Hi Leute!

Hab schon gesehen, dass dieses Problem mehrere hatten!
Bis jetzt hab ich noch gar nichts unternommen! Weil ich mich auch nicht wirklich auskenne damit! Ich sollte aber Instruktionen folgen können, da ein bisschen Hausverstand vorhanden ist! ;-)

LG und danke schonmal für eure Hilfe!

Hallo und

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!



Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Martin (administrator) on MARTIN-VAIO on 27-03-2014 10:49:46
Running from C:\Users\Martin\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe
(McAfee, Inc.) C:\Program Files (x86)\Common Files\McAfee\McProxy\McProxy.exe
(McAfee, Inc.) C:\Program Files\McAfee\VirusScan\Mcshield.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\MPF\MPFSrv.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\MSK\MskSrver.exe
() C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
(COMPANYVERS_NAME) C:\Program Files (x86)\MyScrapNook_12\bar\1.bin\12barsvc.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Sony Corporation) c:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VAIOCareService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
(Sun Microsystems, Inc.) C:\Program Files\Java\jre6\bin\jusched.exe
(dfvcxsdert) C:\ProgramData\Baipsuvz.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Sony Corporation) C:\Program Files (x86)\SONY\ISB Utility\ISBMgr.exe
(Sony Corporation) C:\Program Files (x86)\SONY\VAIO Event Service\VESMgr.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
(Sony Corporation) C:\Program Files (x86)\SONY\PMB\PMBVolumeWatcher.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Sony Corporation) C:\Program Files (x86)\SONY\Marketing Tools\MarketingTools.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Advanced Micro Devices Inc.) c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Sony Corporation) C:\Program Files (x86)\SONY\VAIO Event Service\VESMgrSub.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\MSC\mcmscsvc.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee.com\Agent\mcagent.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apntex.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\VirusScan\mcsysmon.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe
(McAfee, Inc.) C:\Program Files (x86)\Common Files\McAfee\MNA\McNASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Sun Microsystems, Inc.) C:\Program Files\Java\jre6\bin\jucheck.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9636896 2009-12-16] (Realtek Semiconductor)
HKLM\...\Run: [Apoint] - C:\Program Files\Apoint\Apoint.exe [208384 2009-11-04] (Alps Electric Co., Ltd.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Java\jre6\bin\jusched.exe [171520 2012-09-22] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2009-11-20] (Intel Corporation)
HKLM-x32\...\Run: [ISBMgr.exe] - C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [320880 2009-08-26] (Sony Corporation)
HKLM-x32\...\Run: [StartCCC] - c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-01-13] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [PMBVolumeWatcher] - c:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [597792 2009-10-24] (Sony Corporation)
HKLM-x32\...\Run: [MarketingTools] - C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe [26624 2012-09-22] (Sony Corporation)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\VESWinlogon-x32: VESWinlogon.dll [X]
HKU\.DEFAULT\...\RunOnce: [SPReview] - "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"hxxp://go.microsoft.com/fwlink/?LinkID=122915" /build:7601
HKU\S-1-5-21-1533790663-1175885118-1602668530-1000\...\Run: [Baipsuvz] - C:\ProgramData\Baipsuvz.exe [371932 2014-03-24] (dfvcxsdert)
HKU\S-1-5-21-1533790663-1175885118-1602668530-1000\...\MountPoints2: {a2d211f7-d7b5-11e2-90fa-544249606ef5} - G:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-1533790663-1175885118-1602668530-1000\...\MountPoints2: {a2d2121b-d7b5-11e2-90fa-544249606ef5} - G:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-1533790663-1175885118-1602668530-1000\...\MountPoints2: {c4eb595f-80ee-11e3-8f1c-544249606ef5} - G:\HTC_Sync_Manager_PC.exe
Startup: C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Martin\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snap.do/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=AT&userid=46dce6c1-cbbd-4b11-bf80-e49c770b95a4&searchtype=ds&q={searchTerms}&installDate=26/03/2013
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://feed.snap.do/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=AT&userid=46dce6c1-cbbd-4b11-bf80-e49c770b95a4&searchtype=hp&installDate=26/03/2013
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=SVEC&bmod=EU01
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snap.do/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=AT&userid=46dce6c1-cbbd-4b11-bf80-e49c770b95a4&searchtype=ds&q={searchTerms}&installDate=26/03/2013
URLSearchHook: HKCU - (No Name) - {b3b5c47e-61f7-4d81-af06-461fc86686ce} - C:\Program Files (x86)\MyScrapNook_12\bar\1.bin\12SrcAs.dll (MindSpark)
SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=AT&userid=46dce6c1-cbbd-4b11-bf80-e49c770b95a4&searchtype=ds&q={searchTerms}&installDate=26/03/2013
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=AT&userid=46dce6c1-cbbd-4b11-bf80-e49c770b95a4&searchtype=ds&q={searchTerms}&installDate=26/03/2013
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=AT&userid=46dce6c1-cbbd-4b11-bf80-e49c770b95a4&searchtype=ds&q={searchTerms}&installDate=26/03/2013
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=AT&userid=46dce6c1-cbbd-4b11-bf80-e49c770b95a4&searchtype=ds&q={searchTerms}&installDate=26/03/2013
BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - C:\Program Files (x86)\McAfee\MSK\mskapbho64.dll ()
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll (McAfee, Inc.)
BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Toolbar BHO - {0214754e-4e7d-4589-829d-e2523e6a3085} - C:\Program Files (x86)\MyScrapNook_12\bar\1.bin\12bar.dll (MindSpark)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - C:\Program Files (x86)\McAfee\MSK\MskAPBho.dll ()
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO-x32: Search Assistant BHO - {65f159fb-5f5e-46f4-b45d-ccfa236d2073} - C:\Program Files (x86)\MyScrapNook_12\bar\1.bin\12SrcAs.dll (MindSpark)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\McAfee\VirusScan\scriptsn.dll (McAfee, Inc.)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - My Scrap Nook - {fe6f06fb-0fc0-4499-828f-ee48088f504f} - C:\Program Files (x86)\MyScrapNook_12\bar\1.bin\12bar.dll (MindSpark)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\cdce827q.default
FF NewTab: hxxp://feed.snap.do/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=AT&userid=46dce6c1-cbbd-4b11-bf80-e49c770b95a4&searchtype=nt&installDate={installDate}
FF Homepage: https://www.facebook.com/
FF NetworkProxy: "gopher", ""
FF NetworkProxy: "gopher_port", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @MyScrapNook_12.com/Plugin - C:\Program Files (x86)\MyScrapNook_12\bar\1.bin\NP12Stub.dll (MindSpark)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.4 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Martin\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Youtube MP3 Podcaster - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\cdce827q.default\Extensions\youtubemp3podcaster@jeremy.d.gregorio.com [2014-03-21]
FF Extension: YouTube to MP3 - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\cdce827q.default\Extensions\youtube2mp3@mondayx.de.xpi [2014-02-25]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\cdce827q.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-20]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-03-19]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-03-19]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-09-23]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2012-09-22]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-10-03]
FF HKLM-x32\...\Firefox\Extensions: [12ffxtbr@MyScrapNook_12.com] - C:\Program Files (x86)\MyScrapNook_12\bar\1.bin
FF Extension: My Scrap Nook - C:\Program Files (x86)\MyScrapNook_12\bar\1.bin [2013-07-24]
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-10-03]

Chrome: 
=======
CHR HomePage: hxxp://feed.snap.do/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=AT&userid=46dce6c1-cbbd-4b11-bf80-e49c770b95a4&searchtype=hp&installDate=26/03/2013
CHR DefaultSearchKeyword: search.snap.do
CHR DefaultSearchProvider: Web
CHR DefaultSearchURL: hxxp://feed.snap.do/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=AT&userid=46dce6c1-cbbd-4b11-bf80-e49c770b95a4&searchtype=ds&q={searchTerms}&installDate=26/03/2013
CHR Extension: (SiteAdvisor) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2013-05-21]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Users\Martin\AppData\Roaming\DVDVideoSoft\dvsYoutubeDownload.crx [2012-10-11]

==================== Services (Whitelisted) =================

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2013-11-10] (Nero AG)
R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [123384 2014-01-22] (McAfee, Inc.)
R2 mcmscsvc; C:\Program Files (x86)\McAfee\MSC\mcmscsvc.exe [865832 2009-05-01] (McAfee, Inc.)
R2 McNASvc; C:\Program Files (x86)\Common Files\McAfee\MNA\McNASvc.exe [2482848 2009-04-09] (McAfee, Inc.)
S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [696848 2009-05-08] (McAfee, Inc.)
R2 McProxy; C:\Program Files (x86)\Common Files\McAfee\McProxy\McProxy.exe [359952 2009-04-09] (McAfee, Inc.)
R2 McShield; C:\Program Files\McAfee\VirusScan\Mcshield.exe [153920 2009-05-13] (McAfee, Inc.)
R3 McSysmon; C:\Program Files (x86)\McAfee\VirusScan\mcsysmon.exe [606736 2009-05-08] (McAfee, Inc.)
R2 MpfService; C:\Program Files (x86)\McAfee\MPF\MPFSrv.exe [893112 2009-05-08] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files (x86)\McAfee\MSK\MskSrver.exe [26640 2009-04-09] (McAfee, Inc.)
R2 MyScrapNook_12Service; C:\Program Files (x86)\MyScrapNook_12\bar\1.bin\12barsvc.exe [42504 2013-07-24] (COMPANYVERS_NAME)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] ()
S3 Roxio UPnP Renderer 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [313840 2009-08-31] (Sonic Solutions)
S2 Roxio Upnp Server 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [362992 2009-08-31] (Sonic Solutions)
S3 SampleCollector; C:\Program Files\Sony\VAIO Care\collsvc.exe [167424 2009-09-16] (Intel Corporation)
S3 SOHDBSvr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [70952 2009-10-15] (Sony Corporation)
S3 SOHPlMgr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [91432 2009-10-15] (Sony Corporation)
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)
S3 VAIO Entertainment TV Device Arbitration Service; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe [69632 2009-09-14] (Sony Corporation)
R2 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [642416 2009-09-14] (Sony Corporation)
S3 VUAgent; C:\Program Files\Sony\VAIO Update 5\VUAgent.exe [1165680 2009-10-30] (Sony Corporation)
R2 VzCdbSvc; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [206336 2009-09-14] (Sony Corporation)

==================== Drivers (Whitelisted) ====================

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-27] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-27] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-27] ()
S3 HtcVCom32; C:\Windows\System32\DRIVERS\HtcVComV64.sys [121800 2010-03-09] (QUALCOMM Incorporated)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [102600 2009-05-13] (McAfee, Inc.)
R1 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [307400 2009-05-13] (McAfee, Inc.)
S3 mferkdk; C:\Windows\System32\drivers\mferkdk.sys [40904 2009-05-13] (McAfee, Inc.)
R3 mfesmfk; C:\Windows\System32\drivers\mfesmfk.sys [49480 2009-05-13] (McAfee, Inc.)
R1 MPFP; C:\Windows\System32\Drivers\Mpfp.sys [176144 2009-04-09] (McAfee, Inc.)
R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x64.sys [395264 2009-11-12] ()

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-27 10:49 - 2014-03-27 10:50 - 00024962 _____ () C:\Users\Martin\Desktop\FRST.txt
2014-03-27 10:49 - 2014-03-27 10:49 - 00000000 ____D () C:\FRST
2014-03-27 10:47 - 2014-03-27 10:47 - 02157056 _____ (Farbar) C:\Users\Martin\Desktop\FRST64.exe
2014-03-24 14:21 - 2014-03-24 14:21 - 00371932 ____H (dfvcxsdert) C:\ProgramData\Baipsuvz.exe
2014-03-19 09:03 - 2014-03-19 09:03 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-18 03:06 - 2014-02-23 09:13 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-18 03:06 - 2014-02-23 09:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-18 03:06 - 2014-02-23 09:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-18 03:06 - 2014-02-23 09:12 - 19273216 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-18 03:06 - 2014-02-23 09:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-18 03:06 - 2014-02-23 09:12 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-18 03:06 - 2014-02-23 09:11 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-18 03:06 - 2014-02-23 09:11 - 03960320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-18 03:06 - 2014-02-23 09:11 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-18 03:06 - 2014-02-23 09:11 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-18 03:06 - 2014-02-23 09:11 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-18 03:06 - 2014-02-23 09:11 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-03-18 03:06 - 2014-02-23 09:11 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-18 03:06 - 2014-02-23 09:11 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-18 03:06 - 2014-02-23 09:11 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-18 03:06 - 2014-02-23 07:54 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-18 03:06 - 2014-02-23 07:54 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-18 03:06 - 2014-02-23 07:53 - 14358016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-18 03:06 - 2014-02-23 07:53 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-18 03:06 - 2014-02-23 07:53 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-18 03:06 - 2014-02-23 07:53 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-18 03:06 - 2014-02-23 07:53 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-03-18 03:06 - 2014-02-23 07:53 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-18 03:06 - 2014-02-23 07:53 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-18 03:06 - 2014-02-23 07:53 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-18 03:06 - 2014-02-23 07:53 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-03-18 03:06 - 2014-02-23 07:53 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-18 03:06 - 2014-02-23 07:53 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-18 03:06 - 2014-02-23 07:53 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-18 03:06 - 2014-02-23 07:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-18 03:06 - 2014-02-23 07:31 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-18 03:06 - 2014-02-23 06:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-03-18 03:06 - 2014-02-23 06:35 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-03-17 11:13 - 2014-02-07 02:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-17 11:13 - 2014-02-04 03:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-17 11:13 - 2014-02-04 03:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-17 11:13 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-17 11:13 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-17 11:13 - 2014-01-29 03:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-17 11:13 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-17 11:13 - 2014-01-28 03:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-09 20:23 - 2014-03-09 20:24 - 00273912 _____ () C:\Windows\Minidump\030914-37377-01.dmp
2014-03-09 20:23 - 2014-03-09 20:23 - 451595894 _____ () C:\Windows\MEMORY.DMP
2014-03-06 17:00 - 2014-03-06 17:00 - 00057742 _____ () C:\Users\Martin\Desktop\lehrer
2014-02-28 15:34 - 2014-02-28 15:34 - 00105054 _____ () C:\Windows\PFRO.log
2014-02-27 10:51 - 2014-03-27 10:09 - 00002247 _____ () C:\Windows\setupact.log
2014-02-27 10:51 - 2014-02-27 10:51 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-27 03:08 - 2014-02-28 03:07 - 01594964 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-27 03:02 - 2014-03-27 10:07 - 00130010 _____ () C:\Windows\IE11_main.log
2014-02-25 19:51 - 2014-02-25 19:51 - 00002031 _____ () C:\Users\Public\Desktop\HTC Sync Manager.lnk
2014-02-25 19:47 - 2014-02-25 19:47 - 00031338 _____ () C:\Windows\DPINST.LOG
2014-02-25 19:45 - 2014-02-25 19:45 - 00000000 ____D () C:\Users\Martin\Documents\Bluetooth Exchange Folder
2014-02-25 19:45 - 2014-02-25 19:45 - 00000000 ____D () C:\Users\Martin\AppData\Local\Broadcom
2014-02-25 18:00 - 2014-02-25 18:00 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-02-25 18:00 - 2014-02-25 18:00 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-02-25 18:00 - 2014-02-25 18:00 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-25 17:58 - 2014-02-25 17:58 - 03645064 _____ (Piriform Ltd) C:\Users\Martin\Downloads\ccsetup410_slim.exe
2014-02-25 14:35 - 2014-02-25 14:35 - 00000000 ____D () C:\Users\Martin\Desktop\Chor-Begegnungen (live)

==================== One Month Modified Files and Folders =======

2014-03-27 10:50 - 2014-03-27 10:49 - 00024962 _____ () C:\Users\Martin\Desktop\FRST.txt
2014-03-27 10:49 - 2014-03-27 10:49 - 00000000 ____D () C:\FRST
2014-03-27 10:47 - 2014-03-27 10:47 - 02157056 _____ (Farbar) C:\Users\Martin\Desktop\FRST64.exe
2014-03-27 10:31 - 2012-12-26 10:19 - 00000910 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1533790663-1175885118-1602668530-1000Core.job
2014-03-27 10:24 - 2012-12-26 10:19 - 00000932 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1533790663-1175885118-1602668530-1000UA.job
2014-03-27 10:18 - 2009-07-14 05:45 - 00014144 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-27 10:18 - 2009-07-14 05:45 - 00014144 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-27 10:12 - 2012-10-05 08:59 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Dropbox
2014-03-27 10:12 - 2012-09-22 13:56 - 00016569 _____ () C:\Windows\system32\Config.MPF
2014-03-27 10:11 - 2013-09-23 11:46 - 00000000 ____D () C:\Users\Martin\AppData\Local\HTC MediaHub
2014-03-27 10:11 - 2012-09-23 20:00 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-27 10:11 - 2012-09-23 19:59 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-03-27 10:10 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-27 10:09 - 2014-02-27 10:51 - 00002247 _____ () C:\Windows\setupact.log
2014-03-27 10:08 - 2012-09-22 13:47 - 01936009 _____ () C:\Windows\WindowsUpdate.log
2014-03-27 10:07 - 2014-02-27 03:02 - 00130010 _____ () C:\Windows\IE11_main.log
2014-03-27 10:07 - 2012-09-24 15:55 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-27 10:07 - 2012-09-23 20:00 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-26 21:55 - 2012-09-23 20:00 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-03-26 21:55 - 2012-09-23 20:00 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-26 16:34 - 2012-09-22 14:26 - 00003946 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{3522E809-020A-415B-AC23-16E695C2850C}
2014-03-24 14:21 - 2014-03-24 14:21 - 00371932 ____H (dfvcxsdert) C:\ProgramData\Baipsuvz.exe
2014-03-21 16:05 - 2012-09-22 14:50 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-20 11:42 - 2013-07-24 16:05 - 00000000 ____D () C:\Users\Martin\Desktop\Studium
2014-03-19 09:03 - 2014-03-19 09:03 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-18 03:28 - 2010-05-19 22:44 - 00000000 ____D () C:\Windows\Panther
2014-03-18 03:27 - 2013-09-26 17:36 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-18 03:27 - 2013-09-26 17:36 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-18 03:27 - 2009-07-14 05:45 - 00467368 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-18 03:08 - 2012-09-22 14:40 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-03-17 11:06 - 2012-09-22 13:54 - 00000372 _____ () C:\Windows\Tasks\McDefragTask.job
2014-03-12 18:30 - 2012-09-24 15:55 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 18:30 - 2012-09-24 15:55 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-12 18:30 - 2012-09-24 15:55 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-09 20:24 - 2014-03-09 20:23 - 00273912 _____ () C:\Windows\Minidump\030914-37377-01.dmp
2014-03-09 20:23 - 2014-03-09 20:23 - 451595894 _____ () C:\Windows\MEMORY.DMP
2014-03-09 20:23 - 2012-11-17 00:58 - 00000000 ____D () C:\Windows\Minidump
2014-03-06 17:00 - 2014-03-06 17:00 - 00057742 _____ () C:\Users\Martin\Desktop\lehrer
2014-03-05 03:03 - 2013-06-02 20:59 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-03-05 03:03 - 2012-12-26 10:35 - 00000000 ____D () C:\ProgramData\Skype
2014-03-01 03:00 - 2012-09-22 13:54 - 00000348 _____ () C:\Windows\Tasks\McQcTask.job
2014-02-28 15:43 - 2012-09-22 14:40 - 00699682 _____ () C:\Windows\system32\perfh007.dat
2014-02-28 15:43 - 2012-09-22 14:40 - 00149790 _____ () C:\Windows\system32\perfc007.dat
2014-02-28 15:43 - 2009-07-14 06:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-28 15:34 - 2014-02-28 15:34 - 00105054 _____ () C:\Windows\PFRO.log
2014-02-28 03:07 - 2014-02-27 03:08 - 01594964 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-27 13:09 - 2014-02-10 22:26 - 00031359 _____ () C:\Users\Martin\Desktop\Frauenchöre.mscz
2014-02-27 10:51 - 2014-02-27 10:51 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-25 19:53 - 2012-09-22 14:21 - 00128904 _____ () C:\Users\Martin\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-25 19:51 - 2014-02-25 19:51 - 00002031 _____ () C:\Users\Public\Desktop\HTC Sync Manager.lnk
2014-02-25 19:47 - 2014-02-25 19:47 - 00031338 _____ () C:\Windows\DPINST.LOG
2014-02-25 19:45 - 2014-02-25 19:45 - 00000000 ____D () C:\Users\Martin\Documents\Bluetooth Exchange Folder
2014-02-25 19:45 - 2014-02-25 19:45 - 00000000 ____D () C:\Users\Martin\AppData\Local\Broadcom
2014-02-25 19:45 - 2013-09-23 11:40 - 00000000 ____D () C:\Users\Martin\AppData\Local\Downloaded Installations
2014-02-25 19:12 - 2012-09-22 14:28 - 00000000 ____D () C:\Users\Martin\Desktop\Chor Innpuls
2014-02-25 18:00 - 2014-02-25 18:00 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-02-25 18:00 - 2014-02-25 18:00 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-02-25 18:00 - 2014-02-25 18:00 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-25 17:58 - 2014-02-25 17:58 - 03645064 _____ (Piriform Ltd) C:\Users\Martin\Downloads\ccsetup410_slim.exe
2014-02-25 14:35 - 2014-02-25 14:35 - 00000000 ____D () C:\Users\Martin\Desktop\Chor-Begegnungen (live)

Files to move or delete:
====================
C:\ProgramData\Baipsuvz.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-20 03:23

==================== End Of Log ============================
         

--- --- ---

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Martin at 2014-03-27 10:50:48
Running from C:\Users\Martin\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AV: McAfee VirusScan (Enabled - Out of date) {86355677-4064-3EA7-ABB3-1B136EB04637}
AS: avast! Antivirus (Enabled - Up to date) {904CF271-6431-DA47-5FCE-A87D98DFB681}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee VirusScan (Enabled - Up to date) {3D54B793-665E-3129-9103-206115370C8A}
FW: McAfee Personal Firewall (Enabled) {BE0ED752-0A0B-3FFF-80EC-B2269063014C}

==================== Installed Programs ======================

4500_G510af_Help (x32 Version: 000.0.439.000 - Hewlett-Packard) Hidden
4500G510af (x32 Version: 000.0.423.000 - Hewlett-Packard) Hidden
4500G510af_Software_Min (x32 Version: 000.0.423.000 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (Version: 6.2.1 - Hewlett-Packard) Hidden
A1 Servicecenter (HKLM-x32\...\A1 Servicecenter) (Version: 1.3.0.37 - A1 Telekom Austria AG)
Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader X (10.1.7) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.7 - Adobe Systems Incorporated)
Alps Pointing-device for VAIO (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version:  - ALPS ELECTRIC CO., LTD.)
Apple Application Support (HKLM-x32\...\{CCE825DB-347A-4004-A186-5F4A6FDD8547}) (Version: 2.3.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{D70884EA-E2CE-4539-91DB-4766CC1E5F5F}) (Version: 6.0.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ArcSoft Magic-i Visual Effects 2 (HKLM-x32\...\{7BB90344-0647-468E-925A-7F69F7983421}) (Version: 2.0.1.85 - ArcSoft)
ArcSoft WebCam Companion 3 (HKLM-x32\...\{DE8AAC73-6D8D-483E-96EA-CAEDDADB9079}) (Version: 3.0.21.278 - ArcSoft)
ATI Catalyst Install Manager (HKLM\...\{8D1163BE-5ECD-0303-87F7-35ED38BBB2E1}) (Version: 3.0.750.0 - ATI Technologies, Inc.)
Audacity 2.0.2 (HKLM-x32\...\Audacity_is1) (Version: 2.0.2 - Audacity Team)
avast! Free Antivirus (HKLM-x32\...\avast) (Version: 8.0.1489.0 - AVAST Software)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
Canon MG5300 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5300_series) (Version:  - )
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Core Implementation (x32 Version: 2010.0113.2257.41150 - ATI) Hidden
Catalyst Control Center Graphics Full Existing (x32 Version: 2010.0113.2257.41150 - ATI) Hidden
Catalyst Control Center Graphics Full New (x32 Version: 2010.0113.2257.41150 - ATI) Hidden
Catalyst Control Center Graphics Light (x32 Version: 2010.0113.2257.41150 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2010.0113.2257.41150 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0113.2257.41150 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2010.0113.2257.41150 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2010.0113.2257.41150 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2010.0113.2256.41150 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2010.0113.2256.41150 - ATI) Hidden
CCC Help Czech (x32 Version: 2010.0113.2256.41150 - ATI) Hidden
CCC Help Danish (x32 Version: 2010.0113.2256.41150 - ATI) Hidden
CCC Help Dutch (x32 Version: 2010.0113.2256.41150 - ATI) Hidden
CCC Help English (x32 Version: 2010.0113.2256.41150 - ATI) Hidden
CCC Help Finnish (x32 Version: 2010.0113.2256.41150 - ATI) Hidden
CCC Help French (x32 Version: 2010.0113.2256.41150 - ATI) Hidden
CCC Help German (x32 Version: 2010.0113.2256.41150 - ATI) Hidden
CCC Help Greek (x32 Version: 2010.0113.2256.41150 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2010.0113.2256.41150 - ATI) Hidden
CCC Help Italian (x32 Version: 2010.0113.2256.41150 - ATI) Hidden
CCC Help Japanese (x32 Version: 2010.0113.2256.41150 - ATI) Hidden
CCC Help Korean (x32 Version: 2010.0113.2256.41150 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2010.0113.2256.41150 - ATI) Hidden
CCC Help Polish (x32 Version: 2010.0113.2256.41150 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2010.0113.2256.41150 - ATI) Hidden
CCC Help Russian (x32 Version: 2010.0113.2256.41150 - ATI) Hidden
CCC Help Spanish (x32 Version: 2010.0113.2256.41150 - ATI) Hidden
CCC Help Swedish (x32 Version: 2010.0113.2256.41150 - ATI) Hidden
CCC Help Thai (x32 Version: 2010.0113.2256.41150 - ATI) Hidden
CCC Help Turkish (x32 Version: 2010.0113.2256.41150 - ATI) Hidden
ccc-core-static (x32 Version: 2010.0113.2257.41150 - Ihr Firmenname) Hidden
ccc-utility64 (Version: 2010.0113.2257.41150 - ATI) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.10 - Piriform)
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 130.0.372.000 - Hewlett-Packard) Hidden
DocMgr (x32 Version: 130.0.000.000 - Ihr Firmenname) Hidden
DocProc (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Dropbox (HKCU\...\Dropbox) (Version: 2.4.10 - Dropbox, Inc.)
Einstellungen für VAIO-Inhaltsüberwachung (HKLM-x32\...\{23825B69-36DF-4DAD-9CFD-118D11D80F16}) (Version: 2.4.1.09180 - Sony Corporation)
Evernote (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 3.5.0.545 - Evernote Corp.)
Facebook Video Calling 2.0.0.447 (HKLM-x32\...\{8DF41A9F-FE13-43E8-A003-5F9B55A011EE}) (Version: 2.0.447 - Skype Limited)
Fax (x32 Version: 130.0.418.000 - Hewlett-Packard) Hidden
FFmpeg v0.6.2 for Audacity (HKLM-x32\...\FFmpeg for Audacity_is1) (Version:  - )
Finale NotePad 2012 (HKLM-x32\...\Finale NotePad 2012) (Version: 2012..r1.1 - MakeMusic)
Finale Reader 2011 (HKLM-x32\...\Finale Reader) (Version: 2011..r2.1 - MakeMusic)
Free YouTube to MP3 Converter version 3.12.1.320 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.1.320 - DVDVideoSoft Ltd.)
GIMP 2.8.4 (HKLM\...\GIMP-2_is1) (Version: 2.8.4 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.154 - Google Inc.)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
HP Deskjet 1050 J410 series - Grundlegende Software für das Gerät (HKLM\...\{C3F12DD0-54B1-4B2B-A82B-FA43502BC550}) (Version: 28.0.1313.0 - Hewlett-Packard Co.)
HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP Officejet 4500 G510a-f (HKLM\...\{C98517B6-DCE9-49B7-B19E-E384178D3986}) (Version: 13.0 - HP)
HP Smart Web Printing 4.5 (HKLM\...\HP Smart Web Printing) (Version: 4.5 - HP)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Update (HKLM-x32\...\{7059BDA7-E1DB-442C-B7A1-6144596720A4}) (Version: 4.000.011.006 - Hewlett-Packard)
HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HTC Driver Installer (HKLM-x32\...\{4CEEE5D0-F905-4688-B9F9-ECC710507796}) (Version: 4.10.0.001 - HTC Corporation)
HTC Sync Manager (HKLM-x32\...\{368E4EF8-E840-40EE-A224-50B8D1DC2B12}) (Version: 2.4.36.0 - HTC)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.5.4.1001 - Intel Corporation)
Intel(R) Turbo Boost Technology Driver (HKLM-x32\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.00.01.1002 - Intel Corporation)
IPTInstaller (HKLM-x32\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.8 - HTC)
iTunes (HKLM\...\{0E5D76AD-A3FB-48D5-8400-8903B10317D3}) (Version: 11.0.1.12 - Apple Inc.)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217040FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 16 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416016FF}) (Version: 6.0.160 - Sun Microsystems, Inc.)
Junk Mail filter update (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden
McAfee SecurityCenter (HKLM-x32\...\MSC) (Version:  - McAfee, Inc.)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Choice Guard (x32 Version: 2.0.48.0 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP1 English (HKLM-x32\...\{E59113EB-0285-4BFD-A37A-B79EAC6B8F4B}) (Version: 3.5.5692.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP1 x64 English (HKLM\...\{F83779DF-E1F5-43A2-A7BE-732F856FADB7}) (Version: 3.5.5692.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
MSVCRT (x32 Version: 14.0.1468.721 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MuseScore 1.2 MuseScore score typesetter (HKLM-x32\...\MuseScore) (Version: 1.2.0 - Werner Schweer and Others)
My Scrap Nook Firefox Toolbar (HKLM-x32\...\MyScrapNook_12bar Uninstall Firefox) (Version:  - Mindspark Interactive Network)
My Scrap Nook Internet Explorer Toolbar (HKLM-x32\...\MyScrapNook_12bar Uninstall Internet Explorer) (Version:  - Mindspark Interactive Network)
OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PMB (HKLM-x32\...\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}) (Version: 5.0.00.10260 - Sony Corporation)
PMB VAIO Edition Guide (HKLM-x32\...\InstallShield_{88C252C8-A7EE-4B60-BF74-8E5919A8048F}) (Version: 1.0.00.09250 - Sony Corporation)
PMB VAIO Edition Guide (x32 Version: 1.0.00.09250 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (Click to Disc) (HKLM-x32\...\InstallShield_{4DCEA9C1-4D6E-41BF-A854-28CFA8B56DBF}) (Version: 3.0.01.11230 - Sony Corporation)
PMB VAIO Edition plug-in (Click to Disc) (x32 Version: 3.0.01.11230 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (VAIO Image Optimizer) (HKLM-x32\...\InstallShield_{1873FFC1-FDCB-47E1-B7C7-F418211E3530}) (Version: 1.0.00.10150 - Sony Corporation)
PMB VAIO Edition plug-in (VAIO Image Optimizer) (x32 Version: 1.0.00.10150 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (VAIO Movie Story) (HKLM-x32\...\InstallShield_{B25563A0-41F4-4A81-A6C1-6DBC0911B1F3}) (Version: 2.0.01.12010 - Sony Corporation)
PMB VAIO Edition plug-in (VAIO Movie Story) (x32 Version: 2.0.01.12010 - Sony Corporation) Hidden
QuickTime (HKLM-x32\...\{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}) (Version: 7.73.80.64 - Apple Inc.)
Realtek HDMI Audio Driver for ATI (HKLM-x32\...\{5449FB4F-1802-4D5B-A6D8-087DB1142147}) (Version: 6.0.1.5992 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5992 - Realtek Semiconductor Corp.)
Roxio Central Audio (x32 Version: 3.8.0 - Roxio) Hidden
Roxio Central Copy (x32 Version: 3.8.0 - Roxio) Hidden
Roxio Central Core (x32 Version: 3.8.0 - Roxio) Hidden
Roxio Central Data (x32 Version: 3.8.0 - Roxio) Hidden
Roxio Central Tools (x32 Version: 3.8.0 - Roxio) Hidden
Roxio Easy Media Creator 10 LJ (HKLM-x32\...\{537BF16E-7412-448C-95D8-846E85A1D817}) (Version: 10.3 - Roxio)
Roxio Easy Media Creator Home (x32 Version: 10.3.183 - Roxio) Hidden
Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Setting Utility Series (HKLM-x32\...\{A7DA438C-2E43-4C20-BFDA-C1F4A6208558}) (Version: 5.1.0.11200 - Sony Corporation)
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
SmartWebPrinting (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
Sony Home Network Library (HKLM-x32\...\{D03D02D8-AB64-4785-A48E-5AA8B0FB8C14}) (Version: 2.0.1.10160 - Sony Corporation)
Sony Home Network Library (x32 Version: 2.0.1.10160 - Sony Corporation) Hidden
Spotify (HKCU\...\Spotify) (Version: 0.9.6.72.ge389c074 - Spotify AB)
Status (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
TeamViewer 8 (HKLM-x32\...\TeamViewer 8) (Version: 8.0.26038 - TeamViewer)
Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 130.0.376.000 - Hewlett-Packard) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2878234) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{EC1934B0-AE0F-4BBD-8955-54BB3247ED9E}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
VAIO Care (HKLM-x32\...\{36C5BBF0-E5BF-4DE1-B684-7E90B0C93FB5}) (Version: 5.0.3.11130 - Sony Corporation)
VAIO Content Metadata Intelligent Analyzing Manager (HKLM-x32\...\{4882EBF5-CA37-4EF4-BCB8-9B0E78B907D0}) (Version: 3.6.0.09250 - Sony Corporation)
VAIO Content Metadata Intelligent Analyzing Manager (x32 Version: 3.6.0.09250 - Sony Corporation) Hidden
VAIO Content Metadata Intelligent Network Service Manager (HKLM-x32\...\{4427F384-B5BE-4769-B7D0-C784FC321EB1}) (Version: 3.6.0.09080 - Sony Corporation)
VAIO Content Metadata Intelligent Network Service Manager (x32 Version: 3.6.0.09080 - Sony Corporation) Hidden
VAIO Content Metadata Manager Settings (HKLM-x32\...\{12D0BE8D-538C-4AB1-86DE-C540308F50DA}) (Version: 3.6.0.09240 - Sony Corporation)
VAIO Content Metadata Manager Settings (x32 Version: 3.6.0.09240 - Sony Corporation) Hidden
VAIO Content Metadata XML Interface Library (HKLM-x32\...\{291FB4BF-EEC7-4CF9-8469-F39ED1DBC4D8}) (Version: 3.6.0.09080 - Sony Corporation)
VAIO Content Metadata XML Interface Library (x32 Version: 3.6.0.09080 - Sony Corporation) Hidden
VAIO Content Monitoring Settings (x32 Version: 2.4.1.09180 - Sony Corporation) Hidden
VAIO Control Center (HKLM-x32\...\{72042FA6-5609-489F-A8EA-3C2DD650F667}) (Version: 4.1.0.10160 - Sony Corporation)
VAIO Data Restore Tool (HKLM-x32\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.2.0.09150 - Sony Corporation)
VAIO Data Restore Tool (x32 Version: 1.2.0.09150 - Sony Corporation) Hidden
VAIO DVD Menu Data (HKLM-x32\...\{596BED91-A1D8-4DF1-8CD1-1C777F7588AC}) (Version: 2.0.00.10130 - Sony Corporation)
VAIO Energie Verwaltung (HKLM-x32\...\{803E4FA5-A940-4420-B89D-A8BC2E160247}) (Version: 5.0.0.11300 - Sony Corporation)
VAIO Entertainment Platform (HKLM-x32\...\{6B1F20F2-6321-4669-A58C-33DF8E7517FF}) (Version: 3.6.0.09150 - Sony Corporation)
VAIO Entertainment Platform (x32 Version: 3.6.0.09150 - Sony Corporation) Hidden
VAIO Event Service (HKLM-x32\...\{C7477742-DDB4-43E5-AC8D-0259E1E661B1}) (Version: 5.1.0.12010 - Sony Corporation)
VAIO Gate (HKLM-x32\...\{A7C30414-2382-4086-B0D6-01A88ABA21C3}) (Version: 1.2.0.09240 - Sony Corporation)
VAIO Gate Default (HKLM-x32\...\{B7546697-2A80-4256-A24B-1C33163F535B}) (Version: 1.0.0.10290 - Sony Corporation)
VAIO Hardware Diagnostics (x32 Version: 3.9.1 - Sony Corporation) Hidden
VAIO Marketing Tools (HKLM-x32\...\MarketingTools) (Version:  - Sony Corporation)
VAIO Media plus (HKLM-x32\...\{8DE50158-80AA-4FF2-9E9F-0A7C46F71FCD}) (Version: 2.0.1.10160 - Sony Corporation)
VAIO Media plus Opening Movie (HKLM-x32\...\{9238E8A4-BEBA-43A3-B926-769BDBF194C5}) (Version: 1.2.0.09100 - Sony Corporation)
VAIO Movie Story Template Data (HKLM-x32\...\InstallShield_{6FA8BA2C-052B-4072-B8E2-2302C268BE9E}) (Version: 2.0.00.09240 - Sony Corporation)
VAIO Movie Story Template Data (x32 Version: 2.0.00.09240 - Sony Corporation) Hidden
VAIO Original Function Settings (x32 Version: 2.0.0.07010 - Sony Corporation) Hidden
VAIO Original Funktion Einstellungen (HKLM-x32\...\{A63E7492-A0BC-4BB9-89A7-352965222380}) (Version: 2.0.0.07010 - Sony Corporation)
VAIO Personalization Manager (HKLM-x32\...\{A95187EF-BCF4-4468-B501-C0BAB976ADD1}) (Version: 2.0.0.06220 - Sony Corporation)
VAIO Personalization Manager (x32 Version: 2.0.0.06220 - Sony Corporation) Hidden
VAIO Premium Partners (HKLM-x32\...\VAIO Premium Partners) (Version: 1.0 - Sony Europe)
VAIO Quick Web Access (HKLM-x32\...\splashtop) (Version: 1.2.2.3 - Sony Corporation)
VAIO Quick Web Access (x32 Version: 1.2.2.3 - Sony Corporation) Hidden
VAIO screensaver (HKLM-x32\...\VAIO screensaver) (Version: 1.0.0.0 - Sony Europe)
VAIO Smart Network (HKLM-x32\...\{0899D75A-C2FC-42EA-A702-5B9A5F24EAD5}) (Version: 3.1.0.11250 - Sony Corporation)
VAIO Update 5 (HKLM-x32\...\{5BEE8F1F-BD32-4553-8107-500439E43BD7}) (Version: 5.0.0.10300 - Sony Corporation)
VAIO Wallpaper Contents (HKLM-x32\...\{D60F97EC-EF06-4E1E-B0D1-C2CBABA62FA3}) (Version: 2.0.0.06010 - Sony Corporation)
VAIO-Support für Übertragungen (HKLM-x32\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.1.0.10200 - Sony Corporation)
VLC media player 2.0.4 (HKLM-x32\...\VLC media player) (Version: 2.0.4 - VideoLAN)
WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
WIDCOMM Bluetooth Software (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.1.500 - Broadcom Corporation)
Windows Driver Package - Broadcom Bluetooth  (09/09/2009 6.2.0.9405) (HKLM\...\930E4792BDAEAFB62A9514EE7578775658A5D07C) (Version: 09/09/2009 6.2.0.9405 - Broadcom)
Windows Driver Package - Broadcom HIDClass  (07/28/2009 6.2.0.9800) (HKLM\...\3BA80AB4C7E9F8497C115C844953A3D4BEB84D21) (Version: 07/28/2009 6.2.0.9800 - Broadcom)
Windows Live Anmelde-Assistent (HKLM-x32\...\{52B97218-98CB-4B8B-9283-D213C85E1AA4}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Call (x32 Version: 14.0.8064.0206 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 14.0.8064.206 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 14.0.8093.805 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 14.0.8081.709 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM-x32\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live Writer (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)

==================== Restore Points  =========================

18-03-2014 02:01:58 Windows Update
19-03-2014 02:00:55 Windows Update
20-03-2014 02:01:09 Windows Update
20-03-2014 22:36:15 Windows Update
22-03-2014 02:01:17 Windows Update
23-03-2014 02:01:01 Windows Update
24-03-2014 02:00:53 Windows Update
25-03-2014 02:01:10 Windows Update
26-03-2014 02:01:19 Windows Update
26-03-2014 22:58:33 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {04472A80-B9B5-49CA-908A-DC0DAD706DE9} - System32\Tasks\VAIO Care => C:\Program Files\Sony\VAIO Care\VCsystray.exe [2009-10-19] (Sony Corporation)
Task: {06F36990-3D72-4720-B1DE-A37C13812F84} - System32\Tasks\SONY\VAIO Power Management\VPM Unlock => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-11-30] (Sony Corporation)
Task: {07C5ECE6-9462-4C27-B956-61BA88AFFC26} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12] (Adobe Systems Incorporated)
Task: {12DD266D-7F6B-449E-B2BE-84F4C50B83FF} - System32\Tasks\HP Deskjet 1050 J410 series.exe_{C341356F-33D8-4D55-8E7D-9BA72B4FC9D2} => C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HP Deskjet 1050 J410 series.exe [2012-10-02] (Hewlett-Packard Co.)
Task: {2FA3EDA0-3995-4678-8B40-3828DE63225F} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-09] (AVAST Software)
Task: {3049DB01-11F9-43C2-A1A7-F6B880ADD290} - System32\Tasks\SONY\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2009-09-24] (Sony Corporation)
Task: {5E41009B-B4B2-4F9B-8CB8-07F8618179C2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-23] (Google Inc.)
Task: {6E0E7AD4-29EA-4952-B1CA-28F44A1C3ECB} - System32\Tasks\McDefragTask => C:\Program Files (x86)\McAfee\MQC\QcConsol.exe [2009-04-09] (McAfee, Inc.)
Task: {78FB20BA-C120-4BB6-9849-2563126C1A25} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-01-21] (Piriform Ltd)
Task: {7AE4771C-94B4-4789-9F23-5F097817341E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-23] (Google Inc.)
Task: {7B556683-60BC-4434-A5AA-717C3EADC5DD} - System32\Tasks\SONY\SUS-BCF\Level4Daily => C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe [2009-11-20] (Sony Corporation)
Task: {986C9B4E-303F-4823-A43C-A0ADCD67A3EA} - System32\Tasks\SONY\SUS-BCF\Level4Month => C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe [2009-11-20] (Sony Corporation)
Task: {9DE355E6-3FBD-44BF-8F58-4961C617D386} - System32\Tasks\SONY\VAIO Power Management\VPM Logon Start => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-11-30] (Sony Corporation)
Task: {9E9F9F0E-7250-40ED-8861-B6C8403C28A0} - System32\Tasks\SONY\VAIO Update\VAIO Update 5 => C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe [2009-10-30] (Sony Corporation)
Task: {BEE505E4-C753-4538-8895-EA7571952A9D} - System32\Tasks\VAIO Care Service => C:\Program Files\Sony\VAIO Care\VAIOCareService.exe [2009-10-21] (Sony Corporation)
Task: {BF91C98C-26F6-4EDC-99B5-771B2F76B8CA} - System32\Tasks\McQcTask => C:\Program Files (x86)\McAfee\MQC\QcConsol.exe [2009-04-09] (McAfee, Inc.)
Task: {C0B7C258-0B82-44CB-BBA5-265137042A0D} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1533790663-1175885118-1602668530-1000UA => C:\Users\Martin\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-12-26] (Facebook Inc.)
Task: {CFDCD55B-4077-45A7-AC6E-EF342DCCCB4A} - System32\Tasks\SONY\VAIO Power Management\VPM Session Change => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-11-30] (Sony Corporation)
Task: {DFB66F6E-2D26-4C14-8648-8C3BF88BDF0D} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1533790663-1175885118-1602668530-1000Core => C:\Users\Martin\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-12-26] (Facebook Inc.)
Task: {E6CCBA1B-671A-44CE-A1F9-68E36A16C081} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1533790663-1175885118-1602668530-1000Core.job => C:\Users\Martin\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1533790663-1175885118-1602668530-1000UA.job => C:\Users\Martin\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\McDefragTask.job => C:\Windows\system32\defrag.exe
Task: C:\Windows\Tasks\McQcTask.job => c:\PROGRA~2\mcafee\mqc\QcConsol.exe

==================== Loaded Modules (whitelisted) =============

2014-01-26 11:55 - 2014-01-26 11:55 - 00821600 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
2012-12-07 17:27 - 2012-12-07 17:27 - 00167424 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
2008-08-26 10:41 - 2008-08-26 10:41 - 00016384 ____R () c:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2012-09-22 13:52 - 2012-09-22 13:52 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2014-03-26 21:54 - 2014-03-26 18:52 - 02283520 _____ () C:\Program Files\AVAST Software\Avast\defs\14032602\algo.dll
2012-08-27 21:33 - 2012-08-27 21:33 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-08-27 21:33 - 2012-08-27 21:33 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-01-26 11:54 - 2014-01-26 11:54 - 00031080 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DbAccess.dll
2014-01-26 11:54 - 2014-01-26 11:54 - 00607376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\sqlite3.dll
2014-01-26 11:54 - 2014-01-26 11:54 - 00044392 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NAdvLog.dll
2014-01-26 11:54 - 2014-01-26 11:54 - 00036216 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NFileCacheDBAccess.dll
2014-01-26 11:54 - 2014-01-26 11:54 - 00080248 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\ninstallerhelper.dll
2014-01-26 11:55 - 2014-01-26 11:55 - 00129376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\zlib1.dll
2014-01-26 11:57 - 2014-01-26 11:57 - 00223592 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DevConnMon.dll
2012-09-22 14:07 - 2009-12-01 21:03 - 00010752 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESBasePS.dll
2012-09-22 14:07 - 2009-12-01 21:03 - 00009728 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSubPS.dll
2010-05-19 22:42 - 2009-11-20 23:19 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2014-03-19 09:03 - 2014-03-19 09:03 - 03642480 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-03-12 18:30 - 2014-03-12 18:30 - 16276872 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Windows:6069377E6ACC6A80

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"

==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk => C:\Windows\pss\Bluetooth.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Martin^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Martin^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Tintenwarnungen überwachen - HP Deskjet 1050 J410 series.lnk => C:\Windows\pss\Tintenwarnungen überwachen - HP Deskjet 1050 J410 series.lnk.Startup
MSCONFIG\startupreg: A1Diagnose => C:\Program Files (x86)\A1 Servicecenter\A1 Diagnose\A1Diagnose.exe /auto
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: CorelDRAW Graphics Suite 11b => C:\Program Files (x86)\Corel\Corel Graphics 12\Languages\DE\Programs\Registration.exe /title="CorelDRAW Graphics Suite 12" /date=080313 serial=DR12WEX-1504397-KTY lang=DE
MSCONFIG\startupreg: Facebook Update => "C:\Users\Martin\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: mcagent_exe => C:\Program Files (x86)\McAfee.com\Agent\mcagent.exe /runkey
MSCONFIG\startupreg: McENUI => C:\PROGRA~2\McAfee\MHN\McENUI.exe /hide
MSCONFIG\startupreg: My Scrap Nook Home Page Guard 64 bit => "C:\PROGRA~2\MYSCRA~2\bar\1.bin\AppIntegrator64.exe"
MSCONFIG\startupreg: My Scrap Nook Search Scope Monitor => "C:\PROGRA~2\MYSCRA~2\bar\1.bin\12srchmn.exe" /m=2 /w /h
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Spotify => "C:\Users\Martin\AppData\Roaming\Spotify\spotify.exe" /uri spotify:autostart
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Martin\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/27/2014 10:11:25 AM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5}) (Fehlercode = 0x80042019)

Error: (03/27/2014 10:11:24 AM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {48512A59-C8A5-4805-9048-23C9E4194BFA}) (Fehlercode = 0x80042000)

Error: (03/26/2014 09:53:49 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 14081384

Error: (03/26/2014 09:53:49 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 14081384

Error: (03/26/2014 09:53:49 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (03/26/2014 05:59:09 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1030

Error: (03/26/2014 05:59:09 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1030

Error: (03/26/2014 05:59:09 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (03/26/2014 10:16:06 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2075

Error: (03/26/2014 10:16:06 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2075


System errors:
=============
Error: (03/27/2014 10:11:16 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (03/27/2014 10:10:27 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Roxio Upnp Server 10 erreicht.

Error: (03/27/2014 10:07:46 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 11 für Windows 7 für x64-basierte Systeme

Error: (03/27/2014 10:07:40 AM) (Source: Tcpip) (User: )
Description: Das System hat einen Adressenkonflikt der IP-Adresse 10.0.0.9 mit dem Computer mit der
Netzwerkhardwareadresse 18-0C-AC-34-BA-D1 ermittelt. Netzwerkvorgänge könnten daher auf diesem
System unterbrochen werden.

Error: (03/26/2014 11:58:47 PM) (Source: DCOM) (User: )
Description: {6A972E27-93E2-4F98-8367-4101B2073814}

Error: (03/26/2014 11:58:46 PM) (Source: DCOM) (User: )
Description: {B44D92F9-978C-42F3-9382-6EAD817BA0AE}

Error: (03/26/2014 03:04:31 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 11 für Windows 7 für x64-basierte Systeme

Error: (03/25/2014 03:04:01 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 11 für Windows 7 für x64-basierte Systeme

Error: (03/24/2014 03:03:37 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 11 für Windows 7 für x64-basierte Systeme

Error: (03/23/2014 03:04:48 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 11 für Windows 7 für x64-basierte Systeme


Microsoft Office Sessions:
=========================
Error: (04/03/2013 07:30:29 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 7772 seconds with 1560 seconds of active time.  This session ended with a crash.


==================== Memory info =========================== 

Percentage of memory in use: 46%
Total physical RAM: 3950.1 MB
Available physical RAM: 2123.98 MB
Total Pagefile: 7898.38 MB
Available Pagefile: 5614.91 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:454.63 GB) (Free:198.13 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 7421DF6F)
Partition 1: (Not Active) - (Size=11 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=455 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Richtig so???

Was ist mit meiner Frage nach bisherigen Funden?

AV: avast! Antivirus (Enabled - Up to date) {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AV: McAfee VirusScan (Enabled - Out of date) {86355677-4064-3EA7-ABB3-1B136EB04637}

Sowas geht gar nicht! Eins davon muss sofort runter!

Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Wo hast du das Office Enterprise her...ist das ein gewerblich genutzer Rechner?

Gab keine bisherigen Funde!

McAfee wurde soeben entfernt!


Nein, ein Freund hatte diesen Laptop mal in Gebrauch und hat das dann drauf gelassen!

Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

• Starte bitte die mbar.exe.
• Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
• Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
• Klicke auf den CleanUp Button und erlaube den Neustart.
• Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
• Nach dem Neustart starte die mbar.exe erneut.
• Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Sorry, musste zur Uni!


Hier die erste Überprüfung:

Malwarebytes Anti-Rootkit BETA 1.07.0.1009
www.malwarebytes.org

Database version: v2014.03.27.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16844
Martin :: MARTIN-VAIO [administrator]

27.03.2014 11:53:06
mbar-log-2014-03-27 (11-53-06).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 255528
Time elapsed: 45 minute(s), 15 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 1
C:\Users\Martin\AppData\Local\Temp\Rueckgaberecht.cpl (Trojan.Downloader.CPL) -> Delete on reboot.

Physical Sectors Detected: 0
(No malicious items detected)

(end)
         

und hier die 2. Überprüfung (hat nichts mehr gefunden):

Malwarebytes Anti-Rootkit BETA 1.07.0.1009
www.malwarebytes.org

Database version: v2014.03.27.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16844
Martin :: MARTIN-VAIO [administrator]

27.03.2014 12:47:40
mbar-log-2014-03-27 (12-47-40).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 255127
Time elapsed: 44 minute(s), 39 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
         

Adware/Junkware/Toolbars entfernen


1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Adw-Cleaner:

# AdwCleaner v3.022 - Bericht erstellt am 31/03/2014 um 16:46:21
# Aktualisiert 13/03/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Martin - MARTIN-VAIO
# Gestartet von : C:\Users\Martin\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\Program Files (x86)\MyScrapNook_12
Ordner Gelöscht : C:\Program Files (x86)\Common Files\DVDVideoSoft\TB
Ordner Gelöscht : C:\Users\Martin\AppData\Local\MyScrapNook_12
Ordner Gelöscht : C:\Users\Martin\AppData\LocalLow\MyScrapNook_12
Ordner Gelöscht : C:\Users\Martin\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\Martin\AppData\Roaming\OpenCandy
Datei Gelöscht : C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\cdce827q.default\invalidprefs.js

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\WLXQuickTimeShellExt.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_clonecd_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_clonecd_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{0214754E-4E7D-4589-829D-E2523E6A3085}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{13119113-0854-469D-807A-171568457991}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{33119133-0854-469D-807A-171568457991}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{65F159FB-5F5E-46F4-B45D-CCFA236D2073}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FE6F06FB-0FC0-4499-828F-EE48088F504F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{23119123-0854-469D-807A-171568457991}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{03119103-0854-469D-807A-171568457991}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0214754E-4E7D-4589-829D-E2523E6A3085}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{65F159FB-5F5E-46F4-B45D-CCFA236D2073}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0214754E-4E7D-4589-829D-E2523E6A3085}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{65F159FB-5F5E-46F4-B45D-CCFA236D2073}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FE6F06FB-0FC0-4499-828F-EE48088F504F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0214754E-4E7D-4589-829D-E2523E6A3085}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{65F159FB-5F5E-46F4-B45D-CCFA236D2073}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FE6F06FB-0FC0-4499-828F-EE48088F504F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{FE6F06FB-0FC0-4499-828F-EE48088F504F}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{B3B5C47E-61F7-4D81-AF06-461FC86686CE}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{23119123-0854-469D-807A-171568457991}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlüssel Gelöscht : HKCU\Software\SmartBar
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKLM\Software\DeviceVM
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\DeviceVM

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]

-\\ Mozilla Firefox v28.0 (de)

[ Datei : C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\cdce827q.default\prefs.js ]

Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://feed.snap.do/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=AT&userid=46dce6c1-cbbd-4b11-bf80-e49c770b95a4&searchtype=nt&installDate={installDate}");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._12Members_.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=5462FDF8-1272-408C-8CD2-02A23B1AD3C8&n=77fd0c21&p2=^9N^xdm080^YYA^at&si=CPyykdG5yLgCFQKWtAoddl8Ar[...]
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._12Members_.initialized", true);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._12Members_.installation.contextKey", "");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._12Members_.installation.installDate", "2013072417");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._12Members_.installation.partnerId", "^9N^xdm080^YYA^at");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._12Members_.installation.partnerSubId", "CPyykdG5yLgCFQKWtAoddl8Arg");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._12Members_.installation.success", true);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._12Members_.installation.toolbarId", "5462FDF8-1272-408C-8CD2-02A23B1AD3C8");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._12Members_.lastActivePing", "1374679983764");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._12Members_.options.defaultSearch", false);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._12Members_.options.homePageEnabled", false);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._12Members_.options.keywordEnabled", false);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._12Members_.options.tabEnabled", false);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._12Members_.weather.location", "10001");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark.lastInstalled", "myscrapnook@mindspark.com");

-\\ Google Chrome v33.0.1750.154

[ Datei : C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht : homepage
Gelöscht : search_url
Gelöscht : icon_url
Gelöscht : keyword

*************************

AdwCleaner[R0].txt - [8791 octets] - [31/03/2014 16:44:48]
AdwCleaner[S0].txt - [7336 octets] - [31/03/2014 16:46:21]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [7396 octets] ##########
         

JRT:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.3 (03.23.2014:1)
OS: Windows 7 Home Premium x64
Ran by Martin on 31.03.2014 at 16:53:18,57
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\Martin\AppData\Roaming\mozilla\firefox\profiles\cdce827q.default\minidumps [153 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 31.03.2014 at 17:10:42,49
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

FRST:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Martin (administrator) on MARTIN-VAIO on 31-03-2014 17:11:50
Running from C:\Users\Martin\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VAIOCareService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe
() C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Sony Corporation) c:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Sony Corporation) C:\Program Files (x86)\SONY\VAIO Event Service\VESMgr.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Sony Corporation) C:\Program Files (x86)\SONY\VAIO Event Service\VESMgrSub.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
(Sun Microsystems, Inc.) C:\Program Files\Java\jre6\bin\jusched.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Dropbox, Inc.) C:\Users\Martin\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Sony Corporation) C:\Program Files (x86)\SONY\ISB Utility\ISBMgr.exe
(Advanced Micro Devices Inc.) c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Sony Corporation) C:\Program Files (x86)\SONY\PMB\PMBVolumeWatcher.exe
(Sony Corporation) C:\Program Files (x86)\SONY\Marketing Tools\MarketingTools.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apntex.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Thisisu) C:\Users\Martin\Desktop\JRT.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9636896 2009-12-16] (Realtek Semiconductor)
HKLM\...\Run: [Apoint] - C:\Program Files\Apoint\Apoint.exe [208384 2009-11-04] (Alps Electric Co., Ltd.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Java\jre6\bin\jusched.exe [171520 2012-09-22] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2009-11-21] (Intel Corporation)
HKLM-x32\...\Run: [ISBMgr.exe] - C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [320880 2009-08-26] (Sony Corporation)
HKLM-x32\...\Run: [StartCCC] - c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-01-13] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [PMBVolumeWatcher] - c:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [597792 2009-10-24] (Sony Corporation)
HKLM-x32\...\Run: [MarketingTools] - C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe [26624 2012-09-22] (Sony Corporation)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\VESWinlogon-x32: VESWinlogon.dll [X]
HKU\.DEFAULT\...\RunOnce: [SPReview] - "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"hxxp://go.microsoft.com/fwlink/?LinkID=122915" /build:7601
HKU\S-1-5-21-1533790663-1175885118-1602668530-1000\...\Run: [Baipsuvz] - C:\ProgramData\Baipsuvz.exe
HKU\S-1-5-21-1533790663-1175885118-1602668530-1000\...\MountPoints2: {a2d211f7-d7b5-11e2-90fa-544249606ef5} - G:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-1533790663-1175885118-1602668530-1000\...\MountPoints2: {a2d2121b-d7b5-11e2-90fa-544249606ef5} - G:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-1533790663-1175885118-1602668530-1000\...\MountPoints2: {c4eb595f-80ee-11e3-8f1c-544249606ef5} - G:\HTC_Sync_Manager_PC.exe
Startup: C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Martin\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=SVEC&bmod=EU01
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\cdce827q.default
FF Homepage: https://www.facebook.com/
FF NetworkProxy: "gopher", ""
FF NetworkProxy: "gopher_port", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @MyScrapNook_12.com/Plugin - C:\Program Files (x86)\MyScrapNook_12\bar\1.bin\NP12Stub.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.4 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Martin\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Youtube MP3 Podcaster - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\cdce827q.default\Extensions\youtubemp3podcaster@jeremy.d.gregorio.com [2014-03-21]
FF Extension: YouTube to MP3 - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\cdce827q.default\Extensions\youtube2mp3@mondayx.de.xpi [2014-02-25]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\cdce827q.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-20]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-03-19]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-03-19]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-09-23]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2012-09-22]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-10-03]
FF HKLM-x32\...\Firefox\Extensions: [12ffxtbr@MyScrapNook_12.com] - C:\Program Files (x86)\MyScrapNook_12\bar\1.bin
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-10-03]

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR DefaultSearchProvider: Web
CHR DefaultSearchURL: hxxp://www.google.com
CHR Extension: (SiteAdvisor) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2013-05-21]
CHR Extension: (Google Wallet) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-28]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Users\Martin\AppData\Roaming\DVDVideoSoft\dvsYoutubeDownload.crx [2012-10-11]

==================== Services (Whitelisted) =================

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2013-11-10] (Nero AG)
R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [123384 2014-01-22] (McAfee, Inc.)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] ()
S3 Roxio UPnP Renderer 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [313840 2009-08-31] (Sonic Solutions)
S2 Roxio Upnp Server 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [362992 2009-08-31] (Sonic Solutions)
S3 SampleCollector; C:\Program Files\Sony\VAIO Care\collsvc.exe [167424 2009-09-16] (Intel Corporation)
S3 SOHDBSvr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [70952 2009-10-15] (Sony Corporation)
S3 SOHPlMgr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [91432 2009-10-15] (Sony Corporation)
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)
S3 VAIO Entertainment TV Device Arbitration Service; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe [69632 2009-09-14] (Sony Corporation)
R2 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [642416 2009-09-14] (Sony Corporation)
S3 VUAgent; C:\Program Files\Sony\VAIO Update 5\VUAgent.exe [1165680 2009-10-30] (Sony Corporation)
R2 VzCdbSvc; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [206336 2009-09-14] (Sony Corporation)
S2 MyScrapNook_12Service; C:\PROGRA~2\MYSCRA~2\bar\1.bin\12barsvc.exe [X]

==================== Drivers (Whitelisted) ====================

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-28] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-28] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-28] ()
S3 HtcVCom32; C:\Windows\System32\DRIVERS\HtcVComV64.sys [121800 2010-03-09] (QUALCOMM Incorporated)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x64.sys [395264 2009-11-12] ()

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-31 17:10 - 2014-03-31 17:10 - 00000760 _____ () C:\Users\Martin\Desktop\JRT.txt
2014-03-31 16:53 - 2014-03-31 16:53 - 00000000 ____D () C:\Windows\ERUNT
2014-03-31 16:51 - 2014-03-31 16:52 - 01038974 _____ (Thisisu) C:\Users\Martin\Desktop\JRT.exe
2014-03-31 16:44 - 2014-03-31 16:46 - 00000000 ____D () C:\AdwCleaner
2014-03-31 16:42 - 2014-03-31 16:42 - 01950720 _____ () C:\Users\Martin\Desktop\adwcleaner.exe
2014-03-28 04:07 - 2013-10-14 19:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2014-03-28 04:03 - 2014-03-28 04:03 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-28 04:03 - 2014-03-28 04:03 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-28 04:03 - 2014-03-28 04:03 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-28 04:03 - 2014-03-28 04:03 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-28 04:03 - 2014-03-28 04:03 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-03-28 04:03 - 2014-03-28 04:03 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-03-28 04:03 - 2014-03-28 04:03 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-03-28 04:03 - 2014-03-28 04:03 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-03-28 04:03 - 2014-03-28 04:03 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-03-28 04:03 - 2014-03-28 04:03 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-03-28 04:03 - 2014-03-28 04:03 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-27 12:53 - 2014-03-27 12:53 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-27 12:52 - 2014-03-27 13:47 - 00119000 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-27 12:51 - 2014-03-27 20:34 - 00000000 ____D () C:\Users\Martin\Desktop\mbar
2014-03-27 12:51 - 2014-03-27 13:46 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-27 12:50 - 2014-03-27 12:50 - 12589848 _____ (Malwarebytes Corp.) C:\Users\Martin\Desktop\mbar-1.07.0.1009.exe
2014-03-27 12:31 - 2013-12-18 08:13 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-03-27 11:50 - 2014-03-27 11:59 - 00042323 _____ () C:\Users\Martin\Desktop\Addition.txt
2014-03-27 11:49 - 2014-03-31 17:11 - 00019820 _____ () C:\Users\Martin\Desktop\FRST.txt
2014-03-27 11:49 - 2014-03-31 17:11 - 00000000 ____D () C:\FRST
2014-03-27 11:47 - 2014-03-27 11:47 - 02157056 _____ (Farbar) C:\Users\Martin\Desktop\FRST64.exe
2014-03-19 10:03 - 2014-03-19 10:03 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-17 12:13 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-17 12:13 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-17 12:13 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-17 12:13 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-17 12:13 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-17 12:13 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-17 12:13 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-17 12:13 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-09 21:23 - 2014-03-09 21:24 - 00273912 _____ () C:\Windows\Minidump\030914-37377-01.dmp
2014-03-09 21:23 - 2014-03-09 21:23 - 451595894 _____ () C:\Windows\MEMORY.DMP
2014-03-06 18:00 - 2014-03-06 18:00 - 00057742 _____ () C:\Users\Martin\Desktop\lehrer

==================== One Month Modified Files and Folders =======

2014-03-31 17:12 - 2014-03-27 11:49 - 00019820 _____ () C:\Users\Martin\Desktop\FRST.txt
2014-03-31 17:11 - 2014-03-27 11:49 - 00000000 ____D () C:\FRST
2014-03-31 17:10 - 2014-03-31 17:10 - 00000760 _____ () C:\Users\Martin\Desktop\JRT.txt
2014-03-31 17:07 - 2012-10-05 09:59 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Dropbox
2014-03-31 17:00 - 2012-09-23 21:00 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-31 16:57 - 2012-09-24 16:55 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-31 16:56 - 2009-07-14 06:45 - 00014144 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-31 16:56 - 2009-07-14 06:45 - 00014144 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-31 16:54 - 2012-09-22 15:40 - 00699682 _____ () C:\Windows\system32\perfh007.dat
2014-03-31 16:54 - 2012-09-22 15:40 - 00149790 _____ () C:\Windows\system32\perfc007.dat
2014-03-31 16:54 - 2009-07-14 07:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-31 16:53 - 2014-03-31 16:53 - 00000000 ____D () C:\Windows\ERUNT
2014-03-31 16:52 - 2014-03-31 16:51 - 01038974 _____ (Thisisu) C:\Users\Martin\Desktop\JRT.exe
2014-03-31 16:51 - 2012-09-22 14:47 - 01053690 _____ () C:\Windows\WindowsUpdate.log
2014-03-31 16:48 - 2013-09-23 12:46 - 00000000 ____D () C:\Users\Martin\AppData\Local\HTC MediaHub
2014-03-31 16:48 - 2012-10-05 10:06 - 00000000 ___RD () C:\Users\Martin\Dropbox
2014-03-31 16:48 - 2012-09-23 21:00 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-31 16:47 - 2014-02-27 11:51 - 00002471 _____ () C:\Windows\setupact.log
2014-03-31 16:47 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-31 16:46 - 2014-03-31 16:44 - 00000000 ____D () C:\AdwCleaner
2014-03-31 16:44 - 2012-12-26 11:19 - 00000910 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1533790663-1175885118-1602668530-1000Core.job
2014-03-31 16:42 - 2014-03-31 16:42 - 01950720 _____ () C:\Users\Martin\Desktop\adwcleaner.exe
2014-03-31 16:39 - 2012-09-22 15:26 - 00003946 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{3522E809-020A-415B-AC23-16E695C2850C}
2014-03-31 16:37 - 2012-12-26 11:19 - 00000932 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1533790663-1175885118-1602668530-1000UA.job
2014-03-31 16:37 - 2012-09-23 20:59 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-03-28 15:16 - 2012-09-22 15:24 - 00001425 _____ () C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-28 05:07 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-03-28 04:23 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-03-28 04:07 - 2014-02-27 04:02 - 00141911 _____ () C:\Windows\IE11_main.log
2014-03-28 04:03 - 2014-03-28 04:03 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-28 04:03 - 2014-03-28 04:03 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-28 04:03 - 2014-03-28 04:03 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-28 04:03 - 2014-03-28 04:03 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-28 04:03 - 2014-03-28 04:03 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-03-28 04:03 - 2014-03-28 04:03 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-03-28 04:03 - 2014-03-28 04:03 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-03-28 04:03 - 2014-03-28 04:03 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-03-28 04:03 - 2014-03-28 04:03 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-03-28 04:03 - 2014-03-28 04:03 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-03-28 04:03 - 2014-03-28 04:03 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-03-28 04:03 - 2014-03-28 04:03 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-03-28 04:03 - 2014-03-28 04:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-27 20:34 - 2014-03-27 12:51 - 00000000 ____D () C:\Users\Martin\Desktop\mbar
2014-03-27 13:47 - 2014-03-27 12:52 - 00119000 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-27 13:46 - 2014-03-27 12:51 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-27 13:43 - 2014-02-28 16:34 - 00107168 _____ () C:\Windows\PFRO.log
2014-03-27 12:53 - 2014-03-27 12:53 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-27 12:50 - 2014-03-27 12:50 - 12589848 _____ (Malwarebytes Corp.) C:\Users\Martin\Desktop\mbar-1.07.0.1009.exe
2014-03-27 12:20 - 2012-10-05 10:01 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-03-27 12:20 - 2012-09-22 15:24 - 00000000 ___RD () C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-27 12:15 - 2012-09-22 14:54 - 00000000 ____D () C:\ProgramData\McAfee
2014-03-27 12:15 - 2012-09-22 14:54 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-03-27 11:59 - 2014-03-27 11:50 - 00042323 _____ () C:\Users\Martin\Desktop\Addition.txt
2014-03-27 11:47 - 2014-03-27 11:47 - 02157056 _____ (Farbar) C:\Users\Martin\Desktop\FRST64.exe
2014-03-26 22:55 - 2012-09-23 21:00 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-03-26 22:55 - 2012-09-23 21:00 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-21 17:05 - 2012-09-22 15:50 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-20 12:42 - 2013-07-24 17:05 - 00000000 ____D () C:\Users\Martin\Desktop\Studium
2014-03-19 10:03 - 2014-03-19 10:03 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-18 04:28 - 2010-05-19 23:44 - 00000000 ____D () C:\Windows\Panther
2014-03-18 04:27 - 2013-09-26 18:36 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-18 04:27 - 2013-09-26 18:36 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-18 04:27 - 2009-07-14 06:45 - 00467368 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-18 04:08 - 2012-09-22 15:40 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-03-12 19:30 - 2012-09-24 16:55 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 19:30 - 2012-09-24 16:55 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-12 19:30 - 2012-09-24 16:55 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-09 21:24 - 2014-03-09 21:23 - 00273912 _____ () C:\Windows\Minidump\030914-37377-01.dmp
2014-03-09 21:23 - 2014-03-09 21:23 - 451595894 _____ () C:\Windows\MEMORY.DMP
2014-03-09 21:23 - 2012-11-17 01:58 - 00000000 ____D () C:\Windows\Minidump
2014-03-06 18:00 - 2014-03-06 18:00 - 00057742 _____ () C:\Users\Martin\Desktop\lehrer
2014-03-05 04:03 - 2013-06-02 21:59 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-03-05 04:03 - 2012-12-26 11:35 - 00000000 ____D () C:\ProgramData\Skype

Some content of TEMP:
====================
C:\Users\Martin\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-20 04:23

==================== End Of Log ============================
         

--- --- ---

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

HKU\S-1-5-21-1533790663-1175885118-1602668530-1000\...\Run: [Baipsuvz] - C:\ProgramData\Baipsuvz.exe
C:\ProgramData\Baipsuvz.exe
S2 MyScrapNook_12Service; C:\PROGRA~2\MYSCRA~2\bar\1.bin\12barsvc.exe [X]
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014
Ran by Martin at 2014-03-31 21:17:00 Run:1
Running from C:\Users\Martin\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
HKU\S-1-5-21-1533790663-1175885118-1602668530-1000\...\Run: [Baipsuvz] - C:\ProgramData\Baipsuvz.exe
C:\ProgramData\Baipsuvz.exe
S2 MyScrapNook_12Service; C:\PROGRA~2\MYSCRA~2\bar\1.bin\12barsvc.exe [X]
         
*****************

HKU\S-1-5-21-1533790663-1175885118-1602668530-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Baipsuvz => Value deleted successfully.
"C:\ProgramData\Baipsuvz.exe" => File/Directory not found.
MyScrapNook_12Service => Service deleted successfully.

==== End of Fixlog ====
         

Kontrollscans mit MBAM und ESET bitte:

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

MBAM:

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 01.04.2014
Suchlauf-Zeit: 13:10:17
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.0.1000
Malware Datenbank: v2014.04.01.02
Rootkit Datenbank: v2014.03.27.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Chameleon: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Martin

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 260891
Verstrichene Zeit: 1 Std, 6 Min, 43 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Shuriken: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 104
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{0a4d512d-697e-4ad5-872d-5a9941af6ebb}, In Quarantäne, [0bf54db34db317e9a42edb6437cba45c], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{c260adf2-154f-4227-9c73-651e25f22cbb}, In Quarantäne, [0bf54db34db317e9a42edb6437cba45c], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{049BCB76-CEF4-43C9-9F4D-4539C7DE9742}, In Quarantäne, [0bf54db34db317e9a42edb6437cba45c], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{5BC4D4DF-CE7A-4582-835E-56860B14462E}, In Quarantäne, [0bf54db34db317e9a42edb6437cba45c], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{716E5A46-C344-4D13-99DB-BDCE7466B8A2}, In Quarantäne, [0bf54db34db317e9a42edb6437cba45c], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{82024F98-F9FB-47F4-860F-887E41883C9D}, In Quarantäne, [0bf54db34db317e9a42edb6437cba45c], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{C9E2A578-FDDF-4214-8DB0-0F33E3421553}, In Quarantäne, [0bf54db34db317e9a42edb6437cba45c], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E70EAE41-BB5A-440E-BF6E-BE2A280FD49C}, In Quarantäne, [0bf54db34db317e9a42edb6437cba45c], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{049BCB76-CEF4-43C9-9F4D-4539C7DE9742}, In Quarantäne, [0bf54db34db317e9a42edb6437cba45c], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{5BC4D4DF-CE7A-4582-835E-56860B14462E}, In Quarantäne, [0bf54db34db317e9a42edb6437cba45c], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{716E5A46-C344-4D13-99DB-BDCE7466B8A2}, In Quarantäne, [0bf54db34db317e9a42edb6437cba45c], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{82024F98-F9FB-47F4-860F-887E41883C9D}, In Quarantäne, [0bf54db34db317e9a42edb6437cba45c], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C9E2A578-FDDF-4214-8DB0-0F33E3421553}, In Quarantäne, [0bf54db34db317e9a42edb6437cba45c], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E70EAE41-BB5A-440E-BF6E-BE2A280FD49C}, In Quarantäne, [0bf54db34db317e9a42edb6437cba45c], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{c260adf2-154f-4227-9c73-651e25f22cbb}, In Quarantäne, [0bf54db34db317e9a42edb6437cba45c], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.SettingsPlugin.1, In Quarantäne, [0bf54db34db317e9a42edb6437cba45c], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.SettingsPlugin, In Quarantäne, [0bf54db34db317e9a42edb6437cba45c], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.SettingsPlugin, In Quarantäne, [0bf54db34db317e9a42edb6437cba45c], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.SettingsPlugin.1, In Quarantäne, [0bf54db34db317e9a42edb6437cba45c], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{0A4D512D-697E-4AD5-872D-5A9941AF6EBB}, In Quarantäne, [0bf54db34db317e9a42edb6437cba45c], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{508c38b8-e848-49eb-9f84-ab81ddad2b58}, In Quarantäne, [01ffb34da15f4eb223b07bc418eab14f], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{0fa48495-56eb-4eba-be5f-183846983a48}, In Quarantäne, [01ffb34da15f4eb223b07bc418eab14f], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{098E4E5F-7877-4EBE-9A51-49CDEFBED242}, In Quarantäne, [01ffb34da15f4eb223b07bc418eab14f], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{191EA747-1B0F-4895-8A45-B96A9EE15E28}, In Quarantäne, [01ffb34da15f4eb223b07bc418eab14f], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{3F210473-F79B-48AA-B4B0-78872B5B4541}, In Quarantäne, [01ffb34da15f4eb223b07bc418eab14f], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{A3BD0431-C030-45BF-915D-01C8E8AF05D7}, In Quarantäne, [01ffb34da15f4eb223b07bc418eab14f], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{098E4E5F-7877-4EBE-9A51-49CDEFBED242}, In Quarantäne, [01ffb34da15f4eb223b07bc418eab14f], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{191EA747-1B0F-4895-8A45-B96A9EE15E28}, In Quarantäne, [01ffb34da15f4eb223b07bc418eab14f], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{3F210473-F79B-48AA-B4B0-78872B5B4541}, In Quarantäne, [01ffb34da15f4eb223b07bc418eab14f], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{A3BD0431-C030-45BF-915D-01C8E8AF05D7}, In Quarantäne, [01ffb34da15f4eb223b07bc418eab14f], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{0fa48495-56eb-4eba-be5f-183846983a48}, In Quarantäne, [01ffb34da15f4eb223b07bc418eab14f], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.PseudoTransparentPlugin.1, In Quarantäne, [01ffb34da15f4eb223b07bc418eab14f], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.PseudoTransparentPlugin, In Quarantäne, [01ffb34da15f4eb223b07bc418eab14f], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.PseudoTransparentPlugin, In Quarantäne, [01ffb34da15f4eb223b07bc418eab14f], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.PseudoTransparentPlugin.1, In Quarantäne, [01ffb34da15f4eb223b07bc418eab14f], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{508C38B8-E848-49EB-9F84-AB81DDAD2B58}, In Quarantäne, [01ffb34da15f4eb223b07bc418eab14f], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{ba339ddb-918b-42f5-b582-88ab854c42ac}, In Quarantäne, [1be5c838fc04817f855040ffb54d2bd5], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.Radio.1, In Quarantäne, [1be5c838fc04817f855040ffb54d2bd5], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.Radio, In Quarantäne, [1be5c838fc04817f855040ffb54d2bd5], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.Radio, In Quarantäne, [1be5c838fc04817f855040ffb54d2bd5], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.Radio.1, In Quarantäne, [1be5c838fc04817f855040ffb54d2bd5], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{bb2e53cf-c096-40b0-a485-03134f164470}, In Quarantäne, [4ab637c9fd03a25eeaecbe81857d9769], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BB2E53CF-C096-40B0-A485-03134F164470}, In Quarantäne, [4ab637c9fd03a25eeaecbe81857d9769], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{FAE20193-DC28-4E42-8D12-DB0C2C898B11}, In Quarantäne, [db2547b98f7150b043953b0433cf07f9], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{4C0961A5-3F88-4055-A100-106AFEC2CF9E}, In Quarantäne, [db2547b98f7150b043953b0433cf07f9], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{AE88B8C3-41A9-4BB6-B12D-BDA9219E58FB}, In Quarantäne, [db2547b98f7150b043953b0433cf07f9], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4C0961A5-3F88-4055-A100-106AFEC2CF9E}, In Quarantäne, [db2547b98f7150b043953b0433cf07f9], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{AE88B8C3-41A9-4BB6-B12D-BDA9219E58FB}, In Quarantäne, [db2547b98f7150b043953b0433cf07f9], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{FAE20193-DC28-4E42-8D12-DB0C2C898B11}, In Quarantäne, [db2547b98f7150b043953b0433cf07f9], 
PUP.Optional.FunWebProducts.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.SkinLauncherSettings, In Quarantäne, [709021dfd32d3ac6963aaa950df5e21e], 
PUP.Optional.FunWebProducts.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.SkinLauncherSettings.1, In Quarantäne, [25db986851af56aae6ea241b689a1fe1], 
PUP.Optional.FunWebProducts.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.SkinLauncherSettings, In Quarantäne, [25db986851af56aae6ea241b689a1fe1], 
PUP.Optional.FunWebProducts.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.SkinLauncherSettings.1, In Quarantäne, [25db986851af56aae6ea241b689a1fe1], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.DynamicBarButton, In Quarantäne, [5da37b85f20e2bd57126384d16ed08f8], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.DynamicBarButton.1, In Quarantäne, [6c94bb45837dbe42088fec99bd4614ec], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.FeedManager, In Quarantäne, [ab5536ca669abb45f89f691ccf34ac54], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.FeedManager.1, In Quarantäne, [da268b7520e0946cbed9d4b1ab58dc24], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.HTMLMenu, In Quarantäne, [be4205fbdc2408f8adeab5d004ff43bd], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.HTMLMenu.1, In Quarantäne, [d12fb8481ae67f815344176e818203fd], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.HTMLPanel, In Quarantäne, [d32d4fb19868916f366104813bc832ce], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.HTMLPanel.1, In Quarantäne, [ad53d12f4bb56f911a7d067fb44f55ab], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.MultipleButton, In Quarantäne, [14ec55ab9c648878b1e6e4a1d42ff50b], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.MultipleButton.1, In Quarantäne, [a35dfe0208f854ac7c1b196c7f8420e0], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.RadioSettings, In Quarantäne, [7987e91728d8a957e6b17b0a53b0c937], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.RadioSettings.1, In Quarantäne, [d52b11ef32ce1ae64750dea72bd86997], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.ScriptButton, In Quarantäne, [02fe2ed2669af8088512206535ce06fa], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.ScriptButton.1, In Quarantäne, [cd335ca4a35dc739296ebacbea19bc44], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.SkinLauncher, In Quarantäne, [01ff88787b85c739692e493c0102e31d], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.SkinLauncher.1, In Quarantäne, [2cd4e51b26da33cd10876e17e41fb64a], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.ThirdPartyInstaller, In Quarantäne, [659b0af615ebbd43e6b189fcdc279868], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.ThirdPartyInstaller.1, In Quarantäne, [01ffc23e847ca15f8e09058010f3f30d], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.ToolbarProtector, In Quarantäne, [44bc817f966aa45c0f88e89d32d107f9], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.ToolbarProtector.1, In Quarantäne, [ff01de22669a04fccacdd3b2e22138c8], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.UrlAlertButton, In Quarantäne, [926e2cd45ba5976935627a0b1de61de3], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.UrlAlertButton.1, In Quarantäne, [619f7b85bf410df39601bbca976c47b9], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.XMLSessionPlugin, In Quarantäne, [956bd52be0207a86752234519370cf31], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\MyScrapNook_12.XMLSessionPlugin.1, In Quarantäne, [14ec6a967a86aa56f3a4d5b0fa09c937], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\MyScrapNook_12, In Quarantäne, [eb1515eb6a9678882d6e493c0bf8d22e], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.DynamicBarButton, In Quarantäne, [718f03fdab5522ded8bf6d1881822dd3], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.DynamicBarButton.1, In Quarantäne, [2ad669975aa67789deb9b1d47c8751af], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.FeedManager, In Quarantäne, [56aa58a8738ddb25b5e2374efe05e41c], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.FeedManager.1, In Quarantäne, [e41cb9479868718f019610756d968a76], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.HTMLMenu, In Quarantäne, [5fa16e92639d6898187f434206fd8878], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.HTMLMenu.1, In Quarantäne, [02fe18e8798720e0aaed90f52cd72fd1], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.HTMLPanel, In Quarantäne, [cd333ec2ac5470907f18ec993fc4a65a], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.HTMLPanel.1, In Quarantäne, [df21c937a65afe028017ccb9f21124dc], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.MultipleButton, In Quarantäne, [ef11b54b04fc7090c6d186fff11210f0], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.MultipleButton.1, In Quarantäne, [cb35bf41dc24847cd6c11e67877c946c], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.RadioSettings, In Quarantäne, [c13f0df3f40c0af6dabdb9cce41f7987], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.RadioSettings.1, In Quarantäne, [8d73748ca65aa25e9502ee97ce357a86], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.ScriptButton, In Quarantäne, [af51cf317f81728e6b2c414432d1bb45], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.ScriptButton.1, In Quarantäne, [ba46be42857b35cb8a0d345156ad06fa], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.SkinLauncher, In Quarantäne, [16ea2dd3639d857b5f3894f1f40fb050], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.SkinLauncher.1, In Quarantäne, [54acf40c8080eb15fd9adaabbc473fc1], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.ThirdPartyInstaller, In Quarantäne, [8d7368988a768c748f0893f2c3402ed2], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.ThirdPartyInstaller.1, In Quarantäne, [34ccb9476f91e818bed92b5abb4801ff], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.ToolbarProtector, In Quarantäne, [d12f8c7457a99e621285e69feb188e72], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.ToolbarProtector.1, In Quarantäne, [49b709f754acea16c9ce830213f0c43c], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.UrlAlertButton, In Quarantäne, [00008d7303fdb34d1087275e9f64cd33], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.UrlAlertButton.1, In Quarantäne, [b34d8a765ea2629efe99058048bbd828], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.XMLSessionPlugin, In Quarantäne, [e31d758b768ae8183a5d8203d82b9769], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyScrapNook_12.XMLSessionPlugin.1, In Quarantäne, [b14f8e7243bd7f81d2c59bea2ad9847c], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@MyScrapNook_12.com/Plugin, In Quarantäne, [f907c23ee020a65a4357b3d2df2442be], 
PUP.Optional.MyScrapNook.A, HKU\S-1-5-21-1533790663-1175885118-1602668530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MyScrapNook_12, In Quarantäne, [b54b768a3ec2c0403761e5a01be8a65a], 

Registrierungswerte: 1
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|12ffxtbr@MyScrapNook_12.com, C:\Program Files (x86)\MyScrapNook_12\bar\1.bin, In Quarantäne, [728e1ae636caf709267394f124df17e9]

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 1
PUP.Optional.Softonic.A, C:\Users\Martin\Downloads\SoftonicDownloader_for_clonecd.exe, In Quarantäne, [57a91be5ac54718ffdf252c5b9489967], 

Physische Sektoren: 0
(No malicious items detected)


(end)
         

ESET:

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=ee19f32fc34d40488f880e57a29898c8
# engine=17706
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-04-01 02:39:39
# local_time=2014-04-01 04:39:39 (+0100, Mitteleuropäische Sommerzeit)
# country="Austria"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=774 16777213 85 91 21937062 173073051 0 0
# compatibility_mode=5893 16776573 100 94 16354 147993029 0 0
# scanned=178521
# found=9
# cleaned=0
# scan_time=11142
sh=734E815603A20DCE921B8936214ABD2E5CC7810C ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Martin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\16\3eb53b10-2b2758db"
sh=5EB3DCEE7DECA4E5C72210E70182571B268333AF ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Martin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\7df5dd2-3fb26785"
sh=583C590F07A7887770E0FC634C4CDF733490CEAA ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Martin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\21\a911a55-655fe8d2"
sh=58600C11CFCB3286B323A890C3DFDA146B6A3AF4 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Martin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\41\44d3d8a9-33580072"
sh=9A40E7E66F20290C10485A445943E12C45CCE221 ft=0 fh=0000000000000000 vn="a variant of Java/Exploit.CVE-2013-2465.CU trojan" ac=I fn="C:\Users\Martin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\44\7e5826ac-450d4a4b"
sh=DCF92F29BC2082274AD5F70260E0C05534C5BA51 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Martin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46\1a56a82e-397db028"
sh=2F7C3A250459F06EE04CAF7298682FAA78B8B524 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Martin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\49\68dc6731-1d1ebb6f"
sh=B25A90AA87AF5E716FFC89C6F54B5E24B05095B4 ft=0 fh=0000000000000000 vn="a variant of Java/Exploit.CVE-2013-1493.GY trojan" ac=I fn="C:\Users\Martin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\63\5ad6f6ff-4eadb47a"
sh=6E8D824EAB34EB5F62321934D2DBF7FD18F0B91C ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Martin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\8a69909-7ca84991"
         

TFC - Temp File Cleaner

Lade dir TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.

• Öffne die TFC.exe.
  Vista und Win 7 User mit Rechtsklick "als Administrator starten".
• Schließe alle anderen Programme.
• Drücke auf den Button Start.
• Falls du zu einem Neustart aufgefordert wirst, bestätige diesen.

Sieht soweit ok aus

Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat. Um Usertracking zu verhindern kann man gut die Firefox-Erweiterung Ghostery verwenden.

Info: Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?

Vielen vielen Dank!

Könntest mir noch Empfehlungen geben, womit ich in Zukunft besser geschützt bin?

LG