Möglicherweise Opfer Softwarefälschung/Norton funktioniert nicht mehr

SonyVaio2012 · 02.03.2014, 12:04

Hallo Zusammen,

undzwar habe ich seit knapp 2 Wochen Probleme mit meinem Laptop.
Anfangs nachdem ich mit die Testversion AcrobatPro installiert habe ging alles noch. Einen Tag später ging es los. Der Laptop wurde von der Leistung her sehr sehr langsam. Dann habe ich das Pogramm deinstalliert. Und alle Daten gesichert (hat ewig gedauerd). Danach tauchte auch noch die Warnung auf "Möglicherweise sind die Opfer einer Softwarefälschung geworden". Mein Norton funktioniert auch nicht mehr. Ich habe es schon mit dem CCleaner von Avira versucht-erfolglos. Auch Avira drüber laufen lassen...nichts gefunden. Es lassen sich keine Updates durchführen auch das wiederherstellen funktioniert einfach nicht. Ich habe Windows 7, welches beim Kauf schon so installiert war. Des Weiteren ist mir aufgefallen, wenn ich auf die installierten Programme gehe sind da zwar vom Herausgeber Microsoft Programme, die in irgendeiner komische Sprache bezeichnet sind. Das ist nicht normal oder? Auch auf dem lokalen Datenträger habe ich komische Ordner gefunden, die sich nicht löschen lassen, und Bezeichnungen haben die einfach willkürlich aus Zahlen und Buchstaben bestehen.
Jetzt weiss ich einfach nicht mehr weiter was ich tuen soll.

Hat jemand eine Lösung parat?

Bootsektor · 02.03.2014, 12:53

Mein Name ist Sandra und ich werde Dir bei Deinem Problem behilflich sein.

Bitte arbeite alle Schritte der Reihe nach ab.
Lese die Anleitungen sorgfältig durch bevor Du beginnst. Wenn es Probleme gibt oder Du etwas nicht verstehst, dann stoppe mit Deiner Ausführung und beschreibe mir das Problem
Führe bitte nur Scans durch zu denen Du von mir aufgefordert wirst.
Bitte kein Crossposting ( posten in mehreren Foren).
Installiere oder deinstalliere während der Bereinigung keine Software, ausser Du wurdest dazu aufgefordert.
Speichere alle unsere Toosl auf dem Desktop ab.
Poste die Logfiles direkt in deinen Thread in Code-Tags.
Bedenke, dass wir hier alle während unserer Freizeit tätig sind, wenn du innerhalb von 2 Tagen nichts von mir hörst, dann schreibe mir bitte eine PM.

Hinweis: Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist meist der schnellere und immer der sicherste Weg.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Dir jemand vom Team sagt, dass Du clean bist.

Bitte füge die Logs immer in Code-Tags ein. Wenn Du das nicht machst, erschwert es mir sehr das Auswerten. Danke.
Dazu:

Klicke über dem Antwortfenster auf die Raute #, dann steht dort in eckigen Klammern [code][/code]
Zwischen den beiden code-Bausteinen fügst Du dann deine Logfiles ein. Also [CODE] Logfile [/CODE]
Wenn die Logs zu lang sein sollten, dann teile sie bitte auf und poste sie dann hier in Deinem Thread, notfalls in mehreren Antworten.

Schritt 1
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

SonyVaio2012 · 02.03.2014, 13:28

Hallo Sandra,

danke für die schnelle Antwort. Auf meinem normalen Benutzer ist es kaum möglich irgendetwas zu machen. Er hängt sich immer auf.
Funktioniert das auch alles über den abgesicherten Modus?
Tut mir leid ich kenne mich null mit sowas aus.

Danke

Bootsektor · 02.03.2014, 20:56

Hallo SonyVaio2012,

das kannst du auch, besser wäre natürlich dein normales Nutzerkonto.

SonyVaio2012 · 02.03.2014, 21:46

Vorerst im Abgesicherten Modus

Code:

ATTFilter

HKLM\...\Run: [cAudioFilterAgent] - C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [518784 2011-03-29] (Conexant Systems, Inc.)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [790688 2011-04-29] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [657568 2011-04-29] (Atheros Commnucations)
HKLM\...\Run: [Apoint] - C:\Program Files\Apoint\Apoint.exe [226672 2011-02-17] (Alps Electric Co., Ltd.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-13] (Intel Corporation)
HKLM-x32\...\Run: [ISBMgr.exe] - C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [2757312 2011-02-15] (Sony Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] - C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [648032 2010-11-26] (Sony Corporation)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-27] (Microsoft Corporation)
HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-03-20] (Geek Software GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated)
HKLM-x32\...\Runonce: [Del1091148] - cmd.exe /Q /D /c del "C:\Users\Sasvena\AppData\Local\Temp\0.del" [X]
HKLM-x32\...\Runonce: [Del1113113] - cmd.exe /Q /D /c del "C:\Users\Sasvena\AppData\Local\Temp\0.del" [X]
HKU\S-1-5-21-3860973650-533268010-2521458347-1000\...\RunOnce: [Del1091148] - cmd.exe /Q /D /c del "C:\Users\Sasvena\AppData\Local\Temp\0.del"
HKU\S-1-5-21-3860973650-533268010-2521458347-1000\...\RunOnce: [Del1113113] - cmd.exe /Q /D /c del "C:\Users\Sasvena\AppData\Local\Temp\0.del"

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=dsites0301&cd=2XzuyEtN2Y1L1QzuyBzzzzyEtA0C0FtC0FtCtB0C0FtB0CyBtN0D0Tzu0SyBzytBtN1L2XzutBtFtCyBtFtDtFtCtN1L1CzutDzytDtCtG1TtN1L1G1B1V1N2Y1L1Qzu2SyEyDyEyD0A0BtByDtG0AyBzy0FtGtByDzztDtGyCtDzzzztGtAyEtA0A0C0DyE0CyE0A0C0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StByBtDyE0CtByB0BtGyE0EyByCtGtByDtB0FtGyC0Fzz0BtGtB0CtD0C0DtA0DtCyEzztDzz2Q&cr=1679946924&ir=
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://vaioportal.sony.eu
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://sony.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://sony.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=dsites0301&cd=2XzuyEtN2Y1L1QzuyBzzzzyEtA0C0FtC0FtCtB0C0FtB0CyBtN0D0Tzu0SyBzytBtN1L2XzutBtFtCyBtFtDtFtCtN1L1CzutDzytDtCtG1TtN1L1G1B1V1N2Y1L1Qzu2SyEyDyEyD0A0BtByDtG0AyBzy0FtGtByDzztDtGyCtDzzzztGtAyEtA0A0C0DyE0CyE0A0C0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StByBtDyE0CtByB0BtGyE0EyByCtGtByDtB0FtGyC0Fzz0BtGtB0CtD0C0DtA0DtCyEzztDzz2Q&cr=1679946924&ir=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=dsites0301&cd=2XzuyEtN2Y1L1QzuyBzzzzyEtA0C0FtC0FtCtB0C0FtB0CyBtN0D0Tzu0SyBzytBtN1L2XzutBtFtCyBtFtDtFtCtN1L1CzutDzytDtCtG1TtN1L1G1B1V1N2Y1L1Qzu2SyEyDyEyD0A0BtByDtG0AyBzy0FtGtByDzztDtGyCtDzzzztGtAyEtA0A0C0DyE0CyE0A0C0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StByBtDyE0CtByB0BtGyE0EyByCtGtByDtB0FtGyC0Fzz0BtGtB0CtD0C0DtA0DtCyEzztDzz2Q&cr=1679946924&ir=
URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
URLSearchHook: HKLM-x32 - (No Name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - No File
URLSearchHook: HKLM-x32 - DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
URLSearchHook: HKCU - SearchHook Class - {D8278076-BC68-4484-9233-6E7F1628B56C} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\searchhook.dll (APN LLC.)
URLSearchHook: HKCU - DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = 
SearchScopes: HKCU - DefaultScope {520F3E60-93A9-4E25-B692-F28B8F518BC1} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dsites0301&cd=2XzuyEtN2Y1L1QzuyBzzzzyEtA0C0FtC0FtCtB0C0FtB0CyBtN0D0Tzu0SyBzytBtN1L2XzutBtFtCyBtFtDtFtCtN1L1CzutDzytDtCtG1TtN1L1G1B1V1N2Y1L1Qzu2SyEyDyEyD0A0BtByDtG0AyBzy0FtGtByDzztDtGyCtDzzzztGtAyEtA0A0C0DyE0CyE0A0C0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StByBtDyE0CtByB0BtGyE0EyByCtGtByDtB0FtGyC0Fzz0BtGtB0CtD0C0DtA0DtCyEzztDzz2Q&cr=1679946924&ir=
SearchScopes: HKCU - {03E7B016-F4FE-4771-BC19-5A568C3C69D8} URL = hxxp://websearch.ask.com/custom/java/redirect?client=ie&tb=ORJ&o=100000026&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&affID=111789&babsrc=SP_ss&mntrId=3239f2c70000000000009439e5a2066f
SearchScopes: HKCU - {24F87474-3C08-490D-AAAE-5B40E59C0887} URL = hxxp://services.zinio.com/search?s={searchTerms}&rf=sonyslices
SearchScopes: HKCU - {520F3E60-93A9-4E25-B692-F28B8F518BC1} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dsites0301&cd=2XzuyEtN2Y1L1QzuyBzzzzyEtA0C0FtC0FtCtB0C0FtB0CyBtN0D0Tzu0SyBzytBtN1L2XzutBtFtCyBtFtDtFtCtN1L1CzutDzytDtCtG1TtN1L1G1B1V1N2Y1L1Qzu2SyEyDyEyD0A0BtByDtG0AyBzy0FtGtByDzztDtGyCtDzzzztGtAyEtA0A0C0DyE0CyE0A0C0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StByBtDyE0CtByB0BtGyE0EyByCtGtByDtB0FtGyC0Fzz0BtGtB0CtD0C0DtA0DtCyEzztDzz2Q&cr=1679946924&ir=
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
SearchScopes: HKCU - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
SearchScopes: HKCU - {8027866C-85A2-4C0F-BAE2-CA335DDC4AAD} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-Q311&_nkw={searchTerms}
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: FindRight - {2c774641-5504-46a8-b63f-6715ae3fe376} - C:\Program Files (x86)\FindRight\FindRightbho.dll (FindRight)
BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
BHO-x32: Citavi Picker - {609D670F-B735-4da7-AC6D-F3BD358E325E} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton AntiVirus\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: mysearchdial Helper Object - {EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD} - C:\Program Files (x86)\Mysearchdial\1.8.29.0\bh\mysearchdial.dll (MySearchDial)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKLM-x32 - No Name - {A13C2648-91D4-4bf3-BC6D-0079707C4389} -  No File
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - mysearchdial Toolbar - {3004627E-F8E9-4E8B-909D-316753CBA923} - C:\Program Files (x86)\Mysearchdial\1.8.29.0\mysearchdialTlbr.dll (MySearchDial)
Toolbar: HKCU - No Name - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} -  No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default
FF user.js: detected! => C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\user.js
FF SearchEngineOrder.user_pref("browser.search.order.1", "");: user_pref("browser.search.order.1", "");
FF SelectedSearchEngine: user_pref("browser.search.selectedEngine", "");
FF Homepage: hxxp://home.mywebsearch.com/index.jhtml?ptb=0541C167-E908-41ED-9CF0-FE6694F98D5E&n=77fd5a9c&p2=^Y6^xdm043^YY^de&si=swissconverter
FF Keyword.URL: hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?st=kwd&ptb=0541C167-E908-41ED-9CF0-FE6694F98D5E&n=77fd5a9c&ind=2013092508&p2=^Y6^xdm043^YY^de&si=swissconverter&searchfor=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\ask-search.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\askcomsearch.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-1.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-10.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-11.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-12.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-13.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-14.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-15.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-16.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-17.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-18.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-19.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-2.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-20.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-21.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-22.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-23.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-24.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-25.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-26.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-27.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-28.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-29.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-3.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-30.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-31.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-4.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-5.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-6.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-7.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-8.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-9.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin.gif
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin.src
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\my-web-search.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\safesearch.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
FF Extension: FromDocToPDF - C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\Extensions\65ffxtbr@FromDocToPDF_65.com [2013-06-08]
FF Extension: Babylon - C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\Extensions\ffxtlbr@babylon.com [2012-04-04]
FF Extension: ICQ Toolbar - C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\Extensions\{800b5000-a755-47e1-992b-48a1c1357f07} [2012-07-27]
FF Extension: DVDVideoSoftTB  - C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\Extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5} [2013-11-21]
FF Extension: ICQ Sparberater - C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\Extensions\ciuvo-extension@icq.de.xpi [2012-01-26]
FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\Extensions\toolbar_AVIRA-V7@apn.ask.com.xpi [2013-07-26]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-21]
FF Extension: DealPly - C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\Extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}.xpi [2012-04-04]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-12-21]
FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_20.2.0.19\IPSFFPlgn\
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_20.2.0.19\IPSFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [{F04D2D30-776C-4d02-8627-8E4385ECA58D}] - C:\ProgramData\Norton\{92622AAD-05E8-4459-B256-765CE1E929FB}\NST_2014.5.0.67\coFFPlgn\
FF Extension: No Name - C:\ProgramData\Norton\{92622AAD-05E8-4459-B256-765CE1E929FB}\NST_2014.5.0.67\coFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2013-11-11]

Chrome: 
=======
CHR HomePage: hxxp://start.mysearchdial.com/?f=1&a=dsites0301&cd=2XzuyEtN2Y1L1QzuyBzzzzyEtA0C0FtC0FtCtB0C0FtB0CyBtN0D0Tzu0SyBzytBtN1L2XzutBtFtCyBtFtDtFtCtN1L1CzutDzytDtCtG1TtN1L1G1B1V1N2Y1L1Qzu2SyEyDyEyD0A0BtByDtG0AyBzy0FtGtByDzztDtGyCtDzzzztGtAyEtA0A0C0DyE0CyE0A0C0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StByBtDyE0CtByB0BtGyE0EyByCtGtByDtB0FtGyC0Fzz0BtGtB0CtD0C0DtA0DtCyEzztDzz2Q&cr=1679946924&ir=
CHR DefaultSearchProvider:       "name": "Mysearchdial"
CHR Extension: (Avira SearchFree Toolbar plus Web Protection) - C:\Users\Sasvena\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh [2013-12-25]
CHR Extension: (Google Docs) - C:\Users\Sasvena\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-25]
CHR Extension: (Google Drive) - C:\Users\Sasvena\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-25]
CHR Extension: (YouTube) - C:\Users\Sasvena\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-25]
CHR Extension: (Google-Suche) - C:\Users\Sasvena\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-25]
CHR Extension: (Google Wallet) - C:\Users\Sasvena\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-25]
CHR Extension: (Google Mail) - C:\Users\Sasvena\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-25]
CHR HKLM-x32\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx [2014-02-20]
CHR HKLM-x32\...\Chrome\Extension: [nppllibpnmahfaklnpggkibhkapjkeob] - C:\Program Files (x86)\Norton Identity Safe\Engine\2014.5.0.67\Exts\Chrome.crx [2014-02-20]

==================== Services (Whitelisted) =================

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
S4 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2014-02-13] ()
S2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-04-29] (Atheros)
S3 DCDhcpService; C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe [104096 2011-07-19] (Atheros Communication Inc.)
S2 NAV; C:\Program Files (x86)\Norton AntiVirus\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-20] (Symantec Corporation)
S2 NCO; C:\Program Files (x86)\Norton Identity Safe\Engine\2014.6.0.27\NST.exe [129424 2013-10-06] (Symantec Corporation)
S2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [259192 2011-01-29] (Sony Corporation)
S2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024 2011-02-23] (ArcSoft, Inc.)
S2 Update FindRight; C:\Program Files (x86)\FindRight\updateFindRight.exe [111904 2014-02-26] ()
S2 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [887000 2011-01-20] (Sony Corporation)
S3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1368624 2013-08-01] (Sony Corporation)

==================== Drivers (Whitelisted) ====================

S3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
S1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_20.2.0.19\Definitions\BASHDefs\20140121.001\BHDrvx64.sys [1526488 2013-12-18] (Symantec Corporation)
S1 ccSet_NAV; C:\Windows\system32\drivers\NAVx64\1404000.028\ccSetx64.sys [169048 2013-04-15] (Symantec Corporation)
S1 ccSet_NST; C:\Windows\system32\drivers\NSTx64\7DE06000.01B\ccSetx64.sys [162392 2013-09-27] (Symantec Corporation)
S1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-11-21] (Symantec Corporation)
S3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-11-21] (Symantec Corporation)
S1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_20.2.0.19\Definitions\IPSDefs\20140207.001\IDSvia64.sys [521944 2014-01-21] (Symantec Corporation)
S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_20.2.0.19\Definitions\VirusDefs\20140208.009\ENG64.SYS [126040 2014-02-02] (Symantec Corporation)
S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_20.2.0.19\Definitions\VirusDefs\20140208.009\EX64.SYS [2099288 2014-02-02] (Symantec Corporation)
S3 SRTSP; C:\Windows\system32\drivers\NAVx64\1404000.028\SRTSP64.SYS [796760 2013-05-15] (Symantec Corporation)
S1 SRTSPX; C:\Windows\system32\drivers\NAVx64\1404000.028\SRTSPX64.SYS [36952 2013-03-04] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NAVx64\1404000.028\SYMDS64.SYS [493656 2013-05-20] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NAVx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-22] (Symantec Corporation)
S3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-09-03] (Symantec Corporation)
S1 SymIRON; C:\Windows\system32\drivers\NAVx64\1404000.028\Ironx64.SYS [224416 2012-09-06] (Symantec Corporation)
S1 SymNetS; C:\Windows\system32\drivers\NAVx64\1404000.028\SYMNETS.SYS [433752 2013-04-24] (Symantec Corporation)
S3 RSPCIESTOR; system32\DRIVERS\RtsPStor.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-02 21:14 - 2014-03-02 21:16 - 00028439 _____ () C:\Users\Sasvena\Downloads\FRST.txt
2014-03-02 21:11 - 2014-03-02 21:14 - 00000000 ____D () C:\FRST
2014-03-02 21:10 - 2014-03-02 21:11 - 02156544 _____ (Farbar) C:\Users\Sasvena\Downloads\FRST64.exe
2014-03-02 21:09 - 2014-03-02 21:09 - 00000046 _____ () C:\Users\Sasvena\AppData\Roaming\WB.CFG
2014-03-02 21:09 - 2014-03-02 21:09 - 00000000 ____D () C:\Program Files (x86)\FindRight
2014-03-02 21:08 - 2014-03-02 21:08 - 00001110 _____ () C:\Users\Public\Desktop\Open It!.lnk
2014-03-02 21:08 - 2014-03-02 21:08 - 00000000 ____D () C:\Users\Sasvena\AppData\Roaming\mysearchdial
2014-03-02 21:08 - 2014-03-02 21:08 - 00000000 ____D () C:\Users\Sasvena\AppData\Roaming\DigitalSites
2014-03-02 21:08 - 2014-03-02 21:08 - 00000000 ____D () C:\Program Files (x86)\OpenIt
2014-03-02 21:08 - 2014-03-02 21:08 - 00000000 ____D () C:\Program Files (x86)\Mysearchdial
2014-03-02 21:07 - 2014-03-02 21:07 - 00668984 _____ ( ) C:\Users\Sasvena\Downloads\ZipExtractorSetup.exe
2014-03-02 20:00 - 2014-03-02 20:00 - 00000000 ___RD () C:\Users\Sasvena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-03-02 10:05 - 2014-03-02 19:53 - 00000168 _____ () C:\Windows\setupact.log
2014-03-02 10:05 - 2014-03-02 10:05 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-01 17:19 - 2014-03-01 17:32 - 00000000 ____D () C:\81029cee35362f5ce738
2014-03-01 16:21 - 2014-03-02 20:47 - 01826798 _____ () C:\Windows\WindowsUpdate.log
2014-03-01 12:52 - 2014-03-01 13:45 - 00000000 ____D () C:\1ef63fa00f83e987261668aaef1f40
2014-02-23 23:17 - 2014-02-23 23:17 - 00159144 _____ (Microsoft Corporation) C:\Users\Sasvena\Downloads\WindowsActivationUpdate (1).exe
2014-02-23 23:16 - 2014-02-23 23:16 - 00159144 _____ (Microsoft Corporation) C:\Users\Sasvena\Downloads\WindowsActivationUpdate.exe
2014-02-22 20:28 - 2014-02-22 20:32 - 03053496 ____N (Symantec Corporation) C:\Users\Sasvena\Downloads\NPE.exe
2014-02-22 20:06 - 2014-02-22 20:06 - 00003134 _____ () C:\Windows\System32\Tasks\{3B40E76B-5E24-400C-9F14-D0B8345E759D}
2014-02-22 20:04 - 2014-02-22 20:04 - 00003168 _____ () C:\Windows\System32\Tasks\{3D3B768F-22D2-404A-B7E0-E3F175C0FDE0}
2014-02-16 15:22 - 2014-02-16 15:25 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-16 15:16 - 2014-02-16 17:01 - 00000000 ____D () C:\Users\Sasvena\AppData\Roaming\Systweak
2014-02-16 15:16 - 2014-02-16 15:16 - 04721920 _____ (Piriform Ltd) C:\Users\Sasvena\Downloads\ccsetup410.exe
2014-02-16 15:16 - 2013-11-22 15:42 - 00020312 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot64.exe
2014-02-16 15:14 - 2014-02-16 15:14 - 00710848 _____ ( ) C:\Users\Sasvena\Downloads\COMPUTER_BILD-Download-Manager_fuer_ccsetup410.exe
2014-02-16 12:20 - 2014-02-16 12:20 - 02278856 _____ () C:\Users\Sasvena\Downloads\avira_pc_cleaner_de.exe
2014-02-16 12:17 - 2014-02-16 12:38 - 00001993 _____ () C:\Users\Sasvena\Desktop\Entfernen des Avira EU-Cleaners.lnk
2014-02-16 12:17 - 2014-02-16 12:38 - 00001937 _____ () C:\Users\Sasvena\Desktop\Avira EU-Cleaner.lnk
2014-02-16 12:17 - 2014-02-16 12:17 - 02209056 _____ () C:\Users\Sasvena\Downloads\avira-eu-cleaner_de.exe
2014-02-16 12:14 - 2014-02-16 12:14 - 00000942 _____ () C:\Windows\Tasks\Installer for avg_safeguard.job
2014-02-16 12:13 - 2014-02-16 12:13 - 01298368 _____ (Uniblue Systems Limited ) C:\Users\Sasvena\Downloads\speedupmypc (3).exe
2014-02-16 12:12 - 2014-02-16 12:13 - 01298368 _____ (Uniblue Systems Limited ) C:\Users\Sasvena\Downloads\speedupmypc (2).exe
2014-02-16 01:06 - 2014-02-28 21:41 - 00000000 ____D () C:\55b2aede82b315133098e8f8df9a
2014-02-14 16:17 - 2014-02-14 16:19 - 01298368 _____ (Uniblue Systems Limited ) C:\Users\Sasvena\Downloads\speedupmypc (1).exe
2014-02-14 16:17 - 2014-02-14 16:17 - 00262144 _____ () C:\Users\Sasvena\Downloads\6925.tmp
2014-02-14 16:15 - 2014-02-14 16:17 - 01298368 _____ (Uniblue Systems Limited ) C:\Users\Sasvena\Downloads\speedupmypc.exe
2014-02-14 13:58 - 2014-02-14 13:58 - 00000702 _____ () C:\Users\Sasvena\Bibliotheken - Verknüpfung.lnk
2014-02-14 06:38 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-14 06:38 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-14 05:41 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-14 05:40 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-14 05:40 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-14 05:40 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-14 05:29 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-14 05:29 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-14 05:15 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-14 05:14 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-14 05:12 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-14 05:06 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-14 05:05 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-14 05:04 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-14 05:02 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-14 04:59 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-14 04:57 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-14 04:56 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-14 04:55 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-14 04:54 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-14 04:49 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-14 04:48 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-14 04:47 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-14 04:46 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-14 04:44 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-14 04:43 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-14 04:41 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-14 04:39 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-14 04:34 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-14 04:32 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-14 04:31 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-14 04:30 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-14 04:29 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-14 04:27 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-14 04:24 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-14 04:22 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-14 04:21 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-14 04:20 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-14 04:18 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-14 04:17 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-14 04:16 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-14 01:47 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-14 01:45 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-14 01:45 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-14 01:43 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-13 21:42 - 2014-02-16 21:15 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-02-13 21:32 - 2014-02-13 21:32 - 00000000 ____D () C:\ProgramData\Package Cache
2014-02-13 21:25 - 2014-02-13 21:26 - 04011472 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sasvena\Downloads\avira_oe_client_antivirus_de (1).exe
2014-02-13 21:25 - 2014-02-13 21:25 - 04011472 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sasvena\Downloads\avira_oe_client_antivirus_de.exe
2014-02-11 15:34 - 2014-02-11 15:34 - 00003000 _____ () C:\Windows\System32\Tasks\{8474A96E-B138-456A-A7DB-6BE6736DBED2}
2014-02-11 15:27 - 2014-02-11 15:27 - 00003000 _____ () C:\Windows\System32\Tasks\{DB669443-AF46-4BA8-B027-093021982B77}
2014-02-11 15:27 - 2014-02-11 15:27 - 00003000 _____ () C:\Windows\System32\Tasks\{B9EF47A6-22C2-481B-A8E9-F9D0054CE495}
2014-02-09 22:03 - 2014-02-09 22:03 - 00000000 ____D () C:\Users\Sasvena\AppData\Roaming\PDAppFlex
2014-02-09 22:03 - 2014-02-09 22:03 - 00000000 ____D () C:\Users\Sasvena\AppData\Roaming\com.adobe.formscentral.FormsCentralForAcrobat
2014-02-09 17:20 - 2014-02-09 17:20 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe
2014-02-09 15:23 - 2014-02-09 15:23 - 00000000 ____D () C:\Users\Sasvena\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
2014-02-09 15:20 - 2014-02-09 15:20 - 02469824 _____ () C:\Users\Sasvena\Downloads\AdobeDownloadAssistant.exe
2014-02-04 22:33 - 2014-02-22 19:33 - 17858952 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-02-04 20:56 - 2014-02-04 20:56 - 00000000 ____D () C:\Users\Sasvena\AppData\Roaming\LibreOffice
2014-02-04 20:50 - 2014-02-04 20:50 - 00001468 _____ () C:\Users\Public\Desktop\LibreOffice 4.2.lnk
2014-02-04 20:47 - 2014-02-04 20:50 - 00000000 ____D () C:\Program Files (x86)\LibreOffice 4
2014-02-04 20:06 - 2014-02-04 20:12 - 219000832 _____ () C:\Users\Sasvena\Downloads\LibreOffice_4.2.0_Win_x86.msi
2014-02-04 20:06 - 2014-02-04 20:06 - 00019881 _____ () C:\Users\Sasvena\Downloads\LibreOffice_4.2.0_Win_x86.msi.torrent

==================== One Month Modified Files and Folders =======

2014-03-02 21:16 - 2014-03-02 21:14 - 00028439 _____ () C:\Users\Sasvena\Downloads\FRST.txt
2014-03-02 21:14 - 2014-03-02 21:11 - 00000000 ____D () C:\FRST
2014-03-02 21:11 - 2014-03-02 21:10 - 02156544 _____ (Farbar) C:\Users\Sasvena\Downloads\FRST64.exe
2014-03-02 21:09 - 2014-03-02 21:09 - 00000046 _____ () C:\Users\Sasvena\AppData\Roaming\WB.CFG
2014-03-02 21:09 - 2014-03-02 21:09 - 00000000 ____D () C:\Program Files (x86)\FindRight
2014-03-02 21:08 - 2014-03-02 21:08 - 00001110 _____ () C:\Users\Public\Desktop\Open It!.lnk
2014-03-02 21:08 - 2014-03-02 21:08 - 00000000 ____D () C:\Users\Sasvena\AppData\Roaming\mysearchdial
2014-03-02 21:08 - 2014-03-02 21:08 - 00000000 ____D () C:\Users\Sasvena\AppData\Roaming\DigitalSites
2014-03-02 21:08 - 2014-03-02 21:08 - 00000000 ____D () C:\Program Files (x86)\OpenIt
2014-03-02 21:08 - 2014-03-02 21:08 - 00000000 ____D () C:\Program Files (x86)\Mysearchdial
2014-03-02 21:07 - 2014-03-02 21:07 - 00668984 _____ ( ) C:\Users\Sasvena\Downloads\ZipExtractorSetup.exe
2014-03-02 20:47 - 2014-03-01 16:21 - 01826798 _____ () C:\Windows\WindowsUpdate.log
2014-03-02 20:47 - 2013-12-25 23:22 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-02 20:33 - 2013-03-18 21:28 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-02 20:05 - 2011-09-06 14:17 - 00699666 _____ () C:\Windows\system32\perfh007.dat
2014-03-02 20:05 - 2011-09-06 14:17 - 00149774 _____ () C:\Windows\system32\perfc007.dat
2014-03-02 20:05 - 2009-07-14 06:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-02 20:00 - 2014-03-02 20:00 - 00000000 ___RD () C:\Users\Sasvena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-03-02 20:00 - 2013-12-25 23:22 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-02 20:00 - 2011-09-06 04:40 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-03-02 19:53 - 2014-03-02 10:05 - 00000168 _____ () C:\Windows\setupact.log
2014-03-02 19:53 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-02 10:56 - 2009-07-14 05:45 - 00020720 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-02 10:56 - 2009-07-14 05:45 - 00020720 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-02 10:05 - 2014-03-02 10:05 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-01 19:26 - 2012-01-06 01:48 - 00000000 ___RD () C:\Users\Sasvena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-01 17:41 - 2013-07-23 03:01 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-01 17:32 - 2014-03-01 17:19 - 00000000 ____D () C:\81029cee35362f5ce738
2014-03-01 17:32 - 2013-05-04 14:29 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-01 16:14 - 2013-12-29 13:34 - 00000000 ___RD () C:\Users\Sasvena\Dropbox
2014-03-01 16:14 - 2013-12-29 13:31 - 00000000 ____D () C:\Users\Sasvena\AppData\Roaming\Dropbox
2014-03-01 16:14 - 2012-01-27 00:09 - 00000000 ____D () C:\Users\Sasvena\AppData\Local\CrashDumps
2014-03-01 13:45 - 2014-03-01 12:52 - 00000000 ____D () C:\1ef63fa00f83e987261668aaef1f40
2014-02-28 21:41 - 2014-02-16 01:06 - 00000000 ____D () C:\55b2aede82b315133098e8f8df9a
2014-02-28 20:39 - 2012-01-06 01:49 - 00003954 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{4721E5E2-38C3-4BA3-96C9-6E49A6BE0654}
2014-02-23 23:17 - 2014-02-23 23:17 - 00159144 _____ (Microsoft Corporation) C:\Users\Sasvena\Downloads\WindowsActivationUpdate (1).exe
2014-02-23 23:16 - 2014-02-23 23:16 - 00159144 _____ (Microsoft Corporation) C:\Users\Sasvena\Downloads\WindowsActivationUpdate.exe
2014-02-23 09:52 - 2012-01-20 22:57 - 00000000 ____D () C:\Users\Sasi
2014-02-23 03:10 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-22 23:51 - 2013-12-25 23:23 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-22 22:07 - 2013-09-07 15:37 - 00000000 ____D () C:\Users\Sasvena\AppData\Local\NPE
2014-02-22 20:32 - 2014-02-22 20:28 - 03053496 ____N (Symantec Corporation) C:\Users\Sasvena\Downloads\NPE.exe
2014-02-22 20:06 - 2014-02-22 20:06 - 00003134 _____ () C:\Windows\System32\Tasks\{3B40E76B-5E24-400C-9F14-D0B8345E759D}
2014-02-22 20:04 - 2014-02-22 20:04 - 00003168 _____ () C:\Windows\System32\Tasks\{3D3B768F-22D2-404A-B7E0-E3F175C0FDE0}
2014-02-22 19:38 - 2013-03-18 21:28 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-22 19:37 - 2013-03-18 21:28 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-22 19:37 - 2012-01-07 22:17 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-22 19:33 - 2014-02-04 22:33 - 17858952 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-02-16 23:48 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-02-16 21:15 - 2014-02-13 21:42 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-02-16 21:10 - 2012-01-22 08:24 - 00000000 ____D () C:\ProgramData\Avira
2014-02-16 17:01 - 2014-02-16 15:16 - 00000000 ____D () C:\Users\Sasvena\AppData\Roaming\Systweak
2014-02-16 16:44 - 2012-02-12 22:16 - 00000000 ____D () C:\Users\Sasvena\AppData\Roaming\Skype
2014-02-16 16:44 - 2012-01-27 08:12 - 00000000 ____D () C:\Users\Sasvena\Tracing
2014-02-16 16:41 - 2011-02-10 23:48 - 00000000 ____D () C:\Windows\Panther
2014-02-16 16:40 - 2013-05-11 11:51 - 00000000 ____D () C:\Windows\Minidump
2014-02-16 15:25 - 2014-02-16 15:22 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-16 15:16 - 2014-02-16 15:16 - 04721920 _____ (Piriform Ltd) C:\Users\Sasvena\Downloads\ccsetup410.exe
2014-02-16 15:14 - 2014-02-16 15:14 - 00710848 _____ ( ) C:\Users\Sasvena\Downloads\COMPUTER_BILD-Download-Manager_fuer_ccsetup410.exe
2014-02-16 12:38 - 2014-02-16 12:17 - 00001993 _____ () C:\Users\Sasvena\Desktop\Entfernen des Avira EU-Cleaners.lnk
2014-02-16 12:38 - 2014-02-16 12:17 - 00001937 _____ () C:\Users\Sasvena\Desktop\Avira EU-Cleaner.lnk
2014-02-16 12:20 - 2014-02-16 12:20 - 02278856 _____ () C:\Users\Sasvena\Downloads\avira_pc_cleaner_de.exe
2014-02-16 12:17 - 2014-02-16 12:17 - 02209056 _____ () C:\Users\Sasvena\Downloads\avira-eu-cleaner_de.exe
2014-02-16 12:14 - 2014-02-16 12:14 - 00000942 _____ () C:\Windows\Tasks\Installer for avg_safeguard.job
2014-02-16 12:13 - 2014-02-16 12:13 - 01298368 _____ (Uniblue Systems Limited ) C:\Users\Sasvena\Downloads\speedupmypc (3).exe
2014-02-16 12:13 - 2014-02-16 12:12 - 01298368 _____ (Uniblue Systems Limited ) C:\Users\Sasvena\Downloads\speedupmypc (2).exe
2014-02-16 11:29 - 2012-01-06 01:46 - 00000000 ____D () C:\Users\Sasvena
2014-02-14 16:19 - 2014-02-14 16:17 - 01298368 _____ (Uniblue Systems Limited ) C:\Users\Sasvena\Downloads\speedupmypc (1).exe
2014-02-14 16:17 - 2014-02-14 16:17 - 00262144 _____ () C:\Users\Sasvena\Downloads\6925.tmp
2014-02-14 16:17 - 2014-02-14 16:15 - 01298368 _____ (Uniblue Systems Limited ) C:\Users\Sasvena\Downloads\speedupmypc.exe
2014-02-14 14:29 - 2012-01-06 01:49 - 00000000 ____D () C:\Users\Sasvena\Documents\Bluetooth Folder
2014-02-14 13:58 - 2014-02-14 13:58 - 00000702 _____ () C:\Users\Sasvena\Bibliotheken - Verknüpfung.lnk
2014-02-14 03:35 - 2013-12-25 23:22 - 00004108 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-14 03:35 - 2013-12-25 23:22 - 00003856 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-13 21:55 - 2013-09-09 21:45 - 00000000 ____D () C:\Users\Sasvena\Desktop\Bachelorarbeit
2014-02-13 21:32 - 2014-02-13 21:32 - 00000000 ____D () C:\ProgramData\Package Cache
2014-02-13 21:26 - 2014-02-13 21:25 - 04011472 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sasvena\Downloads\avira_oe_client_antivirus_de (1).exe
2014-02-13 21:25 - 2014-02-13 21:25 - 04011472 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sasvena\Downloads\avira_oe_client_antivirus_de.exe
2014-02-13 21:07 - 2012-04-04 21:34 - 00000000 ____D () C:\Program Files (x86)\DealPly
2014-02-13 05:22 - 2012-01-06 07:34 - 00000000 ____D () C:\Users\Sasvena\AppData\Local\Facebook
2014-02-12 22:01 - 2011-09-06 05:00 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-02-12 20:31 - 2012-01-06 01:47 - 00130200 _____ () C:\Users\Sasvena\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-12 05:15 - 2009-07-14 05:45 - 00497744 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-12 01:13 - 2011-09-06 05:01 - 00000000 ____D () C:\ProgramData\Adobe
2014-02-11 15:34 - 2014-02-11 15:34 - 00003000 _____ () C:\Windows\System32\Tasks\{8474A96E-B138-456A-A7DB-6BE6736DBED2}
2014-02-11 15:27 - 2014-02-11 15:27 - 00003000 _____ () C:\Windows\System32\Tasks\{DB669443-AF46-4BA8-B027-093021982B77}
2014-02-11 15:27 - 2014-02-11 15:27 - 00003000 _____ () C:\Windows\System32\Tasks\{B9EF47A6-22C2-481B-A8E9-F9D0054CE495}
2014-02-09 22:03 - 2014-02-09 22:03 - 00000000 ____D () C:\Users\Sasvena\AppData\Roaming\PDAppFlex
2014-02-09 22:03 - 2014-02-09 22:03 - 00000000 ____D () C:\Users\Sasvena\AppData\Roaming\com.adobe.formscentral.FormsCentralForAcrobat
2014-02-09 22:03 - 2012-01-06 21:08 - 00000000 ____D () C:\Users\Sasvena\AppData\Local\Adobe
2014-02-09 21:06 - 2012-01-06 01:50 - 00000000 ____D () C:\Users\Sasvena\AppData\Roaming\Adobe
2014-02-09 17:20 - 2014-02-09 17:20 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe
2014-02-09 15:23 - 2014-02-09 15:23 - 00000000 ____D () C:\Users\Sasvena\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
2014-02-09 15:20 - 2014-02-09 15:20 - 02469824 _____ () C:\Users\Sasvena\Downloads\AdobeDownloadAssistant.exe
2014-02-06 13:16 - 2014-02-14 04:46 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-14 05:41 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-14 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-14 04:32 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-14 04:55 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-14 04:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-14 05:06 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-14 05:14 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 11:52 - 2014-02-14 05:29 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 11:49 - 2014-02-14 04:57 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-14 04:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 11:48 - 2014-02-14 04:43 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 11:38 - 2014-02-14 04:18 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-14 05:15 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-14 05:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-14 05:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 11:11 - 2014-02-14 04:16 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-14 04:56 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-14 04:49 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-14 05:04 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:57 - 2014-02-14 04:34 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 10:52 - 2014-02-14 05:02 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-14 04:54 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-14 04:22 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:49 - 2014-02-14 05:29 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-06 10:47 - 2014-02-14 04:59 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-14 04:44 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-14 05:40 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 10:25 - 2014-02-14 04:17 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 10:24 - 2014-02-14 04:30 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 10:22 - 2014-02-14 04:21 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-14 05:05 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-14 04:24 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-14 04:20 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-14 04:27 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-14 04:31 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-14 04:39 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-14 04:29 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-14 04:41 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-04 20:56 - 2014-02-04 20:56 - 00000000 ____D () C:\Users\Sasvena\AppData\Roaming\LibreOffice
2014-02-04 20:50 - 2014-02-04 20:50 - 00001468 _____ () C:\Users\Public\Desktop\LibreOffice 4.2.lnk
2014-02-04 20:50 - 2014-02-04 20:47 - 00000000 ____D () C:\Program Files (x86)\LibreOffice 4
2014-02-04 20:12 - 2014-02-04 20:06 - 219000832 _____ () C:\Users\Sasvena\Downloads\LibreOffice_4.2.0_Win_x86.msi
2014-02-04 20:06 - 2014-02-04 20:06 - 00019881 _____ () C:\Users\Sasvena\Downloads\LibreOffice_4.2.0_Win_x86.msi.torrent

Some content of TEMP:
====================
C:\Users\Sasi\AppData\Local\Temp\AskSLib.dll
C:\Users\Sasi\AppData\Local\Temp\SkypeSetup.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-08 21:07

[CODE]
AV: Norton AntiVirus (Disabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton AntiVirus (Disabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202}

==================== Installed Programs ======================

Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version: - Microsoft)
ActiveX контрола на Windows Live Mesh за отдалечени връзки (HKLM-x32\...\{B3BA4D1C-23EF-4859-9C11-1B2CCB7FADBB}) (Version: 15.4.5722.2 - Microsoft Corporation)
Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Reader X (10.1.3) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.3 - Adobe Systems Incorporated)
Alps Pointing-device for VAIO (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: - ALPS ELECTRIC CO., LTD.)
ArcSoft Magic-i Visual Effects 2 (HKLM-x32\...\{61438020-DDD4-42FA-99A2-50225441980A}) (Version: 2.0.1.142 - ArcSoft)
ArcSoft WebCam Companion 4 (HKLM-x32\...\{C793AD32-2BB8-4CC4-ABD3-A1469C21593C}) (Version: 4.0.21.444 - ArcSoft)
Atheros WiFi Driver Installation (HKLM-x32\...\{7D916FA5-DAE9-4A25-B089-655C70EAF607}) (Version: 3.0 - Atheros)
Avira (HKLM-x32\...\{166a49c9-9f8d-4d64-a131-ff053b76a081}) (Version: 1.0.5142.23462 - Avira Operations GmbH & Co. KG)
Avira SearchFree Toolbar (HKLM-x32\...\{41564952-412D-5637-00A7-A758B70C0A03}) (Version: 12.10.3.4487 - APN, LLC)
Bing Bar (HKLM-x32\...\{B4089055-D468-45A4-A6BA-5A138DD715FC}) (Version: 7.0.850.0 - Microsoft Corporation)
Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.3.0.100 - Atheros Communications)
CCleaner (HKLM\...\CCleaner) (Version: 4.10 - Piriform)
Citavi 4 (HKLM-x32\...\{CC0A85B2-734A-45B3-B678-05F6A6499AC7}) (Version: 4.2.0.11 - Swiss Academic Software)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.54.0.53 - Conexant)
Control ActiveX Windows Live Mesh pentru conexiuni la distanță (HKLM-x32\...\{260E3D78-94E6-47EC-8E29-46301572BB1E}) (Version: 15.4.5722.2 - Microsoft Corporation)
Controlo ActiveX do Windows Live Mesh para Ligações Remotas (HKLM-x32\...\{E54EEB5D-41ED-40FE-B4A8-8565DB81469B}) (Version: 15.4.5722.2 - Microsoft Corporation)
Corel WinDVD (HKLM-x32\...\{5C1F18D2-F6B7-4242-B803-B5A78648185D}) (Version: 10.0.5.800 - Corel Inc.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dropbox (HKCU\...\Dropbox) (Version: 2.4.11 - Dropbox, Inc.)
FindRight (HKLM\...\FindRight) (Version: 2014.02.26.051729 - FindRight) <==== ATTENTION
Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (HKLM-x32\...\{B04A0E2F-1E4C-4E61-B18E-3B2BD6779CA7}) (Version: 15.4.5722.2 - Microsoft Corporation)
Free YouTube to MP3 Converter version 3.11.37.1212 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.11.37.1212 - DVDVideoSoft Ltd.)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.117 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.0.0.1046 - Intel Corporation)
Java 7 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.250 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 22 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416022FF}) (Version: 6.0.220 - Oracle)
Java(TM) 6 Update 22 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216022FF}) (Version: 6.0.220 - Oracle)
JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
LibreOffice 4.2.0.4 (HKLM-x32\...\{E043231F-34F2-4AF5-9400-0961CC15AAAE}) (Version: 4.2.0.4 - The Document Foundation)
Media Gallery (Version: 1.5.0.16020 - Your Company Name) Hidden
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
Mysearchdial (HKLM-x32\...\mysearchdial) (Version: - Mysearchdial) <==== ATTENTION
Norton AntiVirus (HKLM-x32\...\NAV) (Version: 20.4.0.40 - Symantec Corporation)
Norton Identity Safe (HKLM-x32\...\NST) (Version: 2014.5.0.67 - Symantec Corporation)
NVIDIA 3D Vision Treiber 269.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 269.73 - NVIDIA Corporation)
NVIDIA Grafiktreiber 269.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 269.73 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.2.24.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.2.24.0 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.265.42.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.12.0507 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.12.0507 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0507 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6973 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 269.73 (Version: 269.73 - NVIDIA Corporation) Hidden
Open It! (HKLM-x32\...\OpenIt Open It!) (Version: 1.1.1 - OpenIt)
Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení (HKLM-x32\...\{B6190387-0036-4BEB-8D74-A0AFC5F14706}) (Version: 15.4.5722.2 - Microsoft Corporation)
Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia (HKLM-x32\...\{C2FD7DB5-FE30-49B6-8A2F-C5652E053C31}) (Version: 15.4.5722.2 - Microsoft Corporation)
PDF24 Creator 5.4.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PMB (HKLM-x32\...\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}) (Version: 5.5.02.12220 - Sony Corporation)
PMB VAIO Edition Guide (x32 Version: 1.6.00.06030 - Sony Corporation) Hidden
PMB VAIO Edition Plug-in (Version: 1.5.10.05300 - Sony Corporation) Hidden
PMB VAIO Edition Plug-in (x32 Version: 1.6.00.06010 - Sony Corporation) Hidden
PMB VAIO Edition Plug-in (x32 Version: 1.6.00.06140 - Sony Corporation) Hidden
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Qualcomm Atheros Direct Connect (x32 Version: 3.0 - Qualcomm Atheros) Hidden
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Remote Keyboard (x32 Version: 1.1.1.03020 - Sony Corporation) Hidden
Remote Play with PlayStation 3 (x32 Version: 1.1.0.15070 - Sony Corporation) Hidden
Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.6.8442 - Skype Technologies S.A.)
Skype™ 6.3 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.3.107 - Skype Technologies S.A.)
Sony Corporation (Version: 1.0.0 - Default Company Name) Hidden
SSLx64 (Version: 1.0.0 - Sony Corporation ) Hidden
SSLx86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for Microsoft .NET Framework 4.5 (KB2750147) (HKLM-x32\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132}.KB2750147) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4.5 (KB2805221) (HKLM-x32\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132}.KB2805221) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4.5 (KB2805226) (HKLM-x32\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132}.KB2805226) (Version: 1 - Microsoft Corporation)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2850085) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{128A5449-CF71-4DA4-A746-F49E3B5DB584}) (Version: - Microsoft)
Update for Zip Extractor (HKCU\...\Digital Sites) (Version: - Update for Zip Extractor) <==== ATTENTION
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft)
VAIO - Media Gallery (HKLM-x32\...\{FA870BF1-44A1-4B7D-93E1-C101369AF0C1}) (Version: 1.5.0.16020 - Sony Corporation)
VAIO - PMB VAIO Edition Guide (HKLM-x32\...\InstallShield_{66081CDD-C1FE-415F-BB3A-F2622BA27461}) (Version: 1.6.00.06030 - Sony Corporation)
VAIO - PMB VAIO Edition Plug-in (HKLM-x32\...\InstallShield_{270380EB-8812-42E1-8289-53700DB840D2}) (Version: 1.6.00.06140 - Sony Corporation)
VAIO - Remote Play mit PlayStation®3 (HKLM-x32\...\{07441A52-E208-478A-92B7-5C337CA8C131}) (Version: 1.1.0.15070 - Sony Corporation)
VAIO - Remote-Tastatur (HKLM-x32\...\{7396FB15-9AB4-4B78-BDD8-24A9C15D2C65}) (Version: 1.0.1.03020 - Sony Corporation)
VAIO Care (HKLM-x32\...\{36C5BBF0-E5BF-4DE1-B684-7E90B0C93FB5}) (Version: 6.4.2.11150 - Sony Corporation)
VAIO Care (x32 Version: 6.4.2.11150 - Sony Corporation) Hidden
VAIO Control Center (HKLM-x32\...\{72042FA6-5609-489F-A8EA-3C2DD650F667}) (Version: 4.5.0.03040 - Sony Corporation)
VAIO Data Restore Tool (HKLM-x32\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.6.0.13140 - Sony Corporation)
VAIO Data Restore Tool (x32 Version: 1.6.0.13140 - Sony Corporation) Hidden
VAIO Easy Connect (HKLM-x32\...\InstallShield_{7C80D30A-AC02-4E3F-B95D-29F0E4FF937B}) (Version: 1.1.2.01120 - Sony Corporation)
VAIO Easy Connect (x32 Version: 1.1.2.01120 - Sony Corporation) Hidden
VAIO Event Service (HKLM-x32\...\{73D8886A-D416-4687-B609-0D3836BA410C}) (Version: 5.5.0.03040 - Sony Corporation)
VAIO Gate (HKLM-x32\...\{A7C30414-2382-4086-B0D6-01A88ABA21C3}) (Version: 2.4.2.02200 - Sony Corporation)
VAIO Gate Default (HKLM-x32\...\{B7546697-2A80-4256-A24B-1C33163F535B}) (Version: 2.4.0.03240 - Sony Corporation)
VAIO Hardware Diagnostics (x32 Version: 4.2.0.14280 - Sony Corporation) Hidden
VAIO Hero Screensaver - Summer 2011 Screensaver (HKLM-x32\...\VAIO Hero Screensaver - Summer 2011 Screensaver) (Version: - )
VAIO Improvement (HKLM-x32\...\{3A26D9BD-0F73-432D-B522-2BA18138F7EF}) (Version: 1.0.0.14150 - Sony Corporation)
VAIO Improvement Validation (HKLM\...\{75C95C84-264F-4CC7-8A7E-346444E6C7C1}) (Version: 1.0.4.01190 - Sony Corporation)
VAIO Quick Web Access (HKLM-x32\...\splashtop) (Version: 1.4.5.3 - Sony Corporation)
VAIO Quick Web Access (x32 Version: 1.4.5.3 - Sony Corporation) Hidden
VAIO Sample Contents (HKLM-x32\...\{547C9EB4-4CA6-402F-9D1B-8BD30DC71E44}) (Version: 1.4.2.09010 - Sony Corporation)
VAIO Smart Network (HKLM-x32\...\{0899D75A-C2FC-42EA-A702-5B9A5F24EAD5}) (Version: 3.8.1.08270 - Sony Corporation)
VAIO Update (HKLM-x32\...\{9FF95DA2-7DA1-4228-93B7-DED7EC02B6B2}) (Version: 6.3.0.08010 - Sony Corporation)
VAIO-Handbuch (HKLM-x32\...\{C6E893E7-E5EA-4CD5-917C-5443E753FCBD}) (Version: 2.0.0.02250 - Sony Corporation)
VAIO-Support für Übertragungen (HKLM-x32\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.4.0.14230 - Sony Corporation)
VCCx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
VESx64 (Version: 1.0.0 - Sony Corporation) Hidden
VESx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
VGClientX64 (Version: 1.0.0 - Sony Corporation) Hidden
VGClientX86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
VIx64 (Version: 1.0.0 - Sony Corporation) Hidden
VIx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
VSNx64 (Version: 1.0.0 - Sony Corporation) Hidden
VSNx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
VU5x64 (Version: 1.1.0 - Sony Corporation ) Hidden
VU5x86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden
VU5x86 (x32 Version: 1.1.0 - Sony Corporation ) Hidden
VWSTx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogaléria (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalleri (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotótár (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Корпорація Майкрософт) Hidden
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (HKLM-x32\...\{C32CE55C-12BA-4951-8797-0967FDEF556F}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{C63A1E60-B6A4-440B-89A5-1FC6E4AC1C94}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX-kontroll for eksterne tilkoblinger (HKLM-x32\...\{09B7C7EB-3140-4B5E-842F-9C79A7137139}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX-objekt til fjernforbindelser (HKLM-x32\...\{57220148-3B2B-412A-A2E0-82B9DF423696}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (HKLM-x32\...\{6E29C4F7-C2C2-4B18-A15C-E09B92065F15}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Meshin etäyhteyksien ActiveX-komponentti (HKLM-x32\...\{4CF6F287-5121-483C-A5A2-07BDE19D8B4E}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Корпорация Майкрософт) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Корпорація Майкрософт) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven sähköposti (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
WISO Steuer-Sparbuch 2013 (HKLM-x32\...\{D6CC2FAF-F827-4091-96A1-D32CC9B69C79}) (Version: 20.00.8137 - Buhl Data Service GmbH)
Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (HKLM-x32\...\{F665F3B8-01B4-46A9-8E47-FF8DC2208C9F}) (Version: 15.4.5722.2 - Microsoft Corporation)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основи Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотоколекція Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Элемент управления Windows Live Mesh ActiveX для удаленных подключений (HKLM-x32\...\{BCB0D6F7-7EAB-4009-A6F2-8E0E7F317773}) (Version: 15.4.5722.2 - Microsoft Corporation)

==================== Restore Points =========================

Could not list Restore Points. Check "winmgmt" service or repair WMI.

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {049223A8-DEA7-4F99-9825-ADBA1D33C71E} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {0B2A80BE-CFA6-4BB2-879A-C51189E8F29D} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate Restart => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2012-02-20] (Sony Corporation)
Task: {0B6B947D-350A-40E8-801E-F9E84DAED0F5} - System32\Tasks\{8474A96E-B138-456A-A7DB-6BE6736DBED2} => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrobat.exe
Task: {15C82539-D238-4194-AA6D-791722A16615} - System32\Tasks\Norton AntiVirus\Norton Error Analyzer => C:\Program Files (x86)\Norton AntiVirus\Engine\20.4.0.40\SymErr.exe [2013-06-03] (Symantec Corporation)
Task: {243D7FAE-9231-47FB-8A4B-7D2170509251} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2012-02-20] (Sony Corporation)
Task: {2B509FD7-2DB0-4B29-989F-8B626AF5BD8E} - System32\Tasks\Sony Corporation\VAIO Smart Network\VSN Logon Start => C:\Program Files\Sony\VAIO Smart Network\VSNClient
Task: {32528F0C-399C-447F-A775-B97D86FC5087} - System32\Tasks\Sony Corporation\VAIO Improvement Validation\VAIO Improvement Validation => C:\Program Files\Sony\VAIO Improvement Validation\viv.exe
Task: {3D267137-860C-44E9-83B0-8E4B9A5F2BFB} - System32\Tasks\Sony Corporation\VAIO Personalization Manager\VpmLM Task Music Sasvena => C:\Program Files\Sony\VAIO Personalization Manager\VpmLM.exe [2011-02-08] (Sony Corporation)
Task: {490C7C07-EF82-4033-9E1D-00C645DD2B28} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton AntiVirus\Engine\20.4.0.40\WSCStub.exe [2013-06-03] (Symantec Corporation)
Task: {49BD1344-E15A-456F-ACDF-68B8B2F51275} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2013-08-01] (Sony Corporation)
Task: {4B6E8AAC-D17D-4BD5-AC6A-D236455099CF} - System32\Tasks\Sony Corporation\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2012-02-20] (Sony Corporation)
Task: {4FC67A21-B614-4770-A08A-2187167525B1} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCsystray.exe [2011-02-16] (Sony Corporation)
Task: {50AD28D1-2C06-479E-B685-3100CB88EB50} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2013-08-01] (Sony Corporation)
Task: {71368C37-D89D-4B33-8A1F-F95972A11DE8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-25] (Google Inc.)
Task: {743E17C6-1DE1-4993-9473-70E2A88FF1ED} - System32\Tasks\{B9EF47A6-22C2-481B-A8E9-F9D0054CE495} => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrobat.exe
Task: {87DD54D6-D729-41A9-B9AE-E36E44F51193} - System32\Tasks\Norton Identity Safe\Norton Error Analyzer => C:\Program Files (x86)\Norton Identity Safe\Engine\2014.5.0.67\SymErr.exe
Task: {8A0E403B-0B21-47E5-915F-1075B3FD6A9D} - System32\Tasks\Sony Corporation\Sony Home Network Library\SOHLib TaskTray => C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe [2011-02-23] (Sony Corporation)
Task: {9BB581A1-CDE0-4CFF-9387-17F6E2FD8A1F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-25] (Google Inc.)
Task: {BBE405DC-94BA-4A93-9A1F-0A407E395964} - System32\Tasks\Norton Identity Safe\Norton Error Processor => C:\Program Files (x86)\Norton Identity Safe\Engine\2014.5.0.67\SymErr.exe
Task: {C5EA07C7-9404-448D-8178-D875BF5ABB0E} - System32\Tasks\{DB669443-AF46-4BA8-B027-093021982B77} => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrobat.exe
Task: {D0FF0C46-54EB-4271-AF6C-DD4AF72EEAE8} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCOneClick.exe [2011-02-16] (Sony Corporation)
Task: {D4830899-03A6-4AC8-B97C-C2121642A5A2} - System32\Tasks\{B990AF48-984E-4388-8F92-D9538CDBB25E} => C:\Program Files (x86)\VERTX Systems\PDF Splitter and Merger 4.0\Bin\PDFSplitMerge.exe
Task: {E0C1D39A-4CF7-4E47-99EE-0D187070B6CB} - System32\Tasks\{2FF2B22E-4BFF-42D5-AD37-B635E39C9B2E} => C:\Program Files (x86)\VERTX Systems\PDF Splitter and Merger 4.0\Bin\PDFSplitMerge.exe
Task: {F0053903-3BF2-450F-B5F3-8DE3D51BAE5A} - System32\Tasks\Norton AntiVirus\Norton Error Processor => C:\Program Files (x86)\Norton AntiVirus\Engine\20.4.0.40\SymErr.exe [2013-06-03] (Symantec Corporation)
Task: {F3A52FCE-BD5C-4433-BF94-CAB9A07214EE} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-22] (Adobe Systems Incorporated)
Task: {F5A1D460-DAE5-441F-8025-EE610E8B4F5D} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementUploader => C:\Program Files\Sony\VAIO Improvement\viuploader.exe [2011-02-15] (Sony Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Installer for avg_safeguard.job => C:\Users\Sasvena\AppData\Local\Temp\Uniblue\Offers\AVG_Safeguard.exe

==================== Loaded Modules (whitelisted) =============

2014-03-02 21:09 - 2014-02-26 06:20 - 01727264 _____ () C:\Program Files (x86)\FindRight\FindRight.FirstRun.exe
2014-02-22 23:51 - 2014-02-20 02:02 - 00051016 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\chrome_elf.dll
2014-03-02 21:24 - 2014-03-02 21:24 - 00398112 _____ () C:\Program Files (x86)\FindRight\FindRight.BrowserFilter.Helper.dll
2014-02-22 23:51 - 2014-02-20 02:03 - 04060488 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\pdf.dll
2014-02-22 23:51 - 2014-02-20 02:03 - 00394568 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\ppGoogleNaClPluginChrome.dll
2014-02-22 23:51 - 2014-02-20 02:02 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\ffmpegsumo.dll
2014-02-22 23:51 - 2014-02-20 02:03 - 13632840 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2"

==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"

==================== Faulty Device Manager Devices =============

Name: NVIDIA GeForce 410M
Description: NVIDIA GeForce 410M
Class Guid: {4d36e968-e325-11ce-bfc1-08002be10318}
Manufacturer: NVIDIA
Service: nvlddmkm
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: PCI-Gerät
Description: PCI-Gerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Security Processor Loader Driver
Description: Security Processor Loader Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: spldr
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

==================== Event log errors: =========================

Application errors:
==================
Error: (03/02/2014 08:52:24 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/02/2014 08:01:39 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/02/2014 05:48:03 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/02/2014 05:41:13 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/02/2014 02:46:35 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: SearchIndexer.exe, Version: 7.0.7601.17610, Zeitstempel: 0x4dc0d019
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521eaf24
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000018e5d
ID des fehlerhaften Prozesses: 0x44c
Startzeit der fehlerhaften Anwendung: 0xSearchIndexer.exe0
Pfad der fehlerhaften Anwendung: SearchIndexer.exe1
Pfad des fehlerhaften Moduls: SearchIndexer.exe2
Berichtskennung: SearchIndexer.exe3

Error: (03/02/2014 02:11:45 PM) (Source: System Restore) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\msiexec.exe /V; Beschreibung = Contrôle ActiveX Windows Live Mesh pour connexions à distance wird entfernt; Fehler = 0x81000101).

Error: (03/02/2014 01:43:49 PM) (Source: System Restore) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\msiexec.exe /V; Beschreibung = Contrôle ActiveX Windows Live Mesh pour connexions à distance wird entfernt; Fehler = 0x81000101).

Error: (03/02/2014 01:23:56 PM) (Source: System Restore) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\msiexec.exe /V; Beschreibung = ActiveX-kontroll för fjärranslutningar för Windows Live Mesh wird entfernt; Fehler = 0x81000101).

Error: (03/02/2014 01:18:23 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: SearchIndexer.exe, Version: 7.0.7601.17610, Zeitstempel: 0x4dc0d019
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521eaf24
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000018e5d
ID des fehlerhaften Prozesses: 0xe88
Startzeit der fehlerhaften Anwendung: 0xSearchIndexer.exe0
Pfad der fehlerhaften Anwendung: SearchIndexer.exe1
Pfad des fehlerhaften Moduls: SearchIndexer.exe2
Berichtskennung: SearchIndexer.exe3

Error: (03/02/2014 00:37:42 PM) (Source: System Restore) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\msiexec.exe /V; Beschreibung = ActiveX-kontroll för fjärranslutningar för Windows Live Mesh wird entfernt; Fehler = 0x81000101).

System errors:
=============
Error: (03/02/2014 09:38:14 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (03/02/2014 09:38:14 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (03/02/2014 09:38:14 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (03/02/2014 09:38:14 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (03/02/2014 09:38:14 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (03/02/2014 09:38:14 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (03/02/2014 09:37:11 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (03/02/2014 09:37:11 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (03/02/2014 09:37:11 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (03/02/2014 09:35:09 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Microsoft Office Sessions:
=========================

==================== Memory info ===========================

Percentage of memory in use: 22%
Total physical RAM: 4077.86 MB
Available physical RAM: 3169.38 MB
Total Pagefile: 8153.9 MB
Available Pagefile: 7268.64 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:582.06 GB) (Free:527.75 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596 GB) (Disk ID: 63B28608)
Partition 1: (Not Active) - (Size=14 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=582 GB) - (Type=07 NTFS)

/CODE]

Bootsektor · 02.03.2014, 22:56

Hallo SonyVaio2012,

Deine Logs sind leider nicht komplett, bitte achte beim nächsten Mal auf die Vollständigkeit der Logs.

Hast du die WindowsActivationUpdate.exe, die sich seit dem 23/02 auf deinem Rechner befindet ausgeführt? Was ist das für eine Windows 7 Version? War sie bei deinem Laptop dabei? Hast du mal ein Beispiel für diese Ordner mit den komische Zahlen und Namen?

Schritt 1
Downloade dir bitte

Farbar Service Scanner

Starte das Tool mit Doppelklick auf die FSS.exe
Gehe sicher, dass folgende Optionen angehakt sind.
- Internet Services
- Windows Firewall
- System Restore
- Security Center/Action Center
- Windows Update
- Windows Defender
- Other Services
Klicke auf Scan.
Wenn das Tool fertig ist, wird es eine FSS.txt in dem Verzeichnis erstellen, wo das Tool gelaufen ist.

Poste bitte den Inhalt hier.

Schritt 2

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

folder: C:\1ef63fa00f83e987261668aaef1f40
folder: C:\81029cee35362f5ce738
folder: C:\55b2aede82b315133098e8f8df9a
file: C:\Users\Sasvena\Downloads\6925.tmp

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schritt 3
Starte noch einmal FRST.

Setze den Haken bei addition.txt und drücke auf Scan.
Wenn der Scan abgeschlossen ist, werden zwei neue Logfiles FRST.txt und addition.txt erstellt und auf dem Desktop (oder in dem Verzeichnis in dem FRST liegt) gespeichert.
Poste den Inhalt dieser Logfiles bitte hier in deinen Thread.

SonyVaio2012 · 03.03.2014, 19:55

WindowsActivationUpdate.exe habe ich soweit nicht ausgeführt (soweit ich weiss) Die Windows 7 Version befand sich bereits auf dem Laptop. Also wenn es leichter geht würde ich ihn auch formatieren, denn schon Schritt 2 verstehe ich leider nicht.
Über die Funktion Wiederherstellen geht es leider nicht

Code:

ATTFilter

Farbar Service Scanner Version: 25-02-2014
Ran by Sasvena (administrator) on 02-03-2014 at 23:25:07
Running from "C:\Users\Sasvena\Downloads"
Microsoft Windows 7 Home Premium  Service Pack 1 (X64)
Boot Mode: Network
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy: 
==================


System Restore:
============
SDRSVC Service is not running. Checking service configuration:
The start type of SDRSVC service is OK.
The ImagePath of SDRSVC service is OK.
The ServiceDll of SDRSVC service is OK.

VSS Service is not running. Checking service configuration:
The start type of VSS service is OK.
The ImagePath of VSS service is OK.


System Restore Disabled Policy: 
========================


Action Center:
============

wscsvc Service is not running. Checking service configuration:
The start type of wscsvc service is OK.
The ImagePath of wscsvc service is OK.
The ServiceDll of wscsvc service is OK.


Windows Update:
============
wuauserv Service is not running. Checking service configuration:
The start type of wuauserv service is OK.
The ImagePath of wuauserv service is OK.
The ServiceDll of wuauserv service is OK.

BITS Service is not running. Checking service configuration:
The start type of BITS service is OK.
The ImagePath of BITS service is OK.
The ServiceDll of BITS service is OK.

EventSystem Service is not running. Checking service configuration:
The start type of EventSystem service is OK.
The ImagePath of EventSystem service is OK.
The ServiceDll of EventSystem service is OK.


Windows Autoupdate Disabled Policy: 
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Windows Defender Disabled Policy: 
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\ipnathlp.dll => MD5 is legit
C:\Windows\System32\iphlpsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****

SonyVaio2012 · 03.03.2014, 20:25

Hier noch der Anhang mit den "etwas komischen" Bezeichnungen

Bootsektor · 04.03.2014, 00:14

Es ist natürlich deine freie Entscheidung, ob du den Rechner neu aufsetzen möchtest oder nicht. Bis jetzt seh ich nur jede Menge adware in deinen Logs. Den Ordner den du da gesehen hast, habe ich auch bemerkt. Ich möchte ihn mir gerne näher anschauen, denke aber nicht, dass er gefährlich ist.

Falls du hier weiter machen möchtest, führe bitte die nächsten Schritte aus, wenn nicht, dann teile mir das bitte mit.

Schritt 1

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

folder: C:\1ef63fa00f83e987261668aaef1f40
folder: C:\81029cee35362f5ce738
folder: C:\55b2aede82b315133098e8f8df9a
file: C:\Users\Sasvena\Downloads\6925.tmp

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schritt 2
Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 3
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.

Bitte lade Junkware Removal Tool auf Deinen Desktop.

Starte das Tool mit Doppelklick. Vista und 7 Nutzer bitte mit Rechtsklick "als Administrator ausführen" starten.
Das Tool wird sich öffnen und mit dem Scan beginnen.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Schritt 4
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

SonyVaio2012 · 04.03.2014, 20:59

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-03-2014 02
Ran by Sasvena at 2014-03-04 20:07:49 Run:1
Running from C:\Users\Sasvena\Desktop
Boot Mode: Safe Mode (with Networking)
==============================================

Content of fixlist:
*****************
folder: C:\1ef63fa00f83e987261668aaef1f40
folder: C:\81029cee35362f5ce738
folder: C:\55b2aede82b315133098e8f8df9a
file: C:\Users\Sasvena\Downloads\6925.tmp
*****************


========================= folder: C:\1ef63fa00f83e987261668aaef1f40 ========================

Directory Not Found

====== End of Folder: ======


========================= folder: C:\81029cee35362f5ce738 ========================

Directory Not Found

====== End of Folder: ======


========================= folder: C:\55b2aede82b315133098e8f8df9a ========================


====== End of Folder: ======


========================= file: C:\Users\Sasvena\Downloads\6925.tmp ========================

MD5: 1CCACFC2657E5C604F1C8B4E305307A5
Creation and modification date: 2014-02-14 16:17 - 2014-02-14 16:17
Size: 0262144
Attributes: ----A
Company Name: 
Internal Name: 
Original Name: 
Product Name: 
Description: 
File Version: 
Product Version: 
Copyright: 

====== End Of File: ======


==== End of Fixlog ====

AdwCleaner habe ich gedownloaded es funktioniert aber nichts. Habe den Laptop auch neu gestartet...ging auch danach nicht es öffnet sich aber kann kein Register anklicken es bleibt einfach weiss

Bootsektor · 04.03.2014, 22:31

Hast du es im abgesicherten Modus versucht? Wenn nein, mach das mal.

SonyVaio2012 · 05.03.2014, 10:32

Ich kann nur über den abgesicherten Modus richtig arbeiten. Im normalen Moudus nur selten und meistens hängt sich alles auf.
Hättest du einen Tipp wie ich einfach den Laptop formatieren kann.
Über Wiederherstellung klappt das nicht. Da kommt immer ein Fehler egal ob im normalen oder abgesicherten Modus.
Ich brauch ihn nämlich jetzt unbedingt, für meine Bachelorarbeit.
Hast du da einen Tipp für mich?

Bootsektor · 05.03.2014, 16:49

Hallo bacillus,

Du hast da wirklich eine ganze Latte an Adware auf dem Rechner. Lass uns mal folgendes versuchen:

Schritt 1

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=dsites0301&cd=2XzuyEtN2Y1L1QzuyBzzzzyEtA0C0FtC0FtCtB0C0FtB0CyBtN0D0Tzu0SyBzytBtN1L2XzutBtFtCyBtFtDtFtCtN1L1CzutDzytDtCtG1TtN1L1G1B1V1N2Y1L1Qzu2SyEyDyEyD0A0BtByDtG0AyBzy0FtGtByDzztDtGyCtDzzzztGtAyEtA0A0C0DyE0CyE0A0C0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StByBtDyE0CtByB0BtGyE0EyByCtGtByDtB0FtGyC0Fzz0BtGtB0CtD0C0DtA0DtCyEzztDzz2Q&cr=1679946924&ir=
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=dsites0301&cd=2XzuyEtN2Y1L1QzuyBzzzzyEtA0C0FtC0FtCtB0C0FtB0CyBtN0D0Tzu0SyBzytBtN1L2XzutBtFtCyBtFtDtFtCtN1L1CzutDzytDtCtG1TtN1L1G1B1V1N2Y1L1Qzu2SyEyDyEyD0A0BtByDtG0AyBzy0FtGtByDzztDtGyCtDzzzztGtAyEtA0A0C0DyE0CyE0A0C0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StByBtDyE0CtByB0BtGyE0EyByCtGtByDtB0FtGyC0Fzz0BtGtB0CtD0C0DtA0DtCyEzztDzz2Q&cr=1679946924&ir=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=dsites0301&cd=2XzuyEtN2Y1L1QzuyBzzzzyEtA0C0FtC0FtCtB0C0FtB0CyBtN0D0Tzu0SyBzytBtN1L2XzutBtFtCyBtFtDtFtCtN1L1CzutDzytDtCtG1TtN1L1G1B1V1N2Y1L1Qzu2SyEyDyEyD0A0BtByDtG0AyBzy0FtGtByDzztDtGyCtDzzzztGtAyEtA0A0C0DyE0CyE0A0C0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StByBtDyE0CtByB0BtGyE0EyByCtGtByDtB0FtGyC0Fzz0BtGtB0CtD0C0DtA0DtCyEzztDzz2Q&cr=1679946924&ir=
URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
URLSearchHook: HKLM-x32 - DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
URLSearchHook: HKCU - SearchHook Class - {D8278076-BC68-4484-9233-6E7F1628B56C} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\searchhook.dll (APN LLC.)
URLSearchHook: HKCU - DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = 
SearchScopes: HKCU - DefaultScope {520F3E60-93A9-4E25-B692-F28B8F518BC1} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dsites0301&cd=2XzuyEtN2Y1L1QzuyBzzzzyEtA0C0FtC0FtCtB0C0FtB0CyBtN0D0Tzu0SyBzytBtN1L2XzutBtFtCyBtFtDtFtCtN1L1CzutDzytDtCtG1TtN1L1G1B1V1N2Y1L1Qzu2SyEyDyEyD0A0BtByDtG0AyBzy0FtGtByDzztDtGyCtDzzzztGtAyEtA0A0C0DyE0CyE0A0C0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StByBtDyE0CtByB0BtGyE0EyByCtGtByDtB0FtGyC0Fzz0BtGtB0CtD0C0DtA0DtCyEzztDzz2Q&cr=1679946924&ir=
SearchScopes: HKCU - {03E7B016-F4FE-4771-BC19-5A568C3C69D8} URL = hxxp://websearch.ask.com/custom/java/redirect?client=ie&tb=ORJ&o=100000026&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&affID=111789&babsrc=SP_ss&mntrId=3239f2c70000000000009439e5a2066f
SearchScopes: HKCU - {24F87474-3C08-490D-AAAE-5B40E59C0887} URL = hxxp://services.zinio.com/search?s={searchTerms}&rf=sonyslices
SearchScopes: HKCU - {520F3E60-93A9-4E25-B692-F28B8F518BC1} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dsites0301&cd=2XzuyEtN2Y1L1QzuyBzzzzyEtA0C0FtC0FtCtB0C0FtB0CyBtN0D0Tzu0SyBzytBtN1L2XzutBtFtCyBtFtDtFtCtN1L1CzutDzytDtCtG1TtN1L1G1B1V1N2Y1L1Qzu2SyEyDyEyD0A0BtByDtG0AyBzy0FtGtByDzztDtGyCtDzzzztGtAyEtA0A0C0DyE0CyE0A0C0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StByBtDyE0CtByB0BtGyE0EyByCtGtByDtB0FtGyC0Fzz0BtGtB0CtD0C0DtA0DtCyEzztDzz2Q&cr=1679946924&ir=
SearchScopes: HKCU - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
BHO-x32: FindRight - {2c774641-5504-46a8-b63f-6715ae3fe376} - C:\Program Files (x86)\FindRight\FindRightbho.dll (FindRight)
BHO-x32: DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
BHO-x32: mysearchdial Helper Object - {EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD} - C:\Program Files (x86)\Mysearchdial\1.8.29.0\bh\mysearchdial.dll (MySearchDial)
Toolbar: HKLM-x32 - mysearchdial Toolbar - {3004627E-F8E9-4E8B-909D-316753CBA923} - C:\Program Files (x86)\Mysearchdial\1.8.29.0\mysearchdialTlbr.dll (MySearchDial)
FF Homepage: hxxp://home.mywebsearch.com/index.jhtml?ptb=0541C167-E908-41ED-9CF0-FE6694F98D5E&n=77fd5a9c&p2=^Y6^xdm043^YY^de&si=swissconverter
FF Keyword.URL: hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?st=kwd&ptb=0541C167-E908-41ED-9CF0-FE6694F98D5E&n=77fd5a9c&ind=2013092508&p2=^Y6^xdm043^YY^de&si=swissconverter&searchfor=
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\ask-search.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\askcomsearch.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-1.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-10.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-11.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-12.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-13.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-14.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-15.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-16.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-17.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-18.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-19.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-2.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-20.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-21.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-22.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-23.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-24.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-25.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-26.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-27.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-28.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-29.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-3.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-30.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-31.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-4.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-5.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-6.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-7.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-8.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-9.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin.gif
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin.src
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\my-web-search.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\safesearch.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
FF Extension: FromDocToPDF - C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\Extensions\65ffxtbr@FromDocToPDF_65.com [2013-06-08]
FF Extension: Babylon - C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\Extensions\ffxtlbr@babylon.com [2012-04-04]
FF Extension: ICQ Toolbar - C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\Extensions\{800b5000-a755-47e1-992b-48a1c1357f07} [2012-07-27]
FF Extension: DVDVideoSoftTB  - C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\Extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5} 
FF Extension: ICQ Sparberater - C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\Extensions\ciuvo-extension@icq.de.xpi [2012-01-26]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-21]
FF Extension: DealPly - C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\Extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}.xpi [2012-04-04]
CHR HomePage: hxxp://start.mysearchdial.com/?f=1&a=dsites0301&cd=2XzuyEtN2Y1L1QzuyBzzzzyEtA0C0FtC0FtCtB0C0FtB0CyBtN0D0Tzu0SyBzytBtN1L2XzutBtFtCyBtFtDtFtCtN1L1CzutDzytDtCtG1TtN1L1G1B1V1N2Y1L1Qzu2SyEyDyEyD0A0BtByDtG0AyBzy0FtGtByDzztDtGyCtDzzzztGtAyEtA0A0C0DyE0CyE0A0C0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StByBtDyE0CtByB0BtGyE0EyByCtGtByDtB0FtGyC0Fzz0BtGtB0CtD0C0DtA0DtCyEzztDzz2Q&cr=1679946924&ir=
CHR DefaultSearchProvider:       "name": "Mysearchdial"
S4 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2014-02-13] ()
S2 Update FindRight; C:\Program Files (x86)\FindRight\updateFindRight.exe [111904 2014-02-26] ()
[2013-11-21]

C:\Program Files (x86)\FindRight
C:\Users\Sasvena\AppData\Roaming\mysearchdial
C:\Users\Sasvena\AppData\Roaming\DigitalSites
C:\Program Files (x86)\Mysearchdial
C:\Users\Sasvena\Downloads\ZipExtractorSetup.exe
C:\Windows\system32\roboot64.exe
C:\Users\Sasvena\Downloads\6925.tmp
C:\Users\Sasvena\Downloads\speedupmypc.exe
C:\Users\Sasvena\Downloads\speedupmypc (1).exe
C:\Users\Sasvena\Downloads\speedupmypc (2).exe
C:\Users\Sasvena\Downloads\speedupmypc (3).exe
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-*.xml
C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll l 
C:\Program Files (x86)\AskPartnerNetwork\
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\ask-search.xml

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schritt 2
Downloade dir bitte Windows Repair (All In One) von hier.

Installiere das Programm. Starte es, nachdem die Installation abgeschlossen wurde.
Klicke auf Step 2 und drücke unter Check Disk auf Do It.
Wenn der Vorgang abgeschlossen ist, klicke auf Step 3 und drücke unter System File Check auf Do It.
Nachdem der Vorgang abgeschlossen ist, klicke auf Start Repairs, wähle den Advanced Mode und drücke Start.
Gehe bitte sicher, dass die Kästchen wie unten zu sehen angehakt sind. Bitte hake zusätzlich noch Set Windows Services to Default Startup an.
Hake Restart System when Finished an.
Drücke Start.

Schritt 3
Teste nach diesem Schritt, ob dein Rechner besser läuft

Schritt 4
Starte noch einmal FRST.

Setze den Haken bei addition.txt und drücke auf Scan.
Wenn der Scan abgeschlossen ist, werden zwei neue Logfiles FRST.txt und addition.txt erstellt und auf dem Desktop (oder in dem Verzeichnis in dem FRST liegt) gespeichert.
Poste den Inhalt dieser Logfiles bitte hier in deinen Thread.

SonyVaio2012 · 05.03.2014, 21:36

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 05-03-2014
Ran by Sasvena at 2014-03-05 21:12:38 Run:2
Running from C:\Users\Sasvena\Desktop
Boot Mode: Safe Mode (with Networking)
==============================================

Content of fixlist:
*****************
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=dsites0301&cd=2XzuyEtN2Y1L1QzuyBzzzzyEtA0C0FtC0FtCtB0C0FtB0CyBtN0D0Tzu0SyBzytBtN1L2XzutBtFtCyBtFtDtFtCtN1L1CzutDzytDtCtG1TtN1L1G1B1V1N2Y1L1Qzu2SyEyDyEyD0A0BtByDtG0AyBzy0FtGtByDzztDtGyCtDzzzztGtAyEtA0A0C0DyE0CyE0A0C0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StByBtDyE0CtByB0BtGyE0EyByCtGtByDtB0FtGyC0Fzz0BtGtB0CtD0C0DtA0DtCyEzztDzz2Q&cr=1679946924&ir=
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=dsites0301&cd=2XzuyEtN2Y1L1QzuyBzzzzyEtA0C0FtC0FtCtB0C0FtB0CyBtN0D0Tzu0SyBzytBtN1L2XzutBtFtCyBtFtDtFtCtN1L1CzutDzytDtCtG1TtN1L1G1B1V1N2Y1L1Qzu2SyEyDyEyD0A0BtByDtG0AyBzy0FtGtByDzztDtGyCtDzzzztGtAyEtA0A0C0DyE0CyE0A0C0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StByBtDyE0CtByB0BtGyE0EyByCtGtByDtB0FtGyC0Fzz0BtGtB0CtD0C0DtA0DtCyEzztDzz2Q&cr=1679946924&ir=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=dsites0301&cd=2XzuyEtN2Y1L1QzuyBzzzzyEtA0C0FtC0FtCtB0C0FtB0CyBtN0D0Tzu0SyBzytBtN1L2XzutBtFtCyBtFtDtFtCtN1L1CzutDzytDtCtG1TtN1L1G1B1V1N2Y1L1Qzu2SyEyDyEyD0A0BtByDtG0AyBzy0FtGtByDzztDtGyCtDzzzztGtAyEtA0A0C0DyE0CyE0A0C0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StByBtDyE0CtByB0BtGyE0EyByCtGtByDtB0FtGyC0Fzz0BtGtB0CtD0C0DtA0DtCyEzztDzz2Q&cr=1679946924&ir=
URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
URLSearchHook: HKLM-x32 - DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
URLSearchHook: HKCU - SearchHook Class - {D8278076-BC68-4484-9233-6E7F1628B56C} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\searchhook.dll (APN LLC.)
URLSearchHook: HKCU - DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = 
SearchScopes: HKCU - DefaultScope {520F3E60-93A9-4E25-B692-F28B8F518BC1} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dsites0301&cd=2XzuyEtN2Y1L1QzuyBzzzzyEtA0C0FtC0FtCtB0C0FtB0CyBtN0D0Tzu0SyBzytBtN1L2XzutBtFtCyBtFtDtFtCtN1L1CzutDzytDtCtG1TtN1L1G1B1V1N2Y1L1Qzu2SyEyDyEyD0A0BtByDtG0AyBzy0FtGtByDzztDtGyCtDzzzztGtAyEtA0A0C0DyE0CyE0A0C0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StByBtDyE0CtByB0BtGyE0EyByCtGtByDtB0FtGyC0Fzz0BtGtB0CtD0C0DtA0DtCyEzztDzz2Q&cr=1679946924&ir=
SearchScopes: HKCU - {03E7B016-F4FE-4771-BC19-5A568C3C69D8} URL = hxxp://websearch.ask.com/custom/java/redirect?client=ie&tb=ORJ&o=100000026&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&affID=111789&babsrc=SP_ss&mntrId=3239f2c70000000000009439e5a2066f
SearchScopes: HKCU - {24F87474-3C08-490D-AAAE-5B40E59C0887} URL = hxxp://services.zinio.com/search?s={searchTerms}&rf=sonyslices
SearchScopes: HKCU - {520F3E60-93A9-4E25-B692-F28B8F518BC1} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dsites0301&cd=2XzuyEtN2Y1L1QzuyBzzzzyEtA0C0FtC0FtCtB0C0FtB0CyBtN0D0Tzu0SyBzytBtN1L2XzutBtFtCyBtFtDtFtCtN1L1CzutDzytDtCtG1TtN1L1G1B1V1N2Y1L1Qzu2SyEyDyEyD0A0BtByDtG0AyBzy0FtGtByDzztDtGyCtDzzzztGtAyEtA0A0C0DyE0CyE0A0C0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StByBtDyE0CtByB0BtGyE0EyByCtGtByDtB0FtGyC0Fzz0BtGtB0CtD0C0DtA0DtCyEzztDzz2Q&cr=1679946924&ir=
SearchScopes: HKCU - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
BHO-x32: FindRight - {2c774641-5504-46a8-b63f-6715ae3fe376} - C:\Program Files (x86)\FindRight\FindRightbho.dll (FindRight)
BHO-x32: DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
BHO-x32: mysearchdial Helper Object - {EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD} - C:\Program Files (x86)\Mysearchdial\1.8.29.0\bh\mysearchdial.dll (MySearchDial)
Toolbar: HKLM-x32 - mysearchdial Toolbar - {3004627E-F8E9-4E8B-909D-316753CBA923} - C:\Program Files (x86)\Mysearchdial\1.8.29.0\mysearchdialTlbr.dll (MySearchDial)
FF Homepage: hxxp://home.mywebsearch.com/index.jhtml?ptb=0541C167-E908-41ED-9CF0-FE6694F98D5E&n=77fd5a9c&p2=^Y6^xdm043^YY^de&si=swissconverter
FF Keyword.URL: hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?st=kwd&ptb=0541C167-E908-41ED-9CF0-FE6694F98D5E&n=77fd5a9c&ind=2013092508&p2=^Y6^xdm043^YY^de&si=swissconverter&searchfor=
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\ask-search.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\askcomsearch.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-1.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-10.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-11.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-12.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-13.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-14.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-15.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-16.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-17.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-18.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-19.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-2.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-20.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-21.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-22.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-23.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-24.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-25.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-26.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-27.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-28.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-29.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-3.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-30.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-31.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-4.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-5.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-6.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-7.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-8.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-9.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin.gif
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin.src
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\my-web-search.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\safesearch.xml
FF SearchPlugin: C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
FF Extension: FromDocToPDF - C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\Extensions\65ffxtbr@FromDocToPDF_65.com [2013-06-08]
FF Extension: Babylon - C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\Extensions\ffxtlbr@babylon.com [2012-04-04]
FF Extension: ICQ Toolbar - C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\Extensions\{800b5000-a755-47e1-992b-48a1c1357f07} [2012-07-27]
FF Extension: DVDVideoSoftTB  - C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\Extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5} 
FF Extension: ICQ Sparberater - C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\Extensions\ciuvo-extension@icq.de.xpi [2012-01-26]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-21]
FF Extension: DealPly - C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\Extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}.xpi [2012-04-04]
CHR HomePage: hxxp://start.mysearchdial.com/?f=1&a=dsites0301&cd=2XzuyEtN2Y1L1QzuyBzzzzyEtA0C0FtC0FtCtB0C0FtB0CyBtN0D0Tzu0SyBzytBtN1L2XzutBtFtCyBtFtDtFtCtN1L1CzutDzytDtCtG1TtN1L1G1B1V1N2Y1L1Qzu2SyEyDyEyD0A0BtByDtG0AyBzy0FtGtByDzztDtGyCtDzzzztGtAyEtA0A0C0DyE0CyE0A0C0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StByBtDyE0CtByB0BtGyE0EyByCtGtByDtB0FtGyC0Fzz0BtGtB0CtD0C0DtA0DtCyEzztDzz2Q&cr=1679946924&ir=
CHR DefaultSearchProvider:       "name": "Mysearchdial"
S4 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2014-02-13] ()
S2 Update FindRight; C:\Program Files (x86)\FindRight\updateFindRight.exe [111904 2014-02-26] ()
[2013-11-21]

C:\Program Files (x86)\FindRight
C:\Users\Sasvena\AppData\Roaming\mysearchdial
C:\Users\Sasvena\AppData\Roaming\DigitalSites
C:\Program Files (x86)\Mysearchdial
C:\Users\Sasvena\Downloads\ZipExtractorSetup.exe
C:\Windows\system32\roboot64.exe
C:\Users\Sasvena\Downloads\6925.tmp
C:\Users\Sasvena\Downloads\speedupmypc.exe
C:\Users\Sasvena\Downloads\speedupmypc (1).exe
C:\Users\Sasvena\Downloads\speedupmypc (2).exe
C:\Users\Sasvena\Downloads\speedupmypc (3).exe
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-*.xml
C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll l 
C:\Program Files (x86)\AskPartnerNetwork\
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\ask-search.xml
         
*****************

HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\URLSearchHooks\\ => Value deleted successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\URLSearchHooks\\{872b5b88-9db5-4310-bdd0-ac189557e5f5} => Value deleted successfully.
HKCR\Wow6432Node\CLSID\{872b5b88-9db5-4310-bdd0-ac189557e5f5} => Key deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{D8278076-BC68-4484-9233-6E7F1628B56C} => Value deleted successfully.
HKCR\Wow6432Node\CLSID\{D8278076-BC68-4484-9233-6E7F1628B56C} => Key deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{872b5b88-9db5-4310-bdd0-ac189557e5f5} => Value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8} => Key deleted successfully.
HKCR\CLSID\{77AA745B-F4F8-45DA-9B14-61D2D95054C8} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{03E7B016-F4FE-4771-BC19-5A568C3C69D8} => Key deleted successfully.
HKCR\CLSID\{03E7B016-F4FE-4771-BC19-5A568C3C69D8} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key deleted successfully.
HKCR\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{24F87474-3C08-490D-AAAE-5B40E59C0887} => Key deleted successfully.
HKCR\CLSID\{24F87474-3C08-490D-AAAE-5B40E59C0887} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{520F3E60-93A9-4E25-B692-F28B8F518BC1} => Key deleted successfully.
HKCR\CLSID\{520F3E60-93A9-4E25-B692-F28B8F518BC1} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8} => Key deleted successfully.
HKCR\CLSID\{77AA745B-F4F8-45DA-9B14-61D2D95054C8} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2c774641-5504-46a8-b63f-6715ae3fe376} => Key not found.
HKCR\Wow6432Node\CLSID\{2c774641-5504-46a8-b63f-6715ae3fe376} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{872b5b88-9db5-4310-bdd0-ac189557e5f5} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{872b5b88-9db5-4310-bdd0-ac189557e5f5} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD} => Key not found.
HKCR\Wow6432Node\CLSID\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{3004627E-F8E9-4E8B-909D-316753CBA923} => Value not found.
HKCR\Wow6432Node\CLSID\{3004627E-F8E9-4E8B-909D-316753CBA923} => Key not found.
Firefox homepage deleted successfully.
Firefox Keyword.URL deleted successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\ask-search.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\askcomsearch.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\conduit.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-1.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-10.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-11.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-12.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-13.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-14.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-15.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-16.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-17.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-18.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-19.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-2.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-20.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-21.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-22.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-23.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-24.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-25.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-26.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-27.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-28.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-29.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-3.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-30.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-31.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-4.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-5.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-6.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-7.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-8.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-9.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin.gif => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin.src => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\my-web-search.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\safesearch.xml => Moved successfully.
Could not move "C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\searchplugins-backup" => Scheduled to move on reboot.
C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\Extensions\65ffxtbr@FromDocToPDF_65.com => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\Extensions\ffxtlbr@babylon.com => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\Extensions\{800b5000-a755-47e1-992b-48a1c1357f07} => Moved successfully.
FF Extension: DVDVideoSoftTB  - C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\Extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5} not found.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\Extensions\ciuvo-extension@icq.de.xpi => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\Extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}.xpi => Moved successfully.
CHR HomePage: hxxp://start.mysearchdial.com/?f=1&a=dsites0301&cd=2XzuyEtN2Y1L1QzuyBzzzzyEtA0C0FtC0FtCtB0C0FtB0CyBtN0D0Tzu0SyBzytBtN1L2XzutBtFtCyBtFtDtFtCtN1L1CzutDzytDtCtG1TtN1L1G1B1V1N2Y1L1Qzu2SyEyDyEyD0A0BtByDtG0AyBzy0FtGtByDzztDtGyCtDzzzztGtAyEtA0A0C0DyE0CyE0A0C0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StByBtDyE0CtByB0BtGyE0EyByCtGtByDtB0FtGyC0Fzz0BtGtB0CtD0C0DtA0DtCyEzztDzz2Q&cr=1679946924&ir= ==> The Chrome "Settings" can be used to fix the entry.
CHR DefaultSearchProvider:       "name": "Mysearchdial" ==> The Chrome "Settings" can be used to fix the entry.
APNMCP => Service deleted successfully.
Update FindRight => Service not found.
"C:\Program Files (x86)\FindRight" => File/Directory not found.
C:\Users\Sasvena\AppData\Roaming\mysearchdial => Moved successfully.
C:\Users\Sasvena\AppData\Roaming\DigitalSites => Moved successfully.
"C:\Program Files (x86)\Mysearchdial" => File/Directory not found.
C:\Users\Sasvena\Downloads\ZipExtractorSetup.exe => Moved successfully.
C:\Windows\system32\roboot64.exe => Moved successfully.
C:\Users\Sasvena\Downloads\6925.tmp => Moved successfully.
C:\Users\Sasvena\Downloads\speedupmypc.exe => Moved successfully.
C:\Users\Sasvena\Downloads\speedupmypc (1).exe => Moved successfully.
C:\Users\Sasvena\Downloads\speedupmypc (2).exe => Moved successfully.
C:\Users\Sasvena\Downloads\speedupmypc (3).exe => Moved successfully.
"C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\icqplugin-*.xml" => File/Directory not found.
"C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll l" => File/Directory not found.
C:\Program Files (x86)\AskPartnerNetwork\ => Moved successfully.
"C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\ask-search.xml" => File/Directory not found.

=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-03-05 21:16:31)<=

C:\Users\Sasvena\AppData\Roaming\Mozilla\Firefox\Profiles\pggmd9mm.default\searchplugins\searchplugins-backup => Is moved successfully.

==== End of Fixlog ====

oh man ich war echt guter Dinge... bis diese Fehlermeldung kam

Bootsektor · 05.03.2014, 23:05

Versuch mal diese Version:

Schritt 1
Windows Repair (All In One)

Schritt 2
Drücke bitte die

+ R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument, achte unbedingt darauf, dass im Text nichts verändert wurde

Code:

ATTFilter

>"%temp%\list.txt" (
for %%a in (
lanmanserver
lanmanworkstation
rpcss
) do (
sc qc %%a
sc query %%a
)
)
notepad "%temp%\list.txt"

Wähle Datei --> Speichern unter
look.bat
Dateityp: Wähle Alle Dateien (*.*)
Speichere die Datei auf deinem Desktop.

Es sollte nun ungefähr so aussehen

Starte die look.bat. Vista und Win7 User: Mit Rechtsklick "als Administrator starten"
Es öffnet sich eine .txt-Datei.
Bitte poste den Inhalt hier in deinen Thread

02.03.2014, 20:56	#4
Bootsektor Ruhe in Frieden † 2019	Möglicherweise Opfer Softwarefälschung/Norton funktioniert nicht mehr Hallo SonyVaio2012, das kannst du auch, besser wäre natürlich dein normales Nutzerkonto. __________________ Grüße stolzes Mitglied von UNITE Du hast Lob oder Verbesserungsvorschläge? Du findest unsere Arbeit gut und möchtest uns finanziell unterstützen? -> Spende

04.03.2014, 22:31	#11
Bootsektor Ruhe in Frieden † 2019	Möglicherweise Opfer Softwarefälschung/Norton funktioniert nicht mehr Hast du es im abgesicherten Modus versucht? Wenn nein, mach das mal. __________________ Grüße stolzes Mitglied von UNITE Du hast Lob oder Verbesserungsvorschläge? Du findest unsere Arbeit gut und möchtest uns finanziell unterstützen? -> Spende

Möglicherweise Opfer Softwarefälschung/Norton funktioniert nicht mehr

Plagegeister aller Art und deren Bekämpfung: Möglicherweise Opfer Softwarefälschung/Norton funktioniert nicht mehr