\System32\DRIVERS\MOBK.sys [66040 2010-04-13] (Mozy, Inc.)
R1 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [61592 2013-12-17] (NetFilterSDK.com)
S3 NPPTNT2; C:\Windows\SysWOW64\npptNT2.sys [4682 2004-12-31] (INCA Internet Co., Ltd.)
R3 PAC7311; C:\Windows\System32\DRIVERS\PA707UCM.SYS [524800 2007-03-14] (PixArt Imaging Inc.)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [11856 2011-12-12] (TuneUp Software)
S3 dump_wmimmc; \??\C:\Program Files (x86)\ShotOnline\GameGuard\dump_wmimmc.sys [X]
S3 PCDSRVC{1368CD8C-A2A5DE4D-06020101}_0; \??\c:\users\admini~1\appdata\local\temp\ksyl9fm2qzjt\pcdrdiag\bin\pcdsrvc_x64.pkms [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-28 21:31 - 2014-02-28 21:32 - 00017556 _____ () C:\Users\Tina\Desktop\FRST.txt
2014-02-28 21:04 - 2014-02-28 21:04 - 00005891 _____ () C:\Users\Tina\Desktop\JRT.txt
2014-02-28 20:57 - 2014-02-28 20:57 - 01037734 _____ (Thisisu) C:\Users\Tina\Downloads\JRT_6.1.2 (1).exe
2014-02-28 20:54 - 2014-02-28 20:54 - 01037734 _____ (Thisisu) C:\Users\Tina\Downloads\JRT_6.1.2.exe
2014-02-28 20:54 - 2014-02-28 20:54 - 00000000 ____D () C:\Windows\ERUNT
2014-02-28 19:30 - 2014-02-28 19:31 - 00029946 _____ () C:\Users\Tina\Downloads\Addition.txt
2014-02-28 19:28 - 2014-02-28 21:31 - 00000000 ____D () C:\FRST
2014-02-28 19:28 - 2014-02-28 19:31 - 00058943 _____ () C:\Users\Tina\Downloads\FRST.txt
2014-02-28 19:28 - 2014-02-28 19:28 - 02155520 _____ (Farbar) C:\Users\Tina\Desktop\FRST64.exe
2014-02-28 19:26 - 2014-02-28 19:27 - 04892480 _____ (WinZip International LLC ) C:\Users\Tina\Downloads\wzmp_8 (2).exe
2014-02-28 14:57 - 2014-02-28 19:25 - 00000000 ____D () C:\Users\Tina\AppData\Roaming\Nico Mak Computing
2014-02-28 14:57 - 2014-02-28 14:57 - 04892480 _____ (WinZip International LLC ) C:\Users\Tina\Downloads\wzmp_8 (1).exe
2014-02-28 14:42 - 2014-02-28 14:42 - 00003114 _____ () C:\Windows\System32\Tasks\{A8ADE526-7CC9-4F86-BB3D-F6393CD7B753}
2014-02-28 14:41 - 2014-02-28 14:41 - 00668792 _____ () C:\Users\Tina\Downloads\bremove.exe
2014-02-28 14:29 - 2014-02-28 14:29 - 00669304 _____ () C:\Users\Tina\Downloads\kremove.exe
2014-02-28 14:18 - 2014-02-28 14:18 - 04892480 _____ (WinZip International LLC ) C:\Users\Tina\Downloads\wzmp_8.exe
2014-02-28 13:46 - 2014-02-28 13:46 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-02-28 13:20 - 2014-02-28 13:20 - 00001316 _____ () C:\Users\Tina\Desktop\AdwCleaner[S2].txt
2014-02-28 13:16 - 2014-02-28 13:16 - 00001324 _____ () C:\Users\Tina\Desktop\AdwCleaner[S1].txt
2014-02-28 13:11 - 2014-02-28 13:11 - 00032551 _____ () C:\Users\Tina\Desktop\AdwCleaner[S0].txt
2014-02-28 13:03 - 2014-02-28 14:55 - 00000000 ____D () C:\AdwCleaner
2014-02-28 13:02 - 2014-02-28 13:02 - 01244192 _____ () C:\Users\Tina\Downloads\adwcleaner_3.0.2.0.exe
2014-02-28 12:36 - 2014-02-28 12:36 - 00003162 _____ () C:\Windows\System32\Tasks\{0D24DEA7-A800-4555-B9B2-FD9475AFFE5C}
2014-02-28 12:36 - 2014-02-28 12:36 - 00002635 _____ () C:\Users\Tina\Downloads\legitcheck.hta
2014-02-28 12:35 - 2014-02-28 12:35 - 25842736 _____ (Microsoft Corporation) C:\Users\Tina\Downloads\wmp11-windowsxp-x86-DE-DE (2).exe
2014-02-28 12:27 - 2014-02-28 12:27 - 00003162 _____ () C:\Windows\System32\Tasks\{CDA5129A-6E85-4CB8-8EF1-2DF541A7C27F}
2014-02-28 12:26 - 2014-02-28 12:27 - 25842736 _____ (Microsoft Corporation) C:\Users\Tina\Downloads\wmp11-windowsxp-x86-DE-DE (1).exe
2014-02-28 11:07 - 2014-02-28 12:36 - 00003025 _____ () C:\Windows\wmsetup.log
2014-02-28 11:07 - 2014-02-28 11:07 - 00003150 _____ () C:\Windows\System32\Tasks\{D6EE7DE4-54CE-4AB8-9051-9BC0935D73B1}
2014-02-28 11:06 - 2014-02-28 11:07 - 25842736 _____ (Microsoft Corporation) C:\Users\Tina\Downloads\wmp11-windowsxp-x86-DE-DE.exe
2014-02-27 22:44 - 2014-02-28 20:28 - 00001856 _____ () C:\Users\Public\Desktop\McAfee Internet Security.lnk
2014-02-27 22:44 - 2013-09-23 13:49 - 00197704 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\HipShieldK.sys
2014-02-27 22:43 - 2014-02-28 07:09 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-02-27 22:43 - 2014-02-27 22:43 - 00000000 ____D () C:\Program Files\McAfee.com
2014-02-27 22:43 - 2014-02-27 22:43 - 00000000 ____D () C:\Program Files (x86)\McAfee.com
2014-02-27 22:37 - 2014-01-27 08:37 - 00185792 _____ (McAfee, Inc.) C:\Windows\system32\mfevtps.exe
2014-02-27 22:30 - 2014-02-27 22:30 - 05143616 _____ (McAfee, Inc.) C:\Users\Tina\Downloads\McAfeeSetup.exe
2014-02-27 22:29 - 2014-02-27 22:32 - 00000000 ____D () C:\Program Files\stinger
2014-02-27 21:45 - 2014-02-27 21:45 - 00000000 ____D () C:\Users\Tina\AppData\Local\Tuguu_SL
2014-02-27 21:44 - 2014-02-27 22:13 - 00000000 ____D () C:\Users\Tina\AppData\Local\cache
2014-02-27 21:44 - 2014-02-27 21:44 - 00000000 ____D () C:\Users\Tina\.android
2014-02-27 21:44 - 2014-02-27 21:44 - 00000000 _____ () C:\Users\Tina\daemonprocess.txt
2014-02-27 21:39 - 2014-02-27 21:39 - 00391152 _____ () C:\Users\Tina\Downloads\Setup.exe
2014-02-27 21:26 - 2014-02-28 21:29 - 00187262 _____ () C:\Windows\system32\SavingsBullFilterService.log
2014-02-27 21:26 - 2014-02-27 21:26 - 00000000 _____ () C:\Windows\SysWOW64\Service.log
2014-02-27 21:26 - 2014-02-27 21:26 - 00000000 _____ () C:\Windows\system32\Service.log
2014-02-27 19:07 - 2014-02-27 19:10 - 00000000 ____D () C:\Users\Tina\Desktop\Bewerbungen
2014-02-25 20:17 - 2014-01-09 03:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-02-25 20:17 - 2014-01-03 23:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-02-25 19:32 - 2014-02-25 19:32 - 00740864 _____ () C:\Users\Tina\Downloads\game_HalloweenPuzzle_HMv32.tar
2014-02-25 19:30 - 2014-02-25 19:30 - 02265600 _____ () C:\Users\Tina\Downloads\game_theelevatorofthedeadv2Marsu.tar
2014-02-25 19:28 - 2014-02-25 19:28 - 00723456 _____ () C:\Users\Tina\Downloads\game_HidStars-FantasyNightAS3hitman.tar
2014-02-25 19:26 - 2014-02-25 19:26 - 00375808 _____ () C:\Users\Tina\Downloads\game_penguinbrothers_v32HM.tar
2014-02-23 18:54 - 2014-02-23 19:19 - 00000809 _____ () C:\Users\Tina\Desktop\Neues Textdokument.txt
2014-02-22 22:47 - 2014-02-22 22:47 - 05627904 _____ () C:\Users\Tina\Downloads\BubbleWitchAS3v2DOT.tar
2014-02-22 22:36 - 2014-02-22 22:36 - 01841664 _____ () C:\Users\Tina\Downloads\mahjonggdarkdimensionsv32Ph.tar
2014-02-22 11:43 - 2014-02-22 15:57 - 00023156 _____ () C:\Users\Tina\Desktop\ESt2013_Schlechte_Sascha.elfo
2014-02-16 08:02 - 2014-02-16 10:08 - 00145629 _____ () C:\Users\Tina\ESt2013_Ballakowski_Alexander_und_Nina.elfo
2014-02-15 10:02 - 2014-02-15 10:02 - 00620544 _____ () C:\Users\Tina\Downloads\BalloonsBlastv2AS3Buzz.tar
2014-02-15 10:00 - 2014-02-15 10:00 - 02308096 _____ () C:\Users\Tina\Downloads\BakersGamev2AS3Buzz.tar
2014-02-14 22:27 - 2014-02-14 22:27 - 06267392 _____ () C:\Users\Tina\Downloads\Boingz3v2AS3TyRO.tar
2014-02-14 10:19 - 2014-02-14 10:19 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-02-14 10:19 - 2014-02-14 10:19 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-02-12 21:32 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-02-12 21:32 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-02-12 21:32 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-02-12 21:32 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-02-12 21:32 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-02-12 21:32 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-02-12 21:32 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-02-12 21:32 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-02-12 21:32 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-02-12 21:32 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-02-12 21:32 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-02-12 21:32 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-02-12 21:32 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-02-12 21:32 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-02-12 21:32 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-02-12 21:32 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-02-12 21:31 - 2013-09-25 03:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-02-12 21:31 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-02-12 21:14 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-12 21:14 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-12 21:13 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-12 21:13 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-12 21:13 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-12 21:13 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-12 21:13 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-12 21:13 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-12 21:13 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-12 21:13 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-12 21:13 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-12 21:13 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-12 21:13 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-12 21:13 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-12 21:13 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-12 21:13 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-12 21:13 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-12 21:13 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-12 21:13 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-12 21:13 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-12 21:13 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-12 21:13 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-12 21:13 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-12 21:13 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-12 21:13 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-12 21:13 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-12 21:13 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-12 21:13 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-12 21:13 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-12 21:13 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-12 21:13 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-12 21:13 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-12 21:13 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-12 21:13 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-12 21:13 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-12 21:13 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-12 21:13 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-12 21:13 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-12 21:13 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-12 21:13 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-12 21:13 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-12 17:45 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-12 17:45 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-12 17:45 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 17:45 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 17:45 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-12 17:45 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-12 17:44 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-12 17:44 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 17:44 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-12 17:44 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-12 17:44 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 17:44 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-12 17:44 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-12 17:44 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-12 17:44 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-12 17:44 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 17:44 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-12 17:44 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-12 17:44 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-12 17:44 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-12 17:44 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-12 17:44 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-12 17:44 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-12 17:44 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-12 17:44 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-12 17:44 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-12 17:44 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-12 17:44 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-06 23:27 - 2014-02-14 10:19 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-02-06 23:27 - 2014-02-14 10:19 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-02-06 23:27 - 2014-02-06 23:27 - 00005933 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-02-06 20:09 - 2014-02-13 22:07 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-02-06 20:09 - 2014-02-06 20:09 - 00000000 ____D () C:\Users\Tina\AppData\Roaming\Opera Software
2014-02-06 20:09 - 2014-02-06 20:09 - 00000000 ____D () C:\Users\Tina\AppData\Local\Opera Software
2014-02-05 20:04 - 2014-02-05 20:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-05 20:04 - 2014-02-05 20:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-05 20:03 - 2014-02-05 20:03 - 00283120 _____ (Mozilla) C:\Users\Tina\Desktop\Firefox Setup Stub 27.0.exe
2014-02-05 19:21 - 2014-02-05 19:21 - 00062519 _____ () C:\Users\Tina\ESt2013_Cotterill_Kimberley_Jenniferneu.elfo
2014-02-04 19:48 - 2014-02-04 19:49 - 00061590 _____ () C:\Users\Tina\ESt2013_Cotterill_Kimberley_Jennifer.elfo
2014-02-04 19:26 - 2014-02-04 19:26 - 00001205 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk
2014-02-04 19:25 - 2014-02-14 18:22 - 00000000 ____D () C:\Program Files (x86)\ElsterFormular
2014-02-04 19:23 - 2014-02-04 19:24 - 78303584 _____ (Landesfinanzdirektion Thüringen) C:\Users\Tina\Desktop\ElsterFormular-15.0.20140117p.exe
2014-02-02 08:51 - 2014-02-14 22:07 - 00135008 _____ () C:\Windows\system32\GDIPFONTCACHEV1.DAT
2014-02-01 07:42 - 2014-02-01 07:42 - 00476024 _____ (1&1 Mail & Media GmbH) C:\Users\Tina\Downloads\WEB.DE_MailCheck_chrome_setup (1).exe
2014-01-30 22:27 - 2014-01-30 22:27 - 00000000 ____D () C:\Users\Tina\Documents\Meine Paletten
2014-01-30 22:26 - 2014-01-30 22:26 - 00000000 ____D () C:\Users\Tina\AppData\Roaming\Corel
2014-01-30 22:26 - 2014-01-30 22:26 - 00000000 ____D () C:\ProgramData\Protexis
2014-01-30 22:23 - 2014-01-30 22:26 - 00000000 ____D () C:\Users\Tina\Documents\Corel
2014-01-30 22:23 - 2014-01-30 22:23 - 00000000 ____D () C:\Users\Tina\Documents\Visual Studio 2008
2014-01-30 22:22 - 2014-01-30 22:36 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 9.0
2014-01-30 22:21 - 2014-01-31 08:12 - 00000000 ____D () C:\ProgramData\Corel
2014-01-30 22:17 - 2014-01-30 22:26 - 00000000 ____D () C:\ProgramData\CorelDRAW Graphics Suite X6

==================== One Month Modified Files and Folders =======

2014-02-28 21:32 - 2014-02-28 21:31 - 00017556 _____ () C:\Users\Tina\Desktop\FRST.txt
2014-02-28 21:31 - 2014-02-28 19:28 - 00000000 ____D () C:\FRST
2014-02-28 21:30 - 2012-12-10 18:51 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-28 21:30 - 2012-02-16 21:53 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-02-28 21:30 - 2011-07-27 09:07 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-28 21:30 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-28 21:30 - 2009-07-14 05:51 - 00081856 _____ () C:\Windows\setupact.log
2014-02-28 21:29 - 2014-02-27 21:26 - 00187262 _____ () C:\Windows\system32\SavingsBullFilterService.log
2014-02-28 21:29 - 2011-07-27 09:05 - 01786762 _____ () C:\Windows\WindowsUpdate.log
2014-02-28 21:22 - 2011-08-12 16:34 - 00000000 ____D () C:\Users\Tina
2014-02-28 21:18 - 2011-08-12 16:38 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2640103502-2235371180-2021522901-1001UA.job
2014-02-28 21:04 - 2014-02-28 21:04 - 00005891 _____ () C:\Users\Tina\Desktop\JRT.txt
2014-02-28 21:02 - 2011-08-12 17:52 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2640103502-2235371180-2021522901-1002UA.job
2014-02-28 20:57 - 2014-02-28 20:57 - 01037734 _____ (Thisisu) C:\Users\Tina\Downloads\JRT_6.1.2 (1).exe
2014-02-28 20:54 - 2014-02-28 20:54 - 01037734 _____ (Thisisu) C:\Users\Tina\Downloads\JRT_6.1.2.exe
2014-02-28 20:54 - 2014-02-28 20:54 - 00000000 ____D () C:\Windows\ERUNT
2014-02-28 20:54 - 2012-12-10 18:51 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-28 20:42 - 2012-04-22 09:44 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-28 20:28 - 2014-02-27 22:44 - 00001856 _____ () C:\Users\Public\Desktop\McAfee Internet Security.lnk
2014-02-28 20:25 - 2012-08-24 08:17 - 00000000 ____D () C:\ProgramData\McAfee
2014-02-28 19:46 - 2013-02-02 23:38 - 00003918 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{C18B6624-D95B-4C1A-8482-B5A666EFA20F}
2014-02-28 19:31 - 2014-02-28 19:30 - 00029946 _____ () C:\Users\Tina\Downloads\Addition.txt
2014-02-28 19:31 - 2014-02-28 19:28 - 00058943 _____ () C:\Users\Tina\Downloads\FRST.txt
2014-02-28 19:28 - 2014-02-28 19:28 - 02155520 _____ (Farbar) C:\Users\Tina\Desktop\FRST64.exe
2014-02-28 19:27 - 2014-02-28 19:26 - 04892480 _____ (WinZip International LLC ) C:\Users\Tina\Downloads\wzmp_8 (2).exe
2014-02-28 19:25 - 2014-02-28 14:57 - 00000000 ____D () C:\Users\Tina\AppData\Roaming\Nico Mak Computing
2014-02-28 18:20 - 2009-07-14 05:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-28 18:20 - 2009-07-14 05:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-28 18:13 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2014-02-28 18:12 - 2011-07-29 12:24 - 00530912 _____ () C:\Windows\PFRO.log
2014-02-28 14:57 - 2014-02-28 14:57 - 04892480 _____ (WinZip International LLC ) C:\Users\Tina\Downloads\wzmp_8 (1).exe
2014-02-28 14:55 - 2014-02-28 13:03 - 00000000 ____D () C:\AdwCleaner
2014-02-28 14:42 - 2014-02-28 14:42 - 00003114 _____ () C:\Windows\System32\Tasks\{A8ADE526-7CC9-4F86-BB3D-F6393CD7B753}
2014-02-28 14:41 - 2014-02-28 14:41 - 00668792 _____ () C:\Users\Tina\Downloads\bremove.exe
2014-02-28 14:29 - 2014-02-28 14:29 - 00669304 _____ () C:\Users\Tina\Downloads\kremove.exe
2014-02-28 14:22 - 2013-11-29 23:10 - 00000000 ____D () C:\Users\Tina\Documents\Outlook-Dateien
2014-02-28 14:19 - 2013-12-06 21:28 - 00135008 _____ () C:\Windows\SysWOW64\GDIPFONTCACHEV1.DAT
2014-02-28 14:18 - 2014-02-28 14:18 - 04892480 _____ (WinZip International LLC ) C:\Users\Tina\Downloads\wzmp_8.exe
2014-02-28 13:46 - 2014-02-28 13:46 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-02-28 13:20 - 2014-02-28 13:20 - 00001316 _____ () C:\Users\Tina\Desktop\AdwCleaner[S2].txt
2014-02-28 13:16 - 2014-02-28 13:16 - 00001324 _____ () C:\Users\Tina\Desktop\AdwCleaner[S1].txt
2014-02-28 13:11 - 2014-02-28 13:11 - 00032551 _____ () C:\Users\Tina\Desktop\AdwCleaner[S0].txt
2014-02-28 13:02 - 2014-02-28 13:02 - 01244192 _____ () C:\Users\Tina\Downloads\adwcleaner_3.0.2.0.exe
2014-02-28 12:36 - 2014-02-28 12:36 - 00003162 _____ () C:\Windows\System32\Tasks\{0D24DEA7-A800-4555-B9B2-FD9475AFFE5C}
2014-02-28 12:36 - 2014-02-28 12:36 - 00002635 _____ () C:\Users\Tina\Downloads\legitcheck.hta
2014-02-28 12:36 - 2014-02-28 11:07 - 00003025 _____ () C:\Windows\wmsetup.log
2014-02-28 12:35 - 2014-02-28 12:35 - 25842736 _____ (Microsoft Corporation) C:\Users\Tina\Downloads\wmp11-windowsxp-x86-DE-DE (2).exe
2014-02-28 12:27 - 2014-02-28 12:27 - 00003162 _____ () C:\Windows\System32\Tasks\{CDA5129A-6E85-4CB8-8EF1-2DF541A7C27F}
2014-02-28 12:27 - 2014-02-28 12:26 - 25842736 _____ (Microsoft Corporation) C:\Users\Tina\Downloads\wmp11-windowsxp-x86-DE-DE (1).exe
2014-02-28 12:18 - 2011-08-12 16:38 - 00001064 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2640103502-2235371180-2021522901-1001Core.job
2014-02-28 11:07 - 2014-02-28 11:07 - 00003150 _____ () C:\Windows\System32\Tasks\{D6EE7DE4-54CE-4AB8-9051-9BC0935D73B1}
2014-02-28 11:07 - 2014-02-28 11:06 - 25842736 _____ (Microsoft Corporation) C:\Users\Tina\Downloads\wmp11-windowsxp-x86-DE-DE.exe
2014-02-28 08:10 - 2010-04-13 19:11 - 00004018 _____ () C:\Windows\MOBK.blk
2014-02-28 08:10 - 2010-04-13 19:11 - 00001446 _____ () C:\Windows\MOBK.flt
2014-02-28 07:09 - 2014-02-27 22:43 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-02-27 22:44 - 2013-04-06 14:09 - 00000000 ____D () C:\Program Files\McAfee
2014-02-27 22:44 - 2013-03-31 08:54 - 00000000 ____D () C:\Program Files\Common Files\McAfee
2014-02-27 22:43 - 2014-02-27 22:43 - 00000000 ____D () C:\Program Files\McAfee.com
2014-02-27 22:43 - 2014-02-27 22:43 - 00000000 ____D () C:\Program Files (x86)\McAfee.com
2014-02-27 22:32 - 2014-02-27 22:29 - 00000000 ____D () C:\Program Files\stinger
2014-02-27 22:30 - 2014-02-27 22:30 - 05143616 _____ (McAfee, Inc.) C:\Users\Tina\Downloads\McAfeeSetup.exe
2014-02-27 22:13 - 2014-02-27 21:44 - 00000000 ____D () C:\Users\Tina\AppData\Local\cache
2014-02-27 21:52 - 2011-08-12 16:34 - 00000000 ___RD () C:\Users\Tina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-27 21:46 - 2011-08-12 16:34 - 00001437 _____ () C:\Users\Tina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-27 21:45 - 2014-02-27 21:45 - 00000000 ____D () C:\Users\Tina\AppData\Local\Tuguu_SL
2014-02-27 21:44 - 2014-02-27 21:44 - 00000000 ____D () C:\Users\Tina\.android
2014-02-27 21:44 - 2014-02-27 21:44 - 00000000 _____ () C:\Users\Tina\daemonprocess.txt
2014-02-27 21:39 - 2014-02-27 21:39 - 00391152 _____ () C:\Users\Tina\Downloads\Setup.exe
2014-02-27 21:26 - 2014-02-27 21:26 - 00000000 _____ () C:\Windows\SysWOW64\Service.log
2014-02-27 21:26 - 2014-02-27 21:26 - 00000000 _____ () C:\Windows\system32\Service.log
2014-02-27 19:11 - 2011-08-12 17:43 - 00000000 ___HD () C:\Users\Tina\AppData\Local\Windows Live
2014-02-27 19:10 - 2014-02-27 19:07 - 00000000 ____D () C:\Users\Tina\Desktop\Bewerbungen
2014-02-25 19:32 - 2014-02-25 19:32 - 00740864 _____ () C:\Users\Tina\Downloads\game_HalloweenPuzzle_HMv32.tar
2014-02-25 19:30 - 2014-02-25 19:30 - 02265600 _____ () C:\Users\Tina\Downloads\game_theelevatorofthedeadv2Marsu.tar
2014-02-25 19:28 - 2014-02-25 19:28 - 00723456 _____ () C:\Users\Tina\Downloads\game_HidStars-FantasyNightAS3hitman.tar
2014-02-25 19:26 - 2014-02-25 19:26 - 00375808 _____ () C:\Users\Tina\Downloads\game_penguinbrothers_v32HM.tar
2014-02-23 19:19 - 2014-02-23 18:54 - 00000809 _____ () C:\Users\Tina\Desktop\Neues Textdokument.txt
2014-02-23 16:02 - 2013-12-10 15:57 - 00001068 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2640103502-2235371180-2021522901-1002Core1cef5b819f90838.job
2014-02-22 22:47 - 2014-02-22 22:47 - 05627904 _____ () C:\Users\Tina\Downloads\BubbleWitchAS3v2DOT.tar
2014-02-22 22:36 - 2014-02-22 22:36 - 01841664 _____ () C:\Users\Tina\Downloads\mahjonggdarkdimensionsv32Ph.tar
2014-02-22 15:57 - 2014-02-22 11:43 - 00023156 _____ () C:\Users\Tina\Desktop\ESt2013_Schlechte_Sascha.elfo
2014-02-21 22:42 - 2012-04-22 09:44 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-21 22:42 - 2012-04-22 09:44 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-21 22:42 - 2011-10-06 20:11 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-21 20:55 - 2011-09-20 18:13 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-02-19 20:27 - 2012-07-17 18:26 - 00000000 ____D () C:\Users\David\Desktop\Bewerbungen
2014-02-19 20:10 - 2011-10-12 18:33 - 00000000 ____D () C:\Users\Tina\Desktop\Tina
2014-02-19 17:11 - 2013-10-25 15:27 - 00000000 ____D () C:\Originale
2014-02-17 12:13 - 2011-08-12 16:38 - 00004088 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2640103502-2235371180-2021522901-1001UA
2014-02-17 12:13 - 2011-08-12 16:38 - 00003692 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2640103502-2235371180-2021522901-1001Core
2014-02-17 06:25 - 2011-09-20 18:13 - 00000000 ____D () C:\ProgramData\Skype
2014-02-17 06:24 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-02-16 10:08 - 2014-02-16 08:02 - 00145629 _____ () C:\Users\Tina\ESt2013_Ballakowski_Alexander_und_Nina.elfo
2014-02-15 14:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-15 10:02 - 2014-02-15 10:02 - 00620544 _____ () C:\Users\Tina\Downloads\BalloonsBlastv2AS3Buzz.tar
2014-02-15 10:00 - 2014-02-15 10:00 - 02308096 _____ () C:\Users\Tina\Downloads\BakersGamev2AS3Buzz.tar
2014-02-14 22:27 - 2014-02-14 22:27 - 06267392 _____ () C:\Users\Tina\Downloads\Boingz3v2AS3TyRO.tar
2014-02-14 22:07 - 2014-02-02 08:51 - 00135008 _____ () C:\Windows\system32\GDIPFONTCACHEV1.DAT
2014-02-14 18:22 - 2014-02-04 19:25 - 00000000 ____D () C:\Program Files (x86)\ElsterFormular
2014-02-14 10:19 - 2014-02-14 10:19 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-02-14 10:19 - 2014-02-14 10:19 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-02-14 10:19 - 2014-02-06 23:27 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-02-14 10:19 - 2014-02-06 23:27 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-02-13 23:49 - 2012-12-10 18:51 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-13 23:49 - 2012-12-10 18:51 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-13 22:07 - 2014-02-06 20:09 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-02-12 21:22 - 2013-10-06 09:48 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-02-12 21:21 - 2013-08-14 22:30 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-12 21:20 - 2011-10-07 19:12 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-12 21:16 - 2011-10-12 17:09 - 01595580 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-12 21:16 - 2011-07-27 18:56 - 00699884 _____ () C:\Windows\system32\perfh007.dat
2014-02-12 21:16 - 2011-07-27 18:56 - 00149766 _____ () C:\Windows\system32\perfc007.dat
2014-02-12 21:16 - 2009-07-14 06:13 - 01595580 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-12 21:14 - 2009-07-14 03:34 - 00000536 _____ () C:\Windows\win.ini
2014-02-11 10:26 - 2012-05-24 07:38 - 00000000 ____D () C:\Users\David\AppData\Roaming\SoftGrid Client
2014-02-11 10:19 - 2011-12-31 14:56 - 00000000 ____D () C:\Users\David\AppData\Local\CrashDumps
2014-02-11 10:19 - 2011-08-12 17:51 - 00135008 _____ () C:\Users\David\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-11 10:19 - 2011-08-12 17:51 - 00000000 ____D () C:\Users\David\AppData\Roaming\Adobe
2014-02-11 08:55 - 2011-08-12 17:54 - 00002371 _____ () C:\Users\David\Desktop\Google Chrome.lnk
2014-02-07 09:43 - 2012-09-21 23:15 - 00003694 _____ () C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2014-02-07 09:41 - 2013-08-08 18:08 - 00000000 ____D () C:\Users\Tina\Desktop\Excel2010-Übungen
2014-02-06 23:35 - 2012-01-16 16:41 - 00000000 ___HD () C:\Users\Tina\AppData\Local\CrashDumps
2014-02-06 23:27 - 2014-02-06 23:27 - 00005933 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-02-06 23:27 - 2013-07-29 14:31 - 00000000 ____D () C:\Program Files (x86)\Java
2014-02-06 20:09 - 2014-02-06 20:09 - 00000000 ____D () C:\Users\Tina\AppData\Roaming\Opera Software
2014-02-06 20:09 - 2014-02-06 20:09 - 00000000 ____D () C:\Users\Tina\AppData\Local\Opera Software
2014-02-06 13:16 - 2014-02-12 21:13 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-12 21:13 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-12 21:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-12 21:13 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-12 21:13 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-12 21:13 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-12 21:13 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-12 21:13 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 11:52 - 2014-02-12 21:13 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 11:49 - 2014-02-12 21:13 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-12 21:13 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-12 21:13 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-12 21:13 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-12 21:13 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-12 21:13 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-12 21:13 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 11:11 - 2014-02-12 21:13 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-12 21:13 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-12 21:13 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-12 21:13 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-12 21:13 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-12 21:13 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-12 21:13 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-12 21:13 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:49 - 2014-02-12 21:13 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-06 10:47 - 2014-02-12 21:13 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-12 21:13 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-12 21:13 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-12 21:13 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-12 21:13 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 10:22 - 2014-02-12 21:13 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-12 21:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-12 21:13 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-12 21:13 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-12 21:13 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-12 21:13 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-12 21:13 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-12 21:13 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-12 21:13 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-05 20:04 - 2014-02-05 20:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-05 20:04 - 2014-02-05 20:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-05 20:04 - 2013-07-05 12:36 - 00000000 ____D () C:\Users\Tina\AppData\Roaming\Mozilla
2014-02-05 20:04 - 2013-07-05 12:36 - 00000000 ____D () C:\Users\Tina\AppData\Local\Mozilla
2014-02-05 20:04 - 2011-08-13 22:08 - 00004810 _____ () C:\Windows\wininit.ini
2014-02-05 20:03 - 2014-02-05 20:03 - 00283120 _____ (Mozilla) C:\Users\Tina\Desktop\Firefox Setup Stub 27.0.exe
2014-02-05 19:21 - 2014-02-05 19:21 - 00062519 _____ () C:\Users\Tina\ESt2013_Cotterill_Kimberley_Jenniferneu.elfo
2014-02-04 19:49 - 2014-02-04 19:48 - 00061590 _____ () C:\Users\Tina\ESt2013_Cotterill_Kimberley_Jennifer.elfo
2014-02-04 19:26 - 2014-02-04 19:26 - 00001205 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk
2014-02-04 19:26 - 2013-04-01 07:31 - 00000000 ____D () C:\Users\Tina\AppData\Roaming\elsterformular
2014-02-04 19:24 - 2014-02-04 19:23 - 78303584 _____ (Landesfinanzdirektion Thüringen) C:\Users\Tina\Desktop\ElsterFormular-15.0.20140117p.exe
2014-02-01 07:42 - 2014-02-01 07:42 - 00476024 _____ (1&1 Mail & Media GmbH) C:\Users\Tina\Downloads\WEB.DE_MailCheck_chrome_setup (1).exe
2014-01-31 15:33 - 2013-10-13 00:36 - 00000000 ____D () C:\Users\Tina\Downloads\bereits installiert
2014-01-31 09:41 - 2011-04-07 10:47 - 00000000 ____D () C:\ProgramData\Adobe
2014-01-31 08:14 - 2014-01-04 19:55 - 00000000 ____D () C:\Users\Tina\AppData\Roaming\IrfanView
2014-01-31 08:12 - 2014-01-30 22:21 - 00000000 ____D () C:\ProgramData\Corel
2014-01-31 08:10 - 2011-08-12 16:37 - 00000000 ____D () C:\Users\Tina\AppData\Roaming\Adobe
2014-01-31 07:34 - 2011-04-07 10:46 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-01-31 05:33 - 2009-07-14 05:45 - 00499168 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-30 22:36 - 2014-01-30 22:22 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 9.0
2014-01-30 22:27 - 2014-01-30 22:27 - 00000000 ____D () C:\Users\Tina\Documents\Meine Paletten
2014-01-30 22:26 - 2014-01-30 22:26 - 00000000 ____D () C:\Users\Tina\AppData\Roaming\Corel
2014-01-30 22:26 - 2014-01-30 22:26 - 00000000 ____D () C:\ProgramData\Protexis
2014-01-30 22:26 - 2014-01-30 22:23 - 00000000 ____D () C:\Users\Tina\Documents\Corel
2014-01-30 22:26 - 2014-01-30 22:17 - 00000000 ____D () C:\ProgramData\CorelDRAW Graphics Suite X6
2014-01-30 22:23 - 2014-01-30 22:23 - 00000000 ____D () C:\Users\Tina\Documents\Visual Studio 2008

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-22 08:03

==================== End Of Log ============================

--- --- ---

Additions

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-02-2014 02
Ran by Tina at 2014-02-28 21:32:51
Running from C:\Users\Tina\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {ADA629C7-7F48-5689-624A-3B76997E0892}
AS: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {16C7C823-5972-5907-58FA-0004E2F9422F}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee Firewall (Enabled) {959DA8E2-3527-57D1-4915-924367AD4FE9}

==================== Installed Programs ======================

Google Chrome (HKCU\...\Google Chrome) (Version: 33.0.1750.117 - Google Inc.)
HP Deskjet 2050 J510 series - Grundlegende Software für das Gerät (HKLM\...\{D7716C7E-75F1-4C51-A2D5-C6A1E8311D53}) (Version: 20.0.771.0 - Hewlett-Packard Co.)
McAfee Internet Security (HKLM-x32\...\MSC) (Version: 12.8.934 - McAfee, Inc.)
McAfee Online Backup (Version: 1.16.4.0 - McAfee, Inc.) Hidden
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.130.8 - McAfee, Inc.)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
NVIDIA 3D Vision Treiber 331.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 331.65 - NVIDIA Corporation)
NVIDIA Grafiktreiber 331.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 331.65 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.26.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.26.4 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 331.65 (Version: 331.65 - NVIDIA Corporation) Hidden
NVIDIA Update 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.11.3 - NVIDIA Corporation) Hidden
SavingsbullFilter (Version: 1.0.0.0 - SavingsBull Filter) Hidden <==== ATTENTION
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Windows Live Family Safety (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden

==================== Restore Points  =========================

16-02-2014 18:00:15 Windows-Sicherung
21-02-2014 19:54:26 Removed Skype Click to Call
23-02-2014 18:00:14 Windows-Sicherung
25-02-2014 21:52:50 Windows Update
27-02-2014 20:47:29 Removed Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
27-02-2014 20:50:23 Removed Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {292D0930-F922-49D5-AEF5-AB07E13A7A33} - System32\Tasks\Freemium1ClickMaint => C:\Program Files (x86)\Covus Freemium\Free System Utilities\1Click.exe
Task: {2996991B-0849-4DF4-BA68-14B77C4CFC74} - System32\Tasks\Google Updater and Installer => C:\Users\Tina\AppData\Local\Google\Update\GoogleUpdate.exe [2011-08-12] (Google Inc.)
Task: {39B43A65-9725-4406-95ED-83AC1097D231} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-10] (Google Inc.)
Task: {4725BE6B-0115-4BEE-99E8-C7DCCC8924CE} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation)
Task: {4A6DF0FD-05CD-4CDE-8FD7-926441588D48} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2640103502-2235371180-2021522901-1001
Task: {6B8BF7C8-E3EC-4BB1-A80B-93EC50712FFF} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2640103502-2235371180-2021522901-1001Core => C:\Users\Tina\AppData\Local\Google\Update\GoogleUpdate.exe [2011-08-12] (Google Inc.)
Task: {7DA53F1D-778E-4BDB-BE86-0A71F91D1822} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-21] (Adobe Systems Incorporated)
Task: {9218C584-E44C-4893-8704-CB50099F4299} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-12-21] (Adobe Systems Incorporated)
Task: {93192E87-FD52-4BD8-AEFF-E764C01D6B17} - \HQ-Video-Profession-1.3-enabler No Task File
Task: {949F3B1D-5C1D-4BB3-A53C-0756BA0ED011} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2640103502-2235371180-2021522901-1002Core1cef5b819f90838 => C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe [2011-08-12] (Google Inc.)
Task: {989FB099-4EE6-45A9-83DB-058F872C64DF} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2640103502-2235371180-2021522901-1001UA => C:\Users\Tina\AppData\Local\Google\Update\GoogleUpdate.exe [2011-08-12] (Google Inc.)
Task: {B9062692-3126-4E90-9093-9FA8FC8B74DA} - \Software Updater Ui No Task File
Task: {BE75FBB4-5856-4671-8E2D-7115864C0DED} - \DealPly No Task File
Task: {C1D3DDB7-31C1-4D54-9414-A3535A3EC315} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2640103502-2235371180-2021522901-1002UA => C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe [2011-08-12] (Google Inc.)
Task: {C6E26580-727D-4C73-88F3-462111BA6823} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2008-12-08] (Hewlett-Packard)
Task: {CABACB3F-0F6D-4ABE-BA12-0E981CD02015} - \HQ-Video-Profession-1.3-firefoxinstaller No Task File
Task: {D3234F4F-55AA-4494-A434-45338253FE80} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-10] (Google Inc.)
Task: {D5354982-87F1-4343-ABBB-20309E6D5D54} - \Software Updater No Task File
Task: {E814286E-1DF5-4DD0-B469-10EF44E8506B} - System32\Tasks\{1BA7E5E3-5979-4A6C-B175-F695D3CE72C9} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2013-02-28] (Skype Technologies S.A.)
Task: {F1BA3AB6-8000-4E6B-8CF6-2641A0FF8D91} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2012 => C:\Program Files (x86)\TuneUp Utilities 2012\OneClick.exe [2011-12-14] (TuneUp Software)
Task: {F6220BEE-8F75-40B6-81BB-94203E65EFEC} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2640103502-2235371180-2021522901-1001Core.job => C:\Users\Tina\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2640103502-2235371180-2021522901-1001UA.job => C:\Users\Tina\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2640103502-2235371180-2021522901-1002Core1cef5b819f90838.job => C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2640103502-2235371180-2021522901-1002UA.job => C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-11-18 03:02 - 2013-10-23 09:20 - 00102176 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-02-21 21:21 - 2014-02-20 02:02 - 00051016 _____ () C:\Users\Tina\AppData\Local\Google\Chrome\Application\33.0.1750.117\chrome_elf.dll
2014-02-21 21:21 - 2014-02-20 02:03 - 04060488 _____ () C:\Users\Tina\AppData\Local\Google\Chrome\Application\33.0.1750.117\pdf.dll
2014-02-21 21:21 - 2014-02-20 02:03 - 00394568 _____ () C:\Users\Tina\AppData\Local\Google\Chrome\Application\33.0.1750.117\ppGoogleNaClPluginChrome.dll
2014-02-21 21:21 - 2014-02-20 02:02 - 01647432 _____ () C:\Users\Tina\AppData\Local\Google\Chrome\Application\33.0.1750.117\ffmpegsumo.dll
2014-02-21 21:21 - 2014-02-20 02:03 - 13632840 _____ () C:\Users\Tina\AppData\Local\Google\Chrome\Application\33.0.1750.117\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:02F30776
AlternateDataStreams: C:\ProgramData\TEMP:041ED421
AlternateDataStreams: C:\ProgramData\TEMP:164561C8
AlternateDataStreams: C:\ProgramData\TEMP:2216A431
AlternateDataStreams: C:\ProgramData\TEMP:26499772
AlternateDataStreams: C:\ProgramData\TEMP:2652902F
AlternateDataStreams: C:\ProgramData\TEMP:2B40A7DB
AlternateDataStreams: C:\ProgramData\TEMP:2C86E2AD
AlternateDataStreams: C:\ProgramData\TEMP:3086B95F
AlternateDataStreams: C:\ProgramData\TEMP:4E79C4F8
AlternateDataStreams: C:\ProgramData\TEMP:4F7FE589
AlternateDataStreams: C:\ProgramData\TEMP:553056F1
AlternateDataStreams: C:\ProgramData\TEMP:58E38390
AlternateDataStreams: C:\ProgramData\TEMP:5E8C18F1
AlternateDataStreams: C:\ProgramData\TEMP:762408BA
AlternateDataStreams: C:\ProgramData\TEMP:7C8AA9A6
AlternateDataStreams: C:\ProgramData\TEMP:85376176
AlternateDataStreams: C:\ProgramData\TEMP:87A3A233
AlternateDataStreams: C:\ProgramData\TEMP:9E05DEB0
AlternateDataStreams: C:\ProgramData\TEMP:AFC732F7
AlternateDataStreams: C:\ProgramData\TEMP:B6D84F71
AlternateDataStreams: C:\ProgramData\TEMP:BACD3198
AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1
AlternateDataStreams: C:\ProgramData\TEMP:E40D7F76
AlternateDataStreams: C:\ProgramData\TEMP:E5BA9ADD
AlternateDataStreams: C:\ProgramData\TEMP:EC3A9923
AlternateDataStreams: C:\ProgramData\TEMP:ECF3C50F
AlternateDataStreams: C:\ProgramData\TEMP:F3591DDB
AlternateDataStreams: C:\ProgramData\TEMP:F6A0889A

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"

==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: McAfee Inc. mfeapfk
Description: McAfee Inc. mfeapfk
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: mfeapfk
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/28/2014 09:07:48 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "ConvertStringSidToSid(S-1-5-21-2640103502-2235371180-2021522901-1000.bak)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
.


Vorgang:
   OnIdentify-Ereignis
   Generatordaten werden gesammelt

Kontext:
   Ausführungskontext: Shadow Copy Optimization Writer
   Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
   Generatorname: Shadow Copy Optimization Writer
   Generatorinstanz-ID: {1043b2ec-8b32-4c62-bceb-5ee39ba5ba55}


System errors:
=============
Error: (02/28/2014 09:33:20 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (02/28/2014 09:33:20 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1326

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (02/28/2014 09:30:43 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NewPlayer Updater Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (02/28/2014 09:30:43 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "McAfee Inc. mfeapfk" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1243


Microsoft Office Sessions:
=========================
Error: (02/28/2014 09:07:48 PM) (Source: VSS)(User: )
Description: ConvertStringSidToSid(S-1-5-21-2640103502-2235371180-2021522901-1000.bak)0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.


Vorgang:
   OnIdentify-Ereignis
   Generatordaten werden gesammelt

Kontext:
   Ausführungskontext: Shadow Copy Optimization Writer
   Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
   Generatorname: Shadow Copy Optimization Writer
   Generatorinstanz-ID: {1043b2ec-8b32-4c62-bceb-5ee39ba5ba55}


==================== Memory info =========================== 

Percentage of memory in use: 39%
Total physical RAM: 4078.02 MB
Available physical RAM: 2485.27 MB
Total Pagefile: 8154.21 MB
Available Pagefile: 6439.86 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: (Packard Bell) (Fixed) (Total:456.26 GB) (Free:370.27 GB) NTFS
Drive d: (DATA) (Fixed) (Total:456.6 GB) (Free:236.21 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 4989BDF0)
Partition 1: (Not Active) - (Size=19 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=456 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=457 GB) - (Type=07 NTFS)

==================== End Of Log ============================

cosinus · 28.02.2014, 21:39

Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle einen Quickscan mit Malwarebytes Anti-Malware (MBAM)

Hinweis: Denk bitte vorher daran, Malwarebytes Anti-Malware über den Updatebutton zu aktualisieren!

Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt:

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Blondie17 · 28.02.2014, 21:40

Vielen vielen Dank

funktioniert alles wieder
Spitzenjob
Sehr weiter zu empfehlen

28.02.2014, 15:07	#4
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Hoel Media Player Was willst du da exportieren, genauer bitte, ich bin kein __________________ Logfiles bitte immer in CODE-Tags posten

28.02.2014, 20:37	#6
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Hoel Media Player Was ist mit den anderen Logs, adwCleaner usw? Außerdem fragte ich nach bisherigen Funden deines Virenscanners, wenn es Funde gab bitte auch dazu die Logs posten __________________ --> Hoel Media Player

28.02.2014, 21:27	#12
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Hoel Media Player Rechner neustarten, danach frische FRST Logs bitte. Haken setzen bei additions __________________ Logfiles bitte immer in CODE-Tags posten

Hoel Media Player

Plagegeister aller Art und deren Bekämpfung: Hoel Media Player