Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung
Startseite bei Firefox lässt sich nicht ändern.

Startseite bei Firefox lässt sich nicht ändern.


Log-Analyse und Auswertung: Startseite bei Firefox lässt sich nicht ändern.

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

Antwort
Seite 1 von 2 1 2
Alt 09.04.2014, 13:28   #1
wombel74
 
Startseite bei Firefox lässt sich nicht ändern. - Standard

Startseite bei Firefox lässt sich nicht ändern.


Hallo Forum,

wenn ich im FF einen neuen Tab öffne, geht er immer auf "search.conduit.com". Jetzt soll man über "about:config" den Schlüssel "browser.newtab.url" ändern.
Das klappt aber nicht. Sobald ich in der Dialogbox OK klicke, steht da wieder der alte Link. Ich hab auch schon nach der user.js gesucht. Die gibt es auch nicht.
Das Problem ist mir vor zwei Tagen das erste Mal aufgefallen. Ich habe seither auch nix installiert.
Ich habe einen Virus heute gefunden und Avira hat ihn in Quarantäne verschoben.
Anbei die gewünschten Log-Dateien:

Avira:

Code:
ATTFilter
Avira Free Antivirus
Erstellungsdatum der Reportdatei: Mittwoch, 9. April 2014  09:10


Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.

Lizenznehmer   : Avira Antivirus Free
Seriennummer   : 0000149996-AVHOE-0000001
Plattform      : Windows 7 Home Premium
Windowsversion : (Service Pack 1)  [6.1.7601]
Boot Modus     : Normal gebootet
Benutzername   : ****
Computername   : PC

Versionsinformationen:
BUILD.DAT      : 14.0.3.350     56624 Bytes  25.02.2014 11:41:00
AVSCAN.EXE     : 14.0.3.332   1058384 Bytes  20.02.2014 09:27:15
AVSCANRC.DLL   : 14.0.2.292     62008 Bytes  18.02.2014 20:52:48
LUKE.DLL       : 14.0.3.336     65616 Bytes  20.02.2014 09:27:26
AVSCPLR.DLL    : 14.0.3.336    124496 Bytes  20.02.2014 09:27:15
AVREG.DLL      : 14.0.3.336    250448 Bytes  20.02.2014 09:27:14
avlode.dll     : 14.0.3.336    544848 Bytes  20.02.2014 09:27:13
avlode.rdf     : 14.0.3.38      58680 Bytes  13.03.2014 14:05:20
VBASE000.VDF   : 7.11.70.0   66736640 Bytes  04.04.2013 11:03:18
VBASE001.VDF   : 7.11.74.226  2201600 Bytes  30.04.2013 11:03:20
VBASE002.VDF   : 7.11.80.60   2751488 Bytes  28.05.2013 11:03:22
VBASE003.VDF   : 7.11.85.214  2162688 Bytes  21.06.2013 11:03:23
VBASE004.VDF   : 7.11.91.176  3903488 Bytes  23.07.2013 11:03:25
VBASE005.VDF   : 7.11.98.186  6822912 Bytes  29.08.2013 11:03:29
VBASE006.VDF   : 7.11.139.38 15708672 Bytes  27.03.2014 15:52:55
VBASE007.VDF   : 7.11.139.39     2048 Bytes  27.03.2014 15:52:55
VBASE008.VDF   : 7.11.139.40     2048 Bytes  27.03.2014 15:52:55
VBASE009.VDF   : 7.11.139.41     2048 Bytes  27.03.2014 15:52:55
VBASE010.VDF   : 7.11.139.42     2048 Bytes  27.03.2014 15:52:55
VBASE011.VDF   : 7.11.139.43     2048 Bytes  27.03.2014 15:52:55
VBASE012.VDF   : 7.11.139.44     2048 Bytes  27.03.2014 15:52:55
VBASE013.VDF   : 7.11.139.45     2048 Bytes  27.03.2014 15:52:56
VBASE014.VDF   : 7.11.139.171   111104 Bytes  28.03.2014 13:03:57
VBASE015.VDF   : 7.11.140.23   150016 Bytes  30.03.2014 10:50:07
VBASE016.VDF   : 7.11.140.143   222720 Bytes  01.04.2014 06:18:00
VBASE017.VDF   : 7.11.140.235   144384 Bytes  03.04.2014 12:17:53
VBASE018.VDF   : 7.11.141.81   193536 Bytes  05.04.2014 16:43:44
VBASE019.VDF   : 7.11.141.203   241152 Bytes  08.04.2014 17:59:26
VBASE020.VDF   : 7.11.141.204     2048 Bytes  08.04.2014 17:59:26
VBASE021.VDF   : 7.11.141.205     2048 Bytes  08.04.2014 17:59:26
VBASE022.VDF   : 7.11.141.206     2048 Bytes  08.04.2014 17:59:27
VBASE023.VDF   : 7.11.141.207     2048 Bytes  08.04.2014 17:59:27
VBASE024.VDF   : 7.11.141.208     2048 Bytes  08.04.2014 17:59:27
VBASE025.VDF   : 7.11.141.209     2048 Bytes  08.04.2014 17:59:27
VBASE026.VDF   : 7.11.141.210     2048 Bytes  08.04.2014 17:59:27
VBASE027.VDF   : 7.11.141.211     2048 Bytes  08.04.2014 17:59:27
VBASE028.VDF   : 7.11.141.212     2048 Bytes  08.04.2014 17:59:27
VBASE029.VDF   : 7.11.141.213     2048 Bytes  08.04.2014 17:59:27
VBASE030.VDF   : 7.11.141.214     2048 Bytes  08.04.2014 17:59:27
VBASE031.VDF   : 7.11.142.34   152064 Bytes  09.04.2014 06:20:44
Engineversion  : 8.3.18.2  
AEVDF.DLL      : 8.3.0.4       118976 Bytes  20.03.2014 17:00:08
AESCRIPT.DLL   : 8.1.4.198     528584 Bytes  28.03.2014 13:03:57
AESCN.DLL      : 8.3.0.2       135360 Bytes  20.03.2014 17:00:08
AESBX.DLL      : 8.2.20.6     1331575 Bytes  30.01.2014 16:26:47
AERDL.DLL      : 8.2.0.138     704888 Bytes  30.01.2014 16:26:10
AEPACK.DLL     : 8.4.0.16      778440 Bytes  03.04.2014 06:17:59
AEOFFICE.DLL   : 8.3.0.2       201084 Bytes  14.03.2014 17:21:35
AEHEUR.DLL     : 8.1.4.1004   6643912 Bytes  03.04.2014 18:18:00
AEHELP.DLL     : 8.3.0.0       274808 Bytes  12.03.2014 07:55:58
AEGEN.DLL      : 8.1.7.24      442743 Bytes  12.03.2014 07:55:58
AEEXP.DLL      : 8.4.1.258     512376 Bytes  14.03.2014 17:21:35
AEEMU.DLL      : 8.1.3.2       393587 Bytes  29.09.2013 11:03:33
AECORE.DLL     : 8.3.0.6       241864 Bytes  20.03.2014 16:59:50
AEBB.DLL       : 8.1.1.4        53619 Bytes  29.09.2013 11:03:32
AVWINLL.DLL    : 14.0.3.252     23608 Bytes  20.02.2014 09:27:11
AVPREF.DLL     : 14.0.3.252     48696 Bytes  20.02.2014 09:27:14
AVREP.DLL      : 14.0.3.252    175672 Bytes  20.02.2014 09:27:14
AVARKT.DLL     : 14.0.3.336    256080 Bytes  20.02.2014 09:27:11
AVEVTLOG.DLL   : 14.0.3.336    165968 Bytes  20.02.2014 09:27:12
SQLITE3.DLL    : 3.7.0.1       394824 Bytes  29.09.2013 11:04:01
AVSMTP.DLL     : 14.0.3.252     60472 Bytes  20.02.2014 09:27:15
NETNT.DLL      : 14.0.3.252     13368 Bytes  20.02.2014 09:27:26
RCIMAGE.DLL    : 14.0.3.260   4979256 Bytes  20.02.2014 09:27:11
RCTEXT.DLL     : 14.0.3.282     72760 Bytes  20.02.2014 09:27:11

Konfiguration für den aktuellen Suchlauf:
Job Name..............................: Suche nach Rootkits und aktiver Malware
Konfigurationsdatei...................: C:\ProgramData\Avira\AntiVir Desktop\PROFILES\rootkit.avp
Protokollierung.......................: standard
Primäre Aktion........................: Interaktiv
Sekundäre Aktion......................: Löschen
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: ein
Durchsuche aktive Programme...........: ein
Laufende Programme erweitert..........: ein
Durchsuche Registrierung..............: ein
Suche nach Rootkits...................: ein
Integritätsprüfung von Systemdateien..: aus
Prüfe alle Dateien....................: Alle Dateien
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: Vollständig

Beginn des Suchlaufs: Mittwoch, 9. April 2014  09:10

Der Suchlauf nach versteckten Objekten wird begonnen.

Der Suchlauf über gestartete Prozesse wird begonnen:
Durchsuche Prozess 'svchost.exe' - '52' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvvsvc.exe' - '35' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvSCPAPISvr.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '39' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '95' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '129' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '80' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '165' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '74' Modul(e) wurden durchsucht
Durchsuche Prozess 'WLANExt.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'conhost.exe' - '14' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvxdsync.exe' - '51' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvvsvc.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'spoolsv.exe' - '108' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '63' Modul(e) wurden durchsucht
Durchsuche Prozess 'sched.exe' - '56' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '63' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskhost.exe' - '69' Modul(e) wurden durchsucht
Durchsuche Prozess 'armsvc.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'avguard.exe' - '108' Modul(e) wurden durchsucht
Durchsuche Prozess 'apnmcp.exe' - '32' Modul(e) wurden durchsucht
Durchsuche Prozess 'AppleMobileDeviceService.exe' - '76' Modul(e) wurden durchsucht
Durchsuche Prozess 'Dwm.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'Explorer.EXE' - '182' Modul(e) wurden durchsucht
Durchsuche Prozess 'mDNSResponder.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '69' Modul(e) wurden durchsucht
Durchsuche Prozess 'CltMngSvc.exe' - '49' Modul(e) wurden durchsucht
Durchsuche Prozess 'EscSvc64.exe' - '27' Modul(e) wurden durchsucht
Durchsuche Prozess 'cltmng.exe' - '83' Modul(e) wurden durchsucht
Durchsuche Prozess 'cltmngui.exe' - '77' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmiprvse.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'SetPoint.exe' - '89' Modul(e) wurden durchsucht
Durchsuche Prozess 'WrtMon.exe' - '30' Modul(e) wurden durchsucht
Durchsuche Prozess 'NvBackend.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'WrtProc.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'KHALMNPR.EXE' - '40' Modul(e) wurden durchsucht
Durchsuche Prozess 'iCloudServices.exe' - '77' Modul(e) wurden durchsucht
Durchsuche Prozess 'ApplePhotoStreams.exe' - '122' Modul(e) wurden durchsucht
Durchsuche Prozess 'E_YATIJJE.EXE' - '40' Modul(e) wurden durchsucht
Durchsuche Prozess 'E_YATIJJE.EXE' - '42' Modul(e) wurden durchsucht
Durchsuche Prozess 'avgnt.exe' - '99' Modul(e) wurden durchsucht
Durchsuche Prozess 'TBNotifier.exe' - '84' Modul(e) wurden durchsucht
Durchsuche Prozess 'FUFAXRCV.exe' - '63' Modul(e) wurden durchsucht
Durchsuche Prozess 'FUFAXSTM.exe' - '87' Modul(e) wurden durchsucht
Durchsuche Prozess 'EEventManager.exe' - '68' Modul(e) wurden durchsucht
Durchsuche Prozess 'PMSpeed.exe' - '146' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvtray.exe' - '51' Modul(e) wurden durchsucht
Durchsuche Prozess 'iTunesHelper.exe' - '78' Modul(e) wurden durchsucht
Durchsuche Prozess 'GloboFleet_CC.exe' - '61' Modul(e) wurden durchsucht
Durchsuche Prozess 'jusched.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'splwow64.exe' - '42' Modul(e) wurden durchsucht
Durchsuche Prozess 'DivXUpdate.exe' - '82' Modul(e) wurden durchsucht
Durchsuche Prozess 'APSDaemon.exe' - '88' Modul(e) wurden durchsucht
Durchsuche Prozess 'avshadow.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'AVWEBGRD.EXE' - '72' Modul(e) wurden durchsucht
Durchsuche Prozess 'iPodService.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchIndexer.exe' - '54' Modul(e) wurden durchsucht
Durchsuche Prozess 'WUDFHost.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'WUDFHost.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '60' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmpnetwk.exe' - '108' Modul(e) wurden durchsucht
Durchsuche Prozess 'daemonu.exe' - '69' Modul(e) wurden durchsucht
Durchsuche Prozess 'wuauclt.exe' - '37' Modul(e) wurden durchsucht
Durchsuche Prozess 'avcenter.exe' - '154' Modul(e) wurden durchsucht
Durchsuche Prozess 'firefox.exe' - '132' Modul(e) wurden durchsucht
Durchsuche Prozess 'plugin-container.exe' - '68' Modul(e) wurden durchsucht
Durchsuche Prozess 'avscan.exe' - '121' Modul(e) wurden durchsucht
Durchsuche Prozess 'vssvc.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'WUDFHost.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchProtocolHost.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchFilterHost.exe' - '27' Modul(e) wurden durchsucht
Durchsuche Prozess 'smss.exe' - '2' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'wininit.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'services.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'winlogon.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsass.exe' - '65' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsm.exe' - '16' Modul(e) wurden durchsucht

Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen:
Die Registry wurde durchsucht ( '1684' Dateien ).


Der Suchlauf über die ausgewählten Dateien wird begonnen:

Beginne mit der Suche in 'C:'
    [0] Archivtyp: Runtime Packed
    --> C:\Users\****\*******\Dokumente\Sony Ericsson\Sony Ericsson PC Suite\Telefonsicherungen\C905.dbk
        [1] Archivtyp: ZIP
      --> Files/Content/{50AE213B-E5C7-4AAA-BB36-F5B006C4D86C}.jar
          [2] Archivtyp: ZIP
        --> n.class
            [FUND]      Enthält Erkennungsmuster des Exploits EXP/CVE-2012-1723.A.4089
            [WARNUNG]   Infizierte Dateien in Archiven können nicht repariert werden
C:\Users\****\*******\Dokumente\Sony Ericsson\Sony Ericsson PC Suite\Telefonsicherungen\C905.dbk
  [FUND]      Enthält Erkennungsmuster des Exploits EXP/CVE-2012-1723.A.4089

Beginne mit der Desinfektion:
C:\Users\****\*******\Dokumente\Sony Ericsson\Sony Ericsson PC Suite\Telefonsicherungen\C905.dbk
  [FUND]      Enthält Erkennungsmuster des Exploits EXP/CVE-2012-1723.A.4089
  [HINWEIS]   Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '56d3b40d.qua' verschoben!


Ende des Suchlaufs: Mittwoch, 9. April 2014  11:17
Benötigte Zeit:  1:02:01 Stunde(n)

Der Suchlauf wurde vollständig durchgeführt.

  26383 Verzeichnisse wurden überprüft
 763063 Dateien wurden geprüft
      2 Viren bzw. unerwünschte Programme wurden gefunden
      0 Dateien wurden als verdächtig eingestuft
      0 Dateien wurden gelöscht
      0 Viren bzw. unerwünschte Programme wurden repariert
      1 Dateien wurden in die Quarantäne verschoben
      0 Dateien wurden umbenannt
      0 Dateien konnten nicht durchsucht werden
 763061 Dateien ohne Befall
   7071 Archive wurden durchsucht
      1 Warnungen
      1 Hinweise
 547411 Objekte wurden beim Rootkitscan durchsucht
      0 Versteckte Objekte wurden gefunden

Defogger:

Code:
ATTFilter
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 11:35 on 09/04/2014 (****)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
FRST

Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014 (ATTENTION: ====> FRST version is 27 days old and could be outdated)
Ran by **** (administrator) on PC on 09-04-2014 11:36:25
Running from C:\Users\****\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Conduit) C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe
(Seiko Epson Corporation) C:\Windows\system32\EscSvc64.exe
(Conduit) C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe
(Conduit) C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIJJE.EXE
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIJJE.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(NewSoft Technology Corporation) C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMSpeed.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Buyond GmbH) C:\Program Files\Buyond GmbH\GloboFleet_CC\GloboFleet_CC.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [3091224 2013-07-31] (Logitech, Inc.)
HKLM\...\Run: [WrtMon.exe] - C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe [26448 2008-05-24] (NewSoft Technology Corporation)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1797064 2014-03-20] (NVIDIA Corporation)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1758160 2014-02-13] (APN)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2014-02-14] (DivX, LLC)
HKLM-x32\...\Run: [FUFAXRCV] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [502952 2012-07-09] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [FUFAXSTM] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [863400 2012-07-09] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [EEventManager] - C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058912 2012-04-02] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [PMSpeed] - C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMSpeed.EXE [116632 2010-07-29] (NewSoft Technology Corporation)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM-x32\...\Run: [GloboFleet CC] - C:\Program Files\Buyond GmbH\GloboFleet_CC\GloboFleet_CC.exe [366400 2013-11-21] (Buyond GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [SSync] - C:\Users\****\AppData\Roaming\SSync\SSync.exe [37376 2013-12-09] ()
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [DataMgr] - C:\Users\****\AppData\Roaming\DataMgr\DataMgr.exe [168824 2014-01-23] (HTTO Group, Ltd.)
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [Intermediate] - C:\Users\****\AppData\Roaming\Intermediate\Intermediate.exe [37376 2013-12-09] ()
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [EPLTarget\P0000000000000000] - C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIJJE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [SCheck] - C:\Users\****\AppData\Roaming\SCheck\SCheck.exe [37376 2013-12-09] ()
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [Snoozer] - C:\Users\****\AppData\Roaming\Snz\Snz.exe [1210387 2014-03-12] ()
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [EPLTarget\P0000000000000001] - C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIJJE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\MountPoints2: {f831ea8a-395f-11e3-b8af-806e6f6e6963} - D:\Setup.exe
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [1355040 2014-03-30] (Conduit)
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [1050400 2014-03-30] (Conduit)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://native-search.com/?channel=deg
SearchScopes: HKCU - DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://native-search.com/search.php?channel=deg&q={searchTerms}
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://native-search.com/search.php?channel=deg&q={searchTerms}
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
BHO-x32: Simple New Tab Bho - {5C2DD58F-613F-4580-8AC0-F10D760AF938} - C:\Users\****\AppData\Local\simple_new_tab\simple_new_tab.dll (Temp Company Ltd)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: OfferMosquito - {82B16A3D-F03E-4565-A532-666B219C9A53} - C:\Users\****\AppData\Local\ext_offermosquito\OfferMosquitoIEPlaceholder.dll (Bebo Media Ltd)
BHO-x32: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ChromeFrame BHO - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll (Google Inc.)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} -  No File
Handler-x32: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll (Google Inc.)
Tcpip\..\Interfaces\{DDA62AC0-5A0C-4D51-A1D7-0CEFFFD29E9F}: [NameServer]145.253.2.171,145.253.2.75

FireFox:
========
FF ProfilePath: C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default
FF user.js: detected! => C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\user.js
FF NewTab: 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: bebomedia.com/OfferMosquitoIEHelper - C:\Users\****\AppData\Local\ext_offermosquito\npOfferMosquitoIEHelper.dll (Bebo Media Ltd)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\searchplugins\conduit-search.xml
FF SearchPlugin: C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\searchplugins\search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: OfferMosquito - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\Extensions\om@offermosquito.com.xpi [2014-02-28]
FF Extension: Simple New Tab - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\Extensions\snt@dotlabs.co.xpi [2013-11-13]
FF Extension: Adblock Plus - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-03-06]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2014-01-30]
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2014-03-21]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1017424 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2014-02-13] (APN LLC.)
R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [2466080 2014-03-30] (Conduit)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2014-01-30] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2014-01-30] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-01-30] (Avira Operations GmbH & Co. KG)
R3 Linksys_adapter_H; C:\Windows\System32\DRIVERS\AE1200w764.sys [1254464 2011-03-29] (Broadcom Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-09 11:36 - 2014-04-09 11:36 - 00017905 _____ () C:\Users\****\Desktop\FRST.txt
2014-04-09 11:36 - 2014-04-09 11:36 - 00000000 ____D () C:\FRST
2014-04-09 11:35 - 2014-04-09 11:35 - 00000470 _____ () C:\Users\****\Desktop\defogger_disable.log
2014-04-09 11:35 - 2014-04-09 11:35 - 00000000 _____ () C:\Users\****\defogger_reenable
2014-04-09 11:33 - 2014-04-09 11:33 - 00380416 _____ () C:\Users\****\Desktop\vq5ki2pf.exe
2014-04-09 11:31 - 2014-04-09 11:33 - 00000000 ____D () C:\Users\****\Downloads\Trojaner Board
2014-04-09 11:30 - 2014-04-09 11:30 - 02157056 _____ (Farbar) C:\Users\****\Desktop\FRST64.exe
2014-04-09 11:29 - 2014-04-09 11:29 - 00050477 _____ () C:\Users\****\Desktop\Defogger.exe
2014-04-09 11:18 - 2014-04-09 11:18 - 00026852 _____ () C:\Users\****\Desktop\AVSCAN-20140409-091023-AC5ECD10.LOG
2014-04-08 08:21 - 2014-04-08 08:21 - 00000000 ____D () C:\Users\****\AppData\Local\NVIDIA
2014-04-08 08:01 - 2014-03-04 13:32 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-04-08 07:52 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-04-08 07:52 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-04-08 07:52 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-04-06 23:27 - 2014-04-06 23:27 - 00000000 ____D () C:\Users\****\AppData\Local\SearchProtect
2014-04-06 23:27 - 2014-04-06 23:27 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2014-04-06 09:37 - 2011-09-29 11:30 - 00107552 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
2014-04-06 09:37 - 2011-09-29 11:30 - 00074272 _____ () C:\Windows\system32\RtNicProp64.dll
2014-04-06 08:53 - 2014-04-06 08:53 - 00001488 _____ () C:\Users\****\Desktop\Firefox.lnk
2014-04-06 01:36 - 2013-10-03 10:57 - 00001062 _____ () C:\Users\****\Desktop\OpenOffice Calc.lnk
2014-04-06 01:35 - 2013-10-03 10:57 - 00001098 _____ () C:\Users\****\Desktop\OpenOffice Writer.lnk
2014-04-05 22:53 - 2014-04-05 22:53 - 00000000 ____D () C:\Users\****\AppData\Roaming\Thunderbird
2014-04-05 22:53 - 2014-04-05 22:53 - 00000000 ____D () C:\Users\****\AppData\Local\Thunderbird
2014-04-05 22:52 - 2014-04-06 23:27 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-04-05 22:52 - 2014-04-05 22:52 - 00002086 _____ () C:\Users\Public\Desktop\Thunderbird.lnk
2014-04-05 22:38 - 2014-04-05 22:42 - 21987424 _____ (Mozilla) C:\Users\****\Downloads\Thunderbird_Setup_de24.4.0.exe
2014-04-05 22:24 - 2014-04-05 22:24 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-05 22:21 - 2014-04-05 22:21 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-05 22:21 - 2014-04-05 22:21 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-05 21:39 - 2014-04-06 12:16 - 00000000 ____D () C:\Users\****\Documents\Anwalt
2014-04-05 18:45 - 2014-04-07 13:47 - 00000000 ____D () C:\Users\****\Documents\Inso
2014-04-04 19:17 - 2014-04-04 19:17 - 00000000 ____D () C:\Users\****\Documents\Fahrerkarte
2014-04-04 10:52 - 2014-04-04 10:52 - 00001107 _____ () C:\Users\Public\Desktop\GloboFleet CC.lnk
2014-04-04 10:52 - 2014-04-04 10:52 - 00000000 ____D () C:\Program Files\Buyond GmbH
2014-04-04 10:49 - 2014-04-04 10:52 - 79962728 _____ (Buyond GmbH) C:\Users\****\Downloads\GloboFleet_CC_x64_Setup.exe
2014-04-04 10:44 - 2014-04-04 10:44 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WUDFUsbccidDriver_01_09_00.Wdf
2014-04-04 09:38 - 2014-04-09 08:50 - 00000000 ____D () C:\ProgramData\GloboFleet
2014-04-04 09:38 - 2014-04-04 09:38 - 00000000 ____D () C:\Program Files (x86)\Buyond_GmbH
2014-04-04 06:53 - 2014-04-04 06:54 - 48537520 _____ (Buyond GmbH) C:\Users\****\Downloads\GloboFleet_DriverCard_Checker_Setup.exe
2014-04-04 06:53 - 2014-04-04 06:54 - 48366056 _____ (Buyond GmbH) C:\Users\****\Downloads\GloboFleet_FileChecker_Setup.exe
2014-04-01 21:10 - 2014-04-01 21:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-28 15:00 - 2014-03-28 15:00 - 00000000 ____D () C:\Users\****\AppData\Roaming\Snz
2014-03-28 15:00 - 2014-03-28 15:00 - 00000000 ____D () C:\Users\****\AppData\Local\simple_new_tab
2014-03-28 14:59 - 2014-03-28 14:59 - 00000000 ____D () C:\Users\****\AppData\Roaming\SCheck
2014-03-26 00:10 - 2014-03-26 00:10 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files\iTunes
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files\iPod
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-26 00:05 - 2014-03-26 00:05 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-03-21 12:46 - 2014-04-04 12:56 - 00000000 ____D () C:\Users\****\Documents\Re******
2014-03-21 12:44 - 2014-03-18 18:34 - 00000954 _____ () C:\Users\****\Desktop\EPSON Scan.lnk
2014-03-21 09:10 - 2014-02-23 10:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-21 09:10 - 2014-02-23 10:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-21 09:10 - 2014-02-23 10:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-21 09:10 - 2014-02-23 10:12 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 03960320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-21 09:10 - 2014-02-23 08:54 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-21 09:10 - 2014-02-23 08:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-21 09:10 - 2014-02-23 08:31 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-21 09:10 - 2014-02-23 07:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-03-21 09:10 - 2014-02-23 07:35 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-03-21 09:09 - 2014-02-23 10:13 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-21 09:09 - 2014-02-23 10:12 - 19273216 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-21 09:09 - 2014-02-23 10:11 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-21 09:09 - 2014-02-23 10:11 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-21 09:09 - 2014-02-23 08:54 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-21 09:09 - 2014-02-23 08:53 - 14358016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-21 09:09 - 2014-02-23 08:53 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-21 09:09 - 2014-02-23 08:53 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-21 09:09 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-21 09:09 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-21 09:09 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-21 09:09 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-21 09:09 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 00832936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 14709720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-03-20 23:02 - 2014-03-20 23:02 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02715264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-03-19 00:09 - 2014-04-09 08:50 - 00000000 ____D () C:\Users\****\AppData\Roaming\.oit
2014-03-19 00:09 - 2014-04-07 00:00 - 00000000 ____D () C:\Users\****\Documents\My PageManager
2014-03-19 00:09 - 2014-03-19 00:09 - 00000264 _____ () C:\Windows\setup.iss
2014-03-19 00:09 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\****\AppData\Roaming\NewSoft
2014-03-19 00:09 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\****\AppData\Local\NewSoft
2014-03-19 00:08 - 1999-05-06 15:22 - 00027632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CTL3DV2.DLL
2014-03-19 00:07 - 2014-03-19 00:07 - 00000000 ____D () C:\Windows\SysWOW64\color
2014-03-19 00:07 - 2014-03-19 00:07 - 00000000 ____D () C:\Program Files (x86)\NewSoft
2014-03-18 18:43 - 2014-03-18 18:43 - 00000000 ____D () C:\Program Files\Common Files\EPSON
2014-03-18 18:35 - 2014-04-06 23:51 - 00000000 ____D () C:\Users\****\AppData\Roaming\Epson
2014-03-18 18:35 - 2014-03-21 21:58 - 00000000 ____D () C:\Program Files (x86)\Epson Software
2014-03-18 18:35 - 2014-03-18 18:35 - 00000000 ____D () C:\Program Files\EpsonNet
2014-03-18 18:35 - 2012-11-12 21:41 - 00535552 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\ensppui.dll
2014-03-18 18:35 - 2012-11-12 21:41 - 00535552 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enppui.dll
2014-03-18 18:35 - 2012-11-12 16:15 - 00558592 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\ensppmon.dll
2014-03-18 18:35 - 2012-11-12 16:15 - 00558592 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enppmon.dll
2014-03-18 18:35 - 2012-10-22 18:19 - 00219648 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enspres.dll
2014-03-18 18:35 - 2012-10-22 18:19 - 00219648 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enpres.dll
2014-03-18 18:34 - 2014-03-18 18:36 - 00000000 ____D () C:\Program Files (x86)\epson
2014-03-18 18:34 - 2012-07-24 01:00 - 00466432 _____ (Seiko Epson Corporation) C:\Windows\system32\esxw2ud.dll
2014-03-18 18:34 - 2011-12-12 01:00 - 00135824 _____ (Seiko Epson Corporation) C:\Windows\system32\escsvc64.exe
2014-03-18 18:33 - 2014-04-06 23:51 - 00000000 ____D () C:\ProgramData\EPSON
2014-03-18 18:33 - 2011-04-19 04:03 - 00120320 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_YLMJJE.DLL
2014-03-16 15:54 - 2014-03-16 15:54 - 00004141 _____ () C:\Users\****\Desktop\Danni.lnk
2014-03-16 15:54 - 2014-03-16 15:54 - 00001181 _____ () C:\Users\****\Desktop\****.lnk
2014-03-12 14:13 - 2014-03-12 14:13 - 02259352 _____ () C:\Users\****\AppData\Local\omesuperv.exe

==================== One Month Modified Files and Folders =======

2014-04-09 11:36 - 2014-04-09 11:36 - 00017905 _____ () C:\Users\****\Desktop\FRST.txt
2014-04-09 11:36 - 2014-04-09 11:36 - 00000000 ____D () C:\FRST
2014-04-09 11:35 - 2014-04-09 11:35 - 00000470 _____ () C:\Users\****\Desktop\defogger_disable.log
2014-04-09 11:35 - 2014-04-09 11:35 - 00000000 _____ () C:\Users\****\defogger_reenable
2014-04-09 11:35 - 2013-09-03 20:43 - 00000000 ____D () C:\Users\****
2014-04-09 11:33 - 2014-04-09 11:33 - 00380416 _____ () C:\Users\****\Desktop\vq5ki2pf.exe
2014-04-09 11:33 - 2014-04-09 11:31 - 00000000 ____D () C:\Users\****\Downloads\Trojaner Board
2014-04-09 11:30 - 2014-04-09 11:30 - 02157056 _____ (Farbar) C:\Users\****\Desktop\FRST64.exe
2014-04-09 11:29 - 2014-04-09 11:29 - 00050477 _____ () C:\Users\****\Desktop\Defogger.exe
2014-04-09 11:18 - 2014-04-09 11:18 - 00026852 _____ () C:\Users\****\Desktop\AVSCAN-20140409-091023-AC5ECD10.LOG
2014-04-09 10:49 - 2014-02-06 01:27 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-09 10:40 - 2013-10-11 16:03 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-09 08:57 - 2009-07-14 06:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-09 08:57 - 2009-07-14 06:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-09 08:54 - 2013-09-03 20:25 - 01127503 _____ () C:\Windows\WindowsUpdate.log
2014-04-09 08:50 - 2014-04-04 09:38 - 00000000 ____D () C:\ProgramData\GloboFleet
2014-04-09 08:50 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\****\AppData\Roaming\.oit
2014-04-09 08:50 - 2014-02-06 01:27 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-09 08:50 - 2013-09-03 22:18 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-04-09 08:50 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-09 08:50 - 2009-07-14 06:51 - 00055248 _____ () C:\Windows\setupact.log
2014-04-09 08:22 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-04-08 18:19 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-04-08 08:21 - 2014-04-08 08:21 - 00000000 ____D () C:\Users\****\AppData\Local\NVIDIA
2014-04-08 08:01 - 2013-09-03 22:18 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-04-08 08:01 - 2013-09-03 22:17 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-04-07 13:47 - 2014-04-05 18:45 - 00000000 ____D () C:\Users\****\Documents\Inso
2014-04-07 11:35 - 2010-11-21 08:50 - 00698688 _____ () C:\Windows\system32\perfh007.dat
2014-04-07 11:35 - 2010-11-21 08:50 - 00148828 _____ () C:\Windows\system32\perfc007.dat
2014-04-07 11:35 - 2009-07-14 07:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-07 00:00 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\****\Documents\My PageManager
2014-04-06 23:51 - 2014-03-18 18:35 - 00000000 ____D () C:\Users\****\AppData\Roaming\Epson
2014-04-06 23:51 - 2014-03-18 18:33 - 00000000 ____D () C:\ProgramData\EPSON
2014-04-06 23:27 - 2014-04-06 23:27 - 00000000 ____D () C:\Users\****\AppData\Local\SearchProtect
2014-04-06 23:27 - 2014-04-06 23:27 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2014-04-06 23:27 - 2014-04-05 22:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-04-06 23:27 - 2013-10-23 07:25 - 00000000 ____D () C:\ProgramData\DivX
2014-04-06 23:27 - 2013-10-23 07:25 - 00000000 ____D () C:\Program Files (x86)\DivX
2014-04-06 12:16 - 2014-04-05 21:39 - 00000000 ____D () C:\Users\****\Documents\Anwalt
2014-04-06 09:37 - 2013-09-03 22:10 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-04-06 09:35 - 2013-09-03 21:35 - 00000000 ____D () C:\Treiber
2014-04-06 08:53 - 2014-04-06 08:53 - 00001488 _____ () C:\Users\****\Desktop\Firefox.lnk
2014-04-06 08:39 - 2013-09-29 19:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-05 22:53 - 2014-04-05 22:53 - 00000000 ____D () C:\Users\****\AppData\Roaming\Thunderbird
2014-04-05 22:53 - 2014-04-05 22:53 - 00000000 ____D () C:\Users\****\AppData\Local\Thunderbird
2014-04-05 22:52 - 2014-04-05 22:52 - 00002086 _____ () C:\Users\Public\Desktop\Thunderbird.lnk
2014-04-05 22:42 - 2014-04-05 22:38 - 21987424 _____ (Mozilla) C:\Users\****\Downloads\Thunderbird_Setup_de24.4.0.exe
2014-04-05 22:24 - 2014-04-05 22:24 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-05 22:21 - 2014-04-05 22:21 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-05 22:21 - 2014-04-05 22:21 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-05 21:39 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\****\Documents\Bl*****
2014-04-05 18:46 - 2013-10-20 10:53 - 00134656 ___SH () C:\Users\****\Documents\Thumbs.db
2014-04-05 18:45 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\****\Documents\doc
2014-04-04 19:18 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\****\Documents\Ol**
2014-04-04 19:17 - 2014-04-04 19:17 - 00000000 ____D () C:\Users\****\Documents\Fahrerkarte
2014-04-04 12:56 - 2014-03-21 12:46 - 00000000 ____D () C:\Users\****\Documents\Re******
2014-04-04 10:52 - 2014-04-04 10:52 - 00001107 _____ () C:\Users\Public\Desktop\GloboFleet CC.lnk
2014-04-04 10:52 - 2014-04-04 10:52 - 00000000 ____D () C:\Program Files\Buyond GmbH
2014-04-04 10:52 - 2014-04-04 10:49 - 79962728 _____ (Buyond GmbH) C:\Users\****\Downloads\GloboFleet_CC_x64_Setup.exe
2014-04-04 10:44 - 2014-04-04 10:44 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WUDFUsbccidDriver_01_09_00.Wdf
2014-04-04 09:38 - 2014-04-04 09:38 - 00000000 ____D () C:\Program Files (x86)\Buyond_GmbH
2014-04-04 06:54 - 2014-04-04 06:53 - 48537520 _____ (Buyond GmbH) C:\Users\****\Downloads\GloboFleet_DriverCard_Checker_Setup.exe
2014-04-04 06:54 - 2014-04-04 06:53 - 48366056 _____ (Buyond GmbH) C:\Users\****\Downloads\GloboFleet_FileChecker_Setup.exe
2014-04-01 21:10 - 2014-04-01 21:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-01 21:09 - 2014-01-29 20:29 - 00000000 ____D () C:\Users\****\*******
2014-04-01 20:44 - 2014-02-06 01:27 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-04-01 20:44 - 2014-02-06 01:27 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-30 11:59 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\****\Documents\xls
2014-03-28 15:00 - 2014-03-28 15:00 - 00000000 ____D () C:\Users\****\AppData\Roaming\Snz
2014-03-28 15:00 - 2014-03-28 15:00 - 00000000 ____D () C:\Users\****\AppData\Local\simple_new_tab
2014-03-28 15:00 - 2014-02-06 01:28 - 00003096 _____ () C:\Windows\System32\Tasks\OMESupervisor
2014-03-28 15:00 - 2014-02-06 01:27 - 00003104 _____ () C:\Windows\System32\Tasks\Fifth
2014-03-28 15:00 - 2014-02-06 01:27 - 00000000 ____D () C:\Users\****\AppData\Roaming\Fifth
2014-03-28 14:59 - 2014-03-28 14:59 - 00000000 ____D () C:\Users\****\AppData\Roaming\SCheck
2014-03-26 00:10 - 2014-03-26 00:10 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files\iTunes
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files\iPod
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-26 00:05 - 2014-03-26 00:05 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-03-21 21:58 - 2014-03-18 18:35 - 00000000 ____D () C:\Program Files (x86)\Epson Software
2014-03-21 09:37 - 2009-07-14 06:45 - 00306472 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-21 09:13 - 2013-09-29 17:46 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-21 09:11 - 2013-09-29 17:46 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-20 23:03 - 2014-03-20 23:03 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 00832936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-03-20 23:03 - 2013-09-03 22:18 - 00062408 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-03-20 23:03 - 2013-09-03 22:18 - 00054216 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-03-20 23:03 - 2013-09-03 22:17 - 18302384 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-03-20 23:03 - 2013-09-03 22:17 - 00947808 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 14709720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-03-20 23:02 - 2014-03-20 23:02 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02715264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-03-20 23:02 - 2013-09-29 19:24 - 17755424 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-03-20 23:02 - 2013-09-03 22:17 - 03093280 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-03-20 23:02 - 2013-09-03 22:17 - 00024544 _____ () C:\Windows\system32\nvinfo.pb
2014-03-20 18:54 - 2010-11-21 05:47 - 00013394 _____ () C:\Windows\PFRO.log
2014-03-19 00:09 - 2014-03-19 00:09 - 00000264 _____ () C:\Windows\setup.iss
2014-03-19 00:09 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\****\AppData\Roaming\NewSoft
2014-03-19 00:09 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\****\AppData\Local\NewSoft
2014-03-19 00:07 - 2014-03-19 00:07 - 00000000 ____D () C:\Windows\SysWOW64\color
2014-03-19 00:07 - 2014-03-19 00:07 - 00000000 ____D () C:\Program Files (x86)\NewSoft
2014-03-19 00:07 - 2013-09-03 22:10 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-03-18 23:06 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\****\Documents\Bewerbungen
2014-03-18 18:43 - 2014-03-18 18:43 - 00000000 ____D () C:\Program Files\Common Files\EPSON
2014-03-18 18:36 - 2014-03-18 18:34 - 00000000 ____D () C:\Program Files (x86)\epson
2014-03-18 18:35 - 2014-03-18 18:35 - 00000000 ____D () C:\Program Files\EpsonNet
2014-03-18 18:34 - 2014-03-21 12:44 - 00000954 _____ () C:\Users\****\Desktop\EPSON Scan.lnk
2014-03-16 15:55 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\****\Documents\Ofenhaus
2014-03-16 15:54 - 2014-03-16 15:54 - 00004141 _____ () C:\Users\****\Desktop\Da***.lnk
2014-03-16 15:54 - 2014-03-16 15:54 - 00001181 _____ () C:\Users\****\Desktop\****.lnk
2014-03-12 14:13 - 2014-03-12 14:13 - 02259352 _____ () C:\Users\****\AppData\Local\omesuperv.exe
2014-03-12 13:12 - 2013-10-11 16:03 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-12 13:12 - 2013-09-29 19:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 13:12 - 2013-09-29 19:54 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-12 10:53 - 2014-02-06 01:11 - 00000000 ____D () C:\Users\****\AppData\Roaming\WindSolutions
2014-03-12 10:21 - 2014-02-06 01:11 - 00000000 ____D () C:\ProgramData\WindSolutions

Some content of TEMP:
====================
C:\Users\****\AppData\Local\Temp\AskSLib.dll
C:\Users\****\AppData\Local\Temp\avgnt.exe
C:\Users\****\AppData\Local\Temp\DivXSetup.exe
C:\Users\****\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\****\AppData\Local\Temp\LMkRstPt.exe
C:\Users\****\AppData\Local\Temp\nseD023.exe
C:\Users\****\AppData\Local\Temp\nsjAEBA.exe
C:\Users\****\AppData\Local\Temp\nsoCC6A.exe
C:\Users\****\AppData\Local\Temp\nszAB6F.exe
C:\Users\****\AppData\Local\Temp\nvStInst.exe
C:\Users\****\AppData\Local\Temp\VIS-2013-German.exe
C:\Users\****\AppData\Local\Temp\_is2DE9.exe
C:\Users\****\AppData\Local\Temp\_isF655.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-09 10:27

==================== End Of Log ============================
Addition

Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by **** at 2014-04-09 11:36:59
Running from C:\Users\****\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Avira SearchFree Toolbar (HKLM-x32\...\{41564952-412D-5637-00A7-A758B70C0A03}) (Version: 12.10.3.4690 - APN, LLC)
AVS Audio Converter 7.2 (HKLM-x32\...\AVS Audio Converter_is1) (Version: 7.2.2.529 - Online Media Technologies Ltd.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.100 - DivX, LLC)
Epson Benutzerhandbuch WF-3520 Series (HKLM-x32\...\WF-3520 Series Useg) (Version:  - )
Epson Connect Guide (HKLM-x32\...\Epson Connect Guide) (Version:  - )
Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.2.0 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM-x32\...\{8F01524C-0676-4CC1-B4AE-64753C723391}) (Version: 3.01.0005 - Seiko Epson Corporation)
Epson E-Web Print (HKLM-x32\...\{CEC98C2A-9ED5-49DA-9F3A-92434E0A4FA3}) (Version: 1.19.0000 - SEIKO EPSON CORPORATION)
Epson FAX Utility (HKLM-x32\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 1.31.00 - SEIKO EPSON CORPORATION)
Epson Netzwerkhandbuch WF-3520 Series (HKLM-x32\...\WF-3520 Series Netg) (Version:  - )
Epson PC-FAX Driver (HKLM-x32\...\EPSON PC-FAX Driver 2) (Version:  - )
EPSON Printer Finder (HKLM-x32\...\{B8ECD0D3-AE08-4891-B6C7-32F96B75EB6C}) (Version: 1.0.0 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON WF-3520 Series Printer Uninstall (HKLM\...\EPSON WF-3520 Series) (Version:  - SEIKO EPSON Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
GloboFleet CC (HKLM\...\{C657CCF7-A8DB-435A-A764-2AF538A88F5E}) (Version: 3.7.5 - Buyond GmbH)
GloboFleet DriverCard Checker (HKLM-x32\...\{5F4F0021-343C-49B1-AAED-846A35656948}) (Version: 1.2.1 - Buyond GmbH)
Google Chrome Frame (HKLM-x32\...\{8618AE04-1210-3C32-A8C3-45A5E44CD340}) (Version: 65.169.107 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.36 - Irfan Skiljan)
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 40 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417040FF}) (Version: 7.0.400 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
KYOCERA Client Tool (HKLM\...\KYOCERA Client Tool) (Version: 1.0.0026 - KYOCERA Document Solutions Inc.)
Kyocera Product Library (HKLM\...\Kyocera Product Library) (Version: 4.2.1909 - KYOCERA Document Solutions Inc.)
Logitech SetPoint 6.61 (HKLM\...\sp6) (Version: 6.61.15 - Logitech)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 24.4.0 - Mozilla)
Mozilla Thunderbird 24.4.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.4.0 (x86 de)) (Version: 24.4.0 - Mozilla)
Nur Entfernen der CopyTrans Suite möglich (HKCU\...\CopyTrans Suite) (Version: 2.37 - WindSolutions)
NVIDIA 3D Vision Controller-Treiber 326.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 326.01 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.145.1024 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3523 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden
NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.15.2 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 10.4.0 - NVIDIA Corporation) Hidden
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Presto! PageManager 9.03 SE (HKLM-x32\...\{04AF7536-446D-4F5A-8920-B4E885E4581B}) (Version: 9.03.06 - Newsoft Technology Corporation)
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.49.927.2011 - Realtek)
Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.12.11.11 - Conduit) <==== ATTENTION
Software Updater (HKLM-x32\...\{C09D747A-BD47-42A9-915E-CEB6B1BB7C11}) (Version: 4.2.7 - SEIKO EPSON CORPORATION) <==== ATTENTION
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VIS (HKLM-x32\...\VIS) (Version:  - ) <==== ATTENTION
VLC media player 2.1.0 (HKLM\...\VLC media player) (Version: 2.1.0 - VideoLAN)
WePrint (HKLM-x32\...\WePrint) (Version:  - EuroSmartz Ltd)
Winamp (HKLM-x32\...\Winamp) (Version: 5.65  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)

==================== Restore Points  =========================

01-04-2014 18:24:10 Geplanter Prüfpunkt
04-04-2014 07:37:05 Installed GloboFleet DriverCard Checker
04-04-2014 08:52:38 Installed GloboFleet CC
05-04-2014 16:41:29 Installed Software Updater
05-04-2014 20:20:52 Removed Java(TM) 6 Update 35
05-04-2014 20:21:25 Installed Java 7 Update 51
06-04-2014 07:26:34 Gerätetreiber-Paketinstallation: EPSON Drucker
06-04-2014 07:37:05 Installiert Realtek Ethernet Controller Driver
08-04-2014 05:58:46 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {2AC5A2AB-8CEB-43D6-901C-E3507E799DF3} - System32\Tasks\Fifth => C:\Users\****\AppData\Roaming\Fifth\Fifth.exe [2014-03-12] () <==== ATTENTION
Task: {9902649F-0ED4-4AE0-91F2-E9FBF8963E7F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-06] (Google Inc.)
Task: {A67324AC-50DA-4043-9535-7A17BA6775A7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-06] (Google Inc.)
Task: {B1FA0F76-8125-43B2-84E7-48914B2C7B0F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12] (Adobe Systems Incorporated)
Task: {FFF5F4BE-3546-485A-967F-0C82927EE08E} - System32\Tasks\OMESupervisor => C:\Users\****\AppData\Local\omesuperv.exe [2014-03-12] () <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-09-03 22:18 - 2014-03-04 15:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-01-10 07:26 - 2014-01-10 07:26 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
2013-09-29 13:05 - 2013-09-29 13:04 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-09-14 02:51 - 2013-09-14 02:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll
2013-09-14 02:50 - 2013-09-14 02:50 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll
2014-03-19 00:07 - 2008-11-17 15:56 - 00102400 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\nsSign.dll
2014-03-19 00:07 - 2010-05-07 12:46 - 00057344 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PerformOcr.dll
2014-03-19 00:07 - 2010-12-23 14:17 - 00057344 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMISM.dll
2014-03-19 00:07 - 2007-03-30 11:24 - 00104528 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\Qem.dll
2014-03-19 00:07 - 2010-12-29 18:52 - 00147456 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMCommon.dll
2014-03-19 00:07 - 2008-08-25 18:19 - 00069632 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PHooKDlg.dll
2014-03-19 00:07 - 2009-11-26 18:49 - 00081920 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\NetFun2k.dll
2014-03-19 00:07 - 2011-03-11 11:47 - 00151040 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\ScanModule.dll
2014-03-19 00:07 - 2009-09-09 15:44 - 00151552 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMANO.dll
2014-03-19 00:07 - 2007-03-30 10:49 - 00104528 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\ComClass.dll
2014-03-19 00:07 - 2010-11-30 17:42 - 00352256 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMTree.dll
2014-03-19 00:07 - 2010-10-22 11:01 - 00139264 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMSet.dll
2014-03-19 00:07 - 2010-12-29 19:32 - 00614400 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMDB_N.dll
2014-03-19 00:07 - 2009-08-06 11:22 - 00421888 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\FT.dll
2014-03-19 00:07 - 2010-09-09 19:00 - 00061440 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMINSO.dll
2014-03-19 00:07 - 2010-07-13 11:48 - 00106496 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMProp.dll
2014-03-19 00:07 - 2007-08-31 18:51 - 00040960 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMVoice.dll
2014-03-19 00:07 - 2010-09-08 18:10 - 00073728 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\OutlookVBA.dll
2014-03-19 00:07 - 2009-11-27 18:38 - 00331776 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMAppBar.dll
2014-03-19 00:07 - 2010-11-26 11:33 - 04583424 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMView.dll
2014-03-19 00:07 - 2007-03-30 11:01 - 00038992 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\NsOEMKey.dll
2014-03-19 00:07 - 2010-10-22 11:22 - 00090112 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMSave.dll
2014-03-19 00:07 - 2010-08-03 11:44 - 00049152 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMOffice.dll
2014-03-19 00:07 - 2010-09-26 12:13 - 00430080 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMPageVW.dll
2014-03-19 00:07 - 2010-03-02 16:09 - 00102400 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMDocVW.dll
2014-03-19 00:07 - 2009-06-26 10:03 - 00086016 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMApSet.dll
2014-03-19 00:07 - 2010-08-03 11:51 - 01036288 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\SlideBarDLL.dll
2014-03-19 00:07 - 2009-12-04 18:20 - 00323584 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMAnoSet.dll
2014-03-19 00:07 - 2010-09-26 12:13 - 00184320 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMImgVW.dll
2014-03-19 00:07 - 2008-08-25 17:16 - 00040960 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMIEVW.dll
2014-03-19 00:07 - 2010-09-08 11:52 - 00036864 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMPDFView.dll
2014-03-19 00:07 - 2010-04-27 16:20 - 00065536 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMStatus.dll
2014-03-19 00:07 - 2011-01-21 16:05 - 00258048 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMScnSet.dll
2014-03-19 00:07 - 2007-03-30 10:57 - 00034896 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\Import.dll
2014-03-19 00:07 - 2010-11-26 11:45 - 00090112 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMImageSplitter.dll
2014-01-10 07:28 - 2014-01-10 07:28 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2014-04-01 21:10 - 2014-04-01 21:10 - 03642480 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/09/2014 08:50:24 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/09/2014 08:20:33 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/08/2014 09:33:16 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/08/2014 08:51:49 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/08/2014 07:59:15 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/08/2014 06:07:50 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/08/2014 05:26:13 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/08/2014 11:59:55 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/08/2014 11:53:56 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/08/2014 11:35:16 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (04/09/2014 08:51:15 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (04/09/2014 08:21:33 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (04/09/2014 08:21:04 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Echtzeit-Scanner" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/09/2014 08:21:04 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Browser-Schutz" ist vom Dienst "Avira Echtzeit-Scanner" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%0

Error: (04/09/2014 08:21:04 AM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (04/09/2014 08:21:03 AM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (04/08/2014 09:34:15 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (04/08/2014 08:52:49 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (04/08/2014 08:00:14 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (04/08/2014 06:08:49 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)


Microsoft Office Sessions:
=========================
Error: (04/09/2014 08:50:24 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/09/2014 08:20:33 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/08/2014 09:33:16 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/08/2014 08:51:49 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/08/2014 07:59:15 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/08/2014 06:07:50 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/08/2014 05:26:13 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/08/2014 11:59:55 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/08/2014 11:53:56 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/08/2014 11:35:16 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Percentage of memory in use: 43%
Total physical RAM: 4094.49 MB
Available physical RAM: 2316.16 MB
Total Pagefile: 8187.16 MB
Available Pagefile: 6123.34 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:297.99 GB) (Free:232.61 GB) NTFS
Drive d: (Setup) (CDROM) (Total:0.09 GB) (Free:0 GB) CDFS
Drive n: (Wombel) (Fixed) (Total:1863.01 GB) (Free:1128.25 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: C13EC13E)

Partition: GPT Partition Type.

========================================================
Disk: 5 (MBR Code: Windows XP) (Size: 1863 GB) (Disk ID: 00080E6D)
Partition 1: (Not Active) - (Size=-198627557376) - (Type=07 NTFS)

==================== End Of Log ============================
gmer

Code:
ATTFilter
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-04-09 11:50:08
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 SAMSUNG_HD321KJ rev.CP100-12 298,09GB
Running: vq5ki2pf.exe; Driver: C:\Users\****\AppData\Local\Temp\pxldapow.sys


---- Kernel code sections - GMER 2.1 ----

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 818                                                                                fffff800031b9122 81 bytes [D8, CF, 11, F2, D1, 76, 4B, ...]
INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 900                                                                                fffff800031b9174 26 bytes [B9, 00, 86, 17, 5C, 44, E1, ...]

---- User code sections - GMER 2.1 ----

.text     C:\PROGRA~2\SearchProtect\Main\bin\CltMngSvc.exe[2508] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                    00000000772b1465 2 bytes [2B, 77]
.text     C:\PROGRA~2\SearchProtect\Main\bin\CltMngSvc.exe[2508] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                   00000000772b14bb 2 bytes [2B, 77]
.text     ...                                                                                                                                               * 2
.text     C:\PROGRA~2\SearchProtect\SearchProtect\bin\cltmng.exe[2700] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                              00000000772b1465 2 bytes [2B, 77]
.text     C:\PROGRA~2\SearchProtect\SearchProtect\bin\cltmng.exe[2700] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                             00000000772b14bb 2 bytes [2B, 77]
.text     ...                                                                                                                                               * 2
.text     C:\PROGRA~2\SearchProtect\UI\bin\cltmngui.exe[2760] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                       00000000772b1465 2 bytes [2B, 77]
.text     C:\PROGRA~2\SearchProtect\UI\bin\cltmngui.exe[2760] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                      00000000772b14bb 2 bytes [2B, 77]
.text     ...                                                                                                                                               * 2
.text     C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe[3420] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   00000000772b1465 2 bytes [2B, 77]
.text     C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe[3420] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  00000000772b14bb 2 bytes [2B, 77]
.text     ...                                                                                                                                               * 2
.text     C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[3692] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69             00000000772b1465 2 bytes [2B, 77]
.text     C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[3692] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155            00000000772b14bb 2 bytes [2B, 77]
.text     ...                                                                                                                                               * 2
?         C:\Windows\system32\mssprxy.dll [1432] entry point in ".rdata" section                                                                            000000006daf71e6

---- EOF - GMER 2.1 ----
So. Ich hoffe das das alles ist.
Vielen Dank auch schon mal im voraus.

Bis dahin
****

Alt 09.04.2014, 13:58   #2
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Startseite bei Firefox lässt sich nicht ändern. - Standard

Startseite bei Firefox lässt sich nicht ändern.


Hallo und

Adware/Junkware/Toolbars entfernen


1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).




2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.




3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________
Alt 09.04.2014, 21:14   #3
wombel74
 
Startseite bei Firefox lässt sich nicht ändern. - Standard

Startseite bei Firefox lässt sich nicht ändern.


Hi.

Vielen Dank erstmal für die Hilfe. Ich häng die Dateien mal an. Nur von dem FRST gibt es keine Addition.txt, wurde nicht erstellt. Beim ersten mal schon.

Adwcleaner

AdwCleaner Logfile:
Code:
ATTFilter
# AdwCleaner v3.023 - Bericht erstellt am 09/04/2014 um 21:40:18
# Aktualisiert 01/04/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : **** - PC
# Gestartet von : C:\Users\****\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****

Dienst Gelöscht : CltMngSvc

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Program Files (x86)\SearchProtect
Ordner Gelöscht : C:\Users\****\AppData\Local\ext_offermosquito
Ordner Gelöscht : C:\Users\****\AppData\Local\SearchProtect
Ordner Gelöscht : C:\Users\****\AppData\Local\Temp\OCS
Ordner Gelöscht : C:\Users\****\AppData\LocalLow\boost_interprocess
Ordner Gelöscht : C:\Users\****\AppData\Roaming\Common\LuaRT
Ordner Gelöscht : C:\Users\****\AppData\Roaming\DataMgr
Ordner Gelöscht : C:\Users\****\AppData\Roaming\Intermediate
Ordner Gelöscht : C:\Users\****\AppData\Roaming\SCheck
Ordner Gelöscht : C:\Users\****\AppData\Roaming\Snz
Ordner Gelöscht : C:\Users\****\AppData\Roaming\SSync
Ordner Gelöscht : C:\Users\****\AppData\Roaming\Windows Net Data
Datei Gelöscht : C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\Extensions\om@offermosquito.com.xpi
Datei Gelöscht : C:\END
Datei Gelöscht : C:\Users\****\AppData\Local\omesuperv.exe
Datei Gelöscht : C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\searchplugins\conduit-search.xml
Datei Gelöscht : C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\searchplugins\search.xml
Datei Gelöscht : C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\user.js

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [DataMgr]
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Intermediate]
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [scheck]
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Snoozer]
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ssync]
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{82B16A3D-F03E-4565-A532-666B219C9A53}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{82B16A3D-F03E-4565-A532-666B219C9A53}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3BC93E76-92F8-5FDA-B676-5AFEE3735BF1}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82B16A3D-F03E-4565-A532-666B219C9A53}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3BC93E76-92F8-5FDA-B676-5AFEE3735BF1}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\OfferMosquito
Schlüssel Gelöscht : HKCU\Software\Protector
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKLM\Software\Conduit
Schlüssel Gelöscht : HKLM\Software\SearchProtect
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\DivX\Install\Setup\WizardLayout\ConduitToolbar

***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16843


-\\ Mozilla Firefox v28.0 (de)

[ Datei : C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\prefs.js ]

Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://search.conduit.com/?gd=&ctid=CT3321902&octid=EB_ORIGINAL_CTID&ISID=M4E9963BF-F6BE-4B5D-AD1B-6D8507108DA2&SearchSource=69&CUI=&SSPV=&Lay=1&UM=5&UP=SP1A6882AB-A2C[...]

*************************

AdwCleaner[R0].txt - [4409 octets] - [09/04/2014 21:39:24]
AdwCleaner[S0].txt - [3973 octets] - [09/04/2014 21:40:18]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4033 octets] ##########
--- --- ---


JRT

Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by **** on 09.04.2014 at 21:45:17,51
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\apntbmon
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-21-785402712-3989741325-3718471224-1000\Software\Microsoft\Internet Explorer\Main\\Start Page



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\apn"



~~~ FireFox

Emptied folder: C:\Users\****\AppData\Roaming\mozilla\firefox\profiles\lyuir5hg.default\minidumps [24 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 09.04.2014 at 21:52:55,78
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014 (ATTENTION: ====> FRST version is 27 days old and could be outdated)
Ran by **** (administrator) on PC on 09-04-2014 21:58:41
Running from C:\Users\****\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Seiko Epson Corporation) C:\Windows\system32\EscSvc64.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIJJE.EXE
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIJJE.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(NewSoft Technology Corporation) C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMSpeed.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Buyond GmbH) C:\Program Files\Buyond GmbH\GloboFleet_CC\GloboFleet_CC.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [3091224 2013-07-31] (Logitech, Inc.)
HKLM\...\Run: [WrtMon.exe] - C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe [26448 2008-05-24] (NewSoft Technology Corporation)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1797064 2014-03-20] (NVIDIA Corporation)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2014-02-14] (DivX, LLC)
HKLM-x32\...\Run: [FUFAXRCV] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [502952 2012-07-09] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [FUFAXSTM] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [863400 2012-07-09] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [EEventManager] - C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058912 2012-04-02] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [PMSpeed] - C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMSpeed.EXE [116632 2010-07-29] (NewSoft Technology Corporation)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM-x32\...\Run: [GloboFleet CC] - C:\Program Files\Buyond GmbH\GloboFleet_CC\GloboFleet_CC.exe [366400 2013-11-21] (Buyond GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [EPLTarget\P0000000000000000] - C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIJJE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [EPLTarget\P0000000000000001] - C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIJJE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\MountPoints2: {f831ea8a-395f-11e3-b8af-806e6f6e6963} - D:\Setup.exe
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll File Not Found

==================== Internet (Whitelisted) ====================

BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
BHO-x32: No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
BHO-x32: Simple New Tab Bho - {5C2DD58F-613F-4580-8AC0-F10D760AF938} - C:\Users\****\AppData\Local\simple_new_tab\simple_new_tab.dll (Temp Company Ltd)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ChromeFrame BHO - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll (Google Inc.)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} -  No File
Handler-x32: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll (Google Inc.)
Tcpip\..\Interfaces\{DDA62AC0-5A0C-4D51-A1D7-0CEFFFD29E9F}: [NameServer]145.253.2.171,145.253.2.75

FireFox:
========
FF ProfilePath: C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: bebomedia.com/OfferMosquitoIEHelper - C:\Users\****\AppData\Local\ext_offermosquito\npOfferMosquitoIEHelper.dll No File
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Simple New Tab - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\Extensions\snt@dotlabs.co.xpi [2013-11-13]
FF Extension: Adblock Plus - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-03-06]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2014-01-30]
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2014-03-21]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1017424 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2014-02-13] (APN LLC.)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2014-01-30] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2014-01-30] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-01-30] (Avira Operations GmbH & Co. KG)
R3 Linksys_adapter_H; C:\Windows\System32\DRIVERS\AE1200w764.sys [1254464 2011-03-29] (Broadcom Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-09 21:58 - 2014-04-09 21:58 - 00015194 _____ () C:\Users\****\Desktop\FRST.txt
2014-04-09 21:52 - 2014-04-09 21:58 - 00001882 _____ () C:\Users\****\Desktop\JRT.txt
2014-04-09 21:45 - 2014-04-09 21:45 - 00000000 ____D () C:\Windows\ERUNT
2014-04-09 21:45 - 2014-04-09 21:44 - 00004117 _____ () C:\Users\****\Desktop\AdwCleaner[S0].txt
2014-04-09 21:39 - 2014-04-09 21:40 - 00000000 ____D () C:\AdwCleaner
2014-04-09 21:36 - 2014-04-09 15:22 - 01016261 _____ (Thisisu) C:\Users\****\Desktop\JRT.exe
2014-04-09 21:34 - 2014-04-09 15:21 - 01426178 _____ () C:\Users\****\Desktop\adwcleaner.exe
2014-04-09 14:32 - 2014-04-09 14:35 - 00000000 ____D () C:\Users\****\Desktop\OpenHardwareMonitor
2014-04-09 14:31 - 2014-04-09 14:31 - 00526371 _____ () C:\Users\****\Desktop\openhardwaremonitor-v0.6.0-beta.zip
2014-04-09 11:36 - 2014-04-09 21:58 - 00000000 ____D () C:\FRST
2014-04-09 11:35 - 2014-04-09 11:35 - 00000000 _____ () C:\Users\****\defogger_reenable
2014-04-09 11:31 - 2014-04-09 21:48 - 00000000 ____D () C:\Users\****\Downloads\Trojaner Board
2014-04-09 11:30 - 2014-04-09 11:30 - 02157056 _____ (Farbar) C:\Users\****\Desktop\FRST64.exe
2014-04-08 08:21 - 2014-04-08 08:21 - 00000000 ____D () C:\Users\****\AppData\Local\NVIDIA
2014-04-08 08:01 - 2014-03-04 13:32 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-04-08 07:52 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-04-08 07:52 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-04-08 07:52 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-04-06 09:37 - 2011-09-29 11:30 - 00107552 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
2014-04-06 09:37 - 2011-09-29 11:30 - 00074272 _____ () C:\Windows\system32\RtNicProp64.dll
2014-04-06 08:53 - 2014-04-06 08:53 - 00001488 _____ () C:\Users\****\Desktop\Firefox.lnk
2014-04-06 01:36 - 2013-10-03 10:57 - 00001062 _____ () C:\Users\****\Desktop\OpenOffice Calc.lnk
2014-04-06 01:35 - 2013-10-03 10:57 - 00001098 _____ () C:\Users\****\Desktop\OpenOffice Writer.lnk
2014-04-05 22:53 - 2014-04-05 22:53 - 00000000 ____D () C:\Users\****\AppData\Roaming\Thunderbird
2014-04-05 22:53 - 2014-04-05 22:53 - 00000000 ____D () C:\Users\****\AppData\Local\Thunderbird
2014-04-05 22:52 - 2014-04-06 23:27 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-04-05 22:52 - 2014-04-05 22:52 - 00002086 _____ () C:\Users\Public\Desktop\Thunderbird.lnk
2014-04-05 22:38 - 2014-04-05 22:42 - 21987424 _____ (Mozilla) C:\Users\****\Downloads\Thunderbird_Setup_de24.4.0.exe
2014-04-05 22:24 - 2014-04-05 22:24 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-05 22:21 - 2014-04-05 22:21 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-05 22:21 - 2014-04-05 22:21 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-05 21:39 - 2014-04-06 12:16 - 00000000 ____D () C:\Users\****\Documents\Anwalt
2014-04-05 18:45 - 2014-04-07 13:47 - 00000000 ____D () C:\Users\****\Documents\Inso
2014-04-04 19:17 - 2014-04-04 19:17 - 00000000 ____D () C:\Users\****\Documents\Fahrerkarte
2014-04-04 10:52 - 2014-04-04 10:52 - 00001107 _____ () C:\Users\Public\Desktop\GloboFleet CC.lnk
2014-04-04 10:52 - 2014-04-04 10:52 - 00000000 ____D () C:\Program Files\Buyond GmbH
2014-04-04 10:49 - 2014-04-04 10:52 - 79962728 _____ (Buyond GmbH) C:\Users\****\Downloads\GloboFleet_CC_x64_Setup.exe
2014-04-04 10:44 - 2014-04-04 10:44 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WUDFUsbccidDriver_01_09_00.Wdf
2014-04-04 09:38 - 2014-04-09 21:42 - 00000000 ____D () C:\ProgramData\GloboFleet
2014-04-04 09:38 - 2014-04-04 09:38 - 00000000 ____D () C:\Program Files (x86)\Buyond_GmbH
2014-04-04 06:53 - 2014-04-04 06:54 - 48537520 _____ (Buyond GmbH) C:\Users\****\Downloads\GloboFleet_DriverCard_Checker_Setup.exe
2014-04-04 06:53 - 2014-04-04 06:54 - 48366056 _____ (Buyond GmbH) C:\Users\****\Downloads\GloboFleet_FileChecker_Setup.exe
2014-04-01 21:10 - 2014-04-01 21:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-28 15:00 - 2014-03-28 15:00 - 00000000 ____D () C:\Users\****\AppData\Local\simple_new_tab
2014-03-26 00:10 - 2014-03-26 00:10 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files\iTunes
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files\iPod
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-26 00:05 - 2014-03-26 00:05 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-03-21 12:46 - 2014-04-04 12:56 - 00000000 ____D () C:\Users\****\Documents\Re******
2014-03-21 12:44 - 2014-03-18 18:34 - 00000954 _____ () C:\Users\****\Desktop\EPSON Scan.lnk
2014-03-21 09:10 - 2014-02-23 10:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-21 09:10 - 2014-02-23 10:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-21 09:10 - 2014-02-23 10:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-21 09:10 - 2014-02-23 10:12 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 03960320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-21 09:10 - 2014-02-23 08:54 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-21 09:10 - 2014-02-23 08:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-21 09:10 - 2014-02-23 08:31 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-21 09:10 - 2014-02-23 07:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-03-21 09:10 - 2014-02-23 07:35 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-03-21 09:09 - 2014-02-23 10:13 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-21 09:09 - 2014-02-23 10:12 - 19273216 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-21 09:09 - 2014-02-23 10:11 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-21 09:09 - 2014-02-23 10:11 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-21 09:09 - 2014-02-23 08:54 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-21 09:09 - 2014-02-23 08:53 - 14358016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-21 09:09 - 2014-02-23 08:53 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-21 09:09 - 2014-02-23 08:53 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-21 09:09 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-21 09:09 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-21 09:09 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-21 09:09 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-21 09:09 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 00832936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 14709720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-03-20 23:02 - 2014-03-20 23:02 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02715264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-03-19 00:09 - 2014-04-09 21:42 - 00000000 ____D () C:\Users\****\AppData\Roaming\.oit
2014-03-19 00:09 - 2014-04-07 00:00 - 00000000 ____D () C:\Users\****\Documents\My PageManager
2014-03-19 00:09 - 2014-03-19 00:09 - 00000264 _____ () C:\Windows\setup.iss
2014-03-19 00:09 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\****\AppData\Roaming\NewSoft
2014-03-19 00:09 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\****\AppData\Local\NewSoft
2014-03-19 00:08 - 1999-05-06 15:22 - 00027632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CTL3DV2.DLL
2014-03-19 00:07 - 2014-03-19 00:07 - 00000000 ____D () C:\Windows\SysWOW64\color
2014-03-19 00:07 - 2014-03-19 00:07 - 00000000 ____D () C:\Program Files (x86)\NewSoft
2014-03-18 18:43 - 2014-03-18 18:43 - 00000000 ____D () C:\Program Files\Common Files\EPSON
2014-03-18 18:35 - 2014-04-06 23:51 - 00000000 ____D () C:\Users\****\AppData\Roaming\Epson
2014-03-18 18:35 - 2014-03-21 21:58 - 00000000 ____D () C:\Program Files (x86)\Epson Software
2014-03-18 18:35 - 2014-03-18 18:35 - 00000000 ____D () C:\Program Files\EpsonNet
2014-03-18 18:35 - 2012-11-12 21:41 - 00535552 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\ensppui.dll
2014-03-18 18:35 - 2012-11-12 21:41 - 00535552 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enppui.dll
2014-03-18 18:35 - 2012-11-12 16:15 - 00558592 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\ensppmon.dll
2014-03-18 18:35 - 2012-11-12 16:15 - 00558592 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enppmon.dll
2014-03-18 18:35 - 2012-10-22 18:19 - 00219648 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enspres.dll
2014-03-18 18:35 - 2012-10-22 18:19 - 00219648 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enpres.dll
2014-03-18 18:34 - 2014-03-18 18:36 - 00000000 ____D () C:\Program Files (x86)\epson
2014-03-18 18:34 - 2012-07-24 01:00 - 00466432 _____ (Seiko Epson Corporation) C:\Windows\system32\esxw2ud.dll
2014-03-18 18:34 - 2011-12-12 01:00 - 00135824 _____ (Seiko Epson Corporation) C:\Windows\system32\escsvc64.exe
2014-03-18 18:33 - 2014-04-06 23:51 - 00000000 ____D () C:\ProgramData\EPSON
2014-03-18 18:33 - 2011-04-19 04:03 - 00120320 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_YLMJJE.DLL
2014-03-16 15:54 - 2014-03-16 15:54 - 00004141 _____ () C:\Users\****\Desktop\Danni.lnk
2014-03-16 15:54 - 2014-03-16 15:54 - 00001181 _____ () C:\Users\****\Desktop\****.lnk

==================== One Month Modified Files and Folders =======

2014-04-09 21:59 - 2014-04-09 21:58 - 00015194 _____ () C:\Users\****\Desktop\FRST.txt
2014-04-09 21:58 - 2014-04-09 21:52 - 00001882 _____ () C:\Users\****\Desktop\JRT.txt
2014-04-09 21:58 - 2014-04-09 11:36 - 00000000 ____D () C:\FRST
2014-04-09 21:50 - 2009-07-14 06:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-09 21:50 - 2009-07-14 06:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-09 21:49 - 2014-02-06 01:27 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-09 21:48 - 2014-04-09 11:31 - 00000000 ____D () C:\Users\****\Downloads\Trojaner Board
2014-04-09 21:45 - 2014-04-09 21:45 - 00000000 ____D () C:\Windows\ERUNT
2014-04-09 21:44 - 2014-04-09 21:45 - 00004117 _____ () C:\Users\****\Desktop\AdwCleaner[S0].txt
2014-04-09 21:42 - 2014-04-04 09:38 - 00000000 ____D () C:\ProgramData\GloboFleet
2014-04-09 21:42 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\****\AppData\Roaming\.oit
2014-04-09 21:41 - 2014-02-06 01:27 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-09 21:41 - 2013-09-03 22:18 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-04-09 21:41 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-09 21:41 - 2009-07-14 06:51 - 00055416 _____ () C:\Windows\setupact.log
2014-04-09 21:40 - 2014-04-09 21:39 - 00000000 ____D () C:\AdwCleaner
2014-04-09 21:40 - 2013-10-11 16:03 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-09 21:40 - 2013-09-03 20:25 - 01150272 _____ () C:\Windows\WindowsUpdate.log
2014-04-09 15:22 - 2014-04-09 21:36 - 01016261 _____ (Thisisu) C:\Users\****\Desktop\JRT.exe
2014-04-09 15:21 - 2014-04-09 21:34 - 01426178 _____ () C:\Users\****\Desktop\adwcleaner.exe
2014-04-09 14:35 - 2014-04-09 14:32 - 00000000 ____D () C:\Users\****\Desktop\OpenHardwareMonitor
2014-04-09 14:31 - 2014-04-09 14:31 - 00526371 _____ () C:\Users\****\Desktop\openhardwaremonitor-v0.6.0-beta.zip
2014-04-09 11:35 - 2014-04-09 11:35 - 00000000 _____ () C:\Users\****\defogger_reenable
2014-04-09 11:35 - 2013-09-03 20:43 - 00000000 ____D () C:\Users\****
2014-04-09 11:30 - 2014-04-09 11:30 - 02157056 _____ (Farbar) C:\Users\****\Desktop\FRST64.exe
2014-04-09 08:22 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-04-08 18:19 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-04-08 08:21 - 2014-04-08 08:21 - 00000000 ____D () C:\Users\****\AppData\Local\NVIDIA
2014-04-08 08:01 - 2013-09-03 22:18 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-04-08 08:01 - 2013-09-03 22:17 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-04-07 13:47 - 2014-04-05 18:45 - 00000000 ____D () C:\Users\****\Documents\Inso
2014-04-07 11:35 - 2010-11-21 08:50 - 00698688 _____ () C:\Windows\system32\perfh007.dat
2014-04-07 11:35 - 2010-11-21 08:50 - 00148828 _____ () C:\Windows\system32\perfc007.dat
2014-04-07 11:35 - 2009-07-14 07:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-07 00:00 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\****\Documents\My PageManager
2014-04-06 23:51 - 2014-03-18 18:35 - 00000000 ____D () C:\Users\****\AppData\Roaming\Epson
2014-04-06 23:51 - 2014-03-18 18:33 - 00000000 ____D () C:\ProgramData\EPSON
2014-04-06 23:27 - 2014-04-05 22:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-04-06 23:27 - 2013-10-23 07:25 - 00000000 ____D () C:\ProgramData\DivX
2014-04-06 23:27 - 2013-10-23 07:25 - 00000000 ____D () C:\Program Files (x86)\DivX
2014-04-06 12:16 - 2014-04-05 21:39 - 00000000 ____D () C:\Users\****\Documents\Anwalt
2014-04-06 09:37 - 2013-09-03 22:10 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-04-06 09:35 - 2013-09-03 21:35 - 00000000 ____D () C:\Treiber
2014-04-06 08:53 - 2014-04-06 08:53 - 00001488 _____ () C:\Users\****\Desktop\Firefox.lnk
2014-04-06 08:39 - 2013-09-29 19:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-05 22:53 - 2014-04-05 22:53 - 00000000 ____D () C:\Users\****\AppData\Roaming\Thunderbird
2014-04-05 22:53 - 2014-04-05 22:53 - 00000000 ____D () C:\Users\****\AppData\Local\Thunderbird
2014-04-05 22:52 - 2014-04-05 22:52 - 00002086 _____ () C:\Users\Public\Desktop\Thunderbird.lnk
2014-04-05 22:42 - 2014-04-05 22:38 - 21987424 _____ (Mozilla) C:\Users\****\Downloads\Thunderbird_Setup_de24.4.0.exe
2014-04-05 22:24 - 2014-04-05 22:24 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-05 22:21 - 2014-04-05 22:21 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-05 22:21 - 2014-04-05 22:21 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-05 21:39 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\****\Documents\Bl*****
2014-04-05 18:46 - 2013-10-20 10:53 - 00134656 ___SH () C:\Users\****\Documents\Thumbs.db
2014-04-05 18:45 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\****\Documents\doc
2014-04-04 19:18 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\****\Documents\Olli
2014-04-04 19:17 - 2014-04-04 19:17 - 00000000 ____D () C:\Users\****\Documents\Fahrerkarte
2014-04-04 12:56 - 2014-03-21 12:46 - 00000000 ____D () C:\Users\****\Documents\Re******
2014-04-04 10:52 - 2014-04-04 10:52 - 00001107 _____ () C:\Users\Public\Desktop\GloboFleet CC.lnk
2014-04-04 10:52 - 2014-04-04 10:52 - 00000000 ____D () C:\Program Files\Buyond GmbH
2014-04-04 10:52 - 2014-04-04 10:49 - 79962728 _____ (Buyond GmbH) C:\Users\****\Downloads\GloboFleet_CC_x64_Setup.exe
2014-04-04 10:44 - 2014-04-04 10:44 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WUDFUsbccidDriver_01_09_00.Wdf
2014-04-04 09:38 - 2014-04-04 09:38 - 00000000 ____D () C:\Program Files (x86)\Buyond_GmbH
2014-04-04 06:54 - 2014-04-04 06:53 - 48537520 _____ (Buyond GmbH) C:\Users\****\Downloads\GloboFleet_DriverCard_Checker_Setup.exe
2014-04-04 06:54 - 2014-04-04 06:53 - 48366056 _____ (Buyond GmbH) C:\Users\****\Downloads\GloboFleet_FileChecker_Setup.exe
2014-04-01 21:10 - 2014-04-01 21:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-01 21:09 - 2014-01-29 20:29 - 00000000 ____D () C:\Users\****\*******
2014-04-01 20:44 - 2014-02-06 01:27 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-04-01 20:44 - 2014-02-06 01:27 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-30 11:59 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\****\Documents\xls
2014-03-28 15:00 - 2014-03-28 15:00 - 00000000 ____D () C:\Users\****\AppData\Local\simple_new_tab
2014-03-28 15:00 - 2014-02-06 01:28 - 00003096 _____ () C:\Windows\System32\Tasks\OMESupervisor
2014-03-28 15:00 - 2014-02-06 01:27 - 00003104 _____ () C:\Windows\System32\Tasks\Fifth
2014-03-28 15:00 - 2014-02-06 01:27 - 00000000 ____D () C:\Users\****\AppData\Roaming\Fifth
2014-03-26 00:10 - 2014-03-26 00:10 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files\iTunes
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files\iPod
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-26 00:05 - 2014-03-26 00:05 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-03-21 21:58 - 2014-03-18 18:35 - 00000000 ____D () C:\Program Files (x86)\Epson Software
2014-03-21 09:37 - 2009-07-14 06:45 - 00306472 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-21 09:13 - 2013-09-29 17:46 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-21 09:11 - 2013-09-29 17:46 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-20 23:03 - 2014-03-20 23:03 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 00832936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-03-20 23:03 - 2013-09-03 22:18 - 00062408 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-03-20 23:03 - 2013-09-03 22:18 - 00054216 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-03-20 23:03 - 2013-09-03 22:17 - 18302384 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-03-20 23:03 - 2013-09-03 22:17 - 00947808 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 14709720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-03-20 23:02 - 2014-03-20 23:02 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02715264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-03-20 23:02 - 2013-09-29 19:24 - 17755424 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-03-20 23:02 - 2013-09-03 22:17 - 03093280 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-03-20 23:02 - 2013-09-03 22:17 - 00024544 _____ () C:\Windows\system32\nvinfo.pb
2014-03-20 18:54 - 2010-11-21 05:47 - 00013394 _____ () C:\Windows\PFRO.log
2014-03-19 00:09 - 2014-03-19 00:09 - 00000264 _____ () C:\Windows\setup.iss
2014-03-19 00:09 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\****\AppData\Roaming\NewSoft
2014-03-19 00:09 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\****\AppData\Local\NewSoft
2014-03-19 00:07 - 2014-03-19 00:07 - 00000000 ____D () C:\Windows\SysWOW64\color
2014-03-19 00:07 - 2014-03-19 00:07 - 00000000 ____D () C:\Program Files (x86)\NewSoft
2014-03-19 00:07 - 2013-09-03 22:10 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-03-18 23:06 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\****\Documents\Bewerbungen
2014-03-18 18:43 - 2014-03-18 18:43 - 00000000 ____D () C:\Program Files\Common Files\EPSON
2014-03-18 18:36 - 2014-03-18 18:34 - 00000000 ____D () C:\Program Files (x86)\epson
2014-03-18 18:35 - 2014-03-18 18:35 - 00000000 ____D () C:\Program Files\EpsonNet
2014-03-18 18:34 - 2014-03-21 12:44 - 00000954 _____ () C:\Users\****\Desktop\EPSON Scan.lnk
2014-03-16 15:55 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\****\Documents\Ofenhaus
2014-03-16 15:54 - 2014-03-16 15:54 - 00004141 _____ () C:\Users\****\Desktop\Danni.lnk
2014-03-16 15:54 - 2014-03-16 15:54 - 00001181 _____ () C:\Users\****\Desktop\****.lnk
2014-03-12 13:12 - 2013-10-11 16:03 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-12 13:12 - 2013-09-29 19:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 13:12 - 2013-09-29 19:54 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-12 10:53 - 2014-02-06 01:11 - 00000000 ____D () C:\Users\****\AppData\Roaming\WindSolutions
2014-03-12 10:21 - 2014-02-06 01:11 - 00000000 ____D () C:\ProgramData\WindSolutions

Some content of TEMP:
====================
C:\Users\****\AppData\Local\Temp\AskSLib.dll
C:\Users\****\AppData\Local\Temp\avgnt.exe
C:\Users\****\AppData\Local\Temp\DivXSetup.exe
C:\Users\****\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\****\AppData\Local\Temp\LMkRstPt.exe
C:\Users\****\AppData\Local\Temp\nseD023.exe
C:\Users\****\AppData\Local\Temp\nsjAEBA.exe
C:\Users\****\AppData\Local\Temp\nsoCC6A.exe
C:\Users\****\AppData\Local\Temp\nszAB6F.exe
C:\Users\****\AppData\Local\Temp\nvStInst.exe
C:\Users\****\AppData\Local\Temp\Quarantine.exe
C:\Users\****\AppData\Local\Temp\VIS-2013-German.exe
C:\Users\****\AppData\Local\Temp\_is2DE9.exe
C:\Users\****\AppData\Local\Temp\_isF655.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-09 10:27

==================== End Of Log ============================
--- --- ---

--- --- ---


Diesmal hab ich vor dem einfügen den Namen ersetzen lassen

Bis dahin
Olaf
__________________
Alt 09.04.2014, 22:24   #4
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Startseite bei Firefox lässt sich nicht ändern. - Standard

Startseite bei Firefox lässt sich nicht ändern.


Haken setzen bei addition.txt dann auf Scan klicken

__________________
Logfiles bitte immer in CODE-Tags posten

Alt 09.04.2014, 22:43   #5
wombel74
 
Startseite bei Firefox lässt sich nicht ändern. - Standard

Startseite bei Firefox lässt sich nicht ändern.



Sorry

Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by **** at 2014-04-09 23:39:53
Running from C:\Users\****\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Avira SearchFree Toolbar (HKLM-x32\...\{41564952-412D-5637-00A7-A758B70C0A03}) (Version: 12.10.3.4690 - APN, LLC)
AVS Audio Converter 7.2 (HKLM-x32\...\AVS Audio Converter_is1) (Version: 7.2.2.529 - Online Media Technologies Ltd.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.100 - DivX, LLC)
Epson Benutzerhandbuch WF-3520 Series (HKLM-x32\...\WF-3520 Series Useg) (Version:  - )
Epson Connect Guide (HKLM-x32\...\Epson Connect Guide) (Version:  - )
Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.2.0 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM-x32\...\{8F01524C-0676-4CC1-B4AE-64753C723391}) (Version: 3.01.0005 - Seiko Epson Corporation)
Epson E-Web Print (HKLM-x32\...\{CEC98C2A-9ED5-49DA-9F3A-92434E0A4FA3}) (Version: 1.19.0000 - SEIKO EPSON CORPORATION)
Epson FAX Utility (HKLM-x32\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 1.31.00 - SEIKO EPSON CORPORATION)
Epson Netzwerkhandbuch WF-3520 Series (HKLM-x32\...\WF-3520 Series Netg) (Version:  - )
Epson PC-FAX Driver (HKLM-x32\...\EPSON PC-FAX Driver 2) (Version:  - )
EPSON Printer Finder (HKLM-x32\...\{B8ECD0D3-AE08-4891-B6C7-32F96B75EB6C}) (Version: 1.0.0 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON WF-3520 Series Printer Uninstall (HKLM\...\EPSON WF-3520 Series) (Version:  - SEIKO EPSON Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
GloboFleet CC (HKLM\...\{C657CCF7-A8DB-435A-A764-2AF538A88F5E}) (Version: 3.7.5 - Buyond GmbH)
GloboFleet DriverCard Checker (HKLM-x32\...\{5F4F0021-343C-49B1-AAED-846A35656948}) (Version: 1.2.1 - Buyond GmbH)
Google Chrome Frame (HKLM-x32\...\{8618AE04-1210-3C32-A8C3-45A5E44CD340}) (Version: 65.169.107 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.36 - Irfan Skiljan)
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 40 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417040FF}) (Version: 7.0.400 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
KYOCERA Client Tool (HKLM\...\KYOCERA Client Tool) (Version: 1.0.0026 - KYOCERA Document Solutions Inc.)
Kyocera Product Library (HKLM\...\Kyocera Product Library) (Version: 4.2.1909 - KYOCERA Document Solutions Inc.)
Logitech SetPoint 6.61 (HKLM\...\sp6) (Version: 6.61.15 - Logitech)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 24.4.0 - Mozilla)
Mozilla Thunderbird 24.4.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.4.0 (x86 de)) (Version: 24.4.0 - Mozilla)
Nur Entfernen der CopyTrans Suite möglich (HKCU\...\CopyTrans Suite) (Version: 2.37 - WindSolutions)
NVIDIA 3D Vision Controller-Treiber 326.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 326.01 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.145.1024 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3523 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden
NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.15.2 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 10.4.0 - NVIDIA Corporation) Hidden
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Presto! PageManager 9.03 SE (HKLM-x32\...\{04AF7536-446D-4F5A-8920-B4E885E4581B}) (Version: 9.03.06 - Newsoft Technology Corporation)
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.49.927.2011 - Realtek)
Software Updater (HKLM-x32\...\{C09D747A-BD47-42A9-915E-CEB6B1BB7C11}) (Version: 4.2.7 - SEIKO EPSON CORPORATION) <==== ATTENTION
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VIS (HKLM-x32\...\VIS) (Version:  - ) <==== ATTENTION
VLC media player 2.1.0 (HKLM\...\VLC media player) (Version: 2.1.0 - VideoLAN)
WePrint (HKLM-x32\...\WePrint) (Version:  - EuroSmartz Ltd)
Winamp (HKLM-x32\...\Winamp) (Version: 5.65  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)

==================== Restore Points  =========================

01-04-2014 18:24:10 Geplanter Prüfpunkt
04-04-2014 07:37:05 Installed GloboFleet DriverCard Checker
04-04-2014 08:52:38 Installed GloboFleet CC
05-04-2014 16:41:29 Installed Software Updater
05-04-2014 20:20:52 Removed Java(TM) 6 Update 35
05-04-2014 20:21:25 Installed Java 7 Update 51
06-04-2014 07:26:34 Gerätetreiber-Paketinstallation: EPSON Drucker
06-04-2014 07:37:05 Installiert Realtek Ethernet Controller Driver
08-04-2014 05:58:46 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {2AC5A2AB-8CEB-43D6-901C-E3507E799DF3} - System32\Tasks\Fifth => C:\Users\****\AppData\Roaming\Fifth\Fifth.exe [2014-03-12] () <==== ATTENTION
Task: {9902649F-0ED4-4AE0-91F2-E9FBF8963E7F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-06] (Google Inc.)
Task: {A67324AC-50DA-4043-9535-7A17BA6775A7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-06] (Google Inc.)
Task: {B1FA0F76-8125-43B2-84E7-48914B2C7B0F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12] (Adobe Systems Incorporated)
Task: {FFF5F4BE-3546-485A-967F-0C82927EE08E} - System32\Tasks\OMESupervisor => C:\Users\****\AppData\Local\omesuperv.exe <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-09-03 22:18 - 2014-03-04 15:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-01-10 07:26 - 2014-01-10 07:26 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
2013-09-29 13:05 - 2013-09-29 13:04 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-09-14 02:51 - 2013-09-14 02:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll
2013-09-14 02:50 - 2013-09-14 02:50 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll
2014-03-19 00:07 - 2008-11-17 15:56 - 00102400 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\nsSign.dll
2014-03-19 00:07 - 2010-05-07 12:46 - 00057344 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PerformOcr.dll
2014-03-19 00:07 - 2010-12-23 14:17 - 00057344 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMISM.dll
2014-03-19 00:07 - 2007-03-30 11:24 - 00104528 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\Qem.dll
2014-03-19 00:07 - 2010-12-29 18:52 - 00147456 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMCommon.dll
2014-03-19 00:07 - 2008-08-25 18:19 - 00069632 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PHooKDlg.dll
2014-03-19 00:07 - 2009-11-26 18:49 - 00081920 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\NetFun2k.dll
2014-03-19 00:07 - 2011-03-11 11:47 - 00151040 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\ScanModule.dll
2014-03-19 00:07 - 2009-09-09 15:44 - 00151552 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMANO.dll
2014-03-19 00:07 - 2007-03-30 10:49 - 00104528 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\ComClass.dll
2014-03-19 00:07 - 2010-11-30 17:42 - 00352256 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMTree.dll
2014-03-19 00:07 - 2010-10-22 11:01 - 00139264 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMSet.dll
2014-03-19 00:07 - 2010-12-29 19:32 - 00614400 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMDB_N.dll
2014-03-19 00:07 - 2009-08-06 11:22 - 00421888 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\FT.dll
2014-03-19 00:07 - 2010-09-09 19:00 - 00061440 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMINSO.dll
2014-03-19 00:07 - 2010-07-13 11:48 - 00106496 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMProp.dll
2014-03-19 00:07 - 2007-08-31 18:51 - 00040960 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMVoice.dll
2014-03-19 00:07 - 2010-09-08 18:10 - 00073728 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\OutlookVBA.dll
2014-03-19 00:07 - 2009-11-27 18:38 - 00331776 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMAppBar.dll
2014-03-19 00:07 - 2010-11-26 11:33 - 04583424 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMView.dll
2014-03-19 00:07 - 2007-03-30 11:01 - 00038992 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\NsOEMKey.dll
2014-03-19 00:07 - 2010-10-22 11:22 - 00090112 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMSave.dll
2014-03-19 00:07 - 2010-08-03 11:44 - 00049152 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMOffice.dll
2014-03-19 00:07 - 2010-09-26 12:13 - 00430080 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMPageVW.dll
2014-03-19 00:07 - 2010-03-02 16:09 - 00102400 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMDocVW.dll
2014-03-19 00:07 - 2009-06-26 10:03 - 00086016 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMApSet.dll
2014-03-19 00:07 - 2010-08-03 11:51 - 01036288 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\SlideBarDLL.dll
2014-03-19 00:07 - 2009-12-04 18:20 - 00323584 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMAnoSet.dll
2014-03-19 00:07 - 2010-09-26 12:13 - 00184320 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMImgVW.dll
2014-03-19 00:07 - 2008-08-25 17:16 - 00040960 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMIEVW.dll
2014-03-19 00:07 - 2010-09-08 11:52 - 00036864 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMPDFView.dll
2014-03-19 00:07 - 2010-04-27 16:20 - 00065536 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMStatus.dll
2014-03-19 00:07 - 2011-01-21 16:05 - 00258048 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMScnSet.dll
2014-03-19 00:07 - 2007-03-30 10:57 - 00034896 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\Import.dll
2014-03-19 00:07 - 2010-11-26 11:45 - 00090112 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMImageSplitter.dll
2014-01-10 07:28 - 2014-01-10 07:28 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2014-04-01 21:10 - 2014-04-01 21:10 - 03642480 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/09/2014 11:17:31 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (04/09/2014 11:16:52 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)


Microsoft Office Sessions:
=========================
Error: (04/09/2014 11:17:31 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Percentage of memory in use: 40%
Total physical RAM: 4094.49 MB
Available physical RAM: 2454.99 MB
Total Pagefile: 8187.16 MB
Available Pagefile: 6206.96 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:297.99 GB) (Free:230.47 GB) NTFS
Drive d: (Setup) (CDROM) (Total:0.09 GB) (Free:0 GB) CDFS
Drive n: (Wombel) (Fixed) (Total:1863.01 GB) (Free:1128.25 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: C13EC13E)

Partition: GPT Partition Type.

========================================================
Disk: 5 (MBR Code: Windows XP) (Size: 1863 GB) (Disk ID: 00080E6D)
Partition 1: (Not Active) - (Size=-198627557376) - (Type=07 NTFS)

==================== End Of Log ============================
Bis dahin
Olaf


Alt 09.04.2014, 22:59   #6
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Startseite bei Firefox lässt sich nicht ändern. - Standard

Startseite bei Firefox lässt sich nicht ändern.


Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\MountPoints2: {f831ea8a-395f-11e3-b8af-806e6f6e6963} - D:\Setup.exe
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll File Not Found
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
BHO-x32: No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
BHO-x32: Simple New Tab Bho - {5C2DD58F-613F-4580-8AC0-F10D760AF938} - C:\Users\****\AppData\Local\simple_new_tab\simple_new_tab.dll (Temp Company Ltd)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} -  No File
FF Plugin HKCU: bebomedia.com/OfferMosquitoIEHelper - C:\Users\****\AppData\Local\ext_offermosquito\npOfferMosquitoIEHelper.dll No File
FF Extension: Simple New Tab - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\Extensions\snt@dotlabs.co.xpi [2013-11-13]
C:\Users\****\AppData\Local\simple_new_tab
C:\Windows\System32\Tasks\OMESupervisor
C:\Users\****\AppData\Local\omesuperv.exe
C:\Windows\System32\Tasks\Fifth
C:\Users\****\AppData\Roaming\Fifth
C:\Users\****\AppData\Local\Temp\AskSLib.dll
C:\Users\****\AppData\Local\Temp\avgnt.exe
C:\Users\****\AppData\Local\Temp\DivXSetup.exe
C:\Users\****\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\****\AppData\Local\Temp\LMkRstPt.exe
C:\Users\****\AppData\Local\Temp\nseD023.exe
C:\Users\****\AppData\Local\Temp\nsjAEBA.exe
C:\Users\****\AppData\Local\Temp\nsoCC6A.exe
C:\Users\****\AppData\Local\Temp\nszAB6F.exe
C:\Users\****\AppData\Local\Temp\nvStInst.exe
C:\Users\****\AppData\Local\Temp\Quarantine.exe
C:\Users\****\AppData\Local\Temp\VIS-2013-German.exe
C:\Users\****\AppData\Local\Temp\_is2DE9.exe
C:\Users\****\AppData\Local\Temp\_isF655.exe
Task: {2AC5A2AB-8CEB-43D6-901C-E3507E799DF3} - System32\Tasks\Fifth => C:\Users\****\AppData\Roaming\Fifth\Fifth.exe [2014-03-12] () <==== ATTENTION
Task: {FFF5F4BE-3546-485A-967F-0C82927EE08E} - System32\Tasks\OMESupervisor => C:\Users\****\AppData\Local\omesuperv.exe <==== ATTENTION
Solltest du deinen Benutzernamen z. B. durch "*****" unkenntlich gemacht haben, so füge an entsprechender Stelle deinen richtigen Benutzernamen ein. Andernfalls wird der Fix nicht funktionieren.

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.

__________________
--> Startseite bei Firefox lässt sich nicht ändern.

Alt 09.04.2014, 23:14   #7
wombel74
 
Startseite bei Firefox lässt sich nicht ändern. - Standard

Startseite bei Firefox lässt sich nicht ändern.


Jep

Code:
ATTFilter
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\MountPoints2: {f831ea8a-395f-11e3-b8af-806e6f6e6963} - D:\Setup.exe
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll File Not Found
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
BHO-x32: No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
BHO-x32: Simple New Tab Bho - {5C2DD58F-613F-4580-8AC0-F10D760AF938} - C:\Users\****\AppData\Local\simple_new_tab\simple_new_tab.dll (Temp Company Ltd)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} -  No File
FF Plugin HKCU: bebomedia.com/OfferMosquitoIEHelper - C:\Users\****\AppData\Local\ext_offermosquito\npOfferMosquitoIEHelper.dll No File
FF Extension: Simple New Tab - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\Extensions\snt@dotlabs.co.xpi [2013-11-13]
C:\Users\****\AppData\Local\simple_new_tab
C:\Windows\System32\Tasks\OMESupervisor
C:\Users\****\AppData\Local\omesuperv.exe
C:\Windows\System32\Tasks\Fifth
C:\Users\****\AppData\Roaming\Fifth
C:\Users\****\AppData\Local\Temp\AskSLib.dll
C:\Users\****\AppData\Local\Temp\avgnt.exe
C:\Users\****\AppData\Local\Temp\DivXSetup.exe
C:\Users\****\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\****\AppData\Local\Temp\LMkRstPt.exe
C:\Users\****\AppData\Local\Temp\nseD023.exe
C:\Users\****\AppData\Local\Temp\nsjAEBA.exe
C:\Users\****\AppData\Local\Temp\nsoCC6A.exe
C:\Users\****\AppData\Local\Temp\nszAB6F.exe
C:\Users\****\AppData\Local\Temp\nvStInst.exe
C:\Users\****\AppData\Local\Temp\Quarantine.exe
C:\Users\****\AppData\Local\Temp\VIS-2013-German.exe
C:\Users\****\AppData\Local\Temp\_is2DE9.exe
C:\Users\****\AppData\Local\Temp\_isF655.exe
Task: {2AC5A2AB-8CEB-43D6-901C-E3507E799DF3} - System32\Tasks\Fifth => C:\Users\****\AppData\Roaming\Fifth\Fifth.exe [2014-03-12] () <==== ATTENTION
Task: {FFF5F4BE-3546-485A-967F-0C82927EE08E} - System32\Tasks\OMESupervisor => C:\Users\****\AppData\Local\omesuperv.exe <==== ATTENTION

Alt 10.04.2014, 10:38   #8
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Startseite bei Firefox lässt sich nicht ändern. - Standard

Startseite bei Firefox lässt sich nicht ändern.


Jetzt hst du 1:1 mein Fixscript nochmal gepostet aber nicht das Ergebnis also das Fixlog!
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 10.04.2014, 15:37   #9
wombel74
 
Startseite bei Firefox lässt sich nicht ändern. - Standard

Startseite bei Firefox lässt sich nicht ändern.


Nu aber....

Code:
ATTFilter
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014
Ran by Olaf at 2014-04-10 16:34:40 Run:2
Running from C:\Users\Olaf\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\MountPoints2: {f831ea8a-395f-11e3-b8af-806e6f6e6963} - D:\Setup.exe
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll File Not Found
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
BHO-x32: No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
BHO-x32: Simple New Tab Bho - {5C2DD58F-613F-4580-8AC0-F10D760AF938} - C:\Users\Olaf\AppData\Local\simple_new_tab\simple_new_tab.dll (Temp Company Ltd)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} -  No File
FF Plugin HKCU: bebomedia.com/OfferMosquitoIEHelper - C:\Users\Olaf\AppData\Local\ext_offermosquito\npOfferMosquitoIEHelper.dll No File
FF Extension: Simple New Tab - C:\Users\Olaf\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\Extensions\snt@dotlabs.co.xpi [2013-11-13]
C:\Users\Olaf\AppData\Local\simple_new_tab
C:\Windows\System32\Tasks\OMESupervisor
C:\Users\Olaf\AppData\Local\omesuperv.exe
C:\Windows\System32\Tasks\Fifth
C:\Users\Olaf\AppData\Roaming\Fifth
C:\Users\Olaf\AppData\Local\Temp\AskSLib.dll
C:\Users\Olaf\AppData\Local\Temp\avgnt.exe
C:\Users\Olaf\AppData\Local\Temp\DivXSetup.exe
C:\Users\Olaf\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Olaf\AppData\Local\Temp\LMkRstPt.exe
C:\Users\Olaf\AppData\Local\Temp\nseD023.exe
C:\Users\Olaf\AppData\Local\Temp\nsjAEBA.exe
C:\Users\Olaf\AppData\Local\Temp\nsoCC6A.exe
C:\Users\Olaf\AppData\Local\Temp\nszAB6F.exe
C:\Users\Olaf\AppData\Local\Temp\nvStInst.exe
C:\Users\Olaf\AppData\Local\Temp\Quarantine.exe
C:\Users\Olaf\AppData\Local\Temp\VIS-2013-German.exe
C:\Users\Olaf\AppData\Local\Temp\_is2DE9.exe
C:\Users\Olaf\AppData\Local\Temp\_isF655.exe
Task: {2AC5A2AB-8CEB-43D6-901C-E3507E799DF3} - System32\Tasks\Fifth => C:\Users\Olaf\AppData\Roaming\Fifth\Fifth.exe [2014-03-12] () <==== ATTENTION
Task: {FFF5F4BE-3546-485A-967F-0C82927EE08E} - System32\Tasks\OMESupervisor => C:\Users\Olaf\AppData\Local\omesuperv.exe <==== ATTENTION
         
*****************

HKU\S-1-5-21-785402712-3989741325-3718471224-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f831ea8a-395f-11e3-b8af-806e6f6e6963} => Key deleted successfully.
HKCR\CLSID\{f831ea8a-395f-11e3-b8af-806e6f6e6963} => Key not found.
"C:\\PROGRA~2\\SearchProtect\\SearchProtect\\bin\\SPVC64Loader.dll" => Value Data not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7} => Key not found.
HKCR\CLSID\{41564952-412D-5637-00A7-7A786E7484D7} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7} => Key not found.
HKCR\Wow6432Node\CLSID\{41564952-412D-5637-00A7-7A786E7484D7} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C2DD58F-613F-4580-8AC0-F10D760AF938} => Key not found.
HKCR\Wow6432Node\CLSID\{5C2DD58F-613F-4580-8AC0-F10D760AF938} => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{41564952-412D-5637-00A7-7A786E7484D7} => Value not found.
HKCR\CLSID\{41564952-412D-5637-00A7-7A786E7484D7} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{41564952-412D-5637-00A7-7A786E7484D7} => Value not found.
HKCR\Wow6432Node\CLSID\{41564952-412D-5637-00A7-7A786E7484D7} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{41564952-412D-5637-00A7-7A786E7484D7} => Value not found.
HKCR\CLSID\{41564952-412D-5637-00A7-7A786E7484D7} => Key not found.
HKCR\PROTOCOLS\Handler\gcf => Key not found.
HKCR\CLSID\{9875BFAF-B04D-445E-8A69-BE36838CDE3E} => Key not found.
HKCU\Software\MozillaPlugins\bebomedia.com/OfferMosquitoIEHelper => Key not found.
C:\Users\Olaf\AppData\Local\ext_offermosquito\npOfferMosquitoIEHelper.dll not found.
C:\Users\Olaf\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\Extensions\snt@dotlabs.co.xpi not found.
"C:\Users\Olaf\AppData\Local\simple_new_tab" => File/Directory not found.
"C:\Windows\System32\Tasks\OMESupervisor" => File/Directory not found.
"C:\Users\Olaf\AppData\Local\omesuperv.exe" => File/Directory not found.
"C:\Windows\System32\Tasks\Fifth" => File/Directory not found.
"C:\Users\Olaf\AppData\Roaming\Fifth" => File/Directory not found.
"C:\Users\Olaf\AppData\Local\Temp\AskSLib.dll" => File/Directory not found.
C:\Users\Olaf\AppData\Local\Temp\avgnt.exe => Moved successfully.
"C:\Users\Olaf\AppData\Local\Temp\DivXSetup.exe" => File/Directory not found.
"C:\Users\Olaf\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe" => File/Directory not found.
"C:\Users\Olaf\AppData\Local\Temp\LMkRstPt.exe" => File/Directory not found.
"C:\Users\Olaf\AppData\Local\Temp\nseD023.exe" => File/Directory not found.
"C:\Users\Olaf\AppData\Local\Temp\nsjAEBA.exe" => File/Directory not found.
"C:\Users\Olaf\AppData\Local\Temp\nsoCC6A.exe" => File/Directory not found.
"C:\Users\Olaf\AppData\Local\Temp\nszAB6F.exe" => File/Directory not found.
"C:\Users\Olaf\AppData\Local\Temp\nvStInst.exe" => File/Directory not found.
"C:\Users\Olaf\AppData\Local\Temp\Quarantine.exe" => File/Directory not found.
"C:\Users\Olaf\AppData\Local\Temp\VIS-2013-German.exe" => File/Directory not found.
"C:\Users\Olaf\AppData\Local\Temp\_is2DE9.exe" => File/Directory not found.
"C:\Users\Olaf\AppData\Local\Temp\_isF655.exe" => File/Directory not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2AC5A2AB-8CEB-43D6-901C-E3507E799DF3} => Key not found.
C:\Windows\System32\Tasks\Fifth not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Fifth => Key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FFF5F4BE-3546-485A-967F-0C82927EE08E} => Key not found.
C:\Windows\System32\Tasks\OMESupervisor not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OMESupervisor => Key not found.

==== End of Fixlog ====

Alt 10.04.2014, 23:01   #10
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Startseite bei Firefox lässt sich nicht ändern. - Standard

Startseite bei Firefox lässt sich nicht ändern.


Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Scan klicken

__________________
Logfiles bitte immer in CODE-Tags posten

Alt 11.04.2014, 17:53   #11
wombel74
 
Startseite bei Firefox lässt sich nicht ändern. - Standard

Startseite bei Firefox lässt sich nicht ändern.


Hi,
sorry das das so lange gedauert hat.


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014 (ATTENTION: ====> FRST version is 29 days old and could be outdated)
Ran by Olaf (administrator) on PC on 11-04-2014 18:49:28
Running from C:\Users\Olaf\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Seiko Epson Corporation) C:\Windows\system32\EscSvc64.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIJJE.EXE
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIJJE.EXE
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(NewSoft Technology Corporation) C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMSpeed.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Buyond GmbH) C:\Program Files\Buyond GmbH\GloboFleet_CC\GloboFleet_CC.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [3091224 2013-07-31] (Logitech, Inc.)
HKLM\...\Run: [WrtMon.exe] - C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe [26448 2008-05-24] (NewSoft Technology Corporation)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1797064 2014-03-20] (NVIDIA Corporation)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2014-02-14] (DivX, LLC)
HKLM-x32\...\Run: [FUFAXRCV] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [502952 2012-07-09] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [FUFAXSTM] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [863400 2012-07-09] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [EEventManager] - C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058912 2012-04-02] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [PMSpeed] - C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMSpeed.EXE [116632 2010-07-29] (NewSoft Technology Corporation)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM-x32\...\Run: [GloboFleet CC] - C:\Program Files\Buyond GmbH\GloboFleet_CC\GloboFleet_CC.exe [366400 2013-11-21] (Buyond GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [EPLTarget\P0000000000000000] - C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIJJE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-785402712-3989741325-3718471224-1000\...\Run: [EPLTarget\P0000000000000001] - C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIJJE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)

==================== Internet (Whitelisted) ====================

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ChromeFrame BHO - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll (Google Inc.)
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
Tcpip\..\Interfaces\{DDA62AC0-5A0C-4D51-A1D7-0CEFFFD29E9F}: [NameServer]145.253.2.171,145.253.2.75

FireFox:
========
FF ProfilePath: C:\Users\Olaf\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default
FF NewTab: hxxp://www.google.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Adblock Plus - C:\Users\Olaf\AppData\Roaming\Mozilla\Firefox\Profiles\lyuir5hg.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-03-06]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2014-01-30]
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2014-03-21]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1017424 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2014-02-13] (APN LLC.)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2014-01-30] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2014-01-30] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-01-30] (Avira Operations GmbH & Co. KG)
R3 Linksys_adapter_H; C:\Windows\System32\DRIVERS\AE1200w764.sys [1254464 2011-03-29] (Broadcom Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-11 18:49 - 2014-04-11 18:49 - 00013459 _____ () C:\Users\Olaf\Desktop\FRST.txt
2014-04-10 17:01 - 2014-04-10 17:01 - 00014526 _____ () C:\Users\Olaf\Downloads\Systemspeaker_Soundausgabe.vi
2014-04-09 23:38 - 2014-04-10 17:02 - 00011488 _____ () C:\Users\Olaf\Desktop\Unbenannt 1.ods
2014-04-09 23:38 - 2014-04-09 11:30 - 02157056 _____ (Farbar) C:\Users\Olaf\Desktop\FRST64.exe
2014-04-09 21:45 - 2014-04-09 21:45 - 00000000 ____D () C:\Windows\ERUNT
2014-04-09 21:39 - 2014-04-09 21:40 - 00000000 ____D () C:\AdwCleaner
2014-04-09 14:32 - 2014-04-09 14:35 - 00000000 ____D () C:\Users\Olaf\Desktop\OpenHardwareMonitor
2014-04-09 14:31 - 2014-04-09 14:31 - 00526371 _____ () C:\Users\Olaf\Desktop\openhardwaremonitor-v0.6.0-beta.zip
2014-04-09 11:36 - 2014-04-11 18:49 - 00000000 ____D () C:\FRST
2014-04-09 11:35 - 2014-04-09 11:35 - 00000000 _____ () C:\Users\Olaf\defogger_reenable
2014-04-09 11:31 - 2014-04-09 22:31 - 00000000 ____D () C:\Users\Olaf\Downloads\Trojaner Board
2014-04-08 08:21 - 2014-04-08 08:21 - 00000000 ____D () C:\Users\Olaf\AppData\Local\NVIDIA
2014-04-08 08:01 - 2014-03-04 13:32 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-04-08 07:52 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-04-08 07:52 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-04-08 07:52 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-04-06 09:37 - 2011-09-29 11:30 - 00107552 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
2014-04-06 09:37 - 2011-09-29 11:30 - 00074272 _____ () C:\Windows\system32\RtNicProp64.dll
2014-04-06 08:53 - 2014-04-06 08:53 - 00001488 _____ () C:\Users\Olaf\Desktop\Firefox.lnk
2014-04-06 01:36 - 2013-10-03 10:57 - 00001062 _____ () C:\Users\Olaf\Desktop\OpenOffice Calc.lnk
2014-04-06 01:35 - 2013-10-03 10:57 - 00001098 _____ () C:\Users\Olaf\Desktop\OpenOffice Writer.lnk
2014-04-05 22:53 - 2014-04-05 22:53 - 00000000 ____D () C:\Users\Olaf\AppData\Roaming\Thunderbird
2014-04-05 22:53 - 2014-04-05 22:53 - 00000000 ____D () C:\Users\Olaf\AppData\Local\Thunderbird
2014-04-05 22:52 - 2014-04-06 23:27 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-04-05 22:52 - 2014-04-05 22:52 - 00002086 _____ () C:\Users\Public\Desktop\Thunderbird.lnk
2014-04-05 22:38 - 2014-04-05 22:42 - 21987424 _____ (Mozilla) C:\Users\Olaf\Downloads\Thunderbird_Setup_de24.4.0.exe
2014-04-05 22:24 - 2014-04-05 22:24 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-05 22:21 - 2014-04-05 22:21 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-05 22:21 - 2014-04-05 22:21 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-05 21:39 - 2014-04-06 12:16 - 00000000 ____D () C:\Users\Olaf\Documents\Anwalt
2014-04-05 18:45 - 2014-04-07 13:47 - 00000000 ____D () C:\Users\Olaf\Documents\Inso
2014-04-04 19:17 - 2014-04-04 19:17 - 00000000 ____D () C:\Users\Olaf\Documents\Fahrerkarte
2014-04-04 10:52 - 2014-04-04 10:52 - 00001107 _____ () C:\Users\Public\Desktop\GloboFleet CC.lnk
2014-04-04 10:52 - 2014-04-04 10:52 - 00000000 ____D () C:\Program Files\Buyond GmbH
2014-04-04 10:49 - 2014-04-04 10:52 - 79962728 _____ (Buyond GmbH) C:\Users\Olaf\Downloads\GloboFleet_CC_x64_Setup.exe
2014-04-04 10:44 - 2014-04-04 10:44 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WUDFUsbccidDriver_01_09_00.Wdf
2014-04-04 09:38 - 2014-04-11 17:39 - 00000000 ____D () C:\ProgramData\GloboFleet
2014-04-04 09:38 - 2014-04-04 09:38 - 00000000 ____D () C:\Program Files (x86)\Buyond_GmbH
2014-04-04 06:53 - 2014-04-04 06:54 - 48537520 _____ (Buyond GmbH) C:\Users\Olaf\Downloads\GloboFleet_DriverCard_Checker_Setup.exe
2014-04-04 06:53 - 2014-04-04 06:54 - 48366056 _____ (Buyond GmbH) C:\Users\Olaf\Downloads\GloboFleet_FileChecker_Setup.exe
2014-04-01 21:10 - 2014-04-01 21:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-26 00:10 - 2014-03-26 00:10 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files\iTunes
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files\iPod
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-26 00:05 - 2014-03-26 00:05 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-03-21 12:46 - 2014-04-04 12:56 - 00000000 ____D () C:\Users\Olaf\Documents\Remondis
2014-03-21 12:44 - 2014-03-18 18:34 - 00000954 _____ () C:\Users\Olaf\Desktop\EPSON Scan.lnk
2014-03-21 09:10 - 2014-02-23 10:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-21 09:10 - 2014-02-23 10:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-21 09:10 - 2014-02-23 10:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-21 09:10 - 2014-02-23 10:12 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 03960320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-21 09:10 - 2014-02-23 10:11 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-21 09:10 - 2014-02-23 08:54 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-21 09:10 - 2014-02-23 08:53 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-21 09:10 - 2014-02-23 08:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-21 09:10 - 2014-02-23 08:31 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-21 09:10 - 2014-02-23 07:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-03-21 09:10 - 2014-02-23 07:35 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-03-21 09:09 - 2014-02-23 10:13 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-21 09:09 - 2014-02-23 10:12 - 19273216 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-21 09:09 - 2014-02-23 10:11 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-21 09:09 - 2014-02-23 10:11 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-21 09:09 - 2014-02-23 08:54 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-21 09:09 - 2014-02-23 08:53 - 14358016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-21 09:09 - 2014-02-23 08:53 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-21 09:09 - 2014-02-23 08:53 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-21 09:09 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-21 09:09 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-21 09:09 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-21 09:09 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-21 09:09 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 00832936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 14709720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-03-20 23:02 - 2014-03-20 23:02 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02715264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-03-19 00:09 - 2014-04-11 17:39 - 00000000 ____D () C:\Users\Olaf\AppData\Roaming\.oit
2014-03-19 00:09 - 2014-04-07 00:00 - 00000000 ____D () C:\Users\Olaf\Documents\My PageManager
2014-03-19 00:09 - 2014-03-19 00:09 - 00000264 _____ () C:\Windows\setup.iss
2014-03-19 00:09 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\Olaf\AppData\Roaming\NewSoft
2014-03-19 00:09 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\Olaf\AppData\Local\NewSoft
2014-03-19 00:08 - 1999-05-06 15:22 - 00027632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CTL3DV2.DLL
2014-03-19 00:07 - 2014-03-19 00:07 - 00000000 ____D () C:\Windows\SysWOW64\color
2014-03-19 00:07 - 2014-03-19 00:07 - 00000000 ____D () C:\Program Files (x86)\NewSoft
2014-03-18 18:43 - 2014-03-18 18:43 - 00000000 ____D () C:\Program Files\Common Files\EPSON
2014-03-18 18:35 - 2014-04-06 23:51 - 00000000 ____D () C:\Users\Olaf\AppData\Roaming\Epson
2014-03-18 18:35 - 2014-03-21 21:58 - 00000000 ____D () C:\Program Files (x86)\Epson Software
2014-03-18 18:35 - 2014-03-18 18:35 - 00000000 ____D () C:\Program Files\EpsonNet
2014-03-18 18:35 - 2012-11-12 21:41 - 00535552 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\ensppui.dll
2014-03-18 18:35 - 2012-11-12 21:41 - 00535552 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enppui.dll
2014-03-18 18:35 - 2012-11-12 16:15 - 00558592 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\ensppmon.dll
2014-03-18 18:35 - 2012-11-12 16:15 - 00558592 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enppmon.dll
2014-03-18 18:35 - 2012-10-22 18:19 - 00219648 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enspres.dll
2014-03-18 18:35 - 2012-10-22 18:19 - 00219648 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enpres.dll
2014-03-18 18:34 - 2014-03-18 18:36 - 00000000 ____D () C:\Program Files (x86)\epson
2014-03-18 18:34 - 2012-07-24 01:00 - 00466432 _____ (Seiko Epson Corporation) C:\Windows\system32\esxw2ud.dll
2014-03-18 18:34 - 2011-12-12 01:00 - 00135824 _____ (Seiko Epson Corporation) C:\Windows\system32\escsvc64.exe
2014-03-18 18:33 - 2014-04-06 23:51 - 00000000 ____D () C:\ProgramData\EPSON
2014-03-18 18:33 - 2011-04-19 04:03 - 00120320 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_YLMJJE.DLL
2014-03-16 15:54 - 2014-03-16 15:54 - 00004141 _____ () C:\Users\Olaf\Desktop\Danni.lnk
2014-03-16 15:54 - 2014-03-16 15:54 - 00001181 _____ () C:\Users\Olaf\Desktop\Olaf.lnk

==================== One Month Modified Files and Folders =======

2014-04-11 18:49 - 2014-04-11 18:49 - 00013459 _____ () C:\Users\Olaf\Desktop\FRST.txt
2014-04-11 18:49 - 2014-04-09 11:36 - 00000000 ____D () C:\FRST
2014-04-11 18:49 - 2014-02-06 01:27 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-11 18:40 - 2013-10-11 16:03 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-11 17:47 - 2009-07-14 06:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-11 17:47 - 2009-07-14 06:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-11 17:44 - 2013-09-03 20:25 - 01186479 _____ () C:\Windows\WindowsUpdate.log
2014-04-11 17:40 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-04-11 17:39 - 2014-04-04 09:38 - 00000000 ____D () C:\ProgramData\GloboFleet
2014-04-11 17:39 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\Olaf\AppData\Roaming\.oit
2014-04-11 17:38 - 2014-02-06 01:27 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-11 17:38 - 2013-09-03 22:18 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-04-11 17:38 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-11 17:38 - 2009-07-14 06:51 - 00055640 _____ () C:\Windows\setupact.log
2014-04-10 17:02 - 2014-04-09 23:38 - 00011488 _____ () C:\Users\Olaf\Desktop\Unbenannt 1.ods
2014-04-10 17:01 - 2014-04-10 17:01 - 00014526 _____ () C:\Users\Olaf\Downloads\Systemspeaker_Soundausgabe.vi
2014-04-10 16:26 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-09 22:31 - 2014-04-09 11:31 - 00000000 ____D () C:\Users\Olaf\Downloads\Trojaner Board
2014-04-09 21:45 - 2014-04-09 21:45 - 00000000 ____D () C:\Windows\ERUNT
2014-04-09 21:40 - 2014-04-09 21:39 - 00000000 ____D () C:\AdwCleaner
2014-04-09 21:40 - 2014-02-06 01:26 - 00000000 ____D () C:\Users\Olaf\AppData\Roaming\Common
2014-04-09 14:35 - 2014-04-09 14:32 - 00000000 ____D () C:\Users\Olaf\Desktop\OpenHardwareMonitor
2014-04-09 14:31 - 2014-04-09 14:31 - 00526371 _____ () C:\Users\Olaf\Desktop\openhardwaremonitor-v0.6.0-beta.zip
2014-04-09 11:35 - 2014-04-09 11:35 - 00000000 _____ () C:\Users\Olaf\defogger_reenable
2014-04-09 11:35 - 2013-09-03 20:43 - 00000000 ____D () C:\Users\Olaf
2014-04-09 11:30 - 2014-04-09 23:38 - 02157056 _____ (Farbar) C:\Users\Olaf\Desktop\FRST64.exe
2014-04-08 18:19 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-04-08 08:21 - 2014-04-08 08:21 - 00000000 ____D () C:\Users\Olaf\AppData\Local\NVIDIA
2014-04-08 08:01 - 2013-09-03 22:18 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-04-08 08:01 - 2013-09-03 22:17 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-04-07 13:47 - 2014-04-05 18:45 - 00000000 ____D () C:\Users\Olaf\Documents\Inso
2014-04-07 11:35 - 2010-11-21 08:50 - 00698688 _____ () C:\Windows\system32\perfh007.dat
2014-04-07 11:35 - 2010-11-21 08:50 - 00148828 _____ () C:\Windows\system32\perfc007.dat
2014-04-07 11:35 - 2009-07-14 07:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-07 00:00 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\Olaf\Documents\My PageManager
2014-04-06 23:51 - 2014-03-18 18:35 - 00000000 ____D () C:\Users\Olaf\AppData\Roaming\Epson
2014-04-06 23:51 - 2014-03-18 18:33 - 00000000 ____D () C:\ProgramData\EPSON
2014-04-06 23:27 - 2014-04-05 22:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-04-06 23:27 - 2013-10-23 07:25 - 00000000 ____D () C:\ProgramData\DivX
2014-04-06 23:27 - 2013-10-23 07:25 - 00000000 ____D () C:\Program Files (x86)\DivX
2014-04-06 12:16 - 2014-04-05 21:39 - 00000000 ____D () C:\Users\Olaf\Documents\Anwalt
2014-04-06 09:37 - 2013-09-03 22:10 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-04-06 09:35 - 2013-09-03 21:35 - 00000000 ____D () C:\Treiber
2014-04-06 08:53 - 2014-04-06 08:53 - 00001488 _____ () C:\Users\Olaf\Desktop\Firefox.lnk
2014-04-06 08:39 - 2013-09-29 19:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-05 22:53 - 2014-04-05 22:53 - 00000000 ____D () C:\Users\Olaf\AppData\Roaming\Thunderbird
2014-04-05 22:53 - 2014-04-05 22:53 - 00000000 ____D () C:\Users\Olaf\AppData\Local\Thunderbird
2014-04-05 22:52 - 2014-04-05 22:52 - 00002086 _____ () C:\Users\Public\Desktop\Thunderbird.lnk
2014-04-05 22:42 - 2014-04-05 22:38 - 21987424 _____ (Mozilla) C:\Users\Olaf\Downloads\Thunderbird_Setup_de24.4.0.exe
2014-04-05 22:24 - 2014-04-05 22:24 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-05 22:21 - 2014-04-05 22:21 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-05 22:21 - 2014-04-05 22:21 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-05 22:21 - 2014-04-05 22:21 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-05 21:39 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\Olaf\Documents\Blüggel
2014-04-05 18:46 - 2013-10-20 10:53 - 00134656 ___SH () C:\Users\Olaf\Documents\Thumbs.db
2014-04-05 18:45 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\Olaf\Documents\doc
2014-04-04 19:18 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\Olaf\Documents\Olli
2014-04-04 19:17 - 2014-04-04 19:17 - 00000000 ____D () C:\Users\Olaf\Documents\Fahrerkarte
2014-04-04 12:56 - 2014-03-21 12:46 - 00000000 ____D () C:\Users\Olaf\Documents\Remondis
2014-04-04 10:52 - 2014-04-04 10:52 - 00001107 _____ () C:\Users\Public\Desktop\GloboFleet CC.lnk
2014-04-04 10:52 - 2014-04-04 10:52 - 00000000 ____D () C:\Program Files\Buyond GmbH
2014-04-04 10:52 - 2014-04-04 10:49 - 79962728 _____ (Buyond GmbH) C:\Users\Olaf\Downloads\GloboFleet_CC_x64_Setup.exe
2014-04-04 10:44 - 2014-04-04 10:44 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WUDFUsbccidDriver_01_09_00.Wdf
2014-04-04 09:38 - 2014-04-04 09:38 - 00000000 ____D () C:\Program Files (x86)\Buyond_GmbH
2014-04-04 06:54 - 2014-04-04 06:53 - 48537520 _____ (Buyond GmbH) C:\Users\Olaf\Downloads\GloboFleet_DriverCard_Checker_Setup.exe
2014-04-04 06:54 - 2014-04-04 06:53 - 48366056 _____ (Buyond GmbH) C:\Users\Olaf\Downloads\GloboFleet_FileChecker_Setup.exe
2014-04-01 21:10 - 2014-04-01 21:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-01 21:09 - 2014-01-29 20:29 - 00000000 ____D () C:\Users\Olaf\Daniela
2014-04-01 20:44 - 2014-02-06 01:27 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-04-01 20:44 - 2014-02-06 01:27 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-30 11:59 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\Olaf\Documents\xls
2014-03-26 00:10 - 2014-03-26 00:10 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files\iTunes
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files\iPod
2014-03-26 00:10 - 2014-03-26 00:10 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-26 00:05 - 2014-03-26 00:05 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-03-21 21:58 - 2014-03-18 18:35 - 00000000 ____D () C:\Program Files (x86)\Epson Software
2014-03-21 09:37 - 2009-07-14 06:45 - 00306472 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-21 09:13 - 2013-09-29 17:46 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-21 09:11 - 2013-09-29 17:46 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-20 23:03 - 2014-03-20 23:03 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-03-20 23:03 - 2014-03-20 23:03 - 00832936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-03-20 23:03 - 2013-09-03 22:18 - 00062408 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-03-20 23:03 - 2013-09-03 22:18 - 00054216 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-03-20 23:03 - 2013-09-03 22:17 - 18302384 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-03-20 23:03 - 2013-09-03 22:17 - 00947808 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 14709720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-03-20 23:02 - 2014-03-20 23:02 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02715264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-03-20 23:02 - 2014-03-20 23:02 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-03-20 23:02 - 2013-09-29 19:24 - 17755424 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-03-20 23:02 - 2013-09-03 22:17 - 03093280 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-03-20 23:02 - 2013-09-03 22:17 - 00024544 _____ () C:\Windows\system32\nvinfo.pb
2014-03-20 18:54 - 2010-11-21 05:47 - 00013394 _____ () C:\Windows\PFRO.log
2014-03-19 00:09 - 2014-03-19 00:09 - 00000264 _____ () C:\Windows\setup.iss
2014-03-19 00:09 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\Olaf\AppData\Roaming\NewSoft
2014-03-19 00:09 - 2014-03-19 00:09 - 00000000 ____D () C:\Users\Olaf\AppData\Local\NewSoft
2014-03-19 00:07 - 2014-03-19 00:07 - 00000000 ____D () C:\Windows\SysWOW64\color
2014-03-19 00:07 - 2014-03-19 00:07 - 00000000 ____D () C:\Program Files (x86)\NewSoft
2014-03-19 00:07 - 2013-09-03 22:10 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-03-18 23:06 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\Olaf\Documents\Bewerbungen
2014-03-18 18:43 - 2014-03-18 18:43 - 00000000 ____D () C:\Program Files\Common Files\EPSON
2014-03-18 18:36 - 2014-03-18 18:34 - 00000000 ____D () C:\Program Files (x86)\epson
2014-03-18 18:35 - 2014-03-18 18:35 - 00000000 ____D () C:\Program Files\EpsonNet
2014-03-18 18:34 - 2014-03-21 12:44 - 00000954 _____ () C:\Users\Olaf\Desktop\EPSON Scan.lnk
2014-03-16 15:55 - 2013-10-20 10:53 - 00000000 ____D () C:\Users\Olaf\Documents\Ofenhaus
2014-03-16 15:54 - 2014-03-16 15:54 - 00004141 _____ () C:\Users\Olaf\Desktop\Danni.lnk
2014-03-16 15:54 - 2014-03-16 15:54 - 00001181 _____ () C:\Users\Olaf\Desktop\Olaf.lnk
2014-03-12 13:12 - 2013-10-11 16:03 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-12 13:12 - 2013-09-29 19:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 13:12 - 2013-09-29 19:54 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-12 10:53 - 2014-02-06 01:11 - 00000000 ____D () C:\Users\Olaf\AppData\Roaming\WindSolutions
2014-03-12 10:21 - 2014-02-06 01:11 - 00000000 ____D () C:\ProgramData\WindSolutions

Some content of TEMP:
====================
C:\Users\Olaf\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-09 10:27

==================== End Of Log ============================
--- --- ---

--- --- ---



Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Olaf at 2014-04-11 18:50:00
Running from C:\Users\Olaf\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Avira SearchFree Toolbar (HKLM-x32\...\{41564952-412D-5637-00A7-A758B70C0A03}) (Version: 12.10.3.4690 - APN, LLC)
AVS Audio Converter 7.2 (HKLM-x32\...\AVS Audio Converter_is1) (Version: 7.2.2.529 - Online Media Technologies Ltd.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.100 - DivX, LLC)
Epson Benutzerhandbuch WF-3520 Series (HKLM-x32\...\WF-3520 Series Useg) (Version:  - )
Epson Connect Guide (HKLM-x32\...\Epson Connect Guide) (Version:  - )
Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.2.0 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM-x32\...\{8F01524C-0676-4CC1-B4AE-64753C723391}) (Version: 3.01.0005 - Seiko Epson Corporation)
Epson E-Web Print (HKLM-x32\...\{CEC98C2A-9ED5-49DA-9F3A-92434E0A4FA3}) (Version: 1.19.0000 - SEIKO EPSON CORPORATION)
Epson FAX Utility (HKLM-x32\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 1.31.00 - SEIKO EPSON CORPORATION)
Epson Netzwerkhandbuch WF-3520 Series (HKLM-x32\...\WF-3520 Series Netg) (Version:  - )
Epson PC-FAX Driver (HKLM-x32\...\EPSON PC-FAX Driver 2) (Version:  - )
EPSON Printer Finder (HKLM-x32\...\{B8ECD0D3-AE08-4891-B6C7-32F96B75EB6C}) (Version: 1.0.0 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON WF-3520 Series Printer Uninstall (HKLM\...\EPSON WF-3520 Series) (Version:  - SEIKO EPSON Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
GloboFleet CC (HKLM\...\{C657CCF7-A8DB-435A-A764-2AF538A88F5E}) (Version: 3.7.5 - Buyond GmbH)
GloboFleet DriverCard Checker (HKLM-x32\...\{5F4F0021-343C-49B1-AAED-846A35656948}) (Version: 1.2.1 - Buyond GmbH)
Google Chrome Frame (HKLM-x32\...\{8618AE04-1210-3C32-A8C3-45A5E44CD340}) (Version: 65.169.107 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.36 - Irfan Skiljan)
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 40 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417040FF}) (Version: 7.0.400 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
KYOCERA Client Tool (HKLM\...\KYOCERA Client Tool) (Version: 1.0.0026 - KYOCERA Document Solutions Inc.)
Kyocera Product Library (HKLM\...\Kyocera Product Library) (Version: 4.2.1909 - KYOCERA Document Solutions Inc.)
Logitech SetPoint 6.61 (HKLM\...\sp6) (Version: 6.61.15 - Logitech)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 24.4.0 - Mozilla)
Mozilla Thunderbird 24.4.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.4.0 (x86 de)) (Version: 24.4.0 - Mozilla)
Nur Entfernen der CopyTrans Suite möglich (HKCU\...\CopyTrans Suite) (Version: 2.37 - WindSolutions)
NVIDIA 3D Vision Controller-Treiber 326.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 326.01 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.145.1024 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3523 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden
NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.15.2 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 10.4.0 - NVIDIA Corporation) Hidden
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Presto! PageManager 9.03 SE (HKLM-x32\...\{04AF7536-446D-4F5A-8920-B4E885E4581B}) (Version: 9.03.06 - Newsoft Technology Corporation)
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.49.927.2011 - Realtek)
Software Updater (HKLM-x32\...\{C09D747A-BD47-42A9-915E-CEB6B1BB7C11}) (Version: 4.2.7 - SEIKO EPSON CORPORATION) <==== ATTENTION
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VIS (HKLM-x32\...\VIS) (Version:  - ) <==== ATTENTION
VLC media player 2.1.0 (HKLM\...\VLC media player) (Version: 2.1.0 - VideoLAN)
WePrint (HKLM-x32\...\WePrint) (Version:  - EuroSmartz Ltd)
Winamp (HKLM-x32\...\Winamp) (Version: 5.65  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)

==================== Restore Points  =========================

01-04-2014 18:24:10 Geplanter Prüfpunkt
04-04-2014 07:37:05 Installed GloboFleet DriverCard Checker
04-04-2014 08:52:38 Installed GloboFleet CC
05-04-2014 16:41:29 Installed Software Updater
05-04-2014 20:20:52 Removed Java(TM) 6 Update 35
05-04-2014 20:21:25 Installed Java 7 Update 51
06-04-2014 07:26:34 Gerätetreiber-Paketinstallation: EPSON Drucker
06-04-2014 07:37:05 Installiert Realtek Ethernet Controller Driver
08-04-2014 05:58:46 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {9902649F-0ED4-4AE0-91F2-E9FBF8963E7F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-06] (Google Inc.)
Task: {A67324AC-50DA-4043-9535-7A17BA6775A7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-06] (Google Inc.)
Task: {B1FA0F76-8125-43B2-84E7-48914B2C7B0F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-09-03 22:18 - 2014-03-04 15:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-01-10 07:26 - 2014-01-10 07:26 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
2013-09-29 13:05 - 2013-09-29 13:04 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-09-14 02:51 - 2013-09-14 02:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll
2013-09-14 02:50 - 2013-09-14 02:50 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll
2009-07-13 23:03 - 2009-07-14 03:15 - 00364544 _____ () C:\Windows\SysWOW64\msjetoledb40.dll
2014-03-19 00:07 - 2008-11-17 15:56 - 00102400 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\nsSign.dll
2014-03-19 00:07 - 2010-05-07 12:46 - 00057344 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PerformOcr.dll
2014-03-19 00:07 - 2010-12-23 14:17 - 00057344 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMISM.dll
2014-03-19 00:07 - 2007-03-30 11:24 - 00104528 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\Qem.dll
2014-03-19 00:07 - 2010-12-29 18:52 - 00147456 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMCommon.dll
2014-03-19 00:07 - 2008-08-25 18:19 - 00069632 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PHooKDlg.dll
2014-03-19 00:07 - 2009-11-26 18:49 - 00081920 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\NetFun2k.dll
2014-03-19 00:07 - 2011-03-11 11:47 - 00151040 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\ScanModule.dll
2014-03-19 00:07 - 2009-09-09 15:44 - 00151552 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMANO.dll
2014-03-19 00:07 - 2007-03-30 10:49 - 00104528 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\ComClass.dll
2014-03-19 00:07 - 2010-11-30 17:42 - 00352256 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMTree.dll
2014-03-19 00:07 - 2010-10-22 11:01 - 00139264 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMSet.dll
2014-03-19 00:07 - 2010-12-29 19:32 - 00614400 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMDB_N.dll
2014-03-19 00:07 - 2009-08-06 11:22 - 00421888 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\FT.dll
2014-03-19 00:07 - 2010-09-09 19:00 - 00061440 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMINSO.dll
2014-03-19 00:07 - 2010-07-13 11:48 - 00106496 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMProp.dll
2014-03-19 00:07 - 2007-08-31 18:51 - 00040960 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMVoice.dll
2014-03-19 00:07 - 2010-09-08 18:10 - 00073728 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\OutlookVBA.dll
2014-03-19 00:07 - 2009-11-27 18:38 - 00331776 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMAppBar.dll
2014-03-19 00:07 - 2010-11-26 11:33 - 04583424 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMView.dll
2014-03-19 00:07 - 2007-03-30 11:01 - 00038992 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\NsOEMKey.dll
2014-03-19 00:07 - 2010-10-22 11:22 - 00090112 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMSave.dll
2014-03-19 00:07 - 2010-08-03 11:44 - 00049152 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMOffice.dll
2014-03-19 00:07 - 2010-09-26 12:13 - 00430080 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMPageVW.dll
2014-03-19 00:07 - 2010-03-02 16:09 - 00102400 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMDocVW.dll
2014-03-19 00:07 - 2009-06-26 10:03 - 00086016 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMApSet.dll
2014-03-19 00:07 - 2010-08-03 11:51 - 01036288 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\SlideBarDLL.dll
2014-03-19 00:07 - 2009-12-04 18:20 - 00323584 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMAnoSet.dll
2014-03-19 00:07 - 2010-09-26 12:13 - 00184320 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMImgVW.dll
2014-03-19 00:07 - 2008-08-25 17:16 - 00040960 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMIEVW.dll
2014-03-19 00:07 - 2010-09-08 11:52 - 00036864 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMPDFView.dll
2014-03-19 00:07 - 2010-04-27 16:20 - 00065536 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMStatus.dll
2014-03-19 00:07 - 2011-01-21 16:05 - 00258048 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMScnSet.dll
2014-03-19 00:07 - 2007-03-30 10:57 - 00034896 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\Import.dll
2014-03-19 00:07 - 2010-11-26 11:45 - 00090112 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMImageSplitter.dll
2014-01-10 07:28 - 2014-01-10 07:28 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/11/2014 05:40:21 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/10/2014 07:27:11 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/10/2014 04:27:32 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/09/2014 11:17:31 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (04/11/2014 05:41:37 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Browser-Schutz" wurde mit folgendem dienstspezifischem Fehler beendet: %%1.

Error: (04/11/2014 05:40:52 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Browser-Schutz" wurde nicht richtig gestartet.

Error: (04/11/2014 05:39:54 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (04/10/2014 07:26:43 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (04/10/2014 04:27:05 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (04/09/2014 11:16:52 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)


Microsoft Office Sessions:
=========================
Error: (04/11/2014 05:40:21 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/10/2014 07:27:11 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/10/2014 04:27:32 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/09/2014 11:17:31 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Percentage of memory in use: 32%
Total physical RAM: 4094.49 MB
Available physical RAM: 2759.56 MB
Total Pagefile: 8187.16 MB
Available Pagefile: 6560.43 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:297.99 GB) (Free:230.51 GB) NTFS
Drive d: (Setup) (CDROM) (Total:0.09 GB) (Free:0 GB) CDFS
Drive n: (Wombel) (Fixed) (Total:1863.01 GB) (Free:1128.25 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: C13EC13E)

Partition: GPT Partition Type.

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 1863 GB) (Disk ID: 00080E6D)
Partition 1: (Not Active) - (Size=-198627557376) - (Type=07 NTFS)

==================== End Of Log ============================

Alt 11.04.2014, 19:51   #12
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Startseite bei Firefox lässt sich nicht ändern. - Standard

Startseite bei Firefox lässt sich nicht ändern.


Okay, dann bitte Kontrollscans mit MBAM und ESET bitte:

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.




ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

__________________
Logfiles bitte immer in CODE-Tags posten

Alt 12.04.2014, 06:59   #13
wombel74
 
Startseite bei Firefox lässt sich nicht ändern. - Standard

Startseite bei Firefox lässt sich nicht ändern.


Guten Morgen

Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 11.04.2014
Suchlauf-Zeit: 23:04:20
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.1.1004
Malware Datenbank: v2014.04.10.07
Rootkit Datenbank: v2014.03.27.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Chameleon: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Olaf

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 279254
Verstrichene Zeit: 15 Min, 20 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Shuriken: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 3
PUP.Optional.Conduit.A, C:\Users\Olaf\AppData\Local\Temp\ct3288691, In Quarantäne, [9a66bd431ce41de3ac60cc8d2dd5a25e], 
PUP.Optional.Conduit.A, C:\Users\Olaf\AppData\Local\Temp\ct3297265, In Quarantäne, [dc2451af48b8ff012edeb5a42ad8e020], 
PUP.Optional.Conduit.A, C:\Users\Olaf\AppData\Local\Temp\ct3297861, In Quarantäne, [b8482dd30cf4857b8a8277e233cfaf51], 

Dateien: 7
PUP.Optional.Conduit.A, C:\Users\Olaf\AppData\Local\Temp\nsz3B4E\SpSetup.exe, In Quarantäne, [13edba46748cb050c0f556c1e21f34cc], 
PUP.Optional.OpenCandy, C:\Users\Olaf\Downloads\winamp565_full_emusic-7plus_all.exe, In Quarantäne, [51af9a66af514fb1d429112e2cd86799], 
PUP.Optional.Conduit.A, C:\Users\Olaf\AppData\Local\Temp\ct3288691\chromeid.txt, In Quarantäne, [9a66bd431ce41de3ac60cc8d2dd5a25e], 
PUP.Optional.Conduit.A, C:\Users\Olaf\AppData\Local\Temp\ct3288691\setup.ini.txt, In Quarantäne, [9a66bd431ce41de3ac60cc8d2dd5a25e], 
PUP.Optional.Conduit.A, C:\Users\Olaf\AppData\Local\Temp\ct3297265\ism.exe, In Quarantäne, [dc2451af48b8ff012edeb5a42ad8e020], 
PUP.Optional.Conduit.A, C:\Users\Olaf\AppData\Local\Temp\ct3297861\chromeid.txt, In Quarantäne, [b8482dd30cf4857b8a8277e233cfaf51], 
PUP.Optional.Conduit.A, C:\Users\Olaf\AppData\Local\Temp\ct3297861\setup.ini.txt, In Quarantäne, [b8482dd30cf4857b8a8277e233cfaf51], 

Physische Sektoren: 0
(No malicious items detected)


(end)

Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=c2c07fee8849c843a0e3f659f074c768
# engine=17853
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-04-12 12:07:18
# local_time=2014-04-12 02:07:18 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775165 100 94 30492 16808682 23266 0
# compatibility_mode=5893 16776574 100 94 16790430 148891088 0 0
# scanned=211388
# found=31
# cleaned=0
# scan_time=10426
sh=4AB4972CF850A9924ACADF8FA1DC0CDF201B8A78 ft=0 fh=0000000000000000 vn="INF/Autorun worm" ac=I fn="C:\Documents and Settings\******\Documents\Stick *******\autorun.inf"
sh=447F5170D2FD1DA03DB7955AA0034E046747E329 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Documents and Settings\******\Documents\Stick *******\BÜWI.lnk"
sh=E2D0FB3C1A086313B3ABF21A068BF593A39B99E5 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Documents and Settings\******\Documents\Stick *******\danielle.lnk"
sh=D7D4A177E4E1A55363D28FCA80C1DF3B9A267806 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Documents and Settings\******\Documents\Stick *******\denise.lnk"
sh=4E68A97EFF646766C580C591C7B93885BD13B6B6 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Documents and Settings\******\Documents\Stick *******\referat1.lnk"
sh=4AB4972CF850A9924ACADF8FA1DC0CDF201B8A78 ft=0 fh=0000000000000000 vn="INF/Autorun worm" ac=I fn="C:\Documents and Settings\******\Eigene Dateien\Stick *******\autorun.inf"
sh=447F5170D2FD1DA03DB7955AA0034E046747E329 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Documents and Settings\******\Eigene Dateien\Stick *******\BÜWI.lnk"
sh=E2D0FB3C1A086313B3ABF21A068BF593A39B99E5 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Documents and Settings\******\Eigene Dateien\Stick *******\danielle.lnk"
sh=D7D4A177E4E1A55363D28FCA80C1DF3B9A267806 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Documents and Settings\******\Eigene Dateien\Stick *******\denise.lnk"
sh=4E68A97EFF646766C580C591C7B93885BD13B6B6 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Documents and Settings\******\Eigene Dateien\Stick *******\referat1.lnk"
sh=4AB4972CF850A9924ACADF8FA1DC0CDF201B8A78 ft=0 fh=0000000000000000 vn="INF/Autorun worm" ac=I fn="C:\Dokumente und Einstellungen\******\Documents\Stick *******\autorun.inf"
sh=447F5170D2FD1DA03DB7955AA0034E046747E329 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Dokumente und Einstellungen\******\Documents\Stick *******\BÜWI.lnk"
sh=E2D0FB3C1A086313B3ABF21A068BF593A39B99E5 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Dokumente und Einstellungen\******\Documents\Stick *******\danielle.lnk"
sh=D7D4A177E4E1A55363D28FCA80C1DF3B9A267806 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Dokumente und Einstellungen\******\Documents\Stick *******\denise.lnk"
sh=4E68A97EFF646766C580C591C7B93885BD13B6B6 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Dokumente und Einstellungen\******\Documents\Stick *******\referat1.lnk"
sh=4AB4972CF850A9924ACADF8FA1DC0CDF201B8A78 ft=0 fh=0000000000000000 vn="INF/Autorun worm" ac=I fn="C:\Dokumente und Einstellungen\******\Eigene Dateien\Stick *******\autorun.inf"
sh=447F5170D2FD1DA03DB7955AA0034E046747E329 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Dokumente und Einstellungen\******\Eigene Dateien\Stick *******\BÜWI.lnk"
sh=E2D0FB3C1A086313B3ABF21A068BF593A39B99E5 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Dokumente und Einstellungen\******\Eigene Dateien\Stick *******\danielle.lnk"
sh=D7D4A177E4E1A55363D28FCA80C1DF3B9A267806 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Dokumente und Einstellungen\******\Eigene Dateien\Stick *******\denise.lnk"
sh=4E68A97EFF646766C580C591C7B93885BD13B6B6 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Dokumente und Einstellungen\******\Eigene Dateien\Stick *******\referat1.lnk"
sh=4AB4972CF850A9924ACADF8FA1DC0CDF201B8A78 ft=0 fh=0000000000000000 vn="INF/Autorun worm" ac=I fn="C:\Users\******\Documents\Stick *******\autorun.inf"
sh=447F5170D2FD1DA03DB7955AA0034E046747E329 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Users\******\Documents\Stick *******\BÜWI.lnk"
sh=E2D0FB3C1A086313B3ABF21A068BF593A39B99E5 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Users\******\Documents\Stick *******\danielle.lnk"
sh=D7D4A177E4E1A55363D28FCA80C1DF3B9A267806 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Users\******\Documents\Stick *******\denise.lnk"
sh=4E68A97EFF646766C580C591C7B93885BD13B6B6 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Users\******\Documents\Stick *******\referat1.lnk"
sh=4AB4972CF850A9924ACADF8FA1DC0CDF201B8A78 ft=0 fh=0000000000000000 vn="INF/Autorun worm" ac=I fn="C:\Users\******\Eigene Dateien\Stick *******\autorun.inf"
sh=447F5170D2FD1DA03DB7955AA0034E046747E329 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Users\******\Eigene Dateien\Stick *******\BÜWI.lnk"
sh=E2D0FB3C1A086313B3ABF21A068BF593A39B99E5 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Users\******\Eigene Dateien\Stick *******\danielle.lnk"
sh=D7D4A177E4E1A55363D28FCA80C1DF3B9A267806 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Users\******\Eigene Dateien\Stick *******\denise.lnk"
sh=4E68A97EFF646766C580C591C7B93885BD13B6B6 ft=0 fh=0000000000000000 vn="Win32/Dorkbot.D worm" ac=I fn="C:\Users\******\Eigene Dateien\Stick *******\referat1.lnk"
sh=826252D08D4BAACB2883DE71CC91EF13A3560E8B ft=1 fh=785b54913062c55c vn="a variant of Win32/Spy.MiniKeyLog.AA trojan" ac=I fn="N:\Daten Minerva\Basis\Basis ********\cfg\PCagent.exe"
P.S. Bin am Wochenende nicht viel am PC. Eilt nicht so ganz. Danke nochmal für die Hilfe.

Alt 12.04.2014, 12:59   #14
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Startseite bei Firefox lässt sich nicht ändern. - Standard

Startseite bei Firefox lässt sich nicht ändern.


Wo hast du die Dateien her die ESET gefunden hat?
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 12.04.2014, 23:04   #15
wombel74
 
Startseite bei Firefox lässt sich nicht ändern. - Standard

Startseite bei Firefox lässt sich nicht ändern.


Die sind von einem Arbeitskollegen. Der USB Stick hatte u.a. ein Dokument was ich ihm drucken sollte. dort befanden sich auch Dateien von seiner Tocher. ist aber schon bestimmt 1 Jahr her. Warum?

Antwort
Seite 1 von 2 1 2

Themen zu Startseite bei Firefox lässt sich nicht ändern.
.com, avira, bonjour, converter, desktop, entfernen, firefox, flash player, google, home, installation, mozilla, problem, programm, realtek, registry, security, software, svchost.exe, trojaner, virus, warnung, windows, windows xp, wuauclt.exe, ändern


« ConduitSearch mit Freeware installiert, seit dem läuft der Windows 7 Rechner schlecht | Programme scheinen in Ordner "Program Data" verschoben zu sein - außerdem: Shared key to keep this from being removed with install/uninstall »


Ähnliche Themen: Startseite bei Firefox lässt sich nicht ändern.


  1. Windows 8.1: Mysearchpage.net Startseite - lässt sich nicht ändern
    Plagegeister aller Art und deren Bekämpfung - 29.10.2014 (31)
  2. Startseite bei Google Chrome lässt sich nicht ändern
    Log-Analyse und Auswertung - 22.09.2014 (15)
  3. Windows 7: awsomehp als Startseite lässt sich nicht ändern
    Log-Analyse und Auswertung - 27.02.2014 (14)
  4. nationzoom startseite bei firefox lässt sich nicht ändern
    Log-Analyse und Auswertung - 21.01.2014 (1)
  5. Startseite ist immer NationZoom und lässt sich nicht ändern
    Plagegeister aller Art und deren Bekämpfung - 08.01.2014 (26)
  6. Windows 7: Startseite lässt sich nicht mehr ändern
    Plagegeister aller Art und deren Bekämpfung - 15.11.2013 (11)
  7. Firefox Startseite http://www.searchnu.com/406 lässt sich nicht mehr ändern!
    Log-Analyse und Auswertung - 29.11.2012 (13)
  8. Startseite im IE 8 lässt sich nicht ändern
    Plagegeister aller Art und deren Bekämpfung - 03.08.2010 (10)
  9. Startseite lässt sich nicht ändern -> HijackThis Log-File
    Log-Analyse und Auswertung - 21.06.2006 (2)
  10. Ie Explorer Startseite Lässt Sich Nicht ändern
    Plagegeister aller Art und deren Bekämpfung - 05.09.2005 (7)
  11. Startseite vom IE lässt sich nicht ändern
    Plagegeister aller Art und deren Bekämpfung - 18.08.2005 (6)
  12. startseite lässt sich nicht mehr ändern :(
    Log-Analyse und Auswertung - 03.06.2005 (4)
  13. IE-Startseite lässt sich nicht ändern
    Log-Analyse und Auswertung - 22.01.2005 (6)
  14. Startseite lässt sich nicht ändern
    Log-Analyse und Auswertung - 13.01.2005 (1)
  15. Startseite lässt sich nicht ändern
    Log-Analyse und Auswertung - 31.08.2004 (30)
  16. startseite lässt sich nicht ändern, bitte um hilfe!
    Log-Analyse und Auswertung - 30.07.2004 (3)
  17. startseite von IE 6 lässt sich nicht ändern
    Plagegeister aller Art und deren Bekämpfung - 14.02.2004 (9)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Startseite bei Firefox lässt sich nicht ändern. - Hallo Forum, wenn ich im FF einen neuen Tab öffne, geht er immer auf "search.conduit.com". Jetzt soll man über "about :config" den Schlüssel "browser.newtab.url" ändern. Das klappt aber nicht. Sobald - Startseite bei Firefox lässt sich nicht ändern....
Archiv
Du betrachtest: Startseite bei Firefox lässt sich nicht ändern. auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55