| |
| |||||||
Log-Analyse und Auswertung: adware-Bprotect durch McAfee entdeckt und konnte nicht entfernt werdenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
05.05.2014, 20:45
| #1 |
| |  adware-Bprotect durch McAfee entdeckt und konnte nicht entfernt werden Hallo liebe IT-Spezialisten! Ich hoffe, Ihr könnt mir helfen. Mein Computer arbeitet seit einigen Tagen langsamer als sonst. Das Mailprogramm Mozilla Thunderbird hängt... Betriebssystem ist Windows 7 Home Premium. Ich habe den Rechner mit McAfee scannen lassen. Es wurden ein Paar Viren gefunden. Der eine davon -Adware-Bprotect- konnte leider nicht entfernt werden. Hier sind die Logfiles von Farbar (FRST.txt): FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-05-2014 02
Ran by Tanja (administrator) on TANJA-PC on 05-05-2014 21:19:29
Running from C:\Users\Tanja\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe
( ) C:\Windows\System32\lxeccoms.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
() C:\Program Files (x86)\HomeTab\WConnectorHandler.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
() C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe
() C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\ezprint.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Lavasoft) C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Lavasoft) C:\ProgramData\Search Protection\SearchProtection.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe
(Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McUICnt.exe
(soft Xpansion) C:\Program Files (x86)\Common Files\soft Xpansion\sxds10.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\Core\mchost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(McAfee, Inc.) C:\Program Files\mcafee\msm\McSmtFwk.exe
() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareDesktop.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [FreeFallProtection] => C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe [686704 2010-12-17] ()
HKLM\...\Run: [IntelPAN] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-07-28] (Intel(R) Corporation)
HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [4479648 2011-01-25] (Dell Inc.)
HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [Stage Remote] => C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe [2022976 2011-06-28] ()
HKLM\...\Run: [lxecmon.exe] => C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe [770728 2011-01-23] ()
HKLM\...\Run: [EzPrint] => C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\ezprint.exe [148280 2011-01-23] ()
HKLM\...\Run: [DellStage] => C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe [2195824 2012-02-01] ()
HKLM\...\Run: [] => [X]
HKLM\...\Run: [AdAwareTray] => C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe [4114264 2014-01-23] ()
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2013-12-18] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Dell DataSafe Online] => C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe [3396448 2013-11-11] (Dell, Inc.)
HKLM-x32\...\Run: [mcui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-01-28] (McAfee, Inc.)
HKLM-x32\...\Run: [Lexmark Pro800-Pro900 Series] => C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\fm3032.exe [316072 2011-01-23] ()
HKLM-x32\...\Run: [AccuWeatherWidget] => C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe [968048 2012-02-01] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254896 2012-09-17] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-01-28] (McAfee, Inc.)
HKLM-x32\...\Run: [Ad-Aware Browsing Protection] => C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe [559696 2013-09-27] (Lavasoft)
HKLM-x32\...\Run: [Search Protection] => C:\ProgramData\Search Protection\SearchProtection.exe [949512 2014-02-17] (Lavasoft)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-3715489345-1050972543-478851-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-10-02] (Skype Technologies S.A.)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [226920 2011-04-22] (NVIDIA Corporation)
Startup: C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IMVU.lnk
ShortcutTarget: IMVU.lnk -> C:\Users\Gast\AppData\Roaming\IMVUClient\IMVUQualityAgent.exe ()
Startup: C:\Users\Mascha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk
ShortcutTarget: Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk -> C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe (Intel® Corporation)
Startup: C:\Users\Tanja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\Video\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk
ShortcutTarget: Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk -> C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe (Intel® Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://search.babylon.com/?affID=114211&tt=3612_3&babsrc=HP_ss&mntrId=c43f51d200000000000074e50b3f07c1
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://dell.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x51FBC3AEF6A5CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.certified-toolbar.com?si=46364&tid=3869&ver=5.7&ts=1375105834002.000005&tguid=46364-3869-1395730212770-747088-b5678&st=chrome&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.certified-toolbar.com?si=46364&tid=3869&ver=5.7&ts=1375105834002.000005&tguid=46364-3869-1395730212770-747088-b5678&st=chrome&q=
URLSearchHook: HKLM-x32 - (No Name) - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No File
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - DefaultScope {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=5.7&ts=1375105834002.000005&tguid=46364-3869-1395730212770-747088-b5678&q={searchTerms}
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=5.7&ts=1375105834002.000005&tguid=46364-3869-1395730212770-747088-b5678&q={searchTerms}
SearchScopes: HKLM-x32 - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010006.10031&barid={7B48AE94-139E-11E2-AACC-848F69B0791A}
SearchScopes: HKCU - DefaultScope {794B2C93-9B33-4B66-A556-F35D9ACBCBA6} URL = hxxp://de.search.yahoo.com/search?fr=mcafee&type=A011DE105&p={SearchTerms}
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - BrowserMngrDefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&affID=114211&tt=3612_3&babsrc=SP_ss&mntrId=c43f51d200000000000074e50b3f07c1
SearchScopes: HKCU - {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = hxxp://securedsearch2.lavasoft.com/results.php?pr=vmn&id=adawaretb&v=3_8&idate=2014-05-05&hsimp=yhs-lavasoft&ent=ch&q={searchTerms}
SearchScopes: HKCU - {794B2C93-9B33-4B66-A556-F35D9ACBCBA6} URL = hxxp://de.search.yahoo.com/search?fr=mcafee&type=A011DE105&p={SearchTerms}
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=5.7&ts=1375105834002.000005&tguid=46364-3869-1395730212770-747088-b5678&q={searchTerms}
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=4.9&ts=1375105834002.000005&tguid=46364-3869-1375105834002-F5FC849EF3E676B8AF12E817760E08CB&q={searchTerms}
BHO: Ad-Aware Security Add-on - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - C:\Program Files (x86)\Lavasoft\AdAware SecureSearch Toolbar\adawareDx64.dll ()
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO: HomeTab - {ba696155-d96e-4281-b467-0367a0456474} - C:\Program Files\HomeTab\IE\HomeTab.dll (Simply Tech LTD.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
BHO-x32: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - C:\Program Files\mcafee\msk\mskapbho.dll ()
BHO-x32: No Name - {2EECD738-5844-4a99-B4B6-146BF802613B} - No File
BHO-x32: Ad-Aware Security Add-on - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - C:\Program Files (x86)\Lavasoft\AdAware SecureSearch Toolbar\adawareDx.dll ()
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: HomeTab - {ba696155-d96e-4281-b467-0367a0456474} - C:\Program Files (x86)\HomeTab\IE\HomeTab.dll (Simply Tech LTD.)
BHO-x32: Flagfox - {BA7B8F39-DF7F-4A98-83E9-57CE6ED9CA24} - C:\Users\Tanja\AppData\LocalLow\Flagfox\IE\Flagfox.dll (Dave G)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Toolbar: HKLM - Free PDF Perfect - {EFC2B9BE-AB2B-47F1-A47D-9EB28E58C917} - C:\Program Files (x86)\Freemium\Free PDF Perfect\ieagent64.dll (soft Xpansion)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM - HomeTab - {ba696155-d96e-4281-b467-0367a0456474} - C:\Program Files\HomeTab\IE\HomeTab.dll (Simply Tech LTD.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM - Ad-Aware Security Add-on - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - C:\Program Files (x86)\Lavasoft\AdAware SecureSearch Toolbar\adawareDx64.dll ()
Toolbar: HKLM-x32 - Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
Toolbar: HKLM-x32 - No Name - {98889811-442D-49dd-99D7-DC866BE87DBC} - No File
Toolbar: HKLM-x32 - No Name - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No File
Toolbar: HKLM-x32 - HomeTab - {ba696155-d96e-4281-b467-0367a0456474} - C:\Program Files (x86)\HomeTab\IE\HomeTab.dll (Simply Tech LTD.)
Toolbar: HKLM-x32 - Free PDF Perfect - {EFC2B9BE-AB2B-47F1-A47D-9EB28E58C917} - C:\Program Files (x86)\Freemium\Free PDF Perfect\ieagent32.dll (soft Xpansion)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - Ad-Aware Security Add-on - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - C:\Program Files (x86)\Lavasoft\AdAware SecureSearch Toolbar\adawareDx.dll ()
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKCU - No Name - {977AE9CC-AF83-45E8-9E03-E2798216E2D5} - No File
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default
FF NewTab: about:home
FF SearchEngineOrder.1: Web Search
FF Homepage: about:home
FF Keyword.URL: hxxp://securedsearch2.lavasoft.com/results.php?pr=vmn&id=adawaretb&v=3_8&idate=__installtime__&hsimp=yhs-lavasoft&ent=bs&q=
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @innoplus.de/ino3DViewer - C:\Program Files (x86)\innoplus\3D-Viewer-innoPlus\npIno3DViewer.dll (INNOVA-engineering GmbH Dresden)
FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_37 - C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @soft-xpansion/npsxpdf - C:\Program Files (x86)\Common Files\Freemium\np-sxpdf.dll (soft-Xpansion)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\searchplugins\bProtect.xml
FF SearchPlugin: C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\searchplugins\dvdvideosofttb-de-customized-web-search.xml
FF SearchPlugin: C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\searchplugins\sweetim.xml
FF SearchPlugin: C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\adawaretb.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Savings Sidekick - C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Extensions\crossriderapp5060@crossrider.com [2012-11-22]
FF Extension: pricealarm - C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM [2013-07-29]
FF Extension: Babylon - C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Extensions\ffxtlbr@babylon.com [2012-09-09]
FF Extension: DVDVideoSoftTB DE - C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Extensions\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} [2014-05-05]
FF Extension: HomeTab - C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Extensions\{24532715-4abc-47ee-bd4f-a6774d0723d2} [2014-04-14]
FF Extension: Ad-Aware Security Add-on - C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Extensions\{87934c42-161d-45bc-8cef-ef18abe2a30c} [2014-05-05]
FF Extension: IMinent Toolbar - C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444} [2012-06-17]
FF Extension: FoxyDeal - C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Extensions\{F58A62EB-38DC-43C4-A539-DC52E135208D} [2013-07-29]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-22]
FF Extension: SweetPacks Toolbar for Firefox - C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi [2012-10-11]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-04-03]
FF HKLM-x32\...\Firefox\Extensions: [webbooster@iminent.com] - C:\Program Files (x86)\Iminent\webbooster@iminent.com
FF HKLM-x32\...\Firefox\Extensions: [{B45418F9-6406-4828-9D1A-35313FB1E2D6}] - C:\ProgramData\Freemium\Free PDF Perfect\Data\fftb
FF Extension: Free PDF Perfect - C:\ProgramData\Freemium\Free PDF Perfect\Data\fftb [2013-07-29]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2013-11-26]
FF HKLM-x32\...\Thunderbird\Extensions: [{B45418F9-6406-4828-9D1A-35313FB1E2D6}] - C:\ProgramData\Freemium\Free PDF Perfect\Data\fftb
FF Extension: Free PDF Perfect - C:\ProgramData\Freemium\Free PDF Perfect\Data\fftb [2013-07-29]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2011-10-11]
FF HKCU\...\Firefox\Extensions: [{b64982b1-d112-42b5-b1e4-d3867c4533f8}] - C:\ProgramData\Browser Manager\2.3.787.43\{16cdff19-861d-48e3-a751-d99a27784753}\FirefoxExtension
Chrome:
=======
CHR HomePage: hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_8&idate=2014-05-05&ent=hp&u=544AC73567361970CE68AE5367C2C7DA
CHR StartupUrls: "hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_8&idate=2014-05-05&ent=hp&u=544AC73567361970CE68AE5367C2C7DA", "about:newtab?source=home"
CHR Extension: (Google Docs) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-13]
CHR Extension: (Google Drive) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-13]
CHR Extension: (YouTube) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-13]
CHR Extension: (Flagfox) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfdfamfnacokbbbnmpdfmhonipnhmbid [2013-06-19]
CHR Extension: (Google-Suche) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-13]
CHR Extension: (Savings Sidekick) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo [2014-01-13]
CHR Extension: (SiteAdvisor) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2014-01-13]
CHR Extension: (NewTab Connect) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlceijfdfeghdhmmbhbcffanmcggoojf [2014-05-05]
CHR Extension: (Google Wallet) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-13]
CHR Extension: (Google Mail) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-13]
CHR HKLM-x32\...\Chrome\Extension: [cfdfamfnacokbbbnmpdfmhonipnhmbid] - C:\Users\Tanja\AppData\LocalLow\Flagfox\CHROME\Flagfox.crx [2013-04-28]
CHR HKLM-x32\...\Chrome\Extension: [dhdepfaagokllfmhfbcfmocaeigmoebo] - C:\Users\Tanja\AppData\Local\Savings Sidekick\Chrome\Savings Sidekick.crx [2012-08-22]
CHR HKLM-x32\...\Chrome\Extension: [pgafcinpmmpklohkojmllohdhomoefph] - C:\ProgramData\Browser Manager\2.3.787.43\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.crx [2012-08-22]
==================== Services (Whitelisted) =================
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S4 IBUpdaterService; C:\Windows\system32\dmwu.exe [1447728 2013-05-21] ()
R2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe [702744 2014-01-23] ()
S2 lxecCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxecserv.exe [45736 2010-04-14] (Lexmark International, Inc.)
R2 lxec_device; C:\Windows\system32\lxeccoms.exe [1052328 2010-04-14] ( )
R2 lxec_device; C:\Windows\SysWOW64\lxeccoms.exe [598696 2010-04-14] ( )
R2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178528 2014-01-28] (McAfee, Inc.)
S3 McAWFwk; C:\Program Files\mcafee\msc\McAWFwk.exe [220528 2010-08-30] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [602944 2013-08-02] (McAfee, Inc.)
S4 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1025712 2014-01-21] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-03-17] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [185792 2014-03-17] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-07-28] ()
R3 SXDS10; C:\Program Files (x86)\Common Files\soft Xpansion\sxds10.exe [234096 2013-07-29] (soft Xpansion)
S4 Browser Manager; C:\ProgramData\Browser Manager\2.3.787.43\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe [X]
==================== Drivers (Whitelisted) ====================
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70592 2014-03-17] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [180272 2014-03-17] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311600 2014-03-17] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [522360 2014-03-17] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [783864 2014-03-17] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [422712 2014-01-21] (McAfee, Inc.)
S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [96592 2014-01-21] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [345456 2014-03-17] (McAfee, Inc.)
S3 NvStUSB; C:\Windows\system32\drivers\nvstusb.sys [121960 2010-12-12] ()
R3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [329800 2013-07-17] (BitDefender S.R.L.)
R3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-05-05 21:05 - 2014-05-05 21:05 - 00001785 ____C () C:\Users\Public\Desktop\iTunes.lnk
2014-05-05 21:05 - 2014-05-05 21:05 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-05-05 21:04 - 2014-05-05 21:05 - 00000000 ___DC () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-05-05 21:04 - 2014-05-05 21:05 - 00000000 ___DC () C:\Program Files\iTunes
2014-05-05 21:04 - 2014-05-05 21:05 - 00000000 ___DC () C:\Program Files (x86)\iTunes
2014-05-05 20:59 - 2014-05-05 20:59 - 00000000 ___DC () C:\Program Files\Bonjour
2014-05-05 20:59 - 2014-05-05 20:59 - 00000000 ___DC () C:\Program Files (x86)\Bonjour
2014-05-05 20:44 - 2014-05-05 20:46 - 00048975 ____C () C:\Users\Tanja\Downloads\Addition.txt
2014-05-05 20:43 - 2014-05-05 21:19 - 00031850 ____C () C:\Users\Tanja\Downloads\FRST.txt
2014-05-05 20:43 - 2014-05-05 21:19 - 00000000 ___DC () C:\FRST
2014-05-05 20:42 - 2014-05-05 20:42 - 02063872 ____C (Farbar) C:\Users\Tanja\Downloads\FRST64.exe
2014-05-05 20:34 - 2014-05-05 20:45 - 148885840 ____C (Apple Inc.) C:\Users\Tanja\Downloads\iTunes64Setup(1).exe
2014-05-05 20:07 - 2014-05-05 20:07 - 00000000 _SHDC () C:\Users\Tanja\AppData\Local\EmieUserList
2014-05-05 20:07 - 2014-05-05 20:07 - 00000000 _SHDC () C:\Users\Tanja\AppData\Local\EmieSiteList
2014-05-05 20:02 - 2014-05-05 20:02 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2014-05-05 19:55 - 2014-05-05 19:55 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Roxio Log Files
2014-05-05 19:37 - 2014-05-05 19:37 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\LavasoftStatistics
2014-05-05 18:59 - 2014-05-05 19:53 - 00002267 ____C () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk
2014-05-05 18:59 - 2014-05-05 18:59 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ad-Aware Antivirus
2014-05-05 18:57 - 2014-05-05 20:02 - 00000000 ___DC () C:\ProgramData\Ad-Aware Browsing Protection
2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\SecureSearch
2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\Users\Tanja\AppData\Local\adawarebp
2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\ProgramData\Search Protection
2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\Program Files\Lavasoft
2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\Program Files (x86)\Toolbar Cleaner
2014-05-05 18:56 - 2014-05-05 18:56 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Lavasoft
2014-05-05 18:56 - 2014-05-05 18:56 - 00000000 ___DC () C:\Program Files (x86)\Lavasoft
2014-05-05 18:55 - 2014-05-05 18:55 - 00000000 ___DC () C:\Program Files\Common Files\Lavasoft
2014-05-05 18:54 - 2014-05-05 18:54 - 00000000 ___DC () C:\ProgramData\Lavasoft
2014-05-05 18:53 - 2014-05-05 18:53 - 01727624 ____C () C:\Users\Tanja\Downloads\Adaware_Installer.exe
2014-05-05 18:44 - 2014-05-05 18:44 - 00728960 ____C (Enigma Software Group USA, LLC.) C:\Users\Tanja\Downloads\SpyHunter-Installer(1).exe
2014-05-05 18:13 - 2014-05-05 20:09 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Nico Mak Computing
2014-05-05 18:13 - 2014-05-05 18:13 - 04892480 ____C (WinZip International LLC ) C:\Users\Tanja\Downloads\wzmp_8.exe
2014-05-05 14:10 - 2014-05-05 14:10 - 00000000 ___DC () C:\Program Files\Enigma Software Group
2014-05-05 14:10 - 2014-05-05 14:10 - 00000000 ____C () C:\autoexec.bat
2014-05-05 14:09 - 2014-05-05 20:08 - 00000000 ___DC () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-05-05 14:06 - 2014-05-05 14:06 - 00728960 ____C (Enigma Software Group USA, LLC.) C:\Users\Tanja\Downloads\SpyHunter-Installer.exe
2014-05-05 11:15 - 2014-05-05 19:53 - 00000000 ___DC () C:\Program Files (x86)\Mozilla Thunderbird
2014-04-22 17:36 - 2014-04-22 17:38 - 23549440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 17387008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-22 17:36 - 2014-04-22 17:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-22 17:36 - 2014-04-22 17:38 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-22 17:36 - 2014-04-22 17:38 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-22 17:36 - 2014-04-22 17:38 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-22 17:36 - 2014-04-22 17:38 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-22 17:36 - 2014-04-22 17:38 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-22 17:36 - 2014-04-22 17:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-22 17:36 - 2014-04-22 17:38 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-22 17:36 - 2014-04-22 17:38 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-22 17:09 - 2014-04-22 17:09 - 00002096 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2014-04-22 17:09 - 2014-04-22 17:09 - 00002084 ____C () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2014-04-22 17:07 - 2014-04-22 17:09 - 21987424 ____C (Mozilla) C:\Users\Tanja\Downloads\Thunderbird Setup 24.4.0.exe
2014-04-22 16:34 - 2013-09-23 13:49 - 00197704 ____C (McAfee, Inc.) C:\Windows\system32\Drivers\HipShieldK.sys
2014-04-17 10:30 - 2014-04-17 10:30 - 00002982 ____C () C:\Windows\System32\Tasks\{B47D42E0-03AF-400A-A540-7F155D64C658}
2014-04-14 13:07 - 2014-04-14 13:07 - 00000000 ___DC () C:\Users\Tanja\AppData\Local\{24A9CB4F-290F-4EC2-8C42-657A2FCA4CDB}
2014-04-10 12:43 - 2014-04-10 12:43 - 00002982 ____C () C:\Windows\System32\Tasks\{299B3EF5-797C-4235-B0D6-04E28BA85DE4}
2014-04-10 12:41 - 2014-04-10 12:41 - 00002982 ____C () C:\Windows\System32\Tasks\{C804B517-5AD4-41F7-82A2-B16ED4D0997C}
2014-04-10 12:41 - 2014-04-10 12:41 - 00002982 ____C () C:\Windows\System32\Tasks\{5A6EB0BF-B98A-4B53-A91D-46DCEF4430B3}
2014-04-10 12:41 - 2014-04-10 12:41 - 00002982 ____C () C:\Windows\System32\Tasks\{4348CFF2-7F8D-4849-B373-1FA61EDB155C}
2014-04-10 11:04 - 2014-04-10 12:29 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-10 11:04 - 2014-04-10 12:29 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-10 11:04 - 2014-04-10 12:29 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-10 11:04 - 2014-04-10 12:29 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-10 11:04 - 2014-04-10 12:28 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-10 11:04 - 2014-04-10 12:28 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-10 11:04 - 2014-04-10 12:28 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-10 11:04 - 2014-04-10 12:28 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-10 11:04 - 2014-04-10 12:28 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-10 11:04 - 2014-04-10 12:28 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-10 11:04 - 2014-04-10 12:28 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-10 11:04 - 2014-04-10 12:28 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-10 11:04 - 2014-04-10 12:28 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-10 11:04 - 2014-04-10 12:28 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-10 11:04 - 2014-04-10 12:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-10 11:04 - 2014-04-10 12:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-10 11:04 - 2014-02-04 04:35 - 00274880 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-07 07:07 - 2014-05-05 21:12 - 00001110 ____C () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf521f401f7f7b.job
2014-04-07 07:07 - 2014-04-07 07:07 - 00004106 ____C () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1cf521f401f7f7b
==================== One Month Modified Files and Folders =======
2014-05-05 21:19 - 2014-05-05 20:43 - 00031850 ____C () C:\Users\Tanja\Downloads\FRST.txt
2014-05-05 21:19 - 2014-05-05 20:43 - 00000000 ___DC () C:\FRST
2014-05-05 21:12 - 2014-04-07 07:07 - 00001110 ____C () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf521f401f7f7b.job
2014-05-05 21:05 - 2014-05-05 21:05 - 00001785 ____C () C:\Users\Public\Desktop\iTunes.lnk
2014-05-05 21:05 - 2014-05-05 21:05 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-05-05 21:05 - 2014-05-05 21:04 - 00000000 ___DC () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-05-05 21:05 - 2014-05-05 21:04 - 00000000 ___DC () C:\Program Files\iTunes
2014-05-05 21:05 - 2014-05-05 21:04 - 00000000 ___DC () C:\Program Files (x86)\iTunes
2014-05-05 21:04 - 2014-01-14 20:16 - 00000000 ___DC () C:\Program Files\iPod
2014-05-05 20:59 - 2014-05-05 20:59 - 00000000 ___DC () C:\Program Files\Bonjour
2014-05-05 20:59 - 2014-05-05 20:59 - 00000000 ___DC () C:\Program Files (x86)\Bonjour
2014-05-05 20:58 - 2012-05-12 21:42 - 00000000 ___DC () C:\ProgramData\Apple
2014-05-05 20:46 - 2014-05-05 20:44 - 00048975 ____C () C:\Users\Tanja\Downloads\Addition.txt
2014-05-05 20:45 - 2014-05-05 20:34 - 148885840 ____C (Apple Inc.) C:\Users\Tanja\Downloads\iTunes64Setup(1).exe
2014-05-05 20:43 - 2009-07-14 06:45 - 00021296 ___HC () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-05 20:43 - 2009-07-14 06:45 - 00021296 ___HC () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-05 20:42 - 2014-05-05 20:42 - 02063872 ____C (Farbar) C:\Users\Tanja\Downloads\FRST64.exe
2014-05-05 20:30 - 2012-10-11 14:32 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\DVDVideoSoft
2014-05-05 20:27 - 2012-06-22 23:09 - 00000884 ____C () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-05 20:22 - 2012-10-11 14:23 - 00000000 ___DC () C:\Program Files (x86)\SweetIM
2014-05-05 20:22 - 2011-10-14 11:45 - 00064024 ____C () C:\Users\Tanja\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-05 20:19 - 2012-10-11 14:23 - 00000000 ___DC () C:\ProgramData\SweetIM
2014-05-05 20:18 - 2011-12-11 22:21 - 00000000 ___DC () C:\Program Files (x86)\UltraStar
2014-05-05 20:09 - 2014-05-05 18:13 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Nico Mak Computing
2014-05-05 20:08 - 2014-05-05 14:09 - 00000000 ___DC () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-05-05 20:07 - 2014-05-05 20:07 - 00000000 _SHDC () C:\Users\Tanja\AppData\Local\EmieUserList
2014-05-05 20:07 - 2014-05-05 20:07 - 00000000 _SHDC () C:\Users\Tanja\AppData\Local\EmieSiteList
2014-05-05 20:07 - 2011-10-15 23:24 - 00000000 ___DC () C:\Users\Tanja\AppData\Local\Google
2014-05-05 20:02 - 2014-05-05 20:02 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2014-05-05 20:02 - 2014-05-05 18:57 - 00000000 ___DC () C:\ProgramData\Ad-Aware Browsing Protection
2014-05-05 20:02 - 2011-10-11 09:49 - 01374325 ____C () C:\Windows\WindowsUpdate.log
2014-05-05 20:01 - 2011-10-11 17:32 - 00000000 ___DC () C:\ProgramData\Sonic
2014-05-05 20:01 - 2011-10-11 17:31 - 00000000 ___DC () C:\ProgramData\Roxio
2014-05-05 20:01 - 2011-10-11 17:30 - 00000000 ___DC () C:\Program Files (x86)\Roxio
2014-05-05 19:57 - 2010-11-21 08:50 - 00700118 ____C () C:\Windows\system32\perfh007.dat
2014-05-05 19:57 - 2010-11-21 08:50 - 00149968 ____C () C:\Windows\system32\perfc007.dat
2014-05-05 19:57 - 2009-07-14 07:13 - 01622228 ____C () C:\Windows\system32\PerfStringBackup.INI
2014-05-05 19:56 - 2011-10-14 11:51 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Roxio
2014-05-05 19:55 - 2014-05-05 19:55 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Roxio Log Files
2014-05-05 19:53 - 2014-05-05 18:59 - 00002267 ____C () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk
2014-05-05 19:53 - 2014-05-05 11:15 - 00000000 ___DC () C:\Program Files (x86)\Mozilla Thunderbird
2014-05-05 19:53 - 2012-06-27 15:10 - 00000000 ___DC () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-05 19:52 - 2012-05-28 20:50 - 00000000 ___DC () C:\ProgramData\boost_interprocess
2014-05-05 19:51 - 2014-02-21 11:36 - 00001106 ____C () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf2ee873e0378f.job
2014-05-05 19:51 - 2011-10-27 21:28 - 00198803 ____C () C:\ProgramData\lxecscan.log
2014-05-05 19:51 - 2011-10-11 17:27 - 00000000 ___DC () C:\Program Files (x86)\McAfee
2014-05-05 19:51 - 2011-10-11 17:21 - 00000000 ___DC () C:\Users\Default\AppData\Local\SoftThinks
2014-05-05 19:51 - 2011-10-11 17:21 - 00000000 ___DC () C:\Users\Default User\AppData\Local\SoftThinks
2014-05-05 19:51 - 2011-10-11 17:14 - 00000000 ___DC () C:\Program Files (x86)\Dell DataSafe Local Backup
2014-05-05 19:51 - 2011-10-11 09:47 - 00000000 ___DC () C:\ProgramData\NVIDIA
2014-05-05 19:51 - 2010-11-21 05:47 - 00294022 ____C () C:\Windows\PFRO.log
2014-05-05 19:51 - 2009-07-14 07:08 - 00000006 ___HC () C:\Windows\Tasks\SA.DAT
2014-05-05 19:51 - 2009-07-14 06:51 - 00142366 ____C () C:\Windows\setupact.log
2014-05-05 19:37 - 2014-05-05 19:37 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\LavasoftStatistics
2014-05-05 19:30 - 2012-09-09 20:56 - 00000000 ___DC () C:\Program Files (x86)\Savings Sidekick
2014-05-05 18:59 - 2014-05-05 18:59 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ad-Aware Antivirus
2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\SecureSearch
2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\Users\Tanja\AppData\Local\adawarebp
2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\ProgramData\Search Protection
2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\Program Files\Lavasoft
2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\Program Files (x86)\Toolbar Cleaner
2014-05-05 18:56 - 2014-05-05 18:56 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Lavasoft
2014-05-05 18:56 - 2014-05-05 18:56 - 00000000 ___DC () C:\Program Files (x86)\Lavasoft
2014-05-05 18:55 - 2014-05-05 18:55 - 00000000 ___DC () C:\Program Files\Common Files\Lavasoft
2014-05-05 18:54 - 2014-05-05 18:54 - 00000000 ___DC () C:\ProgramData\Lavasoft
2014-05-05 18:53 - 2014-05-05 18:53 - 01727624 ____C () C:\Users\Tanja\Downloads\Adaware_Installer.exe
2014-05-05 18:44 - 2014-05-05 18:44 - 00728960 ____C (Enigma Software Group USA, LLC.) C:\Users\Tanja\Downloads\SpyHunter-Installer(1).exe
2014-05-05 18:13 - 2014-05-05 18:13 - 04892480 ____C (WinZip International LLC ) C:\Users\Tanja\Downloads\wzmp_8.exe
2014-05-05 14:58 - 2011-12-11 22:21 - 00001017 _____ () C:\Users\UpdatusUser\Desktop\UltraStar.lnk
2014-05-05 14:58 - 2011-10-29 19:54 - 00001115 _____ () C:\Users\UpdatusUser\Desktop\PDF Passwort Knacker 1.0.lnk
2014-05-05 14:49 - 2012-06-29 19:08 - 00001017 ____C () C:\Users\TAN\Desktop\UltraStar.lnk
2014-05-05 14:48 - 2013-07-29 15:33 - 00001072 ____C () C:\Users\Public\Desktop\PDF24 Editor.lnk
2014-05-05 14:48 - 2013-07-29 15:33 - 00001057 ____C () C:\Users\Public\Desktop\PDF24 Fax.lnk
2014-05-05 14:48 - 2013-06-06 21:38 - 00001239 ____C () C:\Users\Public\Desktop\ElsterFormular.lnk
2014-05-05 14:48 - 2013-02-27 13:15 - 00002148 ____C () C:\Users\Public\Desktop\Nero Blu-ray Player.lnk
2014-05-05 14:48 - 2012-11-26 10:54 - 00001033 ____C () C:\Users\Public\Desktop\Adobe Download Assistant.lnk
2014-05-05 14:48 - 2012-06-17 13:26 - 00000962 ____C () C:\Users\Public\Desktop\calibre - E-book management.lnk
2014-05-05 14:48 - 2011-10-27 21:26 - 00001959 ____C () C:\Users\Public\Desktop\Lexmark-Druckerstartseite starten.LNK
2014-05-05 14:48 - 2011-10-15 23:36 - 00001136 ____C () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-05-05 14:34 - 2011-10-11 17:35 - 00000945 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zinio Reader 4.lnk
2014-05-05 14:34 - 2011-10-11 17:25 - 00002488 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2014-05-05 14:34 - 2011-10-11 17:25 - 00001460 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2014-05-05 14:34 - 2011-10-11 17:25 - 00001376 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Photo Gallery.lnk
2014-05-05 14:34 - 2011-10-11 17:25 - 00001307 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Movie Maker.lnk
2014-05-05 14:33 - 2012-11-26 10:54 - 00001045 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Download Assistant.lnk
2014-05-05 14:33 - 2011-10-15 23:36 - 00001148 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-05-05 14:33 - 2011-10-14 11:45 - 00001931 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hilfedokumentation von Dell.lnk
2014-05-05 14:10 - 2014-05-05 14:10 - 00000000 ___DC () C:\Program Files\Enigma Software Group
2014-05-05 14:10 - 2014-05-05 14:10 - 00000000 ____C () C:\autoexec.bat
2014-05-05 14:06 - 2014-05-05 14:06 - 00728960 ____C (Enigma Software Group USA, LLC.) C:\Users\Tanja\Downloads\SpyHunter-Installer.exe
2014-05-05 12:05 - 2013-05-23 09:44 - 00003440 _____ () C:\Windows\System32\Tasks\PCDEventLauncherTask
2014-05-05 10:28 - 2012-06-22 23:09 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-05 10:27 - 2012-06-22 23:09 - 00692400 ____C (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-05 10:27 - 2011-10-11 16:55 - 00070832 ____C (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-05 10:14 - 2011-10-27 10:25 - 00000000 ___DC () C:\Users\Tanja\AppData\Local\Thunderbird
2014-05-01 21:50 - 2012-06-30 20:49 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\SoftGrid Client
2014-05-01 21:38 - 2011-12-26 11:14 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Skype
2014-04-30 08:26 - 2011-10-27 21:30 - 00000000 ___DC () C:\ProgramData\Lx_cats
2014-04-30 06:51 - 2014-01-13 13:22 - 00002177 ____C () C:\Users\Public\Desktop\Google Chrome.lnk
2014-04-23 09:51 - 2009-07-14 05:20 - 00000000 ___DC () C:\Windows\PolicyDefinitions
2014-04-22 17:38 - 2014-04-22 17:36 - 23549440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 17387008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-22 17:38 - 2014-04-22 17:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-22 17:38 - 2014-04-22 17:36 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-22 17:38 - 2014-04-22 17:36 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-22 17:38 - 2014-04-22 17:36 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-22 17:38 - 2014-04-22 17:36 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-22 17:38 - 2014-04-22 17:36 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-22 17:38 - 2014-04-22 17:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-22 17:38 - 2014-04-22 17:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-22 17:38 - 2014-04-22 17:36 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-22 17:09 - 2014-04-22 17:09 - 00002096 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2014-04-22 17:09 - 2014-04-22 17:09 - 00002084 ____C () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2014-04-22 17:09 - 2014-04-22 17:07 - 21987424 ____C (Mozilla) C:\Users\Tanja\Downloads\Thunderbird Setup 24.4.0.exe
2014-04-17 10:30 - 2014-04-17 10:30 - 00002982 ____C () C:\Windows\System32\Tasks\{B47D42E0-03AF-400A-A540-7F155D64C658}
2014-04-14 20:49 - 2013-06-06 21:38 - 00000000 ___DC () C:\Program Files (x86)\ElsterFormular
2014-04-14 20:43 - 2011-10-14 11:44 - 00000000 ___DC () C:\Users\Tanja
2014-04-14 13:34 - 2014-04-03 10:39 - 00000000 ___DC () C:\Program Files (x86)\Mozilla Firefox
2014-04-14 13:34 - 2013-12-11 20:26 - 00000000 ____D () C:\Windows\System32\Tasks\SystemSockets
2014-04-14 13:34 - 2013-07-29 16:10 - 00000000 ____D () C:\Windows\System32\Tasks\ProtectedSearch
2014-04-14 13:34 - 2013-07-29 15:51 - 00000000 ___DC () C:\Program Files (x86)\HomeTab
2014-04-14 13:34 - 2013-07-29 15:51 - 00000000 ____D () C:\Windows\System32\Tasks\Browser Updater
2014-04-14 13:07 - 2014-04-14 13:07 - 00000000 ___DC () C:\Users\Tanja\AppData\Local\{24A9CB4F-290F-4EC2-8C42-657A2FCA4CDB}
2014-04-12 11:01 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-10 12:43 - 2014-04-10 12:43 - 00002982 ____C () C:\Windows\System32\Tasks\{299B3EF5-797C-4235-B0D6-04E28BA85DE4}
2014-04-10 12:41 - 2014-04-10 12:41 - 00002982 ____C () C:\Windows\System32\Tasks\{C804B517-5AD4-41F7-82A2-B16ED4D0997C}
2014-04-10 12:41 - 2014-04-10 12:41 - 00002982 ____C () C:\Windows\System32\Tasks\{5A6EB0BF-B98A-4B53-A91D-46DCEF4430B3}
2014-04-10 12:41 - 2014-04-10 12:41 - 00002982 ____C () C:\Windows\System32\Tasks\{4348CFF2-7F8D-4849-B373-1FA61EDB155C}
2014-04-10 12:29 - 2014-04-10 11:04 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-10 12:29 - 2014-04-10 11:04 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-10 12:29 - 2014-04-10 11:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-10 12:29 - 2014-04-10 11:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-10 12:28 - 2014-04-10 11:04 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-10 12:28 - 2014-04-10 11:04 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-10 12:28 - 2014-04-10 11:04 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-10 12:28 - 2014-04-10 11:04 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-10 12:28 - 2014-04-10 11:04 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-10 12:28 - 2014-04-10 11:04 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-10 12:28 - 2014-04-10 11:04 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-10 12:28 - 2014-04-10 11:04 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-10 12:28 - 2014-04-10 11:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-10 12:28 - 2014-04-10 11:04 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-10 12:28 - 2014-04-10 11:04 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-10 12:28 - 2014-04-10 11:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-09 07:55 - 2013-07-29 15:51 - 00034376 ____C () C:\Windows\Launcher.exe
2014-04-07 07:07 - 2014-04-07 07:07 - 00004106 ____C () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1cf521f401f7f7b
2014-04-07 07:07 - 2014-02-21 11:36 - 00003854 ____C () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1cf2ee873e0378f
Files to move or delete:
====================
C:\ProgramData\l_0_00_re.pad
Some content of TEMP:
====================
C:\Users\Gast\AppData\Local\Temp\conduitinstaller.exe
C:\Users\Tanja\AppData\Local\Temp\2b6ddf79-14f0-4d62-a761-19e52e27b3ab.exe
C:\Users\Tanja\AppData\Local\Temp\ah_fedtv.dll
C:\Users\Tanja\AppData\Local\Temp\jre-6u37-windows-i586-iftw.exe
C:\Users\Tanja\AppData\Local\Temp\mgsqlite3.dll
C:\Users\Tanja\AppData\Local\Temp\nsl25CD.tmp.tbDVDV.dll
C:\Users\Tanja\AppData\Local\Temp\pdf24-creator-update.exe
C:\Users\Tanja\AppData\Local\Temp\Shortcut_SweetIM_2.exe
C:\Users\Tanja\AppData\Local\Temp\SHSetup.exe
C:\Users\Tanja\AppData\Local\Temp\SIMEEIInstaller.exe
C:\Users\Tanja\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Tanja\AppData\Local\Temp\SQLite.dll
C:\Users\Tanja\AppData\Local\Temp\sqlite3.exe
C:\Users\Tanja\AppData\Local\Temp\tbu1E78.exe
C:\Users\Tanja\AppData\Local\Temp\tbu209A.exe
C:\Users\Tanja\AppData\Local\Temp\tbu227D.exe
C:\Users\Tanja\AppData\Local\Temp\tbu275D.exe
C:\Users\Tanja\AppData\Local\Temp\tbu3054.exe
C:\Users\Tanja\AppData\Local\Temp\tbu30C.exe
C:\Users\Tanja\AppData\Local\Temp\tbu39F3.exe
C:\Users\Tanja\AppData\Local\Temp\tbu51E.exe
C:\Users\Tanja\AppData\Local\Temp\tbu74E1.exe
C:\Users\Tanja\AppData\Local\Temp\tbuA543.exe
C:\Users\Tanja\AppData\Local\Temp\tbuB25D.exe
C:\Users\Tanja\AppData\Local\Temp\tbuC0AF.exe
C:\Users\Tanja\AppData\Local\Temp\tbuD28A.exe
C:\Users\Tanja\AppData\Local\Temp\tbuD7D7.exe
C:\Users\Tanja\AppData\Local\Temp\vcredist_x86.exe
C:\Users\Tanja\AppData\Local\Temp\YontooSetup-S.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-04-29 08:20
==================== End Of Log ============================
Kann mit bitte jemand helfen? Danke im Voraus Hier kommt noch die Addition.txt: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 05-05-2014 02
Ran by Tanja at 2014-05-05 21:57:20
Running from C:\Users\Tanja\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {ADA629C7-7F48-5689-624A-3B76997E0892}
AV: Ad-Aware Antivirus (Disabled - Out of date) {D87B6541-12A1-DAEA-0033-9B8057AAB996}
AS: Ad-Aware Antivirus (Disabled - Out of date) {631A84A5-349B-D564-3A83-A0F22C2DF32B}
AS: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {16C7C823-5972-5907-58FA-0004E2F9422F}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee Firewall (Enabled) {959DA8E2-3527-57D1-4915-924367AD4FE9}
FW: Ad-Aware Firewall (Disabled) {E040E464-58CE-DBB2-2B6C-32B5A979FEED}
==================== Installed Programs ======================
3D-Viewer-innoplus (HKLM-x32\...\{B96DB037-DBEA-4186-9081-9CBD537F82E8}) (Version: 13.01.16 - INNOVA-engineering GmbH)
ABBYY FineReader 6.0 Sprint (HKLM-x32\...\{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}) (Version: 6.00.2146.41621 - ABBYY Software House)
AccelerometerP11 (HKLM-x32\...\{87434D51-51DB-4109-B68F-A829ECDCF380}) (Version: 2.00.11.22 - STMicroelectronics)
Ad-Aware Antivirus (HKLM\...\{6A16ADA5-0B30-4893-84AB-961B1340D14A}_AdAwareUpdater) (Version: 11.1.5354.0 - Lavasoft)
Ad-Aware Security Add-on (HKLM-x32\...\adawaretb) (Version: 3.8.0.11 - Lavasoft)
AdAwareInstaller (Version: 11.1.5354.0 - Lavasoft) Hidden
AdAwareUpdater (Version: 11.1.5354.0 - Lavasoft) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.6.0.19120 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 2.6.0.19120 - Adobe Systems Incorporated) Hidden
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.3 - Adobe Systems Incorporated)
Adobe Download Assistant (x32 Version: 1.2.3 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.206 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.206 - Adobe Systems Incorporated)
Adobe Reader X (10.1.9) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.9 - Adobe Systems Incorporated)
Advanced Archive Password Recovery (HKCU\...\Advanced Archive Password Recovery) (Version: 4.53 - ElcomSoft Co. Ltd.)
Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)
AntimalwareEngine (Version: 2.6.0.0 - Lavasoft) Hidden
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
calibre (HKLM-x32\...\{531336A9-55EB-4367-8064-7180849D5676}) (Version: 0.8.53 - Kovid Goyal)
CamControl LITE V 4.05 (HKLM-x32\...\CamControl LITE_is1) (Version: - )
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dell DataSafe Local Backup - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: 9.4.60 - Dell Inc.)
Dell DataSafe Local Backup (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 9.4.60 - Dell Inc.)
Dell DataSafe Online (HKLM-x32\...\{7EC66A95-AC2D-4127-940B-0445A526AB2F}) (Version: 2.1.19634 - Dell)
Dell DataSafe Online (HKLM-x32\...\{C53BCCBE-9268-4C09-82E9-611444A73B3F}) (Version: 2.8.1.10 - Dell)
Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)
Dell Getting Started Guide (HKLM-x32\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.)
Dell MusicStage (HKLM-x32\...\{3255BC3F-32BA-41ED-93A0-B9AEB6CDD9E6}) (Version: 1.5.201.0 - Fingertapps)
Dell PhotoStage (HKLM-x32\...\{E4335E82-17B3-460F-9E70-39D9BC269DB3}) (Version: 1.5.0.65 - ArcSoft)
Dell Stage (HKLM-x32\...\{E2F57269-065E-4B19-8CDA-AB6C401FAF1A}) (Version: 1.7.209.0 - Fingertapps)
Dell Stage Remote (HKLM-x32\...\{AF4D3C63-009B-4A17-B02E-D395065DD3F0}) (Version: 2.0.0.43 - ArcSoft)
Dell VideoStage (HKLM-x32\...\InstallShield_{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}) (Version: 1.2.0.1712 - CyberLink Corp.)
Dell VideoStage (x32 Version: 1.2.0.1712 - CyberLink Corp.) Hidden
Dell Webcam Central (HKLM-x32\...\Dell Webcam Central) (Version: 2.00.44 - Creative Technology Ltd)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 15.1.13904 - Landesfinanzdirektion Thüringen)
FoxyDeal (HKLM-x32\...\FoxyDeal) (Version: 1.1.0 - R&E Media GmbH)
Free Pdf Perfect Prereq (HKLM-x32\...\{a6eb67cd-4f30-4fa0-a040-b778d22b46d8}) (Version: 1.0.0.66 - Covus Freemium GmbH)
Free Pdf Perfect Prereq (x32 Version: 1.0.0.66 - Covus Freemium GmbH) Hidden
Freemium Free PDF Perfect (HKLM-x32\...\{88265079-D6F4-4292-86BE-D2053E80BFE4}) (Version: 1.0 - Freemium)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 34.0.1847.131 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
HomeTab 6.0 (HKLM-x32\...\{3a4935b3-b7a0-4065-8ccc-0030471b33f1}_is1) (Version: 6.0 - HomeTab) <==== ATTENTION
IB Updater Service (HKLM-x32\...\WNLT) (Version: 3.0.5.4 - ) <==== ATTENTION
iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2342 - Intel Corporation)
Intel(R) PROSet/Wireless WiFi-Software (HKLM\...\{25FBDA9A-E868-4B3B-B9FF-D923818511A1}) (Version: 14.2.0000 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.37 - Irfan Skiljan)
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java Auto Updater (x32 Version: 2.0.7.2 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 27 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416027FF}) (Version: 6.0.270 - Oracle)
Java(TM) 6 Update 37 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216037FF}) (Version: 6.0.370 - Oracle)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Lexmark Pro800-Pro900 Series (HKLM\...\Lexmark Pro800-Pro900 Series) (Version: - Lexmark International, Inc.)
McAfee SecurityCenter (HKLM-x32\...\MSC) (Version: 12.8.944 - McAfee, Inc.)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 24.5.0 - Mozilla)
Mozilla Thunderbird 24.5.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.5.0 (x86 de)) (Version: 24.5.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
My Dell (HKLM\...\PC-Doctor for Windows) (Version: 3.5.6426.22 - PC-Doctor, Inc.)
Nero 10 Movie ThemePack Basic (x32 Version: 10.6.10000.1.0 - Nero AG) Hidden
Nero Blu-ray Player (x32 Version: 12.0.20012 - Nero AG) Hidden
Nero Control Center 10 (x32 Version: 10.6.13000.0.11 - Nero AG) Hidden
Nero ControlCenter 10 Help (CHM) (x32 Version: 10.2.10800 - Nero AG) Hidden
Nero Core Components 10 (x32 Version: 2.0.20000.9.12 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.11500.28.0 - Nero AG) Hidden
NVIDIA 3D Vision Treiber 268.30 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 268.30 - NVIDIA Corporation)
NVIDIA Grafiktreiber 268.30 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 268.30 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.265.41.0 - NVIDIA Corporation) Hidden
NVIDIA Optimus 1.0.21 (Version: 1.0.21 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6830 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 268.30 (Version: 268.30 - NVIDIA Corporation) Hidden
NVIDIA Update Components (Version: 1.0.21 - NVIDIA Corporation) Hidden
OpenOffice.org 3.4.1 (HKLM-x32\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 8.4.1.210 - Electronic Arts, Inc.)
PDF Passwort Knacker 1 (HKLM-x32\...\PDF Passwort Knacker 1) (Version: - )
PDF24 Creator 5.7.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 11.0.10 - Dell Inc.)
QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6312 - Realtek Semiconductor Corp.)
Savings Sidekick (HKLM-x32\...\Savings Sidekick) (Version: 1.22.150.150 - 215 Apps) <==== ATTENTION
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Stanza (HKLM-x32\...\Stanza) (Version: - )
SweetIM for Messenger 3.7 (HKLM-x32\...\{7683B745-6060-41FD-AA75-0BBB383FEAD4}) (Version: 3.7.0005 - SweetIM Technologies Ltd.) <==== ATTENTION
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.6.0 - Synaptics Incorporated)
SyncUP (HKLM-x32\...\{D92C9CCE-E5F0-4125-977A-0590F3225B74}) (Version: 10.2.14900 - Nero AG)
SyncUP (x32 Version: 1.12.12400.17.102 - Nero AG) Hidden
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel)
Updater Service (HKLM-x32\...\Updater Service) (Version: 14,12,8,9 - ) <==== ATTENTION
VideoPerformer (HKLM-x32\...\VideoPerformer) (Version: - PerformerSoft LLC) <==== ATTENTION
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Zinio Reader 4 (HKLM-x32\...\ZinioReader4) (Version: 4.2.4164 - Zinio LLC)
Zinio Reader 4 (x32 Version: 4.2.4164 - Zinio LLC) Hidden
==================== Restore Points =========================
22-04-2014 14:56:40 Removed Bonjour
22-04-2014 15:35:40 Windows Update
29-04-2014 10:11:45 Windows Update
05-05-2014 08:01:27 Windows Update
05-05-2014 12:09:40 Installed SpyHunter
05-05-2014 16:54:11 AA11
05-05-2014 18:06:51 Removed SpyHunter
05-05-2014 18:07:25 Removed SpyHunter
05-05-2014 18:19:05 Removed Update Manager for SweetPacks 1.1
05-05-2014 18:21:55 Removed Internet Explorer Toolbar 4.6 by SweetPacks
05-05-2014 18:59:55 Installed iTunes
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____C C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {1ACD70FD-4579-4C90-8337-465F457EE28C} - System32\Tasks\GoogleUpdateTaskMachineCore1cf2ee873e0378f => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-10-15] (Google Inc.)
Task: {2168C9CA-67D0-41C3-8ED6-5F24B18BCB86} - System32\Tasks\GoogleUpdateTaskMachineUA1cf521f401f7f7b => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-10-15] (Google Inc.)
Task: {285EE32B-E5AD-479D-B168-7ADEE1C9EFCC} - System32\Tasks\{5A6EB0BF-B98A-4B53-A91D-46DCEF4430B3} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-05-05] (Mozilla Corporation)
Task: {35C250A6-3660-499A-92D1-E48E55639B2B} - System32\Tasks\{B47D42E0-03AF-400A-A540-7F155D64C658} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-05-05] (Mozilla Corporation)
Task: {40D3CB72-A7C9-4CF0-9018-FC0D33C19487} - System32\Tasks\Video Performer Manager => Sc.exe start Video Performer Manager
Task: {43A0083C-1317-4BE9-93FA-1D0EB5DB8472} - System32\Tasks\{2CF18FC4-6F01-40B7-8E75-A5045D887787} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-05-05] (Mozilla Corporation)
Task: {5DA631BD-8411-4531-8E37-5BDE34478BCE} - System32\Tasks\{4348CFF2-7F8D-4849-B373-1FA61EDB155C} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-05-05] (Mozilla Corporation)
Task: {6B86F44A-F3CF-4CD0-B9D7-55A62DC38215} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {7166A41B-3E73-4148-82B9-28A9219D8FBD} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {749D4F46-858E-4E7B-A6A0-773539F2C8E1} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-05] (Adobe Systems Incorporated)
Task: {74A17E5D-7904-43D8-AD9C-A600DF7FB23A} - System32\Tasks\{C804B517-5AD4-41F7-82A2-B16ED4D0997C} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-05-05] (Mozilla Corporation)
Task: {8A7E82BE-800F-4F4C-8023-5702C8F1062A} - System32\Tasks\{FF24D7BB-3AA2-4955-9D7F-9E7EB56B8929} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-05-05] (Mozilla Corporation)
Task: {A266C8AF-FF73-43AF-A25A-1720961238AD} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\My Dell\sessionchecker.exe [2014-01-31] (PC-Doctor, Inc.)
Task: {AB024251-19B7-46FF-A612-2F995D87E993} - System32\Tasks\ProtectedSearch\Protected Search => C:\Program Files (x86)\HomeTab\WSearchDefender.exe [2014-04-09] ()
Task: {AF4B7A7F-D2BB-4B60-BAF4-1B5A3825A767} - System32\Tasks\YourFile Update => C:\Program Files (x86)\YourFileDownloader\YourFileUpdater.exe <==== ATTENTION
Task: {D68BAD47-5CF0-4D84-A37F-25E56577D684} - System32\Tasks\SystemSockets\SystemSockets => C:\Program Files (x86)\HomeTab\WConnectorHandler.exe [2014-01-09] ()
Task: {D8BE0879-0DEB-47B7-B591-981C6D1D3AC2} - System32\Tasks\Browser Updater\Browser Updater => C:\Program Files (x86)\HomeTab\WSystemUpdate.exe [2014-02-04] ()
Task: {DABB326C-06F5-4AEE-9FC5-EDBBF28F1C53} - System32\Tasks\{299B3EF5-797C-4235-B0D6-04E28BA85DE4} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-05-05] (Mozilla Corporation)
Task: {DC363C81-2D7E-471A-BF40-65557B936E1D} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe
Task: {ED13BC92-AEFF-41E9-A1A0-EB2394E045F2} - System32\Tasks\Browser Manager => Sc.exe start Browser Manager
Task: {FA0DBEB5-9D91-43F9-8EB8-8950C6461E8F} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\My Dell\uaclauncher.exe [2014-01-31] (PC-Doctor, Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf2ee873e0378f.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf521f401f7f7b.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2011-07-28 03:07 - 2011-07-28 03:07 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll
2011-10-27 21:27 - 2009-11-26 01:09 - 00053760 _____ () C:\Windows\System32\LXECPMON.DLL
2011-10-27 21:26 - 2009-01-13 08:15 - 04485120 _____ () C:\Windows\System32\LXECOEM.DLL
2011-10-27 21:29 - 2009-11-04 08:17 - 00189440 _____ () C:\Windows\system32\spool\PRTPROCS\x64\lxecdrpp.dll
2014-01-23 16:09 - 2014-01-23 16:09 - 00702744 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe
2014-01-23 16:30 - 2014-01-23 16:30 - 00103800 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_thread-vc100-mt-1_55.dll
2014-01-23 16:30 - 2014-01-23 16:30 - 00024440 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_system-vc100-mt-1_55.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00033656 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_chrono-vc100-mt-1_55.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00055680 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_date_time-vc100-mt-1_55.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00123776 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_filesystem-vc100-mt-1_55.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 03720040 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareServiceKernel.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00685904 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\SQLite.dll
2014-01-23 16:30 - 2014-01-23 16:30 - 00158032 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\pugixml.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 02595144 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\RCF.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00788856 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_regex-vc100-mt-1_55.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00602984 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareActivation.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00291192 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareApplicationUpdater.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00142696 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareGamingMode.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00098648 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareReset.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00120152 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTime.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00268152 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareDefinitionsUpdater.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00198024 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareDefinitionsUpdaterScheduler.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00417128 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareIgnoreList.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00253800 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareQuarantine.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00293744 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareAntiMalwareEngine.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00212336 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareAntiRootkitEngine.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00509808 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareScannerHistory.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00607584 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareScanner.dll
2014-01-23 16:30 - 2014-01-23 16:30 - 00035192 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_timer-vc100-mt-1_55.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00325488 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareScannerScheduler.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00333688 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareRealTimeProtection.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00227688 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareIncompatibles.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00219488 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareAntiSpam.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00129896 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareAntiPhishing.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00599920 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareParentalControl.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 01926504 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareWebProtection.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00263536 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareEmailProtection.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00650608 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareNetworkProtection.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00490848 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareInstaller.dll
2014-01-23 16:30 - 2014-01-23 16:30 - 00106824 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\zlib.dll
2014-01-23 16:30 - 2014-01-23 16:30 - 00149840 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\libssh2.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00358744 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwarePromo.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00291680 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareFeedback.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00154464 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\SecurityCenter.dll
2013-07-17 17:10 - 2013-07-17 17:10 - 00777296 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\2.6.0.0\BDSmartDB.dll
2011-10-27 21:28 - 2009-12-16 06:42 - 00205824 ____C () C:\Program Files\Lexmark\Pro800-Pro900 Series\lxecmicro.dll
2011-10-27 21:28 - 2010-04-01 12:30 - 01558528 ____C () C:\Program Files\Lexmark\Pro800-Pro900 Series\lxecdrs64.dll
2011-10-27 21:28 - 2009-03-10 00:44 - 00015360 ____C () C:\Program Files\Lexmark\Pro800-Pro900 Series\lxeccaps64.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 02141040 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareShellExtension.dll
2011-10-11 17:14 - 2011-08-18 17:05 - 02751808 _____ () C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
2013-12-11 20:25 - 2014-01-09 09:16 - 00034376 ____C () C:\Program Files (x86)\HomeTab\WConnectorHandler.exe
2011-10-11 18:21 - 2011-03-26 10:28 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-10-11 17:05 - 2010-12-17 17:25 - 00686704 _____ () C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe
2011-07-28 03:07 - 2011-07-28 03:07 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
2011-06-28 02:26 - 2011-06-28 02:26 - 02022976 _____ () C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
2011-10-27 21:26 - 2011-01-23 19:47 - 00770728 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe
2011-10-27 21:26 - 2011-01-23 19:47 - 00148280 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\ezprint.exe
2011-06-29 15:52 - 2011-06-29 15:52 - 00474176 _____ () C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
2014-01-23 16:29 - 2014-01-23 16:29 - 04114264 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe
2014-01-23 16:29 - 2014-01-23 16:29 - 00500088 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_locale-vc100-mt-1_55.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00361824 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\HtmlFramework.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00066904 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\DllStorage.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00788848 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTrayDefaultSkin.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00139608 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\Localization.dll
2011-10-27 21:28 - 2009-05-18 08:32 - 01416192 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\lxecptpc.dll
2011-10-27 21:28 - 2009-11-04 08:19 - 00198656 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\lxecdrui.dll
2011-10-27 21:28 - 2009-06-07 19:55 - 00152576 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\lxecPRPR.DLL
2011-10-27 21:28 - 2009-11-04 08:17 - 00280576 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\lxecdr.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 07980896 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareDesktop.exe
2014-01-23 16:29 - 2014-01-23 16:29 - 00451464 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_program_options-vc100-mt-1_55.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 07888760 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareDesktopDefaultSkin.dll
2010-03-17 03:28 - 2010-03-17 03:28 - 01926144 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtCore4.dll
2010-03-22 22:52 - 2010-03-22 22:52 - 06776832 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtGui4.dll
2010-03-17 03:28 - 2010-03-17 03:28 - 00635904 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtNetwork4.dll
2010-03-17 03:28 - 2010-03-17 03:28 - 00326144 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtXml4.dll
2011-06-25 06:20 - 2011-06-25 06:20 - 00565968 _____ () C:\Program Files (x86)\Dell\Stage Remote\sqlite3.dll
2011-06-28 02:25 - 2011-06-28 02:25 - 00058944 _____ () C:\Program Files (x86)\Dell\Stage Remote\DataService.dll
2011-06-25 06:32 - 2011-06-25 06:32 - 00323136 _____ () C:\Program Files (x86)\Dell\Stage Remote\de-DE\UI\ManagerUI.dll
2010-03-12 02:52 - 2010-03-12 02:52 - 00028160 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qgif4.dll
2010-03-05 22:07 - 2010-03-05 22:07 - 00031744 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qico4.dll
2010-03-05 22:07 - 2010-03-05 22:07 - 00125952 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qjpeg4.dll
2010-03-12 02:52 - 2010-03-12 02:52 - 00225280 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qmng4.dll
2011-10-27 21:26 - 2010-04-01 12:23 - 00389120 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecscw.dll
2011-10-27 21:26 - 2009-05-27 07:16 - 00192512 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecdatr.dll
2011-10-27 21:26 - 2009-05-27 07:13 - 00081920 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxeccats.dll
2011-10-27 21:26 - 2010-04-01 12:24 - 01159168 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecDRS.dll
2011-10-27 21:26 - 2009-03-10 00:43 - 00155648 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxeccaps.dll
2011-10-27 21:15 - 2009-02-20 10:48 - 00381440 ____C () C:\Windows\system32\lxecsm.dll
2011-10-27 21:15 - 2009-04-28 09:56 - 00024064 ____C () C:\Windows\system32\lxecsmr.dll
2011-10-27 21:26 - 2010-04-05 05:56 - 00716954 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\Epwizard.DLL
2011-10-27 21:26 - 2010-04-05 05:55 - 00159890 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\customui.dll
2011-10-27 21:26 - 2010-04-05 05:54 - 00123033 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\Eputil.DLL
2011-10-27 21:26 - 2010-04-05 05:54 - 00143502 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\Imagutil.DLL
2011-10-27 21:26 - 2010-04-05 05:55 - 00061604 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\Epfunct.DLL
2011-10-27 21:26 - 2009-06-23 06:09 - 02203648 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\EPWizRes.dll
2011-10-27 21:26 - 2009-06-23 06:10 - 00045056 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\epstring.dll
2011-10-27 21:26 - 2009-06-23 06:11 - 00102400 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\EPOEMDll.dll
2011-10-27 21:26 - 2009-04-07 14:25 - 00409600 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\iptk.dll
2011-10-27 21:26 - 2009-03-02 09:25 - 00151552 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecptp.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2013-09-14 02:51 - 2013-09-14 02:51 - 00087952 ____C () C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll
2013-09-14 02:50 - 2013-09-14 02:50 - 01242952 ____C () C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll
2014-04-03 10:39 - 2014-04-03 10:39 - 03642480 ____C () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2011-04-21 19:32 - 2011-04-21 19:32 - 00235112 ____C () C:\Program Files (x86)\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll
2014-05-05 10:27 - 2014-05-05 10:27 - 16351920 ____C () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll
2014-02-12 20:58 - 2014-02-12 20:58 - 00073544 ____C () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 20:58 - 2014-02-12 20:58 - 01044808 ____C () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-02-12 20:58 - 2014-02-12 20:58 - 00237384 ____C () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxslt.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
==================== EXE Association (whitelisted) =============
==================== Disabled items from MSCONFIG ==============
MSCONFIG\startupreg: (default) =>
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: Dell Webcam Central => "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: NeroLauncher => C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe 900
MSCONFIG\startupreg: NVHotkey => rundll32.exe C:\Windows\system32\nvHotkey.dll,Start
MSCONFIG\startupreg: PDFPrint => C:\Program Files (x86)\PDF24\pdf24.exe
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /MAXX3
MSCONFIG\startupreg: RTHDVCPL => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s
MSCONFIG\startupreg: SynTPEnh => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (05/05/2014 08:59:55 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "ConvertStringSidToSid(S-1-5-21-3715489345-1050972543-478851-1009.bak)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
.
Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt
Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {ddb024b6-0663-48bb-8e30-ea7b80c0971b}
Error: (05/05/2014 08:21:55 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "ConvertStringSidToSid(S-1-5-21-3715489345-1050972543-478851-1009.bak)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
.
Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt
Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {a9121f39-b264-422b-bf5b-ee43b4b6abb4}
Error: (05/05/2014 08:19:05 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "ConvertStringSidToSid(S-1-5-21-3715489345-1050972543-478851-1009.bak)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
.
Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt
Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {a9121f39-b264-422b-bf5b-ee43b4b6abb4}
Error: (05/05/2014 08:07:25 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "ConvertStringSidToSid(S-1-5-21-3715489345-1050972543-478851-1009.bak)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
.
Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt
Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {afd23484-43a4-4f22-8431-5520559e93da}
Error: (05/05/2014 08:06:51 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "ConvertStringSidToSid(S-1-5-21-3715489345-1050972543-478851-1009.bak)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
.
Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt
Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {afd23484-43a4-4f22-8431-5520559e93da}
Error: (05/05/2014 08:04:30 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Stream product id=0x0066): Streaming Failed
Error: (05/05/2014 08:03:00 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
Too many failures while downloading ranges: 2
Error: (05/05/2014 07:51:41 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/05/2014 06:54:11 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "ConvertStringSidToSid(S-1-5-21-3715489345-1050972543-478851-1009.bak)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
.
Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt
Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {dba2e9fe-b691-421b-9276-f0a3f4cc46a2}
Error: (05/05/2014 02:09:40 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "ConvertStringSidToSid(S-1-5-21-3715489345-1050972543-478851-1009.bak)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
.
Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt
Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {e0573b55-7682-4ab4-a13b-1cce06a7d602}
System errors:
=============
Error: (05/05/2014 07:52:13 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst SftService erreicht.
Error: (05/05/2014 07:51:39 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "lxecCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (05/05/2014 07:51:39 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst lxecCATSCustConnectService erreicht.
Error: (05/05/2014 10:05:47 AM) (Source: DCOM) (User: )
Description: {209500FC-6B45-4693-8871-6296C4843751}
Error: (05/05/2014 09:59:18 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst SftService erreicht.
Error: (05/05/2014 09:57:25 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "lxecCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (05/05/2014 09:57:25 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst lxecCATSCustConnectService erreicht.
Error: (05/05/2014 09:57:24 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 05.05.2014 um 09:55:33 unerwartet heruntergefahren.
Error: (05/05/2014 09:52:44 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst SftService erreicht.
Error: (05/05/2014 09:51:44 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "lxecCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Microsoft Office Sessions:
=========================
Error: (05/05/2014 08:59:55 PM) (Source: VSS)(User: )
Description: ConvertStringSidToSid(S-1-5-21-3715489345-1050972543-478851-1009.bak)0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt
Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {ddb024b6-0663-48bb-8e30-ea7b80c0971b}
Error: (05/05/2014 08:21:55 PM) (Source: VSS)(User: )
Description: ConvertStringSidToSid(S-1-5-21-3715489345-1050972543-478851-1009.bak)0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt
Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {a9121f39-b264-422b-bf5b-ee43b4b6abb4}
Error: (05/05/2014 08:19:05 PM) (Source: VSS)(User: )
Description: ConvertStringSidToSid(S-1-5-21-3715489345-1050972543-478851-1009.bak)0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt
Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {a9121f39-b264-422b-bf5b-ee43b4b6abb4}
Error: (05/05/2014 08:07:25 PM) (Source: VSS)(User: )
Description: ConvertStringSidToSid(S-1-5-21-3715489345-1050972543-478851-1009.bak)0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt
Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {afd23484-43a4-4f22-8431-5520559e93da}
Error: (05/05/2014 08:06:51 PM) (Source: VSS)(User: )
Description: ConvertStringSidToSid(S-1-5-21-3715489345-1050972543-478851-1009.bak)0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt
Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {afd23484-43a4-4f22-8431-5520559e93da}
Error: (05/05/2014 08:04:30 PM) (Source: CVHSVC)(User: )
Description: (Stream product id=0x0066): Streaming Failed
Error: (05/05/2014 08:03:00 PM) (Source: CVHSVC)(User: )
Description: Too many failures while downloading ranges: 2
Error: (05/05/2014 07:51:41 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/05/2014 06:54:11 PM) (Source: VSS)(User: )
Description: ConvertStringSidToSid(S-1-5-21-3715489345-1050972543-478851-1009.bak)0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt
Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {dba2e9fe-b691-421b-9276-f0a3f4cc46a2}
Error: (05/05/2014 02:09:40 PM) (Source: VSS)(User: )
Description: ConvertStringSidToSid(S-1-5-21-3715489345-1050972543-478851-1009.bak)0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt
Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {e0573b55-7682-4ab4-a13b-1cce06a7d602}
==================== Memory info ===========================
Percentage of memory in use: 60%
Total physical RAM: 8086.17 MB
Available physical RAM: 3164.76 MB
Total Pagefile: 16170.52 MB
Available Pagefile: 12263.45 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:679 GB) (Free:557.43 GB) NTFS
Drive f: () (Removable) (Total:7.5 GB) (Free:2.93 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 699 GB) (Disk ID: 07F2837E)
Partition 1: (Not Active) - (Size=102 MB) - (Type=DE)
Partition 2: (Active) - (Size=20 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=679 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 8 GB) (Disk ID: 00000000)
Partition: GPT Partition Type.
==================== End Of Log ============================
Geändert von Tanjuscha75 (05.05.2014 um 20:59 Uhr) Grund: Ergänzung |
|
05.05.2014, 21:17
| #2 |
| /// the machine /// TB-Ausbilder    | adware-Bprotect durch McAfee entdeckt und konnte nicht entfernt werden hi,
__________________Revo Uninstaller - Download - Filepony Damit alles deinstallieren was Du in der Additional.txt findest mit dem Zusatz <== ATTENTION Mit Revo auch Moderat die Reste entfernen lassen. Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ |
|
06.05.2014, 07:12
| #3 |
| | adware-Bprotect durch McAfee entdeckt und konnte nicht entfernt werden Hallo Schrauber!
__________________Herzlichen Dank für Deine schnelle Antwort! Ich habe Deine Anweisungen ausgeführt bis zum letzten Schritt der folgenden Anweisung << Downloade Dir bitte AdwCleaner auf deinen Desktop. Schließe alle offenen Programme und Browser. Starte die adwcleaner.exe mit einem Doppelklick. Akzeptiere die Nutzungsbedingungen. Klicke auf Suchen und warte, bis der Suchlauf abgeschlossen ist. Klicke nun auf Löschen. Bestätige jeweils mit Ok. Dein Rechner wird neu gestartet. Nach dem Neustart öffnet sich eine Textdatei.>> Mein Computer startet leider nicht mehr. Die Meldung habe ich fotografiert und angehängt. Soll ich das System wiederherstellen? LG, Tanjuscha |
|
06.05.2014, 19:46
| #4 |
| | adware-Bprotect durch McAfee entdeckt und konnte nicht entfernt werden Habe doch noch geschafft, den Computer wiederherzustellen und alles wieder von vorne gemacht. Hier ist die mbam.txt Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Detection, 06.05.2014 00:53:07, SYSTEM, TANJA-PC, Protection, Malware Protection, File, PUP.Optional.SweetIM, C:\Program Files (x86)\SweetIM\Messenger\mgFlashPlayer.dll, Quarantine, [18b7c08d3c3f69cdad1d7fdecb399967] Detection, 06.05.2014 00:53:09, SYSTEM, TANJA-PC, Protection, Malware Protection, File, PUP.Optional.SweetIM, C:\Program Files (x86)\SweetIM\Messenger\mgcommunication.dll, Quarantine, [1ab594b9215a6accc208d6879c68e61a] Detection, 06.05.2014 00:53:21, SYSTEM, TANJA-PC, Protection, Malware Protection, File, PUP.Optional.SweetIM, C:\Program Files (x86)\SweetIM\Messenger\mgAdaptersProxy.dll, Quarantine, [329dbd9016657db905c55ffeff05b34d] Detection, 06.05.2014 00:54:34, SYSTEM, TANJA-PC, Protection, Malware Protection, File, PUP.Optional.SweetIM, C:\Program Files (x86)\SweetIM\Messenger\mgsimcommon.dll, Quarantine, [943b163780fbe94dd2f8baa3c53f926e] Detection, 06.05.2014 00:54:46, SYSTEM, TANJA-PC, Protection, Malware Protection, File, PUP.Optional.SweetIM, C:\Program Files (x86)\SweetIM\Messenger\mgICQAuto.dll, Quarantine, [478862ebc4b77cba5e6c223b42c28b75] Detection, 06.05.2014 00:54:51, SYSTEM, TANJA-PC, Protection, Malware Protection, File, PUP.Optional.SweetIM, C:\Program Files (x86)\SweetIM\Messenger\mgMsnAuto.dll, Quarantine, [20af09442358d85e6e5cc19cb252c040] Detection, 06.05.2014 00:54:56, SYSTEM, TANJA-PC, Protection, Malware Protection, File, PUP.Optional.SweetIM, C:\Program Files (x86)\SweetIM\Messenger\mgUpdateSupport.dll, Quarantine, [4788c9846f0c0a2ca3276df03cc8a65a] Detection, 06.05.2014 00:55:15, SYSTEM, TANJA-PC, Protection, Malware Protection, File, PUP.Optional.SweetIM, C:\Program Files (x86)\SweetIM\Messenger\mgYahooMessengerAdapter.dll, Quarantine, [458acd80e7941a1cb5154c1137cd4ab6] Detection, 06.05.2014 00:55:17, SYSTEM, TANJA-PC, Protection, Malware Protection, File, PUP.Optional.SweetIM, C:\Program Files (x86)\SweetIM\Messenger\mgYahooAuto.dll, Quarantine, [5a75103d1c5f6ec86763e87581838c74] Detection, 06.05.2014 00:55:32, SYSTEM, TANJA-PC, Protection, Malware Protection, File, PUP.Optional.SweetIM, C:\Program Files (x86)\SweetIM\Messenger\mgSweetIM.dll, Quarantine, [10bf84c95c1fd85ea723db825ca89b65] Detection, 06.05.2014 00:55:33, SYSTEM, TANJA-PC, Protection, Malware Protection, File, PUP.Optional.SweetIM, C:\Program Files (x86)\SweetIM\Messenger\mgMsnMessengerAdapter.dll, Quarantine, [6f602924d8a390a6c60427360202cf31] Detection, 06.05.2014 00:55:53, SYSTEM, TANJA-PC, Protection, Malware Protection, File, PUP.Optional.SweetIM, C:\Program Files (x86)\SweetIM\Messenger\mgMediaPlayer.dll, Quarantine, [349bbf8ed5a63bfb09c1d885fd072ad6] Detection, 06.05.2014 00:56:07, SYSTEM, TANJA-PC, Protection, Malware Protection, File, PUP.Optional.SweetIM, C:\Program Files (x86)\SweetIM\Messenger\mgcommon.dll, Quarantine, [f7d862ebb0cb48ee28a23429689cfd03] Detection, 06.05.2014 00:56:09, SYSTEM, TANJA-PC, Protection, Malware Protection, File, PUP.Optional.SweetIM, C:\Program Files (x86)\SweetIM\Messenger\mghooking.dll, Quarantine, [844ba9a490eb0e28c802520b5aaa50b0] Detection, 06.05.2014 00:57:01, SYSTEM, TANJA-PC, Protection, Malware Protection, File, PUP.Optional.SweetIM, C:\Program Files (x86)\SweetIM\Messenger\resources\sqlite\mgSqlite3.dll, Quarantine, [e1ee92bb502b49edf6d4ce8fbc48bd43] Detection, 06.05.2014 00:57:02, SYSTEM, TANJA-PC, Protection, Malware Protection, File, PUP.Optional.SweetIM, C:\Program Files (x86)\SweetIM\Messenger\ContentPackagesActivationHandler.exe, Quarantine, [06c92f1ef487fb3b4d7d2f2e0301827e] Detection, 06.05.2014 00:57:03, SYSTEM, TANJA-PC, Protection, Malware Protection, File, PUP.Optional.SweetIM, C:\Program Files (x86)\SweetIM\Messenger\mgconfig.dll, Quarantine, [29a62726700b132325a572eb5ea63cc4] Detection, 06.05.2014 00:57:11, SYSTEM, TANJA-PC, Protection, Malware Protection, File, PUP.Optional.SweetIM, C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe, Quarantine, [3d9281cc7dfe06304c7ef36a9d67c53b] Detection, 06.05.2014 00:57:27, SYSTEM, TANJA-PC, Protection, Malware Protection, File, PUP.Optional.SweetIM, C:\Program Files (x86)\SweetIM\Messenger\mgArchive.dll, Quarantine, [be1190bda3d81a1c27a3b5a8b94b12ee] Detection, 06.05.2014 00:57:32, SYSTEM, TANJA-PC, Protection, Malware Protection, File, PUP.Optional.SweetIM, C:\Program Files (x86)\SweetIM\Messenger\mgxml_wrapper.dll, Quarantine, [7659dc71eb9095a1498176e747bdbf41] Detection, 06.05.2014 00:57:45, SYSTEM, TANJA-PC, Protection, Malware Protection, File, PUP.Optional.SweetIM, C:\Program Files (x86)\SweetIM\Messenger\mglogger.dll, Quarantine, [4887ca83a5d64bebc604e77650b4eb15] Detection, 06.05.2014 00:57:48, SYSTEM, TANJA-PC, Protection, Malware Protection, File, PUP.Optional.SweetIM, C:\Program Files (x86)\SweetIM\Messenger\mgICQMessengerAdapter.dll, Quarantine, [646b034a2f4c181e7d4d61fcf3110bf5] Detection, 06.05.2014 01:01:16, SYSTEM, TANJA-PC, Protection, Malware Protection, File, PUP.Optional.SearchProtection.A, C:\ProgramData\Search Protection\SearchProtection.exe, Quarantine, [6e612429f685e74fc17f523c719139c7] Protection, 06.05.2014 01:01:16, SYSTEM, TANJA-PC, Protection, DeleteFile, 5, Failed, C:\ProgramData\Search Protection\SearchProtection.exe, Error, 06.05.2014 01:01:16, SYSTEM, TANJA-PC, Protection, DeleteFile, 5, Failed, C:\ProgramData\Search Protection\SearchProtection.exe, Detection, 06.05.2014 07:22:06, SYSTEM, TANJA-PC, Protection, Malware Protection, File, PUP.Optional.SearchProtection.A, C:\ProgramData\Search Protection\SearchProtection.exe, Quarantine, [854ad479d6a52f07ff41c7c71ee48080] Protection, 06.05.2014 07:22:06, SYSTEM, TANJA-PC, Protection, DeleteFile, 5, Failed, C:\ProgramData\Search Protection\SearchProtection.exe, Error, 06.05.2014 07:22:06, SYSTEM, TANJA-PC, Protection, DeleteFile, 5, Failed, C:\ProgramData\Search Protection\SearchProtection.exe, Protection, 06.05.2014 07:26:16, SYSTEM, TANJA-PC, Protection, Malware Protection, Starting, Protection, 06.05.2014 07:26:18, SYSTEM, TANJA-PC, Protection, Malware Protection, Started, Protection, 06.05.2014 07:26:18, SYSTEM, TANJA-PC, Protection, Malicious Website Protection, Starting, Protection, 06.05.2014 07:26:21, SYSTEM, TANJA-PC, Protection, Malicious Website Protection, Started, Protection, 06.05.2014 12:25:46, SYSTEM, TANJA-PC, Protection, Malware Protection, Starting, Protection, 06.05.2014 12:25:46, SYSTEM, TANJA-PC, Protection, Malware Protection, Started, Protection, 06.05.2014 12:25:46, SYSTEM, TANJA-PC, Protection, Malicious Website Protection, Starting, Update, 06.05.2014 12:25:52, SYSTEM, TANJA-PC, Manual, Rootkit Database, 2014.2.20.1, 2014.3.27.1, Update, 06.05.2014 12:26:13, SYSTEM, TANJA-PC, Manual, Malware Database, 2014.3.4.9, 2014.5.6.3, Protection, 06.05.2014 12:26:15, SYSTEM, TANJA-PC, Protection, Refresh, Starting, Protection, 06.05.2014 12:26:35, SYSTEM, TANJA-PC, Protection, Malicious Website Protection, Started, Protection, 06.05.2014 12:26:35, SYSTEM, TANJA-PC, Protection, Malicious Website Protection, Stopping, Protection, 06.05.2014 12:26:35, SYSTEM, TANJA-PC, Protection, Malicious Website Protection, Stopped, Protection, 06.05.2014 12:26:39, SYSTEM, TANJA-PC, Protection, Refresh, Success, Protection, 06.05.2014 12:26:39, SYSTEM, TANJA-PC, Protection, Malicious Website Protection, Starting, Protection, 06.05.2014 12:26:40, SYSTEM, TANJA-PC, Protection, Malicious Website Protection, Started, Update, 06.05.2014 13:21:51, SYSTEM, TANJA-PC, Scheduler, Malware Database, 2014.5.6.3, 2014.5.6.4, Protection, 06.05.2014 13:21:53, SYSTEM, TANJA-PC, Protection, Refresh, Starting, Protection, 06.05.2014 13:21:53, SYSTEM, TANJA-PC, Protection, Malicious Website Protection, Stopping, Protection, 06.05.2014 13:21:53, SYSTEM, TANJA-PC, Protection, Malicious Website Protection, Stopped, Protection, 06.05.2014 13:23:02, SYSTEM, TANJA-PC, Protection, Refresh, Success, Protection, 06.05.2014 13:23:02, SYSTEM, TANJA-PC, Protection, Malicious Website Protection, Starting, Protection, 06.05.2014 13:23:03, SYSTEM, TANJA-PC, Protection, Malicious Website Protection, Started, Protection, 06.05.2014 13:27:34, SYSTEM, TANJA-PC, Protection, Malware Protection, Starting, Protection, 06.05.2014 13:27:34, SYSTEM, TANJA-PC, Protection, Malware Protection, Started, Protection, 06.05.2014 13:27:34, SYSTEM, TANJA-PC, Protection, Malicious Website Protection, Starting, Protection, 06.05.2014 13:28:19, SYSTEM, TANJA-PC, Protection, Malicious Website Protection, Started, Detection, 06.05.2014 13:34:29, SYSTEM, TANJA-PC, Protection, Malware Protection, File, PUP.Optional.SearchProtection.A, C:\ProgramData\Search Protection\SearchProtection.exe, Quarantine, [ba7283cb9eddc96d8752325cd03226da] Detection, 06.05.2014 13:35:01, SYSTEM, TANJA-PC, Protection, Malware Protection, File, PUP.Optional.SearchProtection.A, c:\programdata\search protection\searchprotection.exe, Quarantine, [ba7283cb9eddc96d8752325cd03226da] Protection, 06.05.2014 13:35:01, SYSTEM, TANJA-PC, Protection, SDKQuarantine, 2, Failed, c:\programdata\search protection\searchprotection.exe, Error, 06.05.2014 13:35:01, SYSTEM, TANJA-PC, Protection, SDKQuarantine, 2, Failed, c:\programdata\search protection\searchprotection.exe, (end) AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v3.207 - Bericht erstellt am 06/05/2014 um 07:37:15
# Aktualisiert 05/05/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Tanja - TANJA-PC
# Gestartet von : C:\Users\Tanja\Desktop\adwcleaner.exe
# Option : Lцschen
***** [ Dienste ] *****
[#] Dienst Gelцscht : Browser Manager
***** [ Dateien / Ordner ] *****
Ordner Gelцscht : C:\SoftwareUpdater
Ordner Gelцscht : C:\ProgramData\~Browser Manager
Ordner Gelцscht : C:\ProgramData\Babylon
Ordner Gelцscht : C:\ProgramData\Search Protection
Ordner Gelцscht : C:\ProgramData\SweetIM
Ordner Gelцscht : C:\ProgramData\Tarma Installer
Ordner Gelцscht : C:\Program Files (x86)\SweetIM
Ordner Gelцscht : C:\Program Files (x86)\Toolbar Cleaner
Ordner Gelцscht : C:\Windows\Installer\{7683B745-6060-41FD-AA75-0BBB383FEAD4}
Ordner Gelцscht : C:\Users\Gast\AppData\LocalLow\BabylonToolbar
Ordner Gelцscht : C:\Users\Mascha\AppData\Roaming\Iminent
Ordner Gelцscht : C:\Users\Tanja\AppData\Local\Temp\mt_ffx
Ordner Gelцscht : C:\Users\Tanja\AppData\LocalLow\adawaretb
Ordner Gelцscht : C:\Users\Tanja\AppData\LocalLow\BabylonToolbar
Ordner Gelцscht : C:\Users\Tanja\AppData\LocalLow\FlagFox
Ordner Gelцscht : C:\Users\Tanja\AppData\Roaming\Babylon
Ordner Gelцscht : C:\Users\Tanja\AppData\Roaming\Iminent
Ordner Gelцscht : C:\Users\Tanja\AppData\Roaming\SecureSearch
Ordner Gelцscht : C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\v4ddstpg.default\adawaretb
Ordner Gelцscht : C:\Users\Mascha\AppData\Roaming\Mozilla\Firefox\Profiles\pt8kjgx0.default\adawaretb
Ordner Gelцscht : C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\adawaretb
Ordner Gelцscht : C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Smartbar
Ordner Gelцscht : C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\SweetPacksToolbarData
Ordner Gelцscht : C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\CT2625848
Ordner Gelцscht : C:\Users\Video\AppData\Roaming\Mozilla\Firefox\Profiles\21iq3al7.default\adawaretb
Ordner Gelцscht : C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\v4ddstpg.default\Extensions\{24532715-4abc-47ee-bd4f-a6774d0723d2}
Ordner Gelцscht : C:\Users\Mascha\AppData\Roaming\Mozilla\Firefox\Profiles\pt8kjgx0.default\Extensions\{24532715-4abc-47ee-bd4f-a6774d0723d2}
Ordner Gelцscht : C:\Users\Video\AppData\Roaming\Mozilla\Firefox\Profiles\21iq3al7.default\Extensions\{24532715-4abc-47ee-bd4f-a6774d0723d2}
Ordner Gelцscht : C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}
Ordner Gelцscht : C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM
Ordner Gelцscht : C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Extensions\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff}
Ordner Gelцscht : C:\Users\Mascha\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfdfamfnacokbbbnmpdfmhonipnhmbid
Ordner Gelцscht : C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfdfamfnacokbbbnmpdfmhonipnhmbid
Datei Gelцscht : C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi
Datei Gelцscht : C:\END
Datei Gelцscht : C:\Windows\System32\dmwu.exe
Datei Gelцscht : C:\Windows\System32\ImhxxpComm.dll
Datei Gelцscht : C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\v4ddstpg.default\BrowserMngr_extensions.sqlite
Datei Gelцscht : C:\Users\Video\AppData\Roaming\Mozilla\Firefox\Profiles\21iq3al7.default\BrowserMngr_extensions.sqlite
Datei Gelцscht : C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\v4ddstpg.default\browsermngr_prefs.js
Datei Gelцscht : C:\Users\Video\AppData\Roaming\Mozilla\Firefox\Profiles\21iq3al7.default\browsermngr_prefs.js
Datei Gelцscht : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\adawaretb.xml
Datei Gelцscht : C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\searchplugins\bProtect.xml
Datei Gelцscht : C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\searchplugins\dvdvideosofttb-de-customized-web-search.xml
Datei Gelцscht : C:\Users\Mascha\AppData\Roaming\Mozilla\Firefox\Profiles\pt8kjgx0.default\searchplugins\SearchTheWeb.xml
Datei Gelцscht : C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\searchplugins\SweetIm.xml
Datei Gelцscht : C:\Windows\System32\Tasks\Browser Manager
Datei Gelцscht : C:\Windows\System32\Tasks\YourFile Update
***** [ Verknьpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Wert Gelцscht : HKCU\Software\Mozilla\Firefox\Extensions [{B64982B1-D112-42B5-B1E4-D3867C4533F8}]
Wert Gelцscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [webbooster@iminent.com]
Schlьssel Gelцscht : HKLM\SOFTWARE\Google\Chrome\Extensions\cfdfamfnacokbbbnmpdfmhonipnhmbid
Schlьssel Gelцscht : HKLM\SOFTWARE\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohdhomoefph
Schlьssel Gelцscht : HKCU\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\BabylonToolbar
Wert Gelцscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [BrowserMngrDefaultScope]
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils.1
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator.1
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\sim-packages
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\HomeTab_RASAPI32
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\HomeTab_RASMANCS
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\Savings Sidekick_RASAPI32
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\Savings Sidekick_RASMANCS
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_2_rasapi32
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_2_rasmancs
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasapi32
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasmancs
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetpacksupdatemanager_rasapi32
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\YourFile_RASAPI32
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\YourFile_RASMANCS
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\YourFileUpdater_RASAPI32
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\YourFileUpdater_RASMANCS
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe
Schlьssel Gelцscht : HKCU\Software\82dd8fb13db843
Schlьssel Gelцscht : HKLM\SOFTWARE\82dd8fb13db843
Schlьssel Gelцscht : HKLM\SOFTWARE\CT2625848
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_calibre_RASAPI32
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_calibre_RASMANCS
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_san-andreas-multiplayer_RASAPI32
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_san-andreas-multiplayer_RASMANCS
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\AppID\{50F7F0BE-31BA-4145-BD8B-6B0DECFED804}
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\CLSID\{5555CC4C-FA2B-4D69-8296-B6AE5E95C0B7}
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\CLSID\{6C97A91E-4524-4019-86AF-2AA2D567BF5C}
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A}
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064}
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\CLSID\{BA7B8F39-DF7F-4A98-83E9-57CE6ED9CA24}
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\Interface\{A439801C-961D-452C-AB42-7848E9CBD289}
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\Interface\{F4EBB1E2-21F3-4786-8CF4-16EC5925867F}
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C97A91E-4524-4019-86AF-2AA2D567BF5C}
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA7B8F39-DF7F-4A98-83E9-57CE6ED9CA24}
Schlьssel Gelцscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6C97A91E-4524-4019-86AF-2AA2D567BF5C}
Schlьssel Gelцscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BA7B8F39-DF7F-4A98-83E9-57CE6ED9CA24}
Schlьssel Gelцscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6C97A91E-4524-4019-86AF-2AA2D567BF5C}
Schlьssel Gelцscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BA7B8F39-DF7F-4A98-83E9-57CE6ED9CA24}
Schlьssel Gelцscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6C97A91E-4524-4019-86AF-2AA2D567BF5C}
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0E44BB13-2523-468B-BF51-58D5F52A84F6}
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{62155D33-3CE2-401E-8967-5A270628A3D5}
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Schlьssel Gelцscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlьssel Gelцscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}
Schlьssel Gelцscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlьssel Gelцscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Wert Gelцscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{6C97A91E-4524-4019-86AF-2AA2D567BF5C}]
Wert Gelцscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
Schlьssel Gelцscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{6C97A91E-4524-4019-86AF-2AA2D567BF5C}
Schlьssel Gelцscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C97A91E-4524-4019-86AF-2AA2D567BF5C}
Wert Gelцscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{6C97A91E-4524-4019-86AF-2AA2D567BF5C}]
Schlьssel Gelцscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{62155D33-3CE2-401E-8967-5A270628A3D5}
Schlьssel Gelцscht : HKCU\Software\bProtector
Schlьssel Gelцscht : HKCU\Software\BrowserMngr
Schlьssel Gelцscht : HKCU\Software\Conduit
Schlьssel Gelцscht : HKCU\Software\Cr_Installer
Schlьssel Gelцscht : HKCU\Software\IM
Schlьssel Gelцscht : HKCU\Software\performersoft llc
Schlьssel Gelцscht : HKCU\Software\simplytech
Schlьssel Gelцscht : HKCU\Software\Softonic
Schlьssel Gelцscht : HKCU\Software\wscontb
Schlьssel Gelцscht : HKCU\Software\AppDataLow\Software\adawarebp
Schlьssel Gelцscht : HKCU\Software\AppDataLow\Software\simplytech
Schlьssel Gelцscht : HKCU\Software\AppDataLow\Software\SmartBar
Schlьssel Gelцscht : HKLM\Software\adawaretb
Schlьssel Gelцscht : HKLM\Software\Babylon
Schlьssel Gelцscht : HKLM\Software\BrowserMngr
Schlьssel Gelцscht : HKLM\Software\Conduit
Schlьssel Gelцscht : HKLM\Software\covus freemium gmbh
Schlьssel Gelцscht : HKLM\Software\DataMngr
Schlьssel Gelцscht : HKLM\Software\Toolbar Cleaner
Schlьssel Gelцscht : HKLM\Software\YourFileDownloader
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7683B745-6060-41FD-AA75-0BBB383FEAD4}
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\adawaretb
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Toolbar Cleaner
Schlьssel Gelцscht : [x64] HKLM\SOFTWARE\Speedchecker Limited
Schlьssel Gelцscht : [x64] HKLM\SOFTWARE\Tarma Installer
Schlьssel Gelцscht : [x64] HKLM\SOFTWARE\WNLT
Schlьssel Gelцscht : HKLM\Software\Classes\Installer\Features\547B38670606DF14AA57B0BB83F3AE4D
Schlьssel Gelцscht : HKLM\Software\Classes\Installer\Products\547B38670606DF14AA57B0BB83F3AE4D
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.17041
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Default_Page_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Default_Page_URL]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Start Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Start Default_Page_URL]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Search Bar]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Search Page]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Start Page]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Start Default_Page_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Search Bar]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Search Page]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [(Default)]
-\\ Mozilla Firefox v28.0 (de)
[ Datei : C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\v4ddstpg.default\prefs.js ]
Zeile gelцscht : user_pref("browser.search.defaultenginename", "Web Search");
Zeile gelцscht : user_pref("browser.search.order.1", "Web Search");
Zeile gelцscht : user_pref("browser.search.selectedEngine", "Web Search");
Zeile gelцscht : user_pref("browser.search.defaultengine", "Web Search");
Zeile gelцscht : user_pref("wtb3869.homepage", "hxxp://search.certified-toolbar.com?si=46364&st=home&tid=3869&ver=6.0&ts=1375105834002.000005&tguid=46364-3869-1395730212770-747088-b5678");
Zeile gelцscht : user_pref("wtb3869.newtab", "hxxp://search.certified-toolbar.com?si=46364&st=home&tid=3869&ver=6.0&ts=1375105834002.000005&tguid=46364-3869-1395730212770-747088-b5678");
[ Datei : C:\Users\Mascha\AppData\Roaming\Mozilla\Firefox\Profiles\pt8kjgx0.default\prefs.js ]
Zeile gelцscht : user_pref("browser.search.defaultengine", "Web Search");
Zeile gelцscht : user_pref("browser.search.defaultenginename", "Web Search");
Zeile gelцscht : user_pref("browser.search.order.1", "Web Search");
Zeile gelцscht : user_pref("browser.search.selectedEngine", "Web Search");
Zeile gelцscht : user_pref("wtb3869.homepage", "hxxp://search.certified-toolbar.com?si=46364&st=home&tid=3869&ver=6.0&ts=1375105834002.000005&tguid=46364-3869-1395730212770-747088-b5678");
Zeile gelцscht : user_pref("wtb3869.newtab", "hxxp://search.certified-toolbar.com?si=46364&st=home&tid=3869&ver=6.0&ts=1375105834002.000005&tguid=46364-3869-1395730212770-747088-b5678");
[ Datei : C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\prefs.js ]
Zeile gelцscht : user_pref("CT2625848.1000082.isDisplayHidden", "true");
Zeile gelцscht : user_pref("CT2625848.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description\":\"California Rock\",\"url\":\"hxxp://feedlive.net/california.asx\"}");
Zeile gelцscht : user_pref("CT2625848.2625848a129894023611240511000000paramsGK1", "eyJ1cGRhdGVSZXFUaW1lIjoxMzQ5OTU4ODU3MzA5LCJ1cGRhdGVSZXNwVGltZSI6MTM0OTk1ODg1ODU2MSwiZGF0YSI6eyJzZXR0aW5ncyI6eyJpY29uIjoiaHR0cDovL3N0b3[...]
Zeile gelцscht : user_pref("CT2625848.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Zeile gelцscht : user_pref("CT2625848.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
Zeile gelцscht : user_pref("CT2625848.FirstTime", "true");
Zeile gelцscht : user_pref("CT2625848.FirstTimeFF3", "true");
Zeile gelцscht : user_pref("CT2625848.LoginRevertSettingsEnabled", true);
Zeile gelцscht : user_pref("CT2625848.RevertSettingsEnabled", true);
Zeile gelцscht : user_pref("CT2625848.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2625848&SearchSource=2&q=");
Zeile gelцscht : user_pref("CT2625848.UserID", "UN63527116905336068");
Zeile gelцscht : user_pref("CT2625848.addressBarTakeOverEnabledInHidden", "true");
Zeile gelцscht : user_pref("CT2625848.autoDisableScopes", 14);
Zeile gelцscht : user_pref("CT2625848.browser.search.defaultthis.engineName", true);
Zeile gelцscht : user_pref("CT2625848.countryCode", "DE");
Zeile gelцscht : user_pref("CT2625848.defaultSearch", "true");
Zeile gelцscht : user_pref("CT2625848.enableAlerts", "false");
Zeile gelцscht : user_pref("CT2625848.enableFix404ByUser", "TRUE");
Zeile gelцscht : user_pref("CT2625848.enableSearchFromAddressBar", "true");
Zeile gelцscht : user_pref("CT2625848.firstTimeDialogOpened", "true");
Zeile gelцscht : user_pref("CT2625848.fixPageNotFoundError", "true");
Zeile gelцscht : user_pref("CT2625848.fixPageNotFoundErrorByUser", "true");
Zeile gelцscht : user_pref("CT2625848.fixPageNotFoundErrorInHidden", "true");
Zeile gelцscht : user_pref("CT2625848.fixUrls", true);
Zeile gelцscht : user_pref("CT2625848.fullUserID", "UN63527116905336068.UP.20130626184533");
Zeile gelцscht : user_pref("CT2625848.installId", "ConduitNSISIntegration");
Zeile gelцscht : user_pref("CT2625848.installType", "ConduitNSISIntegration");
Zeile gelцscht : user_pref("CT2625848.isCheckedStartAsHidden", true);
Zeile gelцscht : user_pref("CT2625848.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Zeile gelцscht : user_pref("CT2625848.isFirstTimeToolbarLoading", "false");
Zeile gelцscht : user_pref("CT2625848.isNewTabEnabled", true);
Zeile gelцscht : user_pref("CT2625848.isPerformedSmartBarTransition", "true");
Zeile gelцscht : user_pref("CT2625848.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Zeile gelцscht : user_pref("CT2625848.keyword", true);
Zeile gelцscht : user_pref("CT2625848.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT2625848&octid=CT2625848&SearchSource=15&CUI=UN63527116905336068&SSPV=&Lay=1&UM=false\"}[...]
Zeile gelцscht : user_pref("CT2625848.lastVersion", "10.23.0.822");
Zeile gelцscht : user_pref("CT2625848.migrateAppsAndComponents", true);
Zeile gelцscht : user_pref("CT2625848.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"about%3Ahome\",\"EB_MAIN_FRAME_TITLE\":\"Mozilla%20Firefox-Startseite\",\"EB_TOOLBAR_SUB_DOMAIN\":\"hxxp:[...]
Zeile gelцscht : user_pref("CT2625848.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Zeile gelцscht : user_pref("CT2625848.openThankYouPage", "false");
Zeile gelцscht : user_pref("CT2625848.openUninstallPage", "true");
Zeile gelцscht : user_pref("CT2625848.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2625848&SearchSource=2&CUI=UN63527116905336068&UM=&q=");
Zeile gelцscht : user_pref("CT2625848.search.searchAppId", "129181467799155027");
Zeile gelцscht : user_pref("CT2625848.search.searchCount", "0");
Zeile gelцscht : user_pref("CT2625848.searchInNewTabEnabledByUser", "true");
Zeile gelцscht : user_pref("CT2625848.searchInNewTabEnabledInHidden", "true");
Zeile gelцscht : user_pref("CT2625848.searchSuggestEnabledByUser", "true");
Zeile gelцscht : user_pref("CT2625848.searchUserMode", "false");
Zeile gelцscht : user_pref("CT2625848.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT2625848\"}");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://DVDVideoSoftTBDE.OurToolbar.com//xpi\"}");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"DVDVideoSoftTB DE \"}");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_Configuration_lastUpdate", "1392016441609");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1349958856383");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_appsMetadata_lastUpdate", "1349958856359");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1349958856771");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_location_lastUpdate", "1372232422887");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_login_10.13.1.89_lastUpdate", "1354105062757");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_login_10.13.40.15_lastUpdate", "1358762755866");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_login_10.14.40.128_lastUpdate", "1360322985548");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_login_10.14.42.7_lastUpdate", "1360744905533");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_login_10.14.65.43_lastUpdate", "1365409178982");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_login_10.15.0.562_lastUpdate", "1366053531901");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_login_10.15.2.523_lastUpdate", "1368873766738");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_login_10.16.2.509_lastUpdate", "1372232422542");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_login_10.16.4.519_lastUpdate", "1374695694633");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_login_10.16.70.505_lastUpdate", "1377714626964");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_login_10.19.2.505_lastUpdate", "1378807563110");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_login_10.20.0.513_lastUpdate", "1380642168413");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_login_10.20.1.508_lastUpdate", "1382430176268");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_login_10.21.1.507_lastUpdate", "1383121696212");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_login_10.23.0.822_lastUpdate", "1392016440871");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_optimizer_lastUpdate", "1349958856551");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1349958856882");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_searchAPI_lastUpdate", "1392016441055");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_serviceMap_lastUpdate", "1392016441044");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_toolbarContextMenu_lastUpdate", "1349958856665");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_toolbarSettings_lastUpdate", "1392016440616");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_translation_lastUpdate", "1392016441730");
Zeile gelцscht : user_pref("CT2625848.settingsINI", true);
Zeile gelцscht : user_pref("CT2625848.shouldFirstTimeDialog", "false");
Zeile gelцscht : user_pref("CT2625848.showToolbarPermission", "false");
Zeile gelцscht : user_pref("CT2625848.smartbar.CTID", "CT2625848");
Zeile gelцscht : user_pref("CT2625848.smartbar.Uninstall", "0");
Zeile gelцscht : user_pref("CT2625848.smartbar.homepage", true);
Zeile gelцscht : user_pref("CT2625848.smartbar.isHidden", true);
Zeile gelцscht : user_pref("CT2625848.smartbar.toolbarName", "DVDVideoSoftTB DE ");
Zeile gelцscht : user_pref("CT2625848.startPage", "userChanged");
Zeile gelцscht : user_pref("CT2625848.toolbarBornServerTime", "11-10-2012");
Zeile gelцscht : user_pref("CT2625848.toolbarCurrentServerTime", "10-2-2014");
Zeile gelцscht : user_pref("CT2625848.toolbarLoginClientTime", "Mon Apr 08 2013 13:54:13 GMT+0200");
Zeile gelцscht : user_pref("CT2625848_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1392016433117,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Zeile gelцscht : user_pref("Smartbar.ConduitHomepagesList", "");
Zeile gelцscht : user_pref("Smartbar.ConduitSearchEngineList", "");
Zeile gelцscht : user_pref("Smartbar.ConduitSearchUrlList", "");
Zeile gelцscht : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.sweetim.com/search.asp?src=2&crg=3.1010006.10031&q=");
Zeile gelцscht : user_pref("Smartbar.keywordURLSelectedCTID", "CT2625848");
Zeile gelцscht : user_pref("browser.newtab.url", "hxxp://search.certified-toolbar.com?si=46364&st=newtab&tid=3869&ver=6.0&ts=1375105834002.000005&tguid=46364-3869-1395730212770-747088-b5678");
Zeile gelцscht : user_pref("browser.search.defaultengine", "Web Search");
Zeile gelцscht : user_pref("browser.search.defaultenginename", "Web Search");
Zeile gelцscht : user_pref("browser.search.order.1", "Web Search");
Zeile gelцscht : user_pref("browser.search.selectedEngine", "Web Search");
Zeile gelцscht : user_pref("browser.startup.homepage", "hxxp://search.certified-toolbar.com?si=46364&st=home&tid=3869&ver=6.0&ts=1375105834002.000005&tguid=46364-3869-1395730212770-747088-b5678");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.admin", false);
Zeile gelцscht : user_pref("extensions.BabylonToolbar.aflt", "babsst");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.autoRvrt", "false");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.babExt", "");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.babTrack", "affID=114211&tt=3612_3");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.babext", "babExt");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.babtrack", "babTrack");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.bbDpng", "10");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.cntry", "DE");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.dfltLng", "en");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.dfltlng", "en");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.dfltsrch", "false");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.dp_alert", "0");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.envrmnt", "production");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.excTlbr", false);
Zeile gelцscht : user_pref("extensions.BabylonToolbar.firstrun", false);
Zeile gelцscht : user_pref("extensions.BabylonToolbar.hdrMd5", "62EE5405C1B9BE838D6E4B2346118624");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.hmpg", false);
Zeile gelцscht : user_pref("extensions.BabylonToolbar.hrdid", "c43f51d200000000000074e50b3f07c1");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.id", "c43f51d200000000000074e50b3f07c1");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.instlDay", "15592");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.instlRef", "sst");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.instlday", "15592");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.instlref", "sst");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.isdcmntcmplt", "false");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.keywordurl", "");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.6.9.1220:56:01");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.lastdp", 7);
Zeile gelцscht : user_pref("extensions.BabylonToolbar.mntrvrsn", "1.3.1");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.newTab", false);
Zeile gelцscht : user_pref("extensions.BabylonToolbar.newtab", "false");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.newtaburl", "");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.pnu_base", "{\"newVrsn\":\"76\",\"lastVrsn\":\"76\",\"vrsnLoad\":\"\",\"showMsg\":\"false\",\"showSilent\":\"true\",\"msgTs\":0,\"lstMsgTs\":0}");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.prtnrid", "babylon");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.savedVrsnTs", "1");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.sg", "azb");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.smplGrp", "azb");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.smplgrp", "azb");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.srcExt", "ss");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.srcext", "ss");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.srch", "");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.srchprvdr", "");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.tlbrId", "base");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=c43f51d200000000000074e50b3f07c1&q=");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.tlbrid", "base");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.tlbrsrchurl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=c43f51d200000000000074e50b3f07c1&q=");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.vrsn", "1.6.9.12");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.vrsnTs", "1.6.9.1220:56:01");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.vrsni", "1.6.9.12");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.vrsnts", "1.6.9.1220:56:01");
Zeile gelцscht : user_pref("extensions.BabylonToolbar_i.babExt", "");
Zeile gelцscht : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=114211&tt=3612_3");
Zeile gelцscht : user_pref("extensions.BabylonToolbar_i.newTab", false);
Zeile gelцscht : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Zeile gelцscht : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Zeile gelцscht : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.6.9.1220:56:01");
Zeile gelцscht : user_pref("extensions.crossrider.bic", "13a11be1c0c4464326c1a2327396c1e4");
Zeile gelцscht : user_pref("keyword.URL", "hxxp://search.certified-toolbar.com?si=46364&tid=3869&ver=6.0&ts=1375105834002.000005&tguid=46364-3869-1395730212770-747088-b5678&st=chrome&q=");
Zeile gelцscht : user_pref("plugin.state.npconduitfirefoxplugin", 2);
Zeile gelцscht : user_pref("smartBar.searchInNewTabOwner", "CT2625848");
Zeile gelцscht : user_pref("smartbar.addressBarOwnerCTID", "CT2625848");
Zeile gelцscht : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2625848&SearchSource=2&q=,hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2625848&SearchSource=2&CU[...]
Zeile gelцscht : user_pref("smartbar.machineId", "UFBMGHHT4TJRMU/ZS5OK2UUXMLOAFX14EGG1S17QX6WU44ZOT874EUYPKFNUSK9WOE+HRCM3REACMSOZA1ZEUW");
Zeile gelцscht : user_pref("smartbar.originalSearchAddressUrl", "hxxp://search.sweetim.com/search.asp?barid={7B48AE94-139E-11E2-AACC-848F69B0791A}&src=2&crg=3.1010006.10031&q=");
Zeile gelцscht : user_pref("sweetim.toolbar.RevertDialog.enable", "false");
Zeile gelцscht : user_pref("sweetim.toolbar.UserSelectedSaveSettings", "true");
Zeile gelцscht : user_pref("sweetim.toolbar.Visibility.VisibilityGuardLastUnHide", "1372015631726");
Zeile gelцscht : user_pref("sweetim.toolbar.Visibility.enable", "true");
Zeile gelцscht : user_pref("sweetim.toolbar.Visibility.intervaldays", "7");
Zeile gelцscht : user_pref("sweetim.toolbar.cargo", "3.1010006.10031");
Zeile gelцscht : user_pref("sweetim.toolbar.cda.DisableOveride.enable", "true");
Zeile gelцscht : user_pref("sweetim.toolbar.cda.HideOveride.enable", "true");
Zeile gelцscht : user_pref("sweetim.toolbar.cda.RemoveOveride.enable", "true");
Zeile gelцscht : user_pref("sweetim.toolbar.cda.returnValue", "disable");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.0.enable", "true");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.0.handler", "chrome://sim_toolbar_package/content/optionsdialog-handler.js");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.0.height", "335");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.0.id", "id_options_dialog");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.0.title", "$string.config.label;");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.0.url", "hxxp://www.sweetim.com/simffbar/options_remote_ff.asp?lang=$locale_id;&toolbar_version=$ITEM_VERSION;&crg=$cargo;");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.0.width", "761");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.1.enable", "true");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.1.handler", "chrome://sim_toolbar_package/content/exampledialog-handler.js");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.1.height", "300");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.1.id", "id_example_dialog");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.1.title", "Example (unit-test) dialog");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.1.url", "chrome://sim_toolbar_package/content/exampledialog.html");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.1.width", "500");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.2.enable", "true");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.2.handler", "chrome://sim_toolbar_package/content/cdadialog-handler.js");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.2.height", "150");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.2.id", "id_dialog_hide_disable_remove");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.2.title", "Option Dialog");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.2.url", "hxxp://www.sweetim.com/simffbar/simcdadialog.asp");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.2.width", "530");
Zeile gelцscht : user_pref("sweetim.toolbar.dnscatch.domain-blacklist", ".*.sweetim.com/.*|.*.facebook.com/.*|.*.google.com/.*|.*.google.co.in/.*|.*.google.com.br/.*|.*.google.es/.*|.*.youtube.com/.*|.*.yahoo.com/.*|.[...]
Zeile gelцscht : user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
Zeile gelцscht : user_pref("sweetim.toolbar.keywordUrlGuard.enable", "false");
Zeile gelцscht : user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
Zeile gelцscht : user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
Zeile gelцscht : user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
Zeile gelцscht : user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
Zeile gelцscht : user_pref("sweetim.toolbar.mode.debug", "false");
Zeile gelцscht : user_pref("sweetim.toolbar.newtab.created", "false");
Zeile gelцscht : user_pref("sweetim.toolbar.newtab.enable", "true");
Zeile gelцscht : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "Search the web (Babylon)");
Zeile gelцscht : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "Google");
Zeile gelцscht : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "www.google.de");
Zeile gelцscht : user_pref("sweetim.toolbar.previous.keyword.URL", "");
Zeile gelцscht : user_pref("sweetim.toolbar.rc.url", "hxxp://www.sweetim.com/simffbar/rc.html?toolbar_version=$ITEM_VERSION;&crg=$cargo;");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.0.addcontextdiv", "true");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.0.callback", "simVerification");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.0.domain-blacklist", "");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.0.domain-whitelist", "hxxp://(www.|apps.)?facebook\\.com.*");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.0.elementid", "id_script_sim_fb");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.0.enable", "false");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.0.id", "id_script_fb");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.0.url", "hxxp://sc.sweetim.com/apps/in/fb/infb.js");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.1.addcontextdiv", "true");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.1.callback", "simVerification");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.1.domain-whitelist", "hxxps://(www.|apps.)?facebook\\.com.*");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.1.elementid", "id_script_sim_fb");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.1.enable", "false");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.1.id", "id_script_fb_hxxpS");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.1.url", "hxxps://sc.sweetim.com/apps/in/fb/infb.js");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.2.addcontextdiv", "false");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.2.callback", "");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.2.domain-blacklist", ".*.google..*|.*.bing..*|.*.live..*|.*.msn..*|.*.yahoo..*|.*.youtube.com.*|.*ask.com.*|.*.sweetim.com.*");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.2.domain-whitelist", "");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.2.elementid", "id_predict_include_script");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.2.enable", "false");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.2.id", "id_script_prad");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.2.url", "hxxp://cdn1.certified-apps.com/scripts/shared/enable.js?si=3104&tid=chff1");
Zeile gelцscht : user_pref("sweetim.toolbar.search.external", "<?xml version=\"1.0\"?><TOOLBAR><EXTERNAL_SEARCH engine=\"hxxp://*google.*\" param=\"q=\" /><EXTERNAL_SEARCH engine=\"hxxp://search.yahoo.com/*\" param=\"[...]
Zeile gelцscht : user_pref("sweetim.toolbar.search.history.capacity", "10");
Zeile gelцscht : user_pref("sweetim.toolbar.searchguard.enable", "false");
Zeile gelцscht : user_pref("sweetim.toolbar.searchguard.initialized_by_rc", "true");
Zeile gelцscht : user_pref("sweetim.toolbar.simapp_id", "{7B48AE94-139E-11E2-AACC-848F69B0791A}");
Zeile gelцscht : user_pref("sweetim.toolbar.urls.homepage", "hxxp://home.sweetim.com/?st=6&barid={7B48AE94-139E-11E2-AACC-848F69B0791A}");
Zeile gelцscht : user_pref("sweetim.toolbar.version", "1.9.0.0");
Zeile gelцscht : user_pref("valueApps.CT2625848.mam_gk_currentVersion", "312E31332E302E3137");
Zeile gelцscht : user_pref("valueApps.CT2625848.mam_gk_currentVersion.storedInFile", false);
Zeile gelцscht : user_pref("valueApps.CT2625848.mam_gk_migrated_from_ls", "31");
Zeile gelцscht : user_pref("valueApps.CT2625848.mam_gk_migrated_from_ls.storedInFile", false);
Zeile gelцscht : user_pref("valueApps.CT2625848.mam_gk_userBornDate", "4E2F41");
Zeile gelцscht : user_pref("valueApps.CT2625848.mam_gk_userBornDate.storedInFile", false);
Zeile gelцscht : user_pref("wtb3869.homepage", "hxxp://search.certified-toolbar.com?si=46364&st=home&tid=3869&ver=6.0&ts=1375105834002.000005&tguid=46364-3869-1395730212770-747088-b5678");
Zeile gelцscht : user_pref("wtb3869.newtab", "hxxp://search.certified-toolbar.com?si=46364&st=home&tid=3869&ver=6.0&ts=1375105834002.000005&tguid=46364-3869-1395730212770-747088-b5678");
[ Datei : C:\Users\Video\AppData\Roaming\Mozilla\Firefox\Profiles\21iq3al7.default\prefs.js ]
Zeile gelцscht : user_pref("browser.search.defaultenginename", "Web Search");
Zeile gelцscht : user_pref("browser.search.defaultengine", "Web Search");
Zeile gelцscht : user_pref("browser.search.selectedEngine", "Web Search");
Zeile gelцscht : user_pref("browser.search.order.1", "Web Search");
Zeile gelцscht : user_pref("wtb3869.homepage", "hxxp://search.certified-toolbar.com?si=46364&st=home&tid=3869&ver=6.0&ts=1375105834002.000005&tguid=46364-3869-1395730212770-747088-b5678");
Zeile gelцscht : user_pref("wtb3869.newtab", "hxxp://search.certified-toolbar.com?si=46364&st=home&tid=3869&ver=6.0&ts=1375105834002.000005&tguid=46364-3869-1395730212770-747088-b5678");
-\\ Google Chrome v34.0.1847.131
[ Datei : C:\Users\Mascha\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Gelцscht [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&affID=112555&tt=270912_7a_3912_1&babsrc=SP_ss&mntrId=c43f51d200000000000074e50b3f07c1
Gelцscht [Search Provider] : hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=6.0&ts=1375105834002.000005&tguid=46364-3869-1395730212770-747088-b5678&q={searchTerms}
[ Datei : C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Gelцscht [Search Provider] : hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=6.0&ts=1375105834002.000005&tguid=46364-3869-1395730212770-747088-b5678&q={searchTerms}
Gelцscht [Extension] : cfdfamfnacokbbbnmpdfmhonipnhmbid
Gelцscht [Extension] : fgibjgmnimooanbagcfpnkmngejcojaf
*************************
AdwCleaner[R0].txt - [46150 octets] - [06/05/2014 07:36:02]
AdwCleaner[S0].txt - [43490 octets] - [06/05/2014 07:37:15]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [43551 octets] ##########
AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v3.207 - Bericht erstellt am 06/05/2014 um 13:43:14
# Aktualisiert 05/05/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Tanja - TANJA-PC
# Gestartet von : C:\Users\Tanja\Desktop\adwcleaner.exe
# Option : Lцschen
***** [ Dienste ] *****
[x] Nicht Gelцscht : Browser Manager
***** [ Dateien / Ordner ] *****
Ordner Gelцscht : C:\SoftwareUpdater
Ordner Gelцscht : C:\ProgramData\~Browser Manager
Ordner Gelцscht : C:\ProgramData\IBUpdaterService
Ordner Gelцscht : C:\ProgramData\Search Protection
Ordner Gelцscht : C:\ProgramData\Tarma Installer
Ordner Gelцscht : C:\Program Files (x86)\HomeTab
Ordner Gelцscht : C:\Program Files (x86)\Toolbar Cleaner
Ordner Gelцscht : C:\Windows\SysWOW64\ARFC
Ordner Gelцscht : C:\Windows\SysWOW64\jmdp
Ordner Gelцscht : C:\Windows\SysWOW64\WNLT
Ordner Gelцscht : C:\Program Files\HomeTab
Ordner Gelцscht : C:\Users\Tanja\AppData\LocalLow\adawaretb
Ordner Gelцscht : C:\Users\Tanja\AppData\LocalLow\FlagFox
Ordner Gelцscht : C:\Users\Tanja\AppData\LocalLow\HomeTab
Ordner Gelцscht : C:\Users\Tanja\AppData\LocalLow\SimplyTech
Ordner Gelцscht : C:\Users\Tanja\AppData\Roaming\HomeTab
Ordner Gelцscht : C:\Users\Tanja\AppData\Roaming\SecureSearch
Ordner Gelцscht : C:\Users\Tanja\AppData\Roaming\SimplyTech
Ordner Gelцscht : C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\v4ddstpg.default\adawaretb
Ordner Gelцscht : C:\Users\Mascha\AppData\Roaming\Mozilla\Firefox\Profiles\pt8kjgx0.default\adawaretb
Ordner Gelцscht : C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\adawaretb
Ordner Gelцscht : C:\Users\Video\AppData\Roaming\Mozilla\Firefox\Profiles\21iq3al7.default\adawaretb
Ordner Gelцscht : C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\v4ddstpg.default\Extensions\{24532715-4abc-47ee-bd4f-a6774d0723d2}
Ordner Gelцscht : C:\Users\Mascha\AppData\Roaming\Mozilla\Firefox\Profiles\pt8kjgx0.default\Extensions\{24532715-4abc-47ee-bd4f-a6774d0723d2}
Ordner Gelцscht : C:\Users\Video\AppData\Roaming\Mozilla\Firefox\Profiles\21iq3al7.default\Extensions\{24532715-4abc-47ee-bd4f-a6774d0723d2}
Ordner Gelцscht : C:\Users\Mascha\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfdfamfnacokbbbnmpdfmhonipnhmbid
Ordner Gelцscht : C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfdfamfnacokbbbnmpdfmhonipnhmbid
Datei Gelцscht : C:\Windows\System32\ImhxxpComm.dll
Datei Gelцscht : C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\v4ddstpg.default\browsermngr_prefs.js
Datei Gelцscht : C:\Users\Video\AppData\Roaming\Mozilla\Firefox\Profiles\21iq3al7.default\browsermngr_prefs.js
Datei Gelцscht : C:\Windows\System32\Tasks\Browser Manager
Datei Gelцscht : C:\Windows\System32\Tasks\Browser Updater
Datei Gelцscht : C:\Windows\System32\Tasks\ProtectedSearch
Datei Gelцscht : C:\Windows\System32\Tasks\YourFile Update
***** [ Verknьpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Wert Gelцscht : HKCU\Software\Mozilla\Firefox\Extensions [{B64982B1-D112-42B5-B1E4-D3867C4533F8}]
Wert Gelцscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [webbooster@iminent.com]
Schlьssel Gelцscht : HKLM\SOFTWARE\Google\Chrome\Extensions\cfdfamfnacokbbbnmpdfmhonipnhmbid
Schlьssel Gelцscht : HKLM\SOFTWARE\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohdhomoefph
Schlьssel Gelцscht : HKCU\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\BabylonToolbar
Wert Gelцscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [BrowserMngrDefaultScope]
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\AppID\HomeTab.DLL
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\HomeTab_RASAPI32
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\HomeTab_RASMANCS
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\Savings Sidekick_RASAPI32
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\Savings Sidekick_RASMANCS
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_2_rasapi32
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_2_rasmancs
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasapi32
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasmancs
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetpacksupdatemanager_rasapi32
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\YourFile_RASAPI32
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\YourFile_RASMANCS
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\YourFileUpdater_RASAPI32
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\YourFileUpdater_RASMANCS
Schlьssel Gelцscht : HKCU\Software\82dd8fb13db843
Schlьssel Gelцscht : HKLM\SOFTWARE\82dd8fb13db843
Schlьssel Gelцscht : HKLM\SOFTWARE\CT2625848
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_calibre_RASAPI32
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_calibre_RASMANCS
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_san-andreas-multiplayer_RASAPI32
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_san-andreas-multiplayer_RASMANCS
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\AppID\{3FC27B34-0C19-49DA-875E-1875DDD4A6B2}
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\AppID\{50F7F0BE-31BA-4145-BD8B-6B0DECFED804}
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\CLSID\{5555CC4C-FA2B-4D69-8296-B6AE5E95C0B7}
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\CLSID\{6C97A91E-4524-4019-86AF-2AA2D567BF5C}
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\CLSID\{BA7B8F39-DF7F-4A98-83E9-57CE6ED9CA24}
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Schlьssel Gelцscht : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C97A91E-4524-4019-86AF-2AA2D567BF5C}
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA7B8F39-DF7F-4A98-83E9-57CE6ED9CA24}
Schlьssel Gelцscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6C97A91E-4524-4019-86AF-2AA2D567BF5C}
Schlьssel Gelцscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BA696155-D96E-4281-B467-0367A0456474}
Schlьssel Gelцscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BA7B8F39-DF7F-4A98-83E9-57CE6ED9CA24}
Schlьssel Gelцscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6C97A91E-4524-4019-86AF-2AA2D567BF5C}
Schlьssel Gelцscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BA7B8F39-DF7F-4A98-83E9-57CE6ED9CA24}
Schlьssel Gelцscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6C97A91E-4524-4019-86AF-2AA2D567BF5C}
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0E44BB13-2523-468B-BF51-58D5F52A84F6}
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{62155D33-3CE2-401E-8967-5A270628A3D5}
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CFD485F0-96BD-47CD-BB6D-CD7DDA95F102}
Schlьssel Gelцscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlьssel Gelцscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}
Schlьssel Gelцscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlьssel Gelцscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Wert Gelцscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{6C97A91E-4524-4019-86AF-2AA2D567BF5C}]
Wert Gelцscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
Wert Gelцscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{BA696155-D96E-4281-B467-0367A0456474}]
Schlьssel Gelцscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{6C97A91E-4524-4019-86AF-2AA2D567BF5C}
Schlьssel Gelцscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{A928E66C-F501-4E66-9953-855C712F93B2}
Schlьssel Gelцscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{BA696155-D96E-4281-B467-0367A0456474}
Schlьssel Gelцscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}
Schlьssel Gelцscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}
Schlьssel Gelцscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}
Schlьssel Gelцscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}
Schlьssel Gelцscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}
Schlьssel Gelцscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C97A91E-4524-4019-86AF-2AA2D567BF5C}
Schlьssel Gelцscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA696155-D96E-4281-B467-0367A0456474}
Wert Gelцscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{6C97A91E-4524-4019-86AF-2AA2D567BF5C}]
Wert Gelцscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{BA696155-D96E-4281-B467-0367A0456474}]
Schlьssel Gelцscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{62155D33-3CE2-401E-8967-5A270628A3D5}
Schlьssel Gelцscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CFD485F0-96BD-47CD-BB6D-CD7DDA95F102}
Schlьssel Gelцscht : HKCU\Software\bProtector
Schlьssel Gelцscht : HKCU\Software\BrowserMngr
Schlьssel Gelцscht : HKCU\Software\Conduit
Schlьssel Gelцscht : HKCU\Software\Cr_Installer
Schlьssel Gelцscht : HKCU\Software\HomeTab
Schlьssel Gelцscht : HKCU\Software\IM
Schlьssel Gelцscht : HKCU\Software\performersoft llc
Schlьssel Gelцscht : HKCU\Software\simplytech
Schlьssel Gelцscht : HKCU\Software\Softonic
Schlьssel Gelцscht : HKCU\Software\wscontb
Schlьssel Gelцscht : HKCU\Software\AppDataLow\Software\adawarebp
Schlьssel Gelцscht : HKCU\Software\AppDataLow\Software\simplytech
Schlьssel Gelцscht : HKCU\Software\AppDataLow\Software\SmartBar
Schlьssel Gelцscht : HKLM\Software\adawaretb
Schlьssel Gelцscht : HKLM\Software\Babylon
Schlьssel Gelцscht : HKLM\Software\BrowserMngr
Schlьssel Gelцscht : HKLM\Software\Conduit
Schlьssel Gelцscht : HKLM\Software\covus freemium gmbh
Schlьssel Gelцscht : HKLM\Software\DataMngr
Schlьssel Gelцscht : HKLM\Software\Toolbar Cleaner
Schlьssel Gelцscht : HKLM\Software\YourFileDownloader
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\adawaretb
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Schlьssel Gelцscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Toolbar Cleaner
Schlьssel Gelцscht : [x64] HKLM\SOFTWARE\Speedchecker Limited
Schlьssel Gelцscht : [x64] HKLM\SOFTWARE\Tarma Installer
Schlьssel Gelцscht : [x64] HKLM\SOFTWARE\WNLT
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.17041
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Search Bar]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Search Page]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Search Bar]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Search Page]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [(Default)]
-\\ Mozilla Firefox v28.0 (de)
[ Datei : C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\v4ddstpg.default\prefs.js ]
Zeile gelцscht : user_pref("browser.search.defaultenginename", "Web Search");
Zeile gelцscht : user_pref("browser.search.order.1", "Web Search");
Zeile gelцscht : user_pref("browser.search.selectedEngine", "Web Search");
Zeile gelцscht : user_pref("browser.search.defaultengine", "Web Search");
[ Datei : C:\Users\Mascha\AppData\Roaming\Mozilla\Firefox\Profiles\pt8kjgx0.default\prefs.js ]
Zeile gelцscht : user_pref("browser.search.defaultengine", "Web Search");
Zeile gelцscht : user_pref("browser.search.defaultenginename", "Web Search");
Zeile gelцscht : user_pref("browser.search.order.1", "Web Search");
Zeile gelцscht : user_pref("browser.search.selectedEngine", "Web Search");
[ Datei : C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\prefs.js ]
Zeile gelцscht : user_pref("CT2625848.1000082.isDisplayHidden", "true");
Zeile gelцscht : user_pref("CT2625848.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description\":\"California Rock\",\"url\":\"hxxp://feedlive.net/california.asx\"}");
Zeile gelцscht : user_pref("CT2625848.2625848a129894023611240511000000paramsGK1", "eyJ1cGRhdGVSZXFUaW1lIjoxMzQ5OTU4ODU3MzA5LCJ1cGRhdGVSZXNwVGltZSI6MTM0OTk1ODg1ODU2MSwiZGF0YSI6eyJzZXR0aW5ncyI6eyJpY29uIjoiaHR0cDovL3N0b3[...]
Zeile gelцscht : user_pref("CT2625848.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Zeile gelцscht : user_pref("CT2625848.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
Zeile gelцscht : user_pref("CT2625848.FirstTime", "true");
Zeile gelцscht : user_pref("CT2625848.FirstTimeFF3", "true");
Zeile gelцscht : user_pref("CT2625848.LoginRevertSettingsEnabled", true);
Zeile gelцscht : user_pref("CT2625848.RevertSettingsEnabled", true);
Zeile gelцscht : user_pref("CT2625848.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2625848&SearchSource=2&q=");
Zeile gelцscht : user_pref("CT2625848.UserID", "UN63527116905336068");
Zeile gelцscht : user_pref("CT2625848.addressBarTakeOverEnabledInHidden", "true");
Zeile gelцscht : user_pref("CT2625848.autoDisableScopes", 14);
Zeile gelцscht : user_pref("CT2625848.browser.search.defaultthis.engineName", true);
Zeile gelцscht : user_pref("CT2625848.countryCode", "DE");
Zeile gelцscht : user_pref("CT2625848.defaultSearch", "true");
Zeile gelцscht : user_pref("CT2625848.enableAlerts", "false");
Zeile gelцscht : user_pref("CT2625848.enableFix404ByUser", "TRUE");
Zeile gelцscht : user_pref("CT2625848.enableSearchFromAddressBar", "true");
Zeile gelцscht : user_pref("CT2625848.firstTimeDialogOpened", "true");
Zeile gelцscht : user_pref("CT2625848.fixPageNotFoundError", "true");
Zeile gelцscht : user_pref("CT2625848.fixPageNotFoundErrorByUser", "true");
Zeile gelцscht : user_pref("CT2625848.fixPageNotFoundErrorInHidden", "true");
Zeile gelцscht : user_pref("CT2625848.fixUrls", true);
Zeile gelцscht : user_pref("CT2625848.fullUserID", "UN63527116905336068.UP.20130626184533");
Zeile gelцscht : user_pref("CT2625848.installId", "ConduitNSISIntegration");
Zeile gelцscht : user_pref("CT2625848.installType", "ConduitNSISIntegration");
Zeile gelцscht : user_pref("CT2625848.isCheckedStartAsHidden", true);
Zeile gelцscht : user_pref("CT2625848.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Zeile gelцscht : user_pref("CT2625848.isFirstTimeToolbarLoading", "false");
Zeile gelцscht : user_pref("CT2625848.isNewTabEnabled", true);
Zeile gelцscht : user_pref("CT2625848.isPerformedSmartBarTransition", "true");
Zeile gelцscht : user_pref("CT2625848.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Zeile gelцscht : user_pref("CT2625848.keyword", true);
Zeile gelцscht : user_pref("CT2625848.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT2625848&octid=CT2625848&SearchSource=15&CUI=UN63527116905336068&SSPV=&Lay=1&UM=false\"}[...]
Zeile gelцscht : user_pref("CT2625848.lastVersion", "10.23.0.822");
Zeile gelцscht : user_pref("CT2625848.migrateAppsAndComponents", true);
Zeile gelцscht : user_pref("CT2625848.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"about%3Ahome\",\"EB_MAIN_FRAME_TITLE\":\"Mozilla%20Firefox-Startseite\",\"EB_TOOLBAR_SUB_DOMAIN\":\"hxxp:[...]
Zeile gelцscht : user_pref("CT2625848.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Zeile gelцscht : user_pref("CT2625848.openThankYouPage", "false");
Zeile gelцscht : user_pref("CT2625848.openUninstallPage", "true");
Zeile gelцscht : user_pref("CT2625848.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2625848&SearchSource=2&CUI=UN63527116905336068&UM=&q=");
Zeile gelцscht : user_pref("CT2625848.search.searchAppId", "129181467799155027");
Zeile gelцscht : user_pref("CT2625848.search.searchCount", "0");
Zeile gelцscht : user_pref("CT2625848.searchInNewTabEnabledByUser", "true");
Zeile gelцscht : user_pref("CT2625848.searchInNewTabEnabledInHidden", "true");
Zeile gelцscht : user_pref("CT2625848.searchSuggestEnabledByUser", "true");
Zeile gelцscht : user_pref("CT2625848.searchUserMode", "false");
Zeile gelцscht : user_pref("CT2625848.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT2625848\"}");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://DVDVideoSoftTBDE.OurToolbar.com//xpi\"}");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"DVDVideoSoftTB DE \"}");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_Configuration_lastUpdate", "1392016441609");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1349958856383");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_appsMetadata_lastUpdate", "1349958856359");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1349958856771");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_location_lastUpdate", "1372232422887");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_login_10.13.1.89_lastUpdate", "1354105062757");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_login_10.13.40.15_lastUpdate", "1358762755866");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_login_10.14.40.128_lastUpdate", "1360322985548");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_login_10.14.42.7_lastUpdate", "1360744905533");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_login_10.14.65.43_lastUpdate", "1365409178982");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_login_10.15.0.562_lastUpdate", "1366053531901");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_login_10.15.2.523_lastUpdate", "1368873766738");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_login_10.16.2.509_lastUpdate", "1372232422542");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_login_10.16.4.519_lastUpdate", "1374695694633");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_login_10.16.70.505_lastUpdate", "1377714626964");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_login_10.19.2.505_lastUpdate", "1378807563110");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_login_10.20.0.513_lastUpdate", "1380642168413");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_login_10.20.1.508_lastUpdate", "1382430176268");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_login_10.21.1.507_lastUpdate", "1383121696212");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_login_10.23.0.822_lastUpdate", "1392016440871");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_optimizer_lastUpdate", "1349958856551");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1349958856882");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_searchAPI_lastUpdate", "1392016441055");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_serviceMap_lastUpdate", "1392016441044");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_toolbarContextMenu_lastUpdate", "1349958856665");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_toolbarSettings_lastUpdate", "1392016440616");
Zeile gelцscht : user_pref("CT2625848.serviceLayer_services_translation_lastUpdate", "1392016441730");
Zeile gelцscht : user_pref("CT2625848.settingsINI", true);
Zeile gelцscht : user_pref("CT2625848.shouldFirstTimeDialog", "false");
Zeile gelцscht : user_pref("CT2625848.showToolbarPermission", "false");
Zeile gelцscht : user_pref("CT2625848.smartbar.CTID", "CT2625848");
Zeile gelцscht : user_pref("CT2625848.smartbar.Uninstall", "0");
Zeile gelцscht : user_pref("CT2625848.smartbar.homepage", true);
Zeile gelцscht : user_pref("CT2625848.smartbar.isHidden", true);
Zeile gelцscht : user_pref("CT2625848.smartbar.toolbarName", "DVDVideoSoftTB DE ");
Zeile gelцscht : user_pref("CT2625848.startPage", "userChanged");
Zeile gelцscht : user_pref("CT2625848.toolbarBornServerTime", "11-10-2012");
Zeile gelцscht : user_pref("CT2625848.toolbarCurrentServerTime", "10-2-2014");
Zeile gelцscht : user_pref("CT2625848.toolbarLoginClientTime", "Mon Apr 08 2013 13:54:13 GMT+0200");
Zeile gelцscht : user_pref("CT2625848_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1392016433117,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Zeile gelцscht : user_pref("Smartbar.ConduitHomepagesList", "");
Zeile gelцscht : user_pref("Smartbar.ConduitSearchEngineList", "");
Zeile gelцscht : user_pref("Smartbar.ConduitSearchUrlList", "");
Zeile gelцscht : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.sweetim.com/search.asp?src=2&crg=3.1010006.10031&q=");
Zeile gelцscht : user_pref("Smartbar.keywordURLSelectedCTID", "CT2625848");
Zeile gelцscht : user_pref("browser.search.defaultengine", "Web Search");
Zeile gelцscht : user_pref("browser.search.order.1", "Web Search");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.admin", false);
Zeile gelцscht : user_pref("extensions.BabylonToolbar.aflt", "babsst");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.autoRvrt", "false");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.babExt", "");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.babTrack", "affID=114211&tt=3612_3");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.babext", "babExt");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.babtrack", "babTrack");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.bbDpng", "10");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.cntry", "DE");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.dfltLng", "en");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.dfltlng", "en");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.dfltsrch", "false");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.dp_alert", "0");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.envrmnt", "production");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.excTlbr", false);
Zeile gelцscht : user_pref("extensions.BabylonToolbar.firstrun", false);
Zeile gelцscht : user_pref("extensions.BabylonToolbar.hdrMd5", "62EE5405C1B9BE838D6E4B2346118624");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.hmpg", false);
Zeile gelцscht : user_pref("extensions.BabylonToolbar.hrdid", "c43f51d200000000000074e50b3f07c1");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.id", "c43f51d200000000000074e50b3f07c1");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.instlDay", "15592");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.instlRef", "sst");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.instlday", "15592");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.instlref", "sst");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.isdcmntcmplt", "false");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.keywordurl", "");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.6.9.1220:56:01");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.lastdp", 7);
Zeile gelцscht : user_pref("extensions.BabylonToolbar.mntrvrsn", "1.3.1");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.newTab", false);
Zeile gelцscht : user_pref("extensions.BabylonToolbar.newtab", "false");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.newtaburl", "");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.pnu_base", "{\"newVrsn\":\"76\",\"lastVrsn\":\"76\",\"vrsnLoad\":\"\",\"showMsg\":\"false\",\"showSilent\":\"true\",\"msgTs\":0,\"lstMsgTs\":0}");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.prtnrid", "babylon");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.savedVrsnTs", "1");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.sg", "azb");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.smplGrp", "azb");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.smplgrp", "azb");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.srcExt", "ss");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.srcext", "ss");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.srch", "");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.srchprvdr", "");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.tlbrId", "base");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=c43f51d200000000000074e50b3f07c1&q=");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.tlbrid", "base");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.tlbrsrchurl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=c43f51d200000000000074e50b3f07c1&q=");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.vrsn", "1.6.9.12");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.vrsnTs", "1.6.9.1220:56:01");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.vrsni", "1.6.9.12");
Zeile gelцscht : user_pref("extensions.BabylonToolbar.vrsnts", "1.6.9.1220:56:01");
Zeile gelцscht : user_pref("extensions.BabylonToolbar_i.babExt", "");
Zeile gelцscht : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=114211&tt=3612_3");
Zeile gelцscht : user_pref("extensions.BabylonToolbar_i.newTab", false);
Zeile gelцscht : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Zeile gelцscht : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Zeile gelцscht : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.6.9.1220:56:01");
Zeile gelцscht : user_pref("extensions.crossrider.bic", "13a11be1c0c4464326c1a2327396c1e4");
Zeile gelцscht : user_pref("plugin.state.npconduitfirefoxplugin", 2);
Zeile gelцscht : user_pref("smartBar.searchInNewTabOwner", "CT2625848");
Zeile gelцscht : user_pref("smartbar.addressBarOwnerCTID", "CT2625848");
Zeile gelцscht : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2625848&SearchSource=2&q=,hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2625848&SearchSource=2&CU[...]
Zeile gelцscht : user_pref("smartbar.machineId", "UFBMGHHT4TJRMU/ZS5OK2UUXMLOAFX14EGG1S17QX6WU44ZOT874EUYPKFNUSK9WOE+HRCM3REACMSOZA1ZEUW");
Zeile gelцscht : user_pref("smartbar.originalSearchAddressUrl", "hxxp://search.sweetim.com/search.asp?barid={7B48AE94-139E-11E2-AACC-848F69B0791A}&src=2&crg=3.1010006.10031&q=");
Zeile gelцscht : user_pref("sweetim.toolbar.RevertDialog.enable", "false");
Zeile gelцscht : user_pref("sweetim.toolbar.UserSelectedSaveSettings", "true");
Zeile gelцscht : user_pref("sweetim.toolbar.Visibility.VisibilityGuardLastUnHide", "1372015631726");
Zeile gelцscht : user_pref("sweetim.toolbar.Visibility.enable", "true");
Zeile gelцscht : user_pref("sweetim.toolbar.Visibility.intervaldays", "7");
Zeile gelцscht : user_pref("sweetim.toolbar.cargo", "3.1010006.10031");
Zeile gelцscht : user_pref("sweetim.toolbar.cda.DisableOveride.enable", "true");
Zeile gelцscht : user_pref("sweetim.toolbar.cda.HideOveride.enable", "true");
Zeile gelцscht : user_pref("sweetim.toolbar.cda.RemoveOveride.enable", "true");
Zeile gelцscht : user_pref("sweetim.toolbar.cda.returnValue", "disable");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.0.enable", "true");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.0.handler", "chrome://sim_toolbar_package/content/optionsdialog-handler.js");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.0.height", "335");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.0.id", "id_options_dialog");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.0.title", "$string.config.label;");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.0.url", "hxxp://www.sweetim.com/simffbar/options_remote_ff.asp?lang=$locale_id;&toolbar_version=$ITEM_VERSION;&crg=$cargo;");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.0.width", "761");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.1.enable", "true");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.1.handler", "chrome://sim_toolbar_package/content/exampledialog-handler.js");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.1.height", "300");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.1.id", "id_example_dialog");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.1.title", "Example (unit-test) dialog");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.1.url", "chrome://sim_toolbar_package/content/exampledialog.html");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.1.width", "500");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.2.enable", "true");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.2.handler", "chrome://sim_toolbar_package/content/cdadialog-handler.js");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.2.height", "150");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.2.id", "id_dialog_hide_disable_remove");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.2.title", "Option Dialog");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.2.url", "hxxp://www.sweetim.com/simffbar/simcdadialog.asp");
Zeile gelцscht : user_pref("sweetim.toolbar.dialogs.2.width", "530");
Zeile gelцscht : user_pref("sweetim.toolbar.dnscatch.domain-blacklist", ".*.sweetim.com/.*|.*.facebook.com/.*|.*.google.com/.*|.*.google.co.in/.*|.*.google.com.br/.*|.*.google.es/.*|.*.youtube.com/.*|.*.yahoo.com/.*|.[...]
Zeile gelцscht : user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
Zeile gelцscht : user_pref("sweetim.toolbar.keywordUrlGuard.enable", "false");
Zeile gelцscht : user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
Zeile gelцscht : user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
Zeile gelцscht : user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
Zeile gelцscht : user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
Zeile gelцscht : user_pref("sweetim.toolbar.mode.debug", "false");
Zeile gelцscht : user_pref("sweetim.toolbar.newtab.created", "false");
Zeile gelцscht : user_pref("sweetim.toolbar.newtab.enable", "true");
Zeile gelцscht : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "Search the web (Babylon)");
Zeile gelцscht : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "Google");
Zeile gelцscht : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "www.google.de");
Zeile gelцscht : user_pref("sweetim.toolbar.previous.keyword.URL", "");
Zeile gelцscht : user_pref("sweetim.toolbar.rc.url", "hxxp://www.sweetim.com/simffbar/rc.html?toolbar_version=$ITEM_VERSION;&crg=$cargo;");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.0.addcontextdiv", "true");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.0.callback", "simVerification");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.0.domain-blacklist", "");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.0.domain-whitelist", "hxxp://(www.|apps.)?facebook\\.com.*");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.0.elementid", "id_script_sim_fb");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.0.enable", "false");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.0.id", "id_script_fb");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.0.url", "hxxp://sc.sweetim.com/apps/in/fb/infb.js");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.1.addcontextdiv", "true");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.1.callback", "simVerification");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.1.domain-whitelist", "hxxps://(www.|apps.)?facebook\\.com.*");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.1.elementid", "id_script_sim_fb");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.1.enable", "false");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.1.id", "id_script_fb_hxxpS");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.1.url", "hxxps://sc.sweetim.com/apps/in/fb/infb.js");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.2.addcontextdiv", "false");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.2.callback", "");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.2.domain-blacklist", ".*.google..*|.*.bing..*|.*.live..*|.*.msn..*|.*.yahoo..*|.*.youtube.com.*|.*ask.com.*|.*.sweetim.com.*");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.2.domain-whitelist", "");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.2.elementid", "id_predict_include_script");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.2.enable", "false");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.2.id", "id_script_prad");
Zeile gelцscht : user_pref("sweetim.toolbar.scripts.2.url", "hxxp://cdn1.certified-apps.com/scripts/shared/enable.js?si=3104&tid=chff1");
Zeile gelцscht : user_pref("sweetim.toolbar.search.external", "<?xml version=\"1.0\"?><TOOLBAR><EXTERNAL_SEARCH engine=\"hxxp://*google.*\" param=\"q=\" /><EXTERNAL_SEARCH engine=\"hxxp://search.yahoo.com/*\" param=\"[...]
Zeile gelцscht : user_pref("sweetim.toolbar.search.history.capacity", "10");
Zeile gelцscht : user_pref("sweetim.toolbar.searchguard.enable", "false");
Zeile gelцscht : user_pref("sweetim.toolbar.searchguard.initialized_by_rc", "true");
Zeile gelцscht : user_pref("sweetim.toolbar.simapp_id", "{7B48AE94-139E-11E2-AACC-848F69B0791A}");
Zeile gelцscht : user_pref("sweetim.toolbar.urls.homepage", "hxxp://home.sweetim.com/?st=6&barid={7B48AE94-139E-11E2-AACC-848F69B0791A}");
Zeile gelцscht : user_pref("sweetim.toolbar.version", "1.9.0.0");
Zeile gelцscht : user_pref("valueApps.CT2625848.mam_gk_currentVersion", "312E31332E302E3137");
Zeile gelцscht : user_pref("valueApps.CT2625848.mam_gk_currentVersion.storedInFile", false);
Zeile gelцscht : user_pref("valueApps.CT2625848.mam_gk_migrated_from_ls", "31");
Zeile gelцscht : user_pref("valueApps.CT2625848.mam_gk_migrated_from_ls.storedInFile", false);
Zeile gelцscht : user_pref("valueApps.CT2625848.mam_gk_userBornDate", "4E2F41");
Zeile gelцscht : user_pref("valueApps.CT2625848.mam_gk_userBornDate.storedInFile", false);
[ Datei : C:\Users\Video\AppData\Roaming\Mozilla\Firefox\Profiles\21iq3al7.default\prefs.js ]
Zeile gelцscht : user_pref("browser.search.defaultenginename", "Web Search");
Zeile gelцscht : user_pref("browser.search.defaultengine", "Web Search");
Zeile gelцscht : user_pref("browser.search.selectedEngine", "Web Search");
Zeile gelцscht : user_pref("browser.search.order.1", "Web Search");
-\\ Google Chrome v34.0.1847.131
[ Datei : C:\Users\Mascha\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ Datei : C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [86675 octets] - [06/05/2014 07:36:02]
AdwCleaner[S0].txt - [82217 octets] - [06/05/2014 07:37:15]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [82278 octets] ##########
--- --- --- hier kommt der Inhalt der JRT.txt Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by Tanja on 06.05.2014 at 20:30:38,60
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
Successfully stopped: [Service] browser manager
Successfully deleted: [Service] browser manager
~~~ Registry Values
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\adawarebp
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3715489345-1050972543-478851-1001\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\foxydeal
Successfully deleted: [Registry Key] HKEY_USERS\.DEFAULT\Software\bProtector
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011501160}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011501160}
~~~ Files
Successfully deleted: [File] C:\Windows\syswow64\shoE10B.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoEE92.tmp
~~~ Folders
Failed to delete: [Folder] "C:\ProgramData\boost_interprocess"
Successfully deleted: [Empty Folder] C:\Users\Tanja\appdata\local\{07BADC05-3B07-41DA-819B-FD1EB719DBB3}
Successfully deleted: [Empty Folder] C:\Users\Tanja\appdata\local\{124C906B-CFB9-44C3-B018-CF64305C9C1F}
Successfully deleted: [Empty Folder] C:\Users\Tanja\appdata\local\{1F393EE8-DF61-488A-94B1-79615E79F15C}
Successfully deleted: [Empty Folder] C:\Users\Tanja\appdata\local\{24A9CB4F-290F-4EC2-8C42-657A2FCA4CDB}
Successfully deleted: [Empty Folder] C:\Users\Tanja\appdata\local\{287695F9-D9AE-458D-B826-758DFF4161CB}
Successfully deleted: [Empty Folder] C:\Users\Tanja\appdata\local\{3E38AB3A-11CF-4668-821A-412E2D753DAB}
Successfully deleted: [Empty Folder] C:\Users\Tanja\appdata\local\{427BCE99-FBC4-44F9-9513-D184C2B19D98}
Successfully deleted: [Empty Folder] C:\Users\Tanja\appdata\local\{4A33E929-7F32-4C37-A259-51496BF33BF6}
Successfully deleted: [Empty Folder] C:\Users\Tanja\appdata\local\{4ECE3987-D7C7-40CE-A78D-1920A66F5CA9}
Successfully deleted: [Empty Folder] C:\Users\Tanja\appdata\local\{538B7D6B-91D3-47B0-A8B1-12BB980338C9}
Successfully deleted: [Empty Folder] C:\Users\Tanja\appdata\local\{55C43D7F-2D75-4064-92C2-E9F831FDE92A}
Successfully deleted: [Empty Folder] C:\Users\Tanja\appdata\local\{5CE54A94-7112-4734-AAEF-8C5BE8D7C0F2}
Successfully deleted: [Empty Folder] C:\Users\Tanja\appdata\local\{64834279-F54D-4136-B08B-67828A0153E5}
Successfully deleted: [Empty Folder] C:\Users\Tanja\appdata\local\{835D2720-5636-4D1D-82FE-679A2A0F2817}
Successfully deleted: [Empty Folder] C:\Users\Tanja\appdata\local\{84AB3BC7-1C3D-4C2D-AA08-41218EFAC735}
Successfully deleted: [Empty Folder] C:\Users\Tanja\appdata\local\{9BD69B3A-29C5-486F-A7D2-6B54B8D788B8}
Successfully deleted: [Empty Folder] C:\Users\Tanja\appdata\local\{C880A2EC-7EEC-46C3-8391-D80A391606B5}
Successfully deleted: [Empty Folder] C:\Users\Tanja\appdata\local\{D59BA6FD-1E8E-4354-BB74-2AC0A4B884D6}
Successfully deleted: [Empty Folder] C:\Users\Tanja\appdata\local\{DEE4BB7B-753F-4373-92DF-92C9B3C3F467}
Successfully deleted: [Empty Folder] C:\Users\Tanja\appdata\local\{E8521940-59AE-423B-8332-6A9F5481B152}
Successfully deleted: [Empty Folder] C:\Users\Tanja\appdata\local\{F8670EA3-FEF5-4DC4-A014-9BF6441208AF}
~~~ FireFox
Successfully deleted: [File] C:\user.js
Successfully deleted: [Folder] C:\Users\Tanja\AppData\Roaming\mozilla\firefox\profiles\8465b6yz.default\extensions\{87934c42-161d-45bc-8cef-ef18abe2a30c}
Successfully deleted the following from C:\Users\Tanja\AppData\Roaming\mozilla\firefox\profiles\8465b6yz.default\prefs.js
user_pref("keyword.URL", "hxxp://securedsearch2.lavasoft.com/results.php?pr=vmn&id=adawaretb&v=3_8&idate=__installtime__&hsimp=yhs-lavasoft&ent=bs&q=");
Emptied folder: C:\Users\Tanja\AppData\Roaming\mozilla\firefox\profiles\8465b6yz.default\minidumps [112 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 06.05.2014 at 20:44:53,29
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Geändert von Tanjuscha75 (06.05.2014 um 12:48 Uhr) Grund: Ergänzung |
|
06.05.2014, 19:50
| #5 |
| | adware-Bprotect durch McAfee entdeckt und konnte nicht entfernt werden ....und ein frisches FRST log FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-05-2014 02 Ran by Tanja (administrator) on TANJA-PC on 06-05-2014 20:48:56 Running from C:\Users\Tanja\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe (Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe ( ) C:\Windows\System32\lxeccoms.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe (McAfee, Inc.) C:\Windows\System32\mfevtps.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe (SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe () C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe () C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe () C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\ezprint.exe () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe () C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe () C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe (Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe (Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (McAfee, Inc.) C:\Program Files\mcafee\msm\McSmtFwk.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McUICnt.exe (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [FreeFallProtection] => C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe [686704 2010-12-17] () HKLM\...\Run: [IntelPAN] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-07-28] (Intel(R) Corporation) HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [4479648 2011-01-25] (Dell Inc.) HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" HKLM\...\Run: [Stage Remote] => C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe [2022976 2011-06-28] () HKLM\...\Run: [lxecmon.exe] => C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe [770728 2011-01-23] () HKLM\...\Run: [EzPrint] => C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\ezprint.exe [148280 2011-01-23] () HKLM\...\Run: [DellStage] => C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe [2195824 2012-02-01] () HKLM\...\Run: [] => [X] HKLM\...\Run: [AdAwareTray] => C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe [4114264 2014-01-23] () HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2013-12-18] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Dell DataSafe Online] => C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe [3396448 2013-11-11] (Dell, Inc.) HKLM-x32\...\Run: [mcui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-01-28] (McAfee, Inc.) HKLM-x32\...\Run: [Lexmark Pro800-Pro900 Series] => C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\fm3032.exe [316072 2011-01-23] () HKLM-x32\...\Run: [AccuWeatherWidget] => C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe [968048 2012-02-01] () HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254896 2012-09-17] (Sun Microsystems, Inc.) HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-01-28] (McAfee, Inc.) HKLM-x32\...\Run: [Ad-Aware Browsing Protection] => C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe [559696 2013-09-27] (Lavasoft) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer: [NoControlPanel] 0 HKU\S-1-5-21-3715489345-1050972543-478851-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-10-02] (Skype Technologies S.A.) AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [226920 2011-04-22] (NVIDIA Corporation) Startup: C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IMVU.lnk ShortcutTarget: IMVU.lnk -> C:\Users\Gast\AppData\Roaming\IMVUClient\IMVUQualityAgent.exe () Startup: C:\Users\Mascha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk ShortcutTarget: Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk -> C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe (Intel® Corporation) Startup: C:\Users\Tanja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () Startup: C:\Users\Video\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk ShortcutTarget: Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk -> C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe (Intel® Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://dell.de.msn.com/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x51FBC3AEF6A5CD01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank URLSearchHook: HKLM-x32 - (No Name) - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No File SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {794B2C93-9B33-4B66-A556-F35D9ACBCBA6} URL = hxxp://de.search.yahoo.com/search?fr=mcafee&type=A011DE105&p={SearchTerms} BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) BHO-x32: Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll () BHO-x32: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - C:\Program Files\mcafee\msk\mskapbho.dll () BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) Toolbar: HKLM - Free PDF Perfect - {EFC2B9BE-AB2B-47F1-A47D-9EB28E58C917} - C:\Program Files (x86)\Freemium\Free PDF Perfect\ieagent64.dll (soft Xpansion) Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKLM-x32 - Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll () Toolbar: HKLM-x32 - No Name - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No File Toolbar: HKLM-x32 - Free PDF Perfect - {EFC2B9BE-AB2B-47F1-A47D-9EB28E58C917} - C:\Program Files (x86)\Freemium\Free PDF Perfect\ieagent32.dll (soft Xpansion) Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.) Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default FF NewTab: about:home FF Homepage: about:home FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll () FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @innoplus.de/ino3DViewer - C:\Program Files (x86)\innoplus\3D-Viewer-innoPlus\npIno3DViewer.dll (INNOVA-engineering GmbH Dresden) FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_37 - C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.) FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL () FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @soft-xpansion/npsxpdf - C:\Program Files (x86)\Common Files\Freemium\np-sxpdf.dll (soft-Xpansion) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: FoxyDeal - C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Extensions\{F58A62EB-38DC-43C4-A539-DC52E135208D} [2013-07-29] FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-22] FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-04-03] FF HKLM-x32\...\Firefox\Extensions: [{B45418F9-6406-4828-9D1A-35313FB1E2D6}] - C:\ProgramData\Freemium\Free PDF Perfect\Data\fftb FF Extension: Free PDF Perfect - C:\ProgramData\Freemium\Free PDF Perfect\Data\fftb [2013-07-29] FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2013-11-26] FF HKLM-x32\...\Thunderbird\Extensions: [{B45418F9-6406-4828-9D1A-35313FB1E2D6}] - C:\ProgramData\Freemium\Free PDF Perfect\Data\fftb FF Extension: Free PDF Perfect - C:\ProgramData\Freemium\Free PDF Perfect\Data\fftb [2013-07-29] FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2011-10-11] Chrome: ======= CHR HomePage: hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_8&idate=2014-05-05&ent=hp&u=544AC73567361970CE68AE5367C2C7DA CHR StartupUrls: "hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_8&idate=2014-05-05&ent=hp&u=544AC73567361970CE68AE5367C2C7DA" CHR Extension: (Google Docs) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-13] CHR Extension: (Google Drive) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-13] CHR Extension: (YouTube) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-13] CHR Extension: (No Name) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfdfamfnacokbbbnmpdfmhonipnhmbid [2013-06-19] CHR Extension: (Google-Suche) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-13] CHR Extension: (SiteAdvisor) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2014-01-13] CHR Extension: (No Name) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlceijfdfeghdhmmbhbcffanmcggoojf [2014-05-05] CHR Extension: (Google Wallet) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-13] CHR Extension: (Google Mail) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-13] ==================== Services (Whitelisted) ================= R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe [702744 2014-01-23] () S2 lxecCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxecserv.exe [45736 2010-04-14] (Lexmark International, Inc.) R2 lxec_device; C:\Windows\system32\lxeccoms.exe [1052328 2010-04-14] ( ) R2 lxec_device; C:\Windows\SysWOW64\lxeccoms.exe [598696 2010-04-14] ( ) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation) R2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.) R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178528 2014-01-28] (McAfee, Inc.) S3 McAWFwk; C:\Program Files\mcafee\msc\McAWFwk.exe [220528 2010-08-30] (McAfee, Inc.) R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 McNaiAnn; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [602944 2013-08-02] (McAfee, Inc.) S4 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.) R2 mcpltsvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 McProxy; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1025712 2014-01-21] (McAfee, Inc.) R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-03-17] (McAfee, Inc.) R2 mfevtp; C:\Windows\system32\mfevtps.exe [185792 2014-03-17] (McAfee, Inc.) R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-07-28] () S3 SXDS10; C:\Program Files (x86)\Common Files\soft Xpansion\sxds10.exe [234096 2013-07-29] (soft Xpansion) ==================== Drivers (Whitelisted) ==================== R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70592 2014-03-17] (McAfee, Inc.) S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-05-06] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-04-03] (Malwarebytes Corporation) R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [180272 2014-03-17] (McAfee, Inc.) R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311600 2014-03-17] (McAfee, Inc.) R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [522360 2014-03-17] (McAfee, Inc.) R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [783864 2014-03-17] (McAfee, Inc.) R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [422712 2014-01-21] (McAfee, Inc.) S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [96592 2014-01-21] (McAfee, Inc.) R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [345456 2014-03-17] (McAfee, Inc.) S3 NvStUSB; C:\Windows\system32\drivers\nvstusb.sys [121960 2010-12-12] () R3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [329800 2013-07-17] (BitDefender S.R.L.) S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-05-06 20:48 - 2014-05-06 20:48 - 00024649 ____C () C:\Users\Tanja\Desktop\FRST.txt 2014-05-06 20:44 - 2014-05-06 20:44 - 00004678 ____C () C:\Users\Tanja\Desktop\JRT.txt 2014-05-06 20:31 - 2014-05-06 20:31 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee 2014-05-06 20:30 - 2014-05-06 20:30 - 00000000 ___DC () C:\Windows\ERUNT 2014-05-06 20:29 - 2014-05-06 20:29 - 01016261 ____C (Thisisu) C:\Users\Tanja\Desktop\JRT.exe 2014-05-06 13:39 - 2010-08-30 08:34 - 00536576 ____C (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll 2014-05-06 13:35 - 2014-05-06 13:35 - 00009286 ____C () C:\Users\Tanja\Desktop\mbam.txt 2014-05-06 12:25 - 2014-05-06 20:32 - 00119512 ____C (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-05-06 12:25 - 2014-05-06 12:25 - 00001100 ____C () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-05-06 12:25 - 2014-05-06 12:25 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-05-06 12:25 - 2014-04-03 09:51 - 00088280 ____C (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-05-06 12:25 - 2014-04-03 09:51 - 00063192 ____C (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-05-06 12:25 - 2014-04-03 09:50 - 00025816 ____C (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-05-06 12:23 - 2014-05-06 12:24 - 17305616 ____C (Malwarebytes Corporation ) C:\Users\Tanja\Desktop\mbam-setup-2.0.1.1004.exe 2014-05-06 11:48 - 2014-05-06 11:48 - 00269048 ____C () C:\Windows\Minidump\050614-30295-01.dmp 2014-05-06 07:35 - 2014-05-06 13:46 - 00000000 ___DC () C:\AdwCleaner 2014-05-06 07:34 - 2014-05-06 07:34 - 01316991 ____C () C:\Users\Tanja\Desktop\adwcleaner.exe 2014-05-06 07:27 - 2014-05-06 07:27 - 00013824 ____C () C:\Users\Tanja\AppData\Roaming\FAXLOG32.CDX 2014-05-06 07:27 - 2014-05-06 07:27 - 00001906 ____C () C:\Users\Tanja\AppData\Roaming\FAXLOG32.DBF 2014-05-06 07:27 - 2014-05-06 07:27 - 00001024 ____C () C:\Users\Tanja\AppData\Roaming\FAXLOG32.FPT 2014-05-05 22:57 - 2014-05-06 12:25 - 00000000 ___DC () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-05-05 22:57 - 2014-05-05 22:57 - 00000000 ___DC () C:\ProgramData\Malwarebytes 2014-05-05 22:34 - 2014-05-05 22:34 - 00001262 ____C () C:\Users\Tanja\Desktop\Revo Uninstaller.lnk 2014-05-05 22:34 - 2014-05-05 22:34 - 00000000 ___DC () C:\Program Files (x86)\VS Revo Group 2014-05-05 22:29 - 2014-05-05 22:29 - 02623656 ____C (VS Revo Group Ltd.) C:\Users\Tanja\Desktop\revosetup95.exe 2014-05-05 22:14 - 2014-05-05 22:15 - 02063872 ____C (Farbar) C:\Users\Tanja\Desktop\FRST64.exe 2014-05-05 22:09 - 2014-05-05 22:09 - 00380416 ____C () C:\Users\Tanja\Desktop\Gmer-19357.exe 2014-05-05 22:07 - 2014-05-05 22:08 - 00000472 ____C () C:\Users\Tanja\Desktop\defogger_disable.log 2014-05-05 22:07 - 2014-05-05 22:07 - 00000000 ____C () C:\Users\Tanja\defogger_reenable 2014-05-05 22:05 - 2014-05-05 22:05 - 00050477 ____C () C:\Users\Tanja\Downloads\Defogger.exe 2014-05-05 22:05 - 2014-05-05 22:05 - 00050477 ____C () C:\Users\Tanja\Desktop\Defogger.exe 2014-05-05 21:05 - 2014-05-06 18:47 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2014-05-05 21:05 - 2014-05-05 21:05 - 00001785 ____C () C:\Users\Public\Desktop\iTunes.lnk 2014-05-05 21:04 - 2014-05-05 21:05 - 00000000 ___DC () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-05-05 21:04 - 2014-05-05 21:05 - 00000000 ___DC () C:\Program Files\iTunes 2014-05-05 21:04 - 2014-05-05 21:05 - 00000000 ___DC () C:\Program Files (x86)\iTunes 2014-05-05 20:59 - 2014-05-05 20:59 - 00000000 ___DC () C:\Program Files\Bonjour 2014-05-05 20:59 - 2014-05-05 20:59 - 00000000 ___DC () C:\Program Files (x86)\Bonjour 2014-05-05 20:44 - 2014-05-05 21:59 - 00050270 ____C () C:\Users\Tanja\Downloads\Addition.txt 2014-05-05 20:43 - 2014-05-06 20:48 - 00000000 ___DC () C:\FRST 2014-05-05 20:43 - 2014-05-05 21:59 - 00129443 ____C () C:\Users\Tanja\Downloads\FRST.txt 2014-05-05 20:42 - 2014-05-05 20:42 - 02063872 ____C (Farbar) C:\Users\Tanja\Downloads\FRST64.exe 2014-05-05 20:34 - 2014-05-05 20:45 - 148885840 ____C (Apple Inc.) C:\Users\Tanja\Downloads\iTunes64Setup(1).exe 2014-05-05 20:07 - 2014-05-05 20:07 - 00000000 _SHDC () C:\Users\Tanja\AppData\Local\EmieUserList 2014-05-05 20:07 - 2014-05-05 20:07 - 00000000 _SHDC () C:\Users\Tanja\AppData\Local\EmieSiteList 2014-05-05 19:55 - 2014-05-05 19:55 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Roxio Log Files 2014-05-05 19:37 - 2014-05-05 19:37 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\LavasoftStatistics 2014-05-05 18:59 - 2014-05-06 20:23 - 00002267 ____C () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk 2014-05-05 18:59 - 2014-05-06 18:47 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ad-Aware Antivirus 2014-05-05 18:57 - 2014-05-06 20:24 - 00000000 ___DC () C:\ProgramData\Ad-Aware Browsing Protection 2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\Users\Tanja\AppData\Local\adawarebp 2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\Program Files\Lavasoft 2014-05-05 18:56 - 2014-05-05 18:56 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Lavasoft 2014-05-05 18:56 - 2014-05-05 18:56 - 00000000 ___DC () C:\Program Files (x86)\Lavasoft 2014-05-05 18:55 - 2014-05-05 18:55 - 00000000 ___DC () C:\Program Files\Common Files\Lavasoft 2014-05-05 18:54 - 2014-05-05 18:54 - 00000000 ___DC () C:\ProgramData\Lavasoft 2014-05-05 18:53 - 2014-05-05 18:53 - 01727624 ____C () C:\Users\Tanja\Downloads\Adaware_Installer.exe 2014-05-05 18:44 - 2014-05-05 18:44 - 00728960 ____C (Enigma Software Group USA, LLC.) C:\Users\Tanja\Downloads\SpyHunter-Installer(1).exe 2014-05-05 18:13 - 2014-05-05 20:09 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Nico Mak Computing 2014-05-05 18:13 - 2014-05-05 18:13 - 04892480 ____C (WinZip International LLC ) C:\Users\Tanja\Downloads\wzmp_8.exe 2014-05-05 14:10 - 2014-05-05 14:10 - 00000000 ___DC () C:\Program Files\Enigma Software Group 2014-05-05 14:10 - 2014-05-05 14:10 - 00000000 ____C () C:\autoexec.bat 2014-05-05 14:09 - 2014-05-05 20:08 - 00000000 ___DC () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP 2014-05-05 14:06 - 2014-05-05 14:06 - 00728960 ____C (Enigma Software Group USA, LLC.) C:\Users\Tanja\Downloads\SpyHunter-Installer.exe 2014-05-05 11:15 - 2014-05-05 19:53 - 00000000 ___DC () C:\Program Files (x86)\Mozilla Thunderbird 2014-04-22 17:36 - 2014-04-22 17:38 - 23549440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 17387008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-04-22 17:36 - 2014-04-22 17:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-04-22 17:36 - 2014-04-22 17:38 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-04-22 17:36 - 2014-04-22 17:38 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-04-22 17:36 - 2014-04-22 17:38 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-04-22 17:36 - 2014-04-22 17:38 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-04-22 17:36 - 2014-04-22 17:38 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-04-22 17:36 - 2014-04-22 17:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-04-22 17:36 - 2014-04-22 17:38 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-04-22 17:36 - 2014-04-22 17:38 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-04-22 17:09 - 2014-04-22 17:09 - 00002096 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk 2014-04-22 17:09 - 2014-04-22 17:09 - 00002084 ____C () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2014-04-22 17:07 - 2014-04-22 17:09 - 21987424 ____C (Mozilla) C:\Users\Tanja\Downloads\Thunderbird Setup 24.4.0.exe 2014-04-22 16:34 - 2013-09-23 13:49 - 00197704 ____C (McAfee, Inc.) C:\Windows\system32\Drivers\HipShieldK.sys 2014-04-17 10:30 - 2014-04-17 10:30 - 00002982 ____C () C:\Windows\System32\Tasks\{B47D42E0-03AF-400A-A540-7F155D64C658} 2014-04-10 12:43 - 2014-04-10 12:43 - 00002982 ____C () C:\Windows\System32\Tasks\{299B3EF5-797C-4235-B0D6-04E28BA85DE4} 2014-04-10 12:41 - 2014-04-10 12:41 - 00002982 ____C () C:\Windows\System32\Tasks\{C804B517-5AD4-41F7-82A2-B16ED4D0997C} 2014-04-10 12:41 - 2014-04-10 12:41 - 00002982 ____C () C:\Windows\System32\Tasks\{5A6EB0BF-B98A-4B53-A91D-46DCEF4430B3} 2014-04-10 12:41 - 2014-04-10 12:41 - 00002982 ____C () C:\Windows\System32\Tasks\{4348CFF2-7F8D-4849-B373-1FA61EDB155C} 2014-04-10 11:04 - 2014-04-10 12:29 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2014-04-10 11:04 - 2014-04-10 12:29 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2014-04-10 11:04 - 2014-04-10 12:29 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll 2014-04-10 11:04 - 2014-04-10 12:29 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll 2014-04-10 11:04 - 2014-04-10 12:28 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-04-10 11:04 - 2014-04-10 12:28 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-04-10 11:04 - 2014-04-10 12:28 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-04-10 11:04 - 2014-04-10 12:28 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2014-04-10 11:04 - 2014-04-10 12:28 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2014-04-10 11:04 - 2014-04-10 12:28 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2014-04-10 11:04 - 2014-04-10 12:28 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2014-04-10 11:04 - 2014-04-10 12:28 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2014-04-10 11:04 - 2014-04-10 12:28 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2014-04-10 11:04 - 2014-04-10 12:28 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2014-04-10 11:04 - 2014-04-10 12:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2014-04-10 11:04 - 2014-04-10 12:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2014-04-10 11:04 - 2014-02-04 04:35 - 00274880 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2014-04-07 07:07 - 2014-05-06 13:12 - 00001110 ____C () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf521f401f7f7b.job 2014-04-07 07:07 - 2014-04-07 07:07 - 00004106 ____C () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1cf521f401f7f7b ==================== One Month Modified Files and Folders ======= 2014-05-06 20:49 - 2014-05-06 20:48 - 00024649 ____C () C:\Users\Tanja\Desktop\FRST.txt 2014-05-06 20:48 - 2014-05-05 20:43 - 00000000 ___DC () C:\FRST 2014-05-06 20:44 - 2014-05-06 20:44 - 00004678 ____C () C:\Users\Tanja\Desktop\JRT.txt 2014-05-06 20:32 - 2014-05-06 12:25 - 00119512 ____C (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-05-06 20:31 - 2014-05-06 20:31 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee 2014-05-06 20:31 - 2009-07-14 06:45 - 00021296 ___HC () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-05-06 20:31 - 2009-07-14 06:45 - 00021296 ___HC () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-05-06 20:30 - 2014-05-06 20:30 - 00000000 ___DC () C:\Windows\ERUNT 2014-05-06 20:29 - 2014-05-06 20:29 - 01016261 ____C (Thisisu) C:\Users\Tanja\Desktop\JRT.exe 2014-05-06 20:29 - 2010-11-21 08:50 - 00700118 ____C () C:\Windows\system32\perfh007.dat 2014-05-06 20:29 - 2010-11-21 08:50 - 00149968 ____C () C:\Windows\system32\perfc007.dat 2014-05-06 20:29 - 2009-07-14 07:13 - 01622228 ____C () C:\Windows\system32\PerfStringBackup.INI 2014-05-06 20:27 - 2012-06-22 23:09 - 00000884 ____C () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-05-06 20:27 - 2011-10-11 09:49 - 01437294 ____C () C:\Windows\WindowsUpdate.log 2014-05-06 20:24 - 2014-05-05 18:57 - 00000000 ___DC () C:\ProgramData\Ad-Aware Browsing Protection 2014-05-06 20:24 - 2014-02-21 11:36 - 00001106 ____C () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf2ee873e0378f.job 2014-05-06 20:24 - 2012-05-28 20:50 - 00000000 ___DC () C:\ProgramData\boost_interprocess 2014-05-06 20:24 - 2011-10-27 21:28 - 00199573 ____C () C:\ProgramData\lxecscan.log 2014-05-06 20:24 - 2011-10-11 17:21 - 00000000 ___DC () C:\Users\Default\AppData\Local\SoftThinks 2014-05-06 20:24 - 2011-10-11 17:21 - 00000000 ___DC () C:\Users\Default User\AppData\Local\SoftThinks 2014-05-06 20:24 - 2011-10-11 17:14 - 00000000 ___DC () C:\Program Files (x86)\Dell DataSafe Local Backup 2014-05-06 20:23 - 2014-05-05 18:59 - 00002267 ____C () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk 2014-05-06 20:23 - 2011-10-11 09:47 - 00000000 ___DC () C:\ProgramData\NVIDIA 2014-05-06 20:23 - 2009-07-14 07:08 - 00000006 ___HC () C:\Windows\Tasks\SA.DAT 2014-05-06 20:23 - 2009-07-14 06:51 - 00142646 ____C () C:\Windows\setupact.log 2014-05-06 18:47 - 2014-05-05 21:05 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2014-05-06 18:47 - 2014-05-05 18:59 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ad-Aware Antivirus 2014-05-06 18:47 - 2013-12-11 20:26 - 00000000 ___DC () C:\Windows\System32\Tasks\SystemSockets 2014-05-06 18:47 - 2012-09-20 20:28 - 00000000 ___DC () C:\Users\Gast 2014-05-06 18:47 - 2012-08-28 21:49 - 00000000 ___DC () C:\Users\Video 2014-05-06 18:47 - 2011-12-22 23:09 - 00000000 ___DC () C:\Users\Mascha 2014-05-06 18:47 - 2011-10-11 17:32 - 00000000 ___DC () C:\ProgramData\Uninstall 2014-05-06 18:47 - 2011-10-11 17:26 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell DataSafe Online 2014-05-06 18:47 - 2011-10-11 16:50 - 00000000 ___DC () C:\Windows\SysWOW64\NV 2014-05-06 18:47 - 2011-10-11 09:45 - 00000000 ___DC () C:\Windows\SysWOW64\RTCOM 2014-05-06 18:47 - 2009-07-14 05:20 - 00000000 ___DC () C:\Windows\SysWOW64\Recovery 2014-05-06 18:47 - 2009-07-14 05:20 - 00000000 ___DC () C:\Windows\registration 2014-05-06 18:47 - 2009-07-14 05:20 - 00000000 ___DC () C:\Windows\AppCompat 2014-05-06 18:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-05-06 18:43 - 2011-12-22 23:49 - 00000000 ____D () C:\Users\Mascha\AppData\Local\Google 2014-05-06 18:43 - 2011-10-15 23:36 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Mozilla 2014-05-06 13:46 - 2014-05-06 07:35 - 00000000 ___DC () C:\AdwCleaner 2014-05-06 13:44 - 2010-11-21 05:47 - 00295974 ____C () C:\Windows\PFRO.log 2014-05-06 13:43 - 2013-07-29 16:10 - 00000000 ___DC () C:\Windows\System32\Tasks\ProtectedSearch 2014-05-06 13:43 - 2013-07-29 15:51 - 00000000 ___DC () C:\Windows\System32\Tasks\Browser Updater 2014-05-06 13:35 - 2014-05-06 13:35 - 00009286 ____C () C:\Users\Tanja\Desktop\mbam.txt 2014-05-06 13:12 - 2014-04-07 07:07 - 00001110 ____C () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf521f401f7f7b.job 2014-05-06 12:25 - 2014-05-06 12:25 - 00001100 ____C () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-05-06 12:25 - 2014-05-06 12:25 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-05-06 12:25 - 2014-05-05 22:57 - 00000000 ___DC () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-05-06 12:24 - 2014-05-06 12:23 - 17305616 ____C (Malwarebytes Corporation ) C:\Users\Tanja\Desktop\mbam-setup-2.0.1.1004.exe 2014-05-06 12:15 - 2009-07-14 05:20 - 00000000 ___DC () C:\Windows\system32\NDF 2014-05-06 11:48 - 2014-05-06 11:48 - 00269048 ____C () C:\Windows\Minidump\050614-30295-01.dmp 2014-05-06 11:48 - 2012-02-18 22:30 - 00000000 ___DC () C:\Windows\Minidump 2014-05-06 11:48 - 2012-02-18 22:29 - 251116278 _____ () C:\Windows\MEMORY.DMP 2014-05-06 11:48 - 2011-10-14 11:44 - 00000000 ___DC () C:\Users\Tanja 2014-05-06 11:48 - 2009-07-14 06:45 - 00294168 ____C () C:\Windows\system32\FNTCACHE.DAT 2014-05-06 07:34 - 2014-05-06 07:34 - 01316991 ____C () C:\Users\Tanja\Desktop\adwcleaner.exe 2014-05-06 07:27 - 2014-05-06 07:27 - 00013824 ____C () C:\Users\Tanja\AppData\Roaming\FAXLOG32.CDX 2014-05-06 07:27 - 2014-05-06 07:27 - 00001906 ____C () C:\Users\Tanja\AppData\Roaming\FAXLOG32.DBF 2014-05-06 07:27 - 2014-05-06 07:27 - 00001024 ____C () C:\Users\Tanja\AppData\Roaming\FAXLOG32.FPT 2014-05-05 22:57 - 2014-05-05 22:57 - 00000000 ___DC () C:\ProgramData\Malwarebytes 2014-05-05 22:34 - 2014-05-05 22:34 - 00001262 ____C () C:\Users\Tanja\Desktop\Revo Uninstaller.lnk 2014-05-05 22:34 - 2014-05-05 22:34 - 00000000 ___DC () C:\Program Files (x86)\VS Revo Group 2014-05-05 22:29 - 2014-05-05 22:29 - 02623656 ____C (VS Revo Group Ltd.) C:\Users\Tanja\Desktop\revosetup95.exe 2014-05-05 22:15 - 2014-05-05 22:14 - 02063872 ____C (Farbar) C:\Users\Tanja\Desktop\FRST64.exe 2014-05-05 22:09 - 2014-05-05 22:09 - 00380416 ____C () C:\Users\Tanja\Desktop\Gmer-19357.exe 2014-05-05 22:08 - 2014-05-05 22:07 - 00000472 ____C () C:\Users\Tanja\Desktop\defogger_disable.log 2014-05-05 22:07 - 2014-05-05 22:07 - 00000000 ____C () C:\Users\Tanja\defogger_reenable 2014-05-05 22:05 - 2014-05-05 22:05 - 00050477 ____C () C:\Users\Tanja\Downloads\Defogger.exe 2014-05-05 22:05 - 2014-05-05 22:05 - 00050477 ____C () C:\Users\Tanja\Desktop\Defogger.exe 2014-05-05 21:59 - 2014-05-05 20:44 - 00050270 ____C () C:\Users\Tanja\Downloads\Addition.txt 2014-05-05 21:59 - 2014-05-05 20:43 - 00129443 ____C () C:\Users\Tanja\Downloads\FRST.txt 2014-05-05 21:05 - 2014-05-05 21:05 - 00001785 ____C () C:\Users\Public\Desktop\iTunes.lnk 2014-05-05 21:05 - 2014-05-05 21:04 - 00000000 ___DC () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-05-05 21:05 - 2014-05-05 21:04 - 00000000 ___DC () C:\Program Files\iTunes 2014-05-05 21:05 - 2014-05-05 21:04 - 00000000 ___DC () C:\Program Files (x86)\iTunes 2014-05-05 21:04 - 2014-01-14 20:16 - 00000000 ___DC () C:\Program Files\iPod 2014-05-05 20:59 - 2014-05-05 20:59 - 00000000 ___DC () C:\Program Files\Bonjour 2014-05-05 20:59 - 2014-05-05 20:59 - 00000000 ___DC () C:\Program Files (x86)\Bonjour 2014-05-05 20:58 - 2012-05-12 21:42 - 00000000 ___DC () C:\ProgramData\Apple 2014-05-05 20:45 - 2014-05-05 20:34 - 148885840 ____C (Apple Inc.) C:\Users\Tanja\Downloads\iTunes64Setup(1).exe 2014-05-05 20:42 - 2014-05-05 20:42 - 02063872 ____C (Farbar) C:\Users\Tanja\Downloads\FRST64.exe 2014-05-05 20:30 - 2012-10-11 14:32 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\DVDVideoSoft 2014-05-05 20:22 - 2011-10-14 11:45 - 00064024 ____C () C:\Users\Tanja\AppData\Local\GDIPFONTCACHEV1.DAT 2014-05-05 20:18 - 2011-12-11 22:21 - 00000000 ___DC () C:\Program Files (x86)\UltraStar 2014-05-05 20:09 - 2014-05-05 18:13 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Nico Mak Computing 2014-05-05 20:08 - 2014-05-05 14:09 - 00000000 ___DC () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP 2014-05-05 20:07 - 2014-05-05 20:07 - 00000000 _SHDC () C:\Users\Tanja\AppData\Local\EmieUserList 2014-05-05 20:07 - 2014-05-05 20:07 - 00000000 _SHDC () C:\Users\Tanja\AppData\Local\EmieSiteList 2014-05-05 20:07 - 2011-10-15 23:24 - 00000000 ___DC () C:\Users\Tanja\AppData\Local\Google 2014-05-05 20:01 - 2011-10-11 17:32 - 00000000 ___DC () C:\ProgramData\Sonic 2014-05-05 20:01 - 2011-10-11 17:31 - 00000000 ___DC () C:\ProgramData\Roxio 2014-05-05 20:01 - 2011-10-11 17:30 - 00000000 ___DC () C:\Program Files (x86)\Roxio 2014-05-05 19:56 - 2011-10-14 11:51 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Roxio 2014-05-05 19:55 - 2014-05-05 19:55 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Roxio Log Files 2014-05-05 19:53 - 2014-05-05 11:15 - 00000000 ___DC () C:\Program Files (x86)\Mozilla Thunderbird 2014-05-05 19:53 - 2012-06-27 15:10 - 00000000 ___DC () C:\Program Files (x86)\Mozilla Maintenance Service 2014-05-05 19:51 - 2011-10-11 17:27 - 00000000 ___DC () C:\Program Files (x86)\McAfee 2014-05-05 19:37 - 2014-05-05 19:37 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\LavasoftStatistics 2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\Users\Tanja\AppData\Local\adawarebp 2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\Program Files\Lavasoft 2014-05-05 18:56 - 2014-05-05 18:56 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Lavasoft 2014-05-05 18:56 - 2014-05-05 18:56 - 00000000 ___DC () C:\Program Files (x86)\Lavasoft 2014-05-05 18:55 - 2014-05-05 18:55 - 00000000 ___DC () C:\Program Files\Common Files\Lavasoft 2014-05-05 18:54 - 2014-05-05 18:54 - 00000000 ___DC () C:\ProgramData\Lavasoft 2014-05-05 18:53 - 2014-05-05 18:53 - 01727624 ____C () C:\Users\Tanja\Downloads\Adaware_Installer.exe 2014-05-05 18:44 - 2014-05-05 18:44 - 00728960 ____C (Enigma Software Group USA, LLC.) C:\Users\Tanja\Downloads\SpyHunter-Installer(1).exe 2014-05-05 18:13 - 2014-05-05 18:13 - 04892480 ____C (WinZip International LLC ) C:\Users\Tanja\Downloads\wzmp_8.exe 2014-05-05 14:58 - 2011-12-11 22:21 - 00001017 _____ () C:\Users\UpdatusUser\Desktop\UltraStar.lnk 2014-05-05 14:58 - 2011-10-29 19:54 - 00001115 _____ () C:\Users\UpdatusUser\Desktop\PDF Passwort Knacker 1.0.lnk 2014-05-05 14:49 - 2012-06-29 19:08 - 00001017 ____C () C:\Users\TAN\Desktop\UltraStar.lnk 2014-05-05 14:48 - 2013-07-29 15:33 - 00001072 ____C () C:\Users\Public\Desktop\PDF24 Editor.lnk 2014-05-05 14:48 - 2013-07-29 15:33 - 00001057 ____C () C:\Users\Public\Desktop\PDF24 Fax.lnk 2014-05-05 14:48 - 2013-06-06 21:38 - 00001239 ____C () C:\Users\Public\Desktop\ElsterFormular.lnk 2014-05-05 14:48 - 2013-02-27 13:15 - 00002148 ____C () C:\Users\Public\Desktop\Nero Blu-ray Player.lnk 2014-05-05 14:48 - 2012-11-26 10:54 - 00001033 ____C () C:\Users\Public\Desktop\Adobe Download Assistant.lnk 2014-05-05 14:48 - 2012-06-17 13:26 - 00000962 ____C () C:\Users\Public\Desktop\calibre - E-book management.lnk 2014-05-05 14:48 - 2011-10-27 21:26 - 00001959 ____C () C:\Users\Public\Desktop\Lexmark-Druckerstartseite starten.LNK 2014-05-05 14:48 - 2011-10-15 23:36 - 00001136 ____C () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-05-05 14:34 - 2011-10-11 17:35 - 00000945 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zinio Reader 4.lnk 2014-05-05 14:34 - 2011-10-11 17:25 - 00002488 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk 2014-05-05 14:34 - 2011-10-11 17:25 - 00001460 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk 2014-05-05 14:34 - 2011-10-11 17:25 - 00001376 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Photo Gallery.lnk 2014-05-05 14:34 - 2011-10-11 17:25 - 00001307 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Movie Maker.lnk 2014-05-05 14:33 - 2012-11-26 10:54 - 00001045 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Download Assistant.lnk 2014-05-05 14:33 - 2011-10-15 23:36 - 00001148 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-05-05 14:33 - 2011-10-14 11:45 - 00001931 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hilfedokumentation von Dell.lnk 2014-05-05 14:10 - 2014-05-05 14:10 - 00000000 ___DC () C:\Program Files\Enigma Software Group 2014-05-05 14:10 - 2014-05-05 14:10 - 00000000 ____C () C:\autoexec.bat 2014-05-05 14:06 - 2014-05-05 14:06 - 00728960 ____C (Enigma Software Group USA, LLC.) C:\Users\Tanja\Downloads\SpyHunter-Installer.exe 2014-05-05 12:05 - 2013-05-23 09:44 - 00003440 _____ () C:\Windows\System32\Tasks\PCDEventLauncherTask 2014-05-05 10:28 - 2012-06-22 23:09 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-05-05 10:27 - 2012-06-22 23:09 - 00692400 ____C (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-05-05 10:27 - 2011-10-11 16:55 - 00070832 ____C (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-05-05 10:14 - 2011-10-27 10:25 - 00000000 ___DC () C:\Users\Tanja\AppData\Local\Thunderbird 2014-05-01 21:50 - 2012-06-30 20:49 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\SoftGrid Client 2014-05-01 21:38 - 2011-12-26 11:14 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Skype 2014-04-30 08:26 - 2011-10-27 21:30 - 00000000 ___DC () C:\ProgramData\Lx_cats 2014-04-30 06:51 - 2014-01-13 13:22 - 00002177 ____C () C:\Users\Public\Desktop\Google Chrome.lnk 2014-04-23 09:51 - 2009-07-14 05:20 - 00000000 ___DC () C:\Windows\PolicyDefinitions 2014-04-22 17:38 - 2014-04-22 17:36 - 23549440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 17387008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-04-22 17:38 - 2014-04-22 17:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-04-22 17:38 - 2014-04-22 17:36 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-04-22 17:38 - 2014-04-22 17:36 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-04-22 17:38 - 2014-04-22 17:36 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-04-22 17:38 - 2014-04-22 17:36 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-04-22 17:38 - 2014-04-22 17:36 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-04-22 17:38 - 2014-04-22 17:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-04-22 17:38 - 2014-04-22 17:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-04-22 17:38 - 2014-04-22 17:36 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-04-22 17:09 - 2014-04-22 17:09 - 00002096 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk 2014-04-22 17:09 - 2014-04-22 17:09 - 00002084 ____C () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2014-04-22 17:09 - 2014-04-22 17:07 - 21987424 ____C (Mozilla) C:\Users\Tanja\Downloads\Thunderbird Setup 24.4.0.exe 2014-04-17 10:30 - 2014-04-17 10:30 - 00002982 ____C () C:\Windows\System32\Tasks\{B47D42E0-03AF-400A-A540-7F155D64C658} 2014-04-14 20:49 - 2013-06-06 21:38 - 00000000 ___DC () C:\Program Files (x86)\ElsterFormular 2014-04-14 13:34 - 2014-04-03 10:39 - 00000000 ___DC () C:\Program Files (x86)\Mozilla Firefox 2014-04-10 12:43 - 2014-04-10 12:43 - 00002982 ____C () C:\Windows\System32\Tasks\{299B3EF5-797C-4235-B0D6-04E28BA85DE4} 2014-04-10 12:41 - 2014-04-10 12:41 - 00002982 ____C () C:\Windows\System32\Tasks\{C804B517-5AD4-41F7-82A2-B16ED4D0997C} 2014-04-10 12:41 - 2014-04-10 12:41 - 00002982 ____C () C:\Windows\System32\Tasks\{5A6EB0BF-B98A-4B53-A91D-46DCEF4430B3} 2014-04-10 12:41 - 2014-04-10 12:41 - 00002982 ____C () C:\Windows\System32\Tasks\{4348CFF2-7F8D-4849-B373-1FA61EDB155C} 2014-04-10 12:29 - 2014-04-10 11:04 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2014-04-10 12:29 - 2014-04-10 11:04 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2014-04-10 12:29 - 2014-04-10 11:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll 2014-04-10 12:29 - 2014-04-10 11:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll 2014-04-10 12:28 - 2014-04-10 11:04 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-04-10 12:28 - 2014-04-10 11:04 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-04-10 12:28 - 2014-04-10 11:04 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-04-10 12:28 - 2014-04-10 11:04 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2014-04-10 12:28 - 2014-04-10 11:04 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2014-04-10 12:28 - 2014-04-10 11:04 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2014-04-10 12:28 - 2014-04-10 11:04 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2014-04-10 12:28 - 2014-04-10 11:04 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2014-04-10 12:28 - 2014-04-10 11:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2014-04-10 12:28 - 2014-04-10 11:04 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2014-04-10 12:28 - 2014-04-10 11:04 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2014-04-10 12:28 - 2014-04-10 11:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2014-04-09 07:55 - 2013-07-29 15:51 - 00034376 ____C () C:\Windows\Launcher.exe 2014-04-07 07:07 - 2014-04-07 07:07 - 00004106 ____C () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1cf521f401f7f7b 2014-04-07 07:07 - 2014-02-21 11:36 - 00003854 ____C () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1cf2ee873e0378f Files to move or delete: ==================== C:\ProgramData\l_0_00_re.pad Some content of TEMP: ==================== C:\Users\Gast\AppData\Local\Temp\conduitinstaller.exe C:\Users\Tanja\AppData\Local\Temp\2b6ddf79-14f0-4d62-a761-19e52e27b3ab.exe C:\Users\Tanja\AppData\Local\Temp\ah_fedtv.dll C:\Users\Tanja\AppData\Local\Temp\jre-6u37-windows-i586-iftw.exe C:\Users\Tanja\AppData\Local\Temp\nsl25CD.tmp.tbDVDV.dll C:\Users\Tanja\AppData\Local\Temp\pdf24-creator-update.exe C:\Users\Tanja\AppData\Local\Temp\Quarantine.exe C:\Users\Tanja\AppData\Local\Temp\SHSetup.exe C:\Users\Tanja\AppData\Local\Temp\SIMEEIInstaller.exe C:\Users\Tanja\AppData\Local\Temp\SkypeSetup.exe C:\Users\Tanja\AppData\Local\Temp\sqlite3.exe C:\Users\Tanja\AppData\Local\Temp\vcredist_x86.exe C:\Users\Tanja\AppData\Local\Temp\YontooSetup-S.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-04-29 08:20 ==================== End Of Log ============================ |
|
07.05.2014, 13:20
| #6 |
| /// the machine /// TB-Ausbilder | adware-Bprotect durch McAfee entdeckt und konnte nicht entfernt werdenESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ --> adware-Bprotect durch McAfee entdeckt und konnte nicht entfernt werden |
|
09.05.2014, 06:52
| #7 | |
| | adware-Bprotect durch McAfee entdeckt und konnte nicht entfernt werden Hallo Schrauber! die log.txt folgt: Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=4cbe2f90596e8a44a9f89594ad92ef32
# engine=18186
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-05-09 01:54:33
# local_time=2014-05-09 03:54:33 (+0100, Mitteleuropдische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5122 16777214 66 86 3957224 148383069 0 0
# compatibility_mode=5893 16776573 100 94 63859 151230323 0 0
# scanned=284028
# found=4
# cleaned=0
# scan_time=23256
sh=A9EC949A419E93685D5EEB9EA4C991226DC16799 ft=1 fh=0a8c7f4551983517 vn="mцglicherweise Variante von Win32/Hoax.ArchSMS.HL Anwendung" ac=I fn="C:\$RECYCLE.BIN\S-1-5-21-3715489345-1050972543-478851-1001\$RDQQT09.exe"
sh=B1323727A403837985592AB9CF44F8B40B9035CA ft=1 fh=ba241cbba3863658 vn="Variante von MSIL/PSW.Agent.NFX Trojaner" ac=I fn="C:\$RECYCLE.BIN\S-1-5-21-3715489345-1050972543-478851-1005\$R7JWG4E.exe"
sh=E5BF96A3B233AABCCCDF3B6B1B6C8A3326F8A882 ft=1 fh=91a7f7f3a0441c2e vn="Mehrere Bedrohungen" ac=I fn="C:\Users\Tanja\AppData\Local\Temp\YontooSetup-S.exe"
sh=CCD17548755878361558C3AE7DE2D82CCE582937 ft=1 fh=4eb16a15488048bf vn="Mehrere Bedrohungen" ac=I fn="C:\Users\Tanja\AppData\Local\Temp\DM\Installer_for_free-youtube-to-mp3-converter_009337\DropDownDeals-S-Setup_Suite1.exe"
Zitat:
 Esset online Scaner ist entfernt worden. LG, Tanjuscha Hier ist noch die chekup.txt: Code:
ATTFilter Results of screen317's Security Check version 0.99.82 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` McAfee Anti-Virus und Anti-Spyware Ad-Aware Antivirus Antivirus out of date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Java(TM) 6 Update 37 Java version out of Date! Adobe Flash Player 13.0.0.206 Adobe Reader 10.1.9 Adobe Reader out of Date! Mozilla Firefox (28.0) Mozilla Thunderbird (24.5.0) Google Chrome 34.0.1847.116 Google Chrome 34.0.1847.131 ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbam.exe Lavasoft Ad-Aware Antivirus Ad-Aware Antivirus 11.1.5354.0\AdAwareTray.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-05-2014 02 Ran by Tanja (administrator) on TANJA-PC on 09-05-2014 07:41:17 Running from C:\Users\Tanja\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe (Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe ( ) C:\Windows\System32\lxeccoms.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (McAfee, Inc.) C:\Windows\System32\mfevtps.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (McAfee, Inc.) C:\Program Files\mcafee\msc\McA3C6B.tmp (McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe (SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe () C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe () C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe () C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\ezprint.exe () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe () C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Lavasoft) C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe (Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation) C:\Windows\splwow64.exe (McAfee, Inc.) C:\Program Files\mcafee\msm\McSmtFwk.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McUICnt.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\Core\mchost.exe (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [FreeFallProtection] => C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe [686704 2010-12-17] () HKLM\...\Run: [IntelPAN] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-07-28] (Intel(R) Corporation) HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [4479648 2011-01-25] (Dell Inc.) HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" HKLM\...\Run: [Stage Remote] => C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe [2022976 2011-06-28] () HKLM\...\Run: [lxecmon.exe] => C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe [770728 2011-01-23] () HKLM\...\Run: [EzPrint] => C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\ezprint.exe [148280 2011-01-23] () HKLM\...\Run: [DellStage] => C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe [2195824 2012-02-01] () HKLM\...\Run: [] => [X] HKLM\...\Run: [AdAwareTray] => C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe [4114264 2014-01-23] () HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2013-12-18] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Dell DataSafe Online] => C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe [3398512 2014-04-09] (Dell, Inc.) HKLM-x32\...\Run: [mcui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-04-25] (McAfee, Inc.) HKLM-x32\...\Run: [Lexmark Pro800-Pro900 Series] => C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\fm3032.exe [316072 2011-01-23] () HKLM-x32\...\Run: [AccuWeatherWidget] => C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe [968048 2012-02-01] () HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254896 2012-09-17] (Sun Microsystems, Inc.) HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-04-25] (McAfee, Inc.) HKLM-x32\...\Run: [Ad-Aware Browsing Protection] => C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe [559696 2013-09-27] (Lavasoft) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer: [NoControlPanel] 0 HKU\S-1-5-21-3715489345-1050972543-478851-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-10-02] (Skype Technologies S.A.) AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [226920 2011-04-22] (NVIDIA Corporation) Startup: C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IMVU.lnk ShortcutTarget: IMVU.lnk -> C:\Users\Gast\AppData\Roaming\IMVUClient\IMVUQualityAgent.exe () Startup: C:\Users\Mascha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk ShortcutTarget: Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk -> C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe (Intel® Corporation) Startup: C:\Users\Tanja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () Startup: C:\Users\Video\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk ShortcutTarget: Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk -> C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe (Intel® Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://dell.de.msn.com/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x51FBC3AEF6A5CD01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank URLSearchHook: HKLM-x32 - (No Name) - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No File SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {794B2C93-9B33-4B66-A556-F35D9ACBCBA6} URL = hxxp://de.search.yahoo.com/search?fr=mcafee&type=A011DE105&p={SearchTerms} BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) BHO-x32: Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll () BHO-x32: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - C:\Program Files\mcafee\msk\mskapbho.dll () BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) Toolbar: HKLM - Free PDF Perfect - {EFC2B9BE-AB2B-47F1-A47D-9EB28E58C917} - C:\Program Files (x86)\Freemium\Free PDF Perfect\ieagent64.dll (soft Xpansion) Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKLM-x32 - Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll () Toolbar: HKLM-x32 - No Name - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No File Toolbar: HKLM-x32 - Free PDF Perfect - {EFC2B9BE-AB2B-47F1-A47D-9EB28E58C917} - C:\Program Files (x86)\Freemium\Free PDF Perfect\ieagent32.dll (soft Xpansion) Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.) Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default FF NewTab: about:home FF Homepage: about:home FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll () FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @innoplus.de/ino3DViewer - C:\Program Files (x86)\innoplus\3D-Viewer-innoPlus\npIno3DViewer.dll (INNOVA-engineering GmbH Dresden) FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_37 - C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.) FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL () FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @soft-xpansion/npsxpdf - C:\Program Files (x86)\Common Files\Freemium\np-sxpdf.dll (soft-Xpansion) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: FoxyDeal - C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Extensions\{F58A62EB-38DC-43C4-A539-DC52E135208D} [2013-07-29] FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-22] FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-04-03] FF HKLM-x32\...\Firefox\Extensions: [{B45418F9-6406-4828-9D1A-35313FB1E2D6}] - C:\ProgramData\Freemium\Free PDF Perfect\Data\fftb FF Extension: Free PDF Perfect - C:\ProgramData\Freemium\Free PDF Perfect\Data\fftb [2013-07-29] FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2013-11-26] FF HKLM-x32\...\Thunderbird\Extensions: [{B45418F9-6406-4828-9D1A-35313FB1E2D6}] - C:\ProgramData\Freemium\Free PDF Perfect\Data\fftb FF Extension: Free PDF Perfect - C:\ProgramData\Freemium\Free PDF Perfect\Data\fftb [2013-07-29] FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2011-10-11] Chrome: ======= CHR HomePage: hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_8&idate=2014-05-05&ent=hp&u=544AC73567361970CE68AE5367C2C7DA CHR StartupUrls: "hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_8&idate=2014-05-05&ent=hp&u=544AC73567361970CE68AE5367C2C7DA" CHR Extension: (Google Docs) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-13] CHR Extension: (Google Drive) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-13] CHR Extension: (YouTube) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-13] CHR Extension: (No Name) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfdfamfnacokbbbnmpdfmhonipnhmbid [2013-06-19] CHR Extension: (Google-Suche) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-13] CHR Extension: (SiteAdvisor) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2014-01-13] CHR Extension: (No Name) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlceijfdfeghdhmmbhbcffanmcggoojf [2014-05-05] CHR Extension: (Google Wallet) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-13] CHR Extension: (Google Mail) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-13] ==================== Services (Whitelisted) ================= S2 0137091399536618mcinstcleanup; C:\Windows\TEMP\013709~1.EXE [836168 2014-03-13] (McAfee, Inc.) R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe [702744 2014-01-23] () S2 lxecCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxecserv.exe [45736 2010-04-14] (Lexmark International, Inc.) R2 lxec_device; C:\Windows\system32\lxeccoms.exe [1052328 2010-04-14] ( ) R2 lxec_device; C:\Windows\SysWOW64\lxeccoms.exe [598696 2010-04-14] ( ) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation) R2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.) R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178528 2014-04-25] (McAfee, Inc.) S3 McAWFwk; C:\Program Files\mcafee\msc\McAWFwk.exe [220528 2010-08-30] (McAfee, Inc.) R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 McNaiAnn; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [602944 2013-08-02] (McAfee, Inc.) S4 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.) R2 mcpltsvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 McProxy; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1025712 2014-01-21] (McAfee, Inc.) R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-03-17] (McAfee, Inc.) R2 mfevtp; C:\Windows\system32\mfevtps.exe [185792 2014-03-17] (McAfee, Inc.) R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-07-28] () S3 SXDS10; C:\Program Files (x86)\Common Files\soft Xpansion\sxds10.exe [234096 2013-07-29] (soft Xpansion) ==================== Drivers (Whitelisted) ==================== R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70592 2014-03-17] (McAfee, Inc.) S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-05-09] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-04-03] (Malwarebytes Corporation) R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [180272 2014-03-17] (McAfee, Inc.) R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311600 2014-03-17] (McAfee, Inc.) R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [522360 2014-03-17] (McAfee, Inc.) R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [783864 2014-03-17] (McAfee, Inc.) R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [422712 2014-01-21] (McAfee, Inc.) S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [96592 2014-01-21] (McAfee, Inc.) R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [345456 2014-03-17] (McAfee, Inc.) S3 NvStUSB; C:\Windows\system32\drivers\nvstusb.sys [121960 2010-12-12] () R3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [329800 2013-07-17] (BitDefender S.R.L.) S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-05-09 07:41 - 2014-05-09 07:41 - 00024905 ____C () C:\Users\Tanja\Desktop\FRST.txt 2014-05-09 07:36 - 2014-05-09 07:36 - 00855379 ____C () C:\Users\Tanja\Desktop\SecurityCheck.exe 2014-05-09 03:00 - 2014-05-09 03:00 - 00000000 __SDC () C:\Windows\system32\CompatTel 2014-05-08 21:21 - 2014-05-08 21:21 - 02347384 ____C (ESET) C:\Users\Tanja\Desktop\esetsmartinstaller_deu.exe 2014-05-08 20:02 - 2014-05-08 20:02 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee 2014-05-08 09:36 - 2014-05-08 09:36 - 00000000 ___DC () C:\Program Files (x86)\ESET 2014-05-08 08:10 - 2014-05-09 03:00 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-08 08:10 - 2014-05-09 03:00 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-06 21:21 - 2014-05-06 21:21 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-06 21:21 - 2014-05-06 21:21 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-06 21:21 - 2014-05-06 21:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-06 21:21 - 2014-05-06 21:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-06 20:56 - 2014-05-06 20:56 - 00037117 ____C () C:\Users\Tanja\Desktop\Addition.txt 2014-05-06 20:44 - 2014-05-06 20:44 - 00004678 ____C () C:\Users\Tanja\Desktop\JRT.txt 2014-05-06 20:30 - 2014-05-06 20:30 - 00000000 ___DC () C:\Windows\ERUNT 2014-05-06 20:29 - 2014-05-06 20:29 - 01016261 ____C (Thisisu) C:\Users\Tanja\Desktop\JRT.exe 2014-05-06 13:39 - 2010-08-30 08:34 - 00536576 ____C (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll 2014-05-06 13:35 - 2014-05-06 13:35 - 00009286 ____C () C:\Users\Tanja\Desktop\mbam.txt 2014-05-06 12:25 - 2014-05-09 03:59 - 00119512 ____C (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-05-06 12:25 - 2014-05-06 12:25 - 00001100 ____C () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-05-06 12:25 - 2014-05-06 12:25 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-05-06 12:25 - 2014-04-03 09:51 - 00088280 ____C (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-05-06 12:25 - 2014-04-03 09:51 - 00063192 ____C (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-05-06 12:25 - 2014-04-03 09:50 - 00025816 ____C (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-05-06 12:23 - 2014-05-06 12:24 - 17305616 ____C (Malwarebytes Corporation ) C:\Users\Tanja\Desktop\mbam-setup-2.0.1.1004.exe 2014-05-06 11:48 - 2014-05-06 11:48 - 00269048 ____C () C:\Windows\Minidump\050614-30295-01.dmp 2014-05-06 07:35 - 2014-05-06 21:10 - 00000000 ___DC () C:\AdwCleaner 2014-05-06 07:34 - 2014-05-06 07:34 - 01316991 ____C () C:\Users\Tanja\Desktop\adwcleaner.exe 2014-05-06 07:27 - 2014-05-06 07:27 - 00013824 ____C () C:\Users\Tanja\AppData\Roaming\FAXLOG32.CDX 2014-05-06 07:27 - 2014-05-06 07:27 - 00001906 ____C () C:\Users\Tanja\AppData\Roaming\FAXLOG32.DBF 2014-05-06 07:27 - 2014-05-06 07:27 - 00001024 ____C () C:\Users\Tanja\AppData\Roaming\FAXLOG32.FPT 2014-05-05 22:57 - 2014-05-06 12:25 - 00000000 ___DC () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-05-05 22:57 - 2014-05-05 22:57 - 00000000 ___DC () C:\ProgramData\Malwarebytes 2014-05-05 22:34 - 2014-05-05 22:34 - 00001262 ____C () C:\Users\Tanja\Desktop\Revo Uninstaller.lnk 2014-05-05 22:34 - 2014-05-05 22:34 - 00000000 ___DC () C:\Program Files (x86)\VS Revo Group 2014-05-05 22:29 - 2014-05-05 22:29 - 02623656 ____C (VS Revo Group Ltd.) C:\Users\Tanja\Desktop\revosetup95.exe 2014-05-05 22:14 - 2014-05-05 22:15 - 02063872 ____C (Farbar) C:\Users\Tanja\Desktop\FRST64.exe 2014-05-05 22:09 - 2014-05-05 22:09 - 00380416 ____C () C:\Users\Tanja\Desktop\Gmer-19357.exe 2014-05-05 22:07 - 2014-05-05 22:08 - 00000472 ____C () C:\Users\Tanja\Desktop\defogger_disable.log 2014-05-05 22:07 - 2014-05-05 22:07 - 00000000 ____C () C:\Users\Tanja\defogger_reenable 2014-05-05 22:05 - 2014-05-05 22:05 - 00050477 ____C () C:\Users\Tanja\Downloads\Defogger.exe 2014-05-05 22:05 - 2014-05-05 22:05 - 00050477 ____C () C:\Users\Tanja\Desktop\Defogger.exe 2014-05-05 21:05 - 2014-05-06 18:47 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2014-05-05 21:05 - 2014-05-05 21:05 - 00001785 ____C () C:\Users\Public\Desktop\iTunes.lnk 2014-05-05 21:04 - 2014-05-05 21:05 - 00000000 ___DC () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-05-05 21:04 - 2014-05-05 21:05 - 00000000 ___DC () C:\Program Files\iTunes 2014-05-05 21:04 - 2014-05-05 21:05 - 00000000 ___DC () C:\Program Files (x86)\iTunes 2014-05-05 20:59 - 2014-05-05 20:59 - 00000000 ___DC () C:\Program Files\Bonjour 2014-05-05 20:59 - 2014-05-05 20:59 - 00000000 ___DC () C:\Program Files (x86)\Bonjour 2014-05-05 20:44 - 2014-05-05 21:59 - 00050270 ____C () C:\Users\Tanja\Downloads\Addition.txt 2014-05-05 20:43 - 2014-05-09 07:41 - 00000000 ___DC () C:\FRST 2014-05-05 20:43 - 2014-05-05 21:59 - 00129443 ____C () C:\Users\Tanja\Downloads\FRST.txt 2014-05-05 20:42 - 2014-05-05 20:42 - 02063872 ____C (Farbar) C:\Users\Tanja\Downloads\FRST64.exe 2014-05-05 20:34 - 2014-05-05 20:45 - 148885840 ____C (Apple Inc.) C:\Users\Tanja\Downloads\iTunes64Setup(1).exe 2014-05-05 20:07 - 2014-05-05 20:07 - 00000000 _SHDC () C:\Users\Tanja\AppData\Local\EmieUserList 2014-05-05 20:07 - 2014-05-05 20:07 - 00000000 _SHDC () C:\Users\Tanja\AppData\Local\EmieSiteList 2014-05-05 19:55 - 2014-05-05 19:55 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Roxio Log Files 2014-05-05 19:37 - 2014-05-05 19:37 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\LavasoftStatistics 2014-05-05 18:59 - 2014-05-08 08:04 - 00002267 ____C () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk 2014-05-05 18:59 - 2014-05-06 18:47 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ad-Aware Antivirus 2014-05-05 18:57 - 2014-05-08 08:07 - 00000000 ___DC () C:\ProgramData\Ad-Aware Browsing Protection 2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\Users\Tanja\AppData\Local\adawarebp 2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\Program Files\Lavasoft 2014-05-05 18:56 - 2014-05-05 18:56 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Lavasoft 2014-05-05 18:56 - 2014-05-05 18:56 - 00000000 ___DC () C:\Program Files (x86)\Lavasoft 2014-05-05 18:55 - 2014-05-05 18:55 - 00000000 ___DC () C:\Program Files\Common Files\Lavasoft 2014-05-05 18:54 - 2014-05-05 18:54 - 00000000 ___DC () C:\ProgramData\Lavasoft 2014-05-05 18:53 - 2014-05-05 18:53 - 01727624 ____C () C:\Users\Tanja\Downloads\Adaware_Installer.exe 2014-05-05 18:44 - 2014-05-05 18:44 - 00728960 ____C (Enigma Software Group USA, LLC.) C:\Users\Tanja\Downloads\SpyHunter-Installer(1).exe 2014-05-05 18:13 - 2014-05-05 20:09 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Nico Mak Computing 2014-05-05 18:13 - 2014-05-05 18:13 - 04892480 ____C (WinZip International LLC ) C:\Users\Tanja\Downloads\wzmp_8.exe 2014-05-05 14:10 - 2014-05-05 14:10 - 00000000 ___DC () C:\Program Files\Enigma Software Group 2014-05-05 14:10 - 2014-05-05 14:10 - 00000000 ____C () C:\autoexec.bat 2014-05-05 14:09 - 2014-05-05 20:08 - 00000000 ___DC () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP 2014-05-05 14:06 - 2014-05-05 14:06 - 00728960 ____C (Enigma Software Group USA, LLC.) C:\Users\Tanja\Downloads\SpyHunter-Installer.exe 2014-05-05 11:15 - 2014-05-05 19:53 - 00000000 ___DC () C:\Program Files (x86)\Mozilla Thunderbird 2014-04-22 17:36 - 2014-04-22 17:38 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-04-22 17:36 - 2014-04-22 17:38 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-04-22 17:36 - 2014-04-22 17:38 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-04-22 17:36 - 2014-04-22 17:38 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-04-22 17:36 - 2014-04-22 17:38 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-04-22 17:36 - 2014-04-22 17:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-04-22 17:36 - 2014-04-22 17:38 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-04-22 17:36 - 2014-04-22 17:38 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-04-22 17:09 - 2014-04-22 17:09 - 00002096 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk 2014-04-22 17:09 - 2014-04-22 17:09 - 00002084 ____C () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2014-04-22 17:07 - 2014-04-22 17:09 - 21987424 ____C (Mozilla) C:\Users\Tanja\Downloads\Thunderbird Setup 24.4.0.exe 2014-04-22 16:34 - 2013-09-23 13:49 - 00197704 ____C (McAfee, Inc.) C:\Windows\system32\Drivers\HipShieldK.sys 2014-04-17 10:30 - 2014-04-17 10:30 - 00002982 ____C () C:\Windows\System32\Tasks\{B47D42E0-03AF-400A-A540-7F155D64C658} 2014-04-10 12:43 - 2014-04-10 12:43 - 00002982 ____C () C:\Windows\System32\Tasks\{299B3EF5-797C-4235-B0D6-04E28BA85DE4} 2014-04-10 12:41 - 2014-04-10 12:41 - 00002982 ____C () C:\Windows\System32\Tasks\{C804B517-5AD4-41F7-82A2-B16ED4D0997C} 2014-04-10 12:41 - 2014-04-10 12:41 - 00002982 ____C () C:\Windows\System32\Tasks\{5A6EB0BF-B98A-4B53-A91D-46DCEF4430B3} 2014-04-10 12:41 - 2014-04-10 12:41 - 00002982 ____C () C:\Windows\System32\Tasks\{4348CFF2-7F8D-4849-B373-1FA61EDB155C} 2014-04-10 11:04 - 2014-04-10 12:29 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2014-04-10 11:04 - 2014-04-10 12:29 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2014-04-10 11:04 - 2014-04-10 12:29 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll 2014-04-10 11:04 - 2014-04-10 12:29 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll 2014-04-10 11:04 - 2014-04-10 12:28 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-04-10 11:04 - 2014-04-10 12:28 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-04-10 11:04 - 2014-04-10 12:28 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-04-10 11:04 - 2014-04-10 12:28 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2014-04-10 11:04 - 2014-04-10 12:28 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2014-04-10 11:04 - 2014-04-10 12:28 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2014-04-10 11:04 - 2014-04-10 12:28 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2014-04-10 11:04 - 2014-04-10 12:28 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2014-04-10 11:04 - 2014-04-10 12:28 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2014-04-10 11:04 - 2014-04-10 12:28 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2014-04-10 11:04 - 2014-04-10 12:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2014-04-10 11:04 - 2014-04-10 12:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2014-04-10 11:04 - 2014-02-04 04:35 - 00274880 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys ==================== One Month Modified Files and Folders ======= 2014-05-09 07:41 - 2014-05-09 07:41 - 00024905 ____C () C:\Users\Tanja\Desktop\FRST.txt 2014-05-09 07:41 - 2014-05-05 20:43 - 00000000 ___DC () C:\FRST 2014-05-09 07:36 - 2014-05-09 07:36 - 00855379 ____C () C:\Users\Tanja\Desktop\SecurityCheck.exe 2014-05-09 07:27 - 2012-06-22 23:09 - 00000884 ____C () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-05-09 07:18 - 2014-04-07 07:07 - 00001110 ____C () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf521f401f7f7b.job 2014-05-09 05:11 - 2011-10-11 09:49 - 01493037 ____C () C:\Windows\WindowsUpdate.log 2014-05-09 03:59 - 2014-05-06 12:25 - 00119512 ____C (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-05-09 03:00 - 2014-05-09 03:00 - 00000000 __SDC () C:\Windows\system32\CompatTel 2014-05-09 03:00 - 2014-05-08 08:10 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-09 03:00 - 2014-05-08 08:10 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-08 21:21 - 2014-05-08 21:21 - 02347384 ____C (ESET) C:\Users\Tanja\Desktop\esetsmartinstaller_deu.exe 2014-05-08 20:20 - 2011-12-26 11:14 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Skype 2014-05-08 20:02 - 2014-05-08 20:02 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee 2014-05-08 18:18 - 2014-02-21 11:36 - 00001106 ____C () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf2ee873e0378f.job 2014-05-08 18:13 - 2014-04-07 07:07 - 00004106 ____C () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1cf521f401f7f7b 2014-05-08 18:13 - 2014-02-21 11:36 - 00003854 ____C () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1cf2ee873e0378f 2014-05-08 13:57 - 2009-07-14 06:45 - 00021296 ___HC () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-05-08 13:57 - 2009-07-14 06:45 - 00021296 ___HC () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-05-08 11:13 - 2013-05-23 09:44 - 00003440 _____ () C:\Windows\System32\Tasks\PCDEventLauncherTask 2014-05-08 10:58 - 2011-10-27 21:28 - 00200304 ____C () C:\ProgramData\lxecscan.log 2014-05-08 10:10 - 2011-10-11 17:27 - 00000000 ___DC () C:\Program Files (x86)\McAfee 2014-05-08 09:36 - 2014-05-08 09:36 - 00000000 ___DC () C:\Program Files (x86)\ESET 2014-05-08 08:12 - 2010-11-21 08:50 - 00700118 ____C () C:\Windows\system32\perfh007.dat 2014-05-08 08:12 - 2010-11-21 08:50 - 00149968 ____C () C:\Windows\system32\perfc007.dat 2014-05-08 08:12 - 2009-07-14 07:13 - 01622228 ____C () C:\Windows\system32\PerfStringBackup.INI 2014-05-08 08:08 - 2013-10-24 20:50 - 00001976 ____C () C:\Users\Public\Desktop\Dell DataSafe Online.lnk 2014-05-08 08:08 - 2011-10-11 17:26 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell DataSafe Online 2014-05-08 08:07 - 2014-05-05 18:57 - 00000000 ___DC () C:\ProgramData\Ad-Aware Browsing Protection 2014-05-08 08:07 - 2012-05-28 20:50 - 00000000 ___DC () C:\ProgramData\boost_interprocess 2014-05-08 08:06 - 2011-10-11 17:21 - 00000000 ___DC () C:\Users\Default\AppData\Local\SoftThinks 2014-05-08 08:06 - 2011-10-11 17:21 - 00000000 ___DC () C:\Users\Default User\AppData\Local\SoftThinks 2014-05-08 08:06 - 2011-10-11 17:14 - 00000000 ___DC () C:\Program Files (x86)\Dell DataSafe Local Backup 2014-05-08 08:04 - 2014-05-05 18:59 - 00002267 ____C () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk 2014-05-08 08:04 - 2011-10-11 09:47 - 00000000 ___DC () C:\ProgramData\NVIDIA 2014-05-08 08:04 - 2009-07-14 07:08 - 00000006 ___HC () C:\Windows\Tasks\SA.DAT 2014-05-08 08:04 - 2009-07-14 06:51 - 00142702 ____C () C:\Windows\setupact.log 2014-05-06 21:21 - 2014-05-06 21:21 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-06 21:21 - 2014-05-06 21:21 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-06 21:21 - 2014-05-06 21:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-06 21:21 - 2014-05-06 21:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-06 21:10 - 2014-05-06 07:35 - 00000000 ___DC () C:\AdwCleaner 2014-05-06 20:56 - 2014-05-06 20:56 - 00037117 ____C () C:\Users\Tanja\Desktop\Addition.txt 2014-05-06 20:44 - 2014-05-06 20:44 - 00004678 ____C () C:\Users\Tanja\Desktop\JRT.txt 2014-05-06 20:30 - 2014-05-06 20:30 - 00000000 ___DC () C:\Windows\ERUNT 2014-05-06 20:29 - 2014-05-06 20:29 - 01016261 ____C (Thisisu) C:\Users\Tanja\Desktop\JRT.exe 2014-05-06 18:47 - 2014-05-05 21:05 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2014-05-06 18:47 - 2014-05-05 18:59 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ad-Aware Antivirus 2014-05-06 18:47 - 2013-12-11 20:26 - 00000000 ___DC () C:\Windows\System32\Tasks\SystemSockets 2014-05-06 18:47 - 2012-09-20 20:28 - 00000000 ___DC () C:\Users\Gast 2014-05-06 18:47 - 2012-08-28 21:49 - 00000000 ___DC () C:\Users\Video 2014-05-06 18:47 - 2011-12-22 23:09 - 00000000 ___DC () C:\Users\Mascha 2014-05-06 18:47 - 2011-10-11 17:32 - 00000000 ___DC () C:\ProgramData\Uninstall 2014-05-06 18:47 - 2011-10-11 16:50 - 00000000 ___DC () C:\Windows\SysWOW64\NV 2014-05-06 18:47 - 2011-10-11 09:45 - 00000000 ___DC () C:\Windows\SysWOW64\RTCOM 2014-05-06 18:47 - 2009-07-14 05:20 - 00000000 ___DC () C:\Windows\SysWOW64\Recovery 2014-05-06 18:47 - 2009-07-14 05:20 - 00000000 ___DC () C:\Windows\registration 2014-05-06 18:47 - 2009-07-14 05:20 - 00000000 ___DC () C:\Windows\AppCompat 2014-05-06 18:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-05-06 18:43 - 2011-12-22 23:49 - 00000000 ____D () C:\Users\Mascha\AppData\Local\Google 2014-05-06 18:43 - 2011-10-15 23:36 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Mozilla 2014-05-06 13:44 - 2010-11-21 05:47 - 00295974 ____C () C:\Windows\PFRO.log 2014-05-06 13:43 - 2013-07-29 16:10 - 00000000 ___DC () C:\Windows\System32\Tasks\ProtectedSearch 2014-05-06 13:43 - 2013-07-29 15:51 - 00000000 ___DC () C:\Windows\System32\Tasks\Browser Updater 2014-05-06 13:35 - 2014-05-06 13:35 - 00009286 ____C () C:\Users\Tanja\Desktop\mbam.txt 2014-05-06 12:25 - 2014-05-06 12:25 - 00001100 ____C () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-05-06 12:25 - 2014-05-06 12:25 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-05-06 12:25 - 2014-05-05 22:57 - 00000000 ___DC () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-05-06 12:24 - 2014-05-06 12:23 - 17305616 ____C (Malwarebytes Corporation ) C:\Users\Tanja\Desktop\mbam-setup-2.0.1.1004.exe 2014-05-06 12:22 - 2009-07-14 05:20 - 00000000 ___DC () C:\Windows\system32\NDF 2014-05-06 11:48 - 2014-05-06 11:48 - 00269048 ____C () C:\Windows\Minidump\050614-30295-01.dmp 2014-05-06 11:48 - 2012-02-18 22:30 - 00000000 ___DC () C:\Windows\Minidump 2014-05-06 11:48 - 2012-02-18 22:29 - 251116278 _____ () C:\Windows\MEMORY.DMP 2014-05-06 11:48 - 2011-10-14 11:44 - 00000000 ___DC () C:\Users\Tanja 2014-05-06 11:48 - 2009-07-14 06:45 - 00294168 ____C () C:\Windows\system32\FNTCACHE.DAT 2014-05-06 07:34 - 2014-05-06 07:34 - 01316991 ____C () C:\Users\Tanja\Desktop\adwcleaner.exe 2014-05-06 07:27 - 2014-05-06 07:27 - 00013824 ____C () C:\Users\Tanja\AppData\Roaming\FAXLOG32.CDX 2014-05-06 07:27 - 2014-05-06 07:27 - 00001906 ____C () C:\Users\Tanja\AppData\Roaming\FAXLOG32.DBF 2014-05-06 07:27 - 2014-05-06 07:27 - 00001024 ____C () C:\Users\Tanja\AppData\Roaming\FAXLOG32.FPT 2014-05-05 22:57 - 2014-05-05 22:57 - 00000000 ___DC () C:\ProgramData\Malwarebytes 2014-05-05 22:34 - 2014-05-05 22:34 - 00001262 ____C () C:\Users\Tanja\Desktop\Revo Uninstaller.lnk 2014-05-05 22:34 - 2014-05-05 22:34 - 00000000 ___DC () C:\Program Files (x86)\VS Revo Group 2014-05-05 22:29 - 2014-05-05 22:29 - 02623656 ____C (VS Revo Group Ltd.) C:\Users\Tanja\Desktop\revosetup95.exe 2014-05-05 22:15 - 2014-05-05 22:14 - 02063872 ____C (Farbar) C:\Users\Tanja\Desktop\FRST64.exe 2014-05-05 22:09 - 2014-05-05 22:09 - 00380416 ____C () C:\Users\Tanja\Desktop\Gmer-19357.exe 2014-05-05 22:08 - 2014-05-05 22:07 - 00000472 ____C () C:\Users\Tanja\Desktop\defogger_disable.log 2014-05-05 22:07 - 2014-05-05 22:07 - 00000000 ____C () C:\Users\Tanja\defogger_reenable 2014-05-05 22:05 - 2014-05-05 22:05 - 00050477 ____C () C:\Users\Tanja\Downloads\Defogger.exe 2014-05-05 22:05 - 2014-05-05 22:05 - 00050477 ____C () C:\Users\Tanja\Desktop\Defogger.exe 2014-05-05 21:59 - 2014-05-05 20:44 - 00050270 ____C () C:\Users\Tanja\Downloads\Addition.txt 2014-05-05 21:59 - 2014-05-05 20:43 - 00129443 ____C () C:\Users\Tanja\Downloads\FRST.txt 2014-05-05 21:05 - 2014-05-05 21:05 - 00001785 ____C () C:\Users\Public\Desktop\iTunes.lnk 2014-05-05 21:05 - 2014-05-05 21:04 - 00000000 ___DC () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-05-05 21:05 - 2014-05-05 21:04 - 00000000 ___DC () C:\Program Files\iTunes 2014-05-05 21:05 - 2014-05-05 21:04 - 00000000 ___DC () C:\Program Files (x86)\iTunes 2014-05-05 21:04 - 2014-01-14 20:16 - 00000000 ___DC () C:\Program Files\iPod 2014-05-05 20:59 - 2014-05-05 20:59 - 00000000 ___DC () C:\Program Files\Bonjour 2014-05-05 20:59 - 2014-05-05 20:59 - 00000000 ___DC () C:\Program Files (x86)\Bonjour 2014-05-05 20:58 - 2012-05-12 21:42 - 00000000 ___DC () C:\ProgramData\Apple 2014-05-05 20:45 - 2014-05-05 20:34 - 148885840 ____C (Apple Inc.) C:\Users\Tanja\Downloads\iTunes64Setup(1).exe 2014-05-05 20:42 - 2014-05-05 20:42 - 02063872 ____C (Farbar) C:\Users\Tanja\Downloads\FRST64.exe 2014-05-05 20:30 - 2012-10-11 14:32 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\DVDVideoSoft 2014-05-05 20:22 - 2011-10-14 11:45 - 00064024 ____C () C:\Users\Tanja\AppData\Local\GDIPFONTCACHEV1.DAT 2014-05-05 20:18 - 2011-12-11 22:21 - 00000000 ___DC () C:\Program Files (x86)\UltraStar 2014-05-05 20:09 - 2014-05-05 18:13 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Nico Mak Computing 2014-05-05 20:08 - 2014-05-05 14:09 - 00000000 ___DC () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP 2014-05-05 20:07 - 2014-05-05 20:07 - 00000000 _SHDC () C:\Users\Tanja\AppData\Local\EmieUserList 2014-05-05 20:07 - 2014-05-05 20:07 - 00000000 _SHDC () C:\Users\Tanja\AppData\Local\EmieSiteList 2014-05-05 20:07 - 2011-10-15 23:24 - 00000000 ___DC () C:\Users\Tanja\AppData\Local\Google 2014-05-05 20:01 - 2011-10-11 17:32 - 00000000 ___DC () C:\ProgramData\Sonic 2014-05-05 20:01 - 2011-10-11 17:31 - 00000000 ___DC () C:\ProgramData\Roxio 2014-05-05 20:01 - 2011-10-11 17:30 - 00000000 ___DC () C:\Program Files (x86)\Roxio 2014-05-05 19:56 - 2011-10-14 11:51 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Roxio 2014-05-05 19:55 - 2014-05-05 19:55 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Roxio Log Files 2014-05-05 19:53 - 2014-05-05 11:15 - 00000000 ___DC () C:\Program Files (x86)\Mozilla Thunderbird 2014-05-05 19:53 - 2012-06-27 15:10 - 00000000 ___DC () C:\Program Files (x86)\Mozilla Maintenance Service 2014-05-05 19:37 - 2014-05-05 19:37 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\LavasoftStatistics 2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\Users\Tanja\AppData\Local\adawarebp 2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\Program Files\Lavasoft 2014-05-05 18:56 - 2014-05-05 18:56 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Lavasoft 2014-05-05 18:56 - 2014-05-05 18:56 - 00000000 ___DC () C:\Program Files (x86)\Lavasoft 2014-05-05 18:55 - 2014-05-05 18:55 - 00000000 ___DC () C:\Program Files\Common Files\Lavasoft 2014-05-05 18:54 - 2014-05-05 18:54 - 00000000 ___DC () C:\ProgramData\Lavasoft 2014-05-05 18:53 - 2014-05-05 18:53 - 01727624 ____C () C:\Users\Tanja\Downloads\Adaware_Installer.exe 2014-05-05 18:44 - 2014-05-05 18:44 - 00728960 ____C (Enigma Software Group USA, LLC.) C:\Users\Tanja\Downloads\SpyHunter-Installer(1).exe 2014-05-05 18:13 - 2014-05-05 18:13 - 04892480 ____C (WinZip International LLC ) C:\Users\Tanja\Downloads\wzmp_8.exe 2014-05-05 14:58 - 2011-12-11 22:21 - 00001017 _____ () C:\Users\UpdatusUser\Desktop\UltraStar.lnk 2014-05-05 14:58 - 2011-10-29 19:54 - 00001115 _____ () C:\Users\UpdatusUser\Desktop\PDF Passwort Knacker 1.0.lnk 2014-05-05 14:49 - 2012-06-29 19:08 - 00001017 ____C () C:\Users\TAN\Desktop\UltraStar.lnk 2014-05-05 14:48 - 2013-07-29 15:33 - 00001072 ____C () C:\Users\Public\Desktop\PDF24 Editor.lnk 2014-05-05 14:48 - 2013-07-29 15:33 - 00001057 ____C () C:\Users\Public\Desktop\PDF24 Fax.lnk 2014-05-05 14:48 - 2013-06-06 21:38 - 00001239 ____C () C:\Users\Public\Desktop\ElsterFormular.lnk 2014-05-05 14:48 - 2013-02-27 13:15 - 00002148 ____C () C:\Users\Public\Desktop\Nero Blu-ray Player.lnk 2014-05-05 14:48 - 2012-11-26 10:54 - 00001033 ____C () C:\Users\Public\Desktop\Adobe Download Assistant.lnk 2014-05-05 14:48 - 2012-06-17 13:26 - 00000962 ____C () C:\Users\Public\Desktop\calibre - E-book management.lnk 2014-05-05 14:48 - 2011-10-27 21:26 - 00001959 ____C () C:\Users\Public\Desktop\Lexmark-Druckerstartseite starten.LNK 2014-05-05 14:48 - 2011-10-15 23:36 - 00001136 ____C () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-05-05 14:34 - 2011-10-11 17:35 - 00000945 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zinio Reader 4.lnk 2014-05-05 14:34 - 2011-10-11 17:25 - 00002488 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk 2014-05-05 14:34 - 2011-10-11 17:25 - 00001460 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk 2014-05-05 14:34 - 2011-10-11 17:25 - 00001376 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Photo Gallery.lnk 2014-05-05 14:34 - 2011-10-11 17:25 - 00001307 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Movie Maker.lnk 2014-05-05 14:33 - 2012-11-26 10:54 - 00001045 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Download Assistant.lnk 2014-05-05 14:33 - 2011-10-15 23:36 - 00001148 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-05-05 14:33 - 2011-10-14 11:45 - 00001931 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hilfedokumentation von Dell.lnk 2014-05-05 14:10 - 2014-05-05 14:10 - 00000000 ___DC () C:\Program Files\Enigma Software Group 2014-05-05 14:10 - 2014-05-05 14:10 - 00000000 ____C () C:\autoexec.bat 2014-05-05 14:06 - 2014-05-05 14:06 - 00728960 ____C (Enigma Software Group USA, LLC.) C:\Users\Tanja\Downloads\SpyHunter-Installer.exe 2014-05-05 10:28 - 2012-06-22 23:09 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-05-05 10:27 - 2012-06-22 23:09 - 00692400 ____C (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-05-05 10:27 - 2011-10-11 16:55 - 00070832 ____C (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-05-05 10:14 - 2011-10-27 10:25 - 00000000 ___DC () C:\Users\Tanja\AppData\Local\Thunderbird 2014-05-01 21:50 - 2012-06-30 20:49 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\SoftGrid Client 2014-04-30 08:26 - 2011-10-27 21:30 - 00000000 ___DC () C:\ProgramData\Lx_cats 2014-04-30 06:51 - 2014-01-13 13:22 - 00002177 ____C () C:\Users\Public\Desktop\Google Chrome.lnk 2014-04-23 09:51 - 2009-07-14 05:20 - 00000000 ___DC () C:\Windows\PolicyDefinitions 2014-04-22 17:38 - 2014-04-22 17:36 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-04-22 17:38 - 2014-04-22 17:36 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-04-22 17:38 - 2014-04-22 17:36 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-04-22 17:38 - 2014-04-22 17:36 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-04-22 17:38 - 2014-04-22 17:36 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-04-22 17:38 - 2014-04-22 17:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-04-22 17:38 - 2014-04-22 17:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-04-22 17:38 - 2014-04-22 17:36 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-04-22 17:09 - 2014-04-22 17:09 - 00002096 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk 2014-04-22 17:09 - 2014-04-22 17:09 - 00002084 ____C () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2014-04-22 17:09 - 2014-04-22 17:07 - 21987424 ____C (Mozilla) C:\Users\Tanja\Downloads\Thunderbird Setup 24.4.0.exe 2014-04-17 10:30 - 2014-04-17 10:30 - 00002982 ____C () C:\Windows\System32\Tasks\{B47D42E0-03AF-400A-A540-7F155D64C658} 2014-04-14 20:49 - 2013-06-06 21:38 - 00000000 ___DC () C:\Program Files (x86)\ElsterFormular 2014-04-14 13:34 - 2014-04-03 10:39 - 00000000 ___DC () C:\Program Files (x86)\Mozilla Firefox 2014-04-10 12:43 - 2014-04-10 12:43 - 00002982 ____C () C:\Windows\System32\Tasks\{299B3EF5-797C-4235-B0D6-04E28BA85DE4} 2014-04-10 12:41 - 2014-04-10 12:41 - 00002982 ____C () C:\Windows\System32\Tasks\{C804B517-5AD4-41F7-82A2-B16ED4D0997C} 2014-04-10 12:41 - 2014-04-10 12:41 - 00002982 ____C () C:\Windows\System32\Tasks\{5A6EB0BF-B98A-4B53-A91D-46DCEF4430B3} 2014-04-10 12:41 - 2014-04-10 12:41 - 00002982 ____C () C:\Windows\System32\Tasks\{4348CFF2-7F8D-4849-B373-1FA61EDB155C} 2014-04-10 12:29 - 2014-04-10 11:04 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2014-04-10 12:29 - 2014-04-10 11:04 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2014-04-10 12:29 - 2014-04-10 11:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll 2014-04-10 12:29 - 2014-04-10 11:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll 2014-04-10 12:28 - 2014-04-10 11:04 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-04-10 12:28 - 2014-04-10 11:04 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-04-10 12:28 - 2014-04-10 11:04 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-04-10 12:28 - 2014-04-10 11:04 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2014-04-10 12:28 - 2014-04-10 11:04 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2014-04-10 12:28 - 2014-04-10 11:04 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2014-04-10 12:28 - 2014-04-10 11:04 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2014-04-10 12:28 - 2014-04-10 11:04 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2014-04-10 12:28 - 2014-04-10 11:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2014-04-10 12:28 - 2014-04-10 11:04 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2014-04-10 12:28 - 2014-04-10 11:04 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2014-04-10 12:28 - 2014-04-10 11:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2014-04-09 07:55 - 2013-07-29 15:51 - 00034376 ____C () C:\Windows\Launcher.exe Files to move or delete: ==================== C:\ProgramData\l_0_00_re.pad Some content of TEMP: ==================== C:\Users\Gast\AppData\Local\Temp\conduitinstaller.exe C:\Users\Tanja\AppData\Local\Temp\2b6ddf79-14f0-4d62-a761-19e52e27b3ab.exe C:\Users\Tanja\AppData\Local\Temp\ah_fedtv.dll C:\Users\Tanja\AppData\Local\Temp\jre-6u37-windows-i586-iftw.exe C:\Users\Tanja\AppData\Local\Temp\nsl25CD.tmp.tbDVDV.dll C:\Users\Tanja\AppData\Local\Temp\pdf24-creator-update.exe C:\Users\Tanja\AppData\Local\Temp\SHSetup.exe C:\Users\Tanja\AppData\Local\Temp\SIMEEIInstaller.exe C:\Users\Tanja\AppData\Local\Temp\SkypeSetup.exe C:\Users\Tanja\AppData\Local\Temp\sqlite3.exe C:\Users\Tanja\AppData\Local\Temp\vcredist_x86.exe C:\Users\Tanja\AppData\Local\Temp\YontooSetup-S.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-04-29 08:20 ==================== End Of Log ============================ --- --- --- --- --- --- Mozilla Firefox funktioniert jetzt einwandfrei! Vielen Dank für die Mühe! Allerdings hängt das Mail-Programm Mozilla Thunderbird immer noch.... Ich brauche 1-2 Minüntchen, um eine E-Mail zu öffen bzw. zu schließen... Während dessen ist in der Meüleiste zu lesen "(keine Rückmeldung)". Nach einer Weile öffnet sich bzw. schließt sich die E-Mail, es geht aber viel zu langsam... Was könnte das sein? LG, Tanjuscha |
|
10.05.2014, 10:50
| #8 |
| /// the machine /// TB-Ausbilder | adware-Bprotect durch McAfee entdeckt und konnte nicht entfernt werden Java und ADobe updaten. Thunderbird mal neu installieren. Papierkorb leeren. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter C:\ProgramData\l_0_00_re.pad
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
10.05.2014, 18:12
| #9 |
| | adware-Bprotect durch McAfee entdeckt und konnte nicht entfernt werden Hi, Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 10-05-2014
Ran by Tanja at 2014-05-10 19:11:35 Run:1
Running from C:\Users\Tanja\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
C:\ProgramData\l_0_00_re.pad
*****************
C:\ProgramData\l_0_00_re.pad => Moved successfully.
==== End of Fixlog ====
|
|
11.05.2014, 12:35
| #10 |
| /// the machine /// TB-Ausbilder | adware-Bprotect durch McAfee entdeckt und konnte nicht entfernt werden fertig
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
16.05.2014, 20:38
| #11 |
| | adware-Bprotect durch McAfee entdeckt und konnte nicht entfernt werden Hallo Schrauber! Ich habe leider immer noch Probleme mit Thunderbird... und er ist noch langsamer geworden. Ich habe nochmal das Filepony installiert. Hier folgt die Addition.txt: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-05-2014
Ran by Tanja at 2014-05-16 17:34:12
Running from C:\Users\Tanja\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {ADA629C7-7F48-5689-624A-3B76997E0892}
AV: Ad-Aware Antivirus (Disabled - Out of date) {D87B6541-12A1-DAEA-0033-9B8057AAB996}
AS: Ad-Aware Antivirus (Disabled - Out of date) {631A84A5-349B-D564-3A83-A0F22C2DF32B}
AS: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {16C7C823-5972-5907-58FA-0004E2F9422F}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee Firewall (Enabled) {959DA8E2-3527-57D1-4915-924367AD4FE9}
FW: Ad-Aware Firewall (Disabled) {E040E464-58CE-DBB2-2B6C-32B5A979FEED}
==================== Installed Programs ======================
3D-Viewer-innoplus (HKLM-x32\...\{B96DB037-DBEA-4186-9081-9CBD537F82E8}) (Version: 13.01.16 - INNOVA-engineering GmbH)
ABBYY FineReader 6.0 Sprint (HKLM-x32\...\{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}) (Version: 6.00.2146.41621 - ABBYY Software House)
AccelerometerP11 (HKLM-x32\...\{87434D51-51DB-4109-B68F-A829ECDCF380}) (Version: 2.00.11.22 - STMicroelectronics)
Ad-Aware Antivirus (HKLM\...\{6A16ADA5-0B30-4893-84AB-961B1340D14A}_AdAwareUpdater) (Version: 11.1.5354.0 - Lavasoft)
AdAwareInstaller (Version: 11.1.5354.0 - Lavasoft) Hidden
AdAwareUpdater (Version: 11.1.5354.0 - Lavasoft) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 13.0.0.111 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 13.0.0.111 - Adobe Systems Incorporated) Hidden
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.3 - Adobe Systems Incorporated)
Adobe Download Assistant (x32 Version: 1.2.3 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 13 ActiveX (HKLM-x32\...\{1BBE4C53-634B-44B3-8693-314ED6260557}) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\{ADEE751B-09AE-4DA7-9658-DCF90E8F9ED7}) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader X (10.1.10) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.10 - Adobe Systems Incorporated)
Advanced Archive Password Recovery (HKCU\...\Advanced Archive Password Recovery) (Version: 4.53 - ElcomSoft Co. Ltd.)
Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)
AntimalwareEngine (Version: 2.6.0.0 - Lavasoft) Hidden
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
calibre (HKLM-x32\...\{531336A9-55EB-4367-8064-7180849D5676}) (Version: 0.8.53 - Kovid Goyal)
CamControl LITE V 4.05 (HKLM-x32\...\CamControl LITE_is1) (Version: - )
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dell DataSafe Local Backup - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: 9.4.60 - Dell Inc.)
Dell DataSafe Local Backup (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 9.4.60 - Dell Inc.)
Dell DataSafe Online (HKLM-x32\...\{7EC66A95-AC2D-4127-940B-0445A526AB2F}) (Version: 2.1.19634 - Dell)
Dell DataSafe Online (HKLM-x32\...\{C53BCCBE-9268-4C09-82E9-611444A73B3F}) (Version: 2.9.0.19 - Dell)
Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)
Dell Getting Started Guide (HKLM-x32\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.)
Dell MusicStage (HKLM-x32\...\{3255BC3F-32BA-41ED-93A0-B9AEB6CDD9E6}) (Version: 1.5.201.0 - Fingertapps)
Dell PhotoStage (HKLM-x32\...\{E4335E82-17B3-460F-9E70-39D9BC269DB3}) (Version: 1.5.0.65 - ArcSoft)
Dell Stage (HKLM-x32\...\{E2F57269-065E-4B19-8CDA-AB6C401FAF1A}) (Version: 1.7.209.0 - Fingertapps)
Dell Stage Remote (HKLM-x32\...\{2299EEBD-0A83-4B26-AA4A-057AE9E5BAE8}) (Version: 2.0.0.50 - ArcSoft)
Dell Stage Remote (HKLM-x32\...\{AF4D3C63-009B-4A17-B02E-D395065DD3F0}) (Version: 2.0.0.50 - ArcSoft)
Dell VideoStage (HKLM-x32\...\InstallShield_{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}) (Version: 1.2.0.1712 - CyberLink Corp.)
Dell VideoStage (x32 Version: 1.2.0.1712 - CyberLink Corp.) Hidden
Dell Webcam Central (HKLM-x32\...\Dell Webcam Central) (Version: 2.00.44 - Creative Technology Ltd)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 15.1.13904 - Landesfinanzdirektion Thüringen)
Free Pdf Perfect Prereq (HKLM-x32\...\{a6eb67cd-4f30-4fa0-a040-b778d22b46d8}) (Version: 1.0.0.66 - Covus Freemium GmbH)
Free Pdf Perfect Prereq (x32 Version: 1.0.0.66 - Covus Freemium GmbH) Hidden
Freemium Free PDF Perfect (HKLM-x32\...\{88265079-D6F4-4292-86BE-D2053E80BFE4}) (Version: 1.0 - Freemium)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 34.0.1847.137 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2342 - Intel Corporation)
Intel(R) PROSet/Wireless WiFi-Software (HKLM\...\{25FBDA9A-E868-4B3B-B9FF-D923818511A1}) (Version: 14.2.0000 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.37 - Irfan Skiljan)
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 55 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417055FF}) (Version: 7.0.550 - Oracle)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Lexmark Pro800-Pro900 Series (HKLM\...\Lexmark Pro800-Pro900 Series) (Version: - Lexmark International, Inc.)
Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
McAfee SecurityCenter (HKLM-x32\...\MSC) (Version: 12.8.957 - McAfee, Inc.)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mozilla Firefox 29.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Mozilla Thunderbird 24.5.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.5.0 (x86 de)) (Version: 24.5.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
My Dell (HKLM\...\PC-Doctor for Windows) (Version: 3.5.6426.22 - PC-Doctor, Inc.)
Nero 10 Movie ThemePack Basic (x32 Version: 10.6.10000.1.0 - Nero AG) Hidden
Nero Blu-ray Player (x32 Version: 12.0.20012 - Nero AG) Hidden
Nero Control Center 10 (x32 Version: 10.6.13000.0.11 - Nero AG) Hidden
Nero ControlCenter 10 Help (CHM) (x32 Version: 10.2.10800 - Nero AG) Hidden
Nero Core Components 10 (x32 Version: 2.0.20000.9.12 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.11500.28.0 - Nero AG) Hidden
NVIDIA 3D Vision Treiber 268.30 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 268.30 - NVIDIA Corporation)
NVIDIA Grafiktreiber 268.30 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 268.30 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.265.41.0 - NVIDIA Corporation) Hidden
NVIDIA Optimus 1.0.21 (Version: 1.0.21 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6830 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 268.30 (Version: 268.30 - NVIDIA Corporation) Hidden
NVIDIA Update Components (Version: 1.0.21 - NVIDIA Corporation) Hidden
OpenOffice 4.0.0 (HKLM-x32\...\{B28DBCBA-60F8-40ED-B35B-F510C327946C}) (Version: 4.00.9702 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 8.4.1.210 - Electronic Arts, Inc.)
PDF Passwort Knacker 1 (HKLM-x32\...\PDF Passwort Knacker 1) (Version: - )
PDF24 Creator 5.7.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 11.0.10 - Dell Inc.)
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6312 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Stanza (HKLM-x32\...\Stanza) (Version: - )
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.6.0 - Synaptics Incorporated)
SyncUP (HKLM-x32\...\{D92C9CCE-E5F0-4125-977A-0590F3225B74}) (Version: 10.2.14900 - Nero AG)
SyncUP (x32 Version: 1.12.12400.17.102 - Nero AG) Hidden
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Zinio Reader 4 (HKLM-x32\...\ZinioReader4) (Version: 4.2.4164 - Zinio LLC)
Zinio Reader 4 (x32 Version: 4.2.4164 - Zinio LLC) Hidden
==================== Restore Points =========================
10-05-2014 17:24:04 Ende der Bereinigung
12-05-2014 10:23:09 OpenOffice 4.0.0 wird installiert
12-05-2014 10:28:14 Installed MSXML 4.0 SP3 Parser
12-05-2014 10:38:36 Installed Dell Stage Remote.
15-05-2014 07:49:04 Windows Update
15-05-2014 10:21:50 Windows Update
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____C C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {1ACD70FD-4579-4C90-8337-465F457EE28C} - System32\Tasks\GoogleUpdateTaskMachineCore1cf2ee873e0378f => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-10-15] (Google Inc.)
Task: {2168C9CA-67D0-41C3-8ED6-5F24B18BCB86} - System32\Tasks\GoogleUpdateTaskMachineUA1cf521f401f7f7b => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-10-15] (Google Inc.)
Task: {285EE32B-E5AD-479D-B168-7ADEE1C9EFCC} - System32\Tasks\{5A6EB0BF-B98A-4B53-A91D-46DCEF4430B3} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-04-24] (Mozilla Corporation)
Task: {35C250A6-3660-499A-92D1-E48E55639B2B} - System32\Tasks\{B47D42E0-03AF-400A-A540-7F155D64C658} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-04-24] (Mozilla Corporation)
Task: {40D3CB72-A7C9-4CF0-9018-FC0D33C19487} - System32\Tasks\Video Performer Manager => Sc.exe start Video Performer Manager
Task: {43A0083C-1317-4BE9-93FA-1D0EB5DB8472} - System32\Tasks\{2CF18FC4-6F01-40B7-8E75-A5045D887787} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-04-24] (Mozilla Corporation)
Task: {5DA631BD-8411-4531-8E37-5BDE34478BCE} - System32\Tasks\{4348CFF2-7F8D-4849-B373-1FA61EDB155C} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-04-24] (Mozilla Corporation)
Task: {6B86F44A-F3CF-4CD0-B9D7-55A62DC38215} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {7166A41B-3E73-4148-82B9-28A9219D8FBD} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {749D4F46-858E-4E7B-A6A0-773539F2C8E1} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {74A17E5D-7904-43D8-AD9C-A600DF7FB23A} - System32\Tasks\{C804B517-5AD4-41F7-82A2-B16ED4D0997C} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-04-24] (Mozilla Corporation)
Task: {8A7E82BE-800F-4F4C-8023-5702C8F1062A} - System32\Tasks\{FF24D7BB-3AA2-4955-9D7F-9E7EB56B8929} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-04-24] (Mozilla Corporation)
Task: {A266C8AF-FF73-43AF-A25A-1720961238AD} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\My Dell\sessionchecker.exe [2014-01-31] (PC-Doctor, Inc.)
Task: {AB024251-19B7-46FF-A612-2F995D87E993} - \ProtectedSearch\Protected Search No Task File <==== ATTENTION
Task: {AF4B7A7F-D2BB-4B60-BAF4-1B5A3825A767} - \YourFile Update No Task File <==== ATTENTION
Task: {D68BAD47-5CF0-4D84-A37F-25E56577D684} - System32\Tasks\SystemSockets\SystemSockets => C:\Program Files (x86)\HomeTab\WConnectorHandler.exe
Task: {D8BE0879-0DEB-47B7-B591-981C6D1D3AC2} - \Browser Updater\Browser Updater No Task File <==== ATTENTION
Task: {DABB326C-06F5-4AEE-9FC5-EDBBF28F1C53} - System32\Tasks\{299B3EF5-797C-4235-B0D6-04E28BA85DE4} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-04-24] (Mozilla Corporation)
Task: {DC363C81-2D7E-471A-BF40-65557B936E1D} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe
Task: {ED13BC92-AEFF-41E9-A1A0-EB2394E045F2} - \Browser Manager No Task File <==== ATTENTION
Task: {FA0DBEB5-9D91-43F9-8EB8-8950C6461E8F} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\My Dell\uaclauncher.exe [2014-01-31] (PC-Doctor, Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf2ee873e0378f.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf521f401f7f7b.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2011-07-28 03:07 - 2011-07-28 03:07 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll
2011-10-27 21:27 - 2009-11-26 01:09 - 00053760 _____ () C:\Windows\System32\LXECPMON.DLL
2011-10-27 21:26 - 2009-01-13 08:15 - 04485120 _____ () C:\Windows\System32\LXECOEM.DLL
2011-10-27 21:29 - 2009-11-04 08:17 - 00189440 _____ () C:\Windows\system32\spool\PRTPROCS\x64\lxecdrpp.dll
2014-01-23 16:09 - 2014-01-23 16:09 - 00702744 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe
2014-01-23 16:30 - 2014-01-23 16:30 - 00103800 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_thread-vc100-mt-1_55.dll
2014-01-23 16:30 - 2014-01-23 16:30 - 00024440 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_system-vc100-mt-1_55.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00033656 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_chrono-vc100-mt-1_55.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00055680 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_date_time-vc100-mt-1_55.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00123776 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_filesystem-vc100-mt-1_55.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 03720040 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareServiceKernel.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00685904 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\SQLite.dll
2014-01-23 16:30 - 2014-01-23 16:30 - 00158032 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\pugixml.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 02595144 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\RCF.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00788856 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_regex-vc100-mt-1_55.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00602984 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareActivation.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00291192 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareApplicationUpdater.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00142696 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareGamingMode.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00098648 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareReset.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00120152 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTime.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00268152 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareDefinitionsUpdater.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00198024 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareDefinitionsUpdaterScheduler.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00417128 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareIgnoreList.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00253800 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareQuarantine.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00293744 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareAntiMalwareEngine.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00212336 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareAntiRootkitEngine.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00509808 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareScannerHistory.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00607584 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareScanner.dll
2014-01-23 16:30 - 2014-01-23 16:30 - 00035192 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_timer-vc100-mt-1_55.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00325488 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareScannerScheduler.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00333688 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareRealTimeProtection.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00227688 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareIncompatibles.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00219488 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareAntiSpam.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00129896 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareAntiPhishing.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00599920 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareParentalControl.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 01926504 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareWebProtection.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00263536 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareEmailProtection.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00650608 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareNetworkProtection.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00490848 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareInstaller.dll
2014-01-23 16:30 - 2014-01-23 16:30 - 00106824 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\zlib.dll
2014-01-23 16:30 - 2014-01-23 16:30 - 00149840 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\libssh2.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00358744 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwarePromo.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00291680 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareFeedback.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00154464 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\SecurityCenter.dll
2013-07-17 17:10 - 2013-07-17 17:10 - 00777296 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\2.6.0.0\BDSmartDB.dll
2011-10-27 21:28 - 2009-12-16 06:42 - 00205824 ____C () C:\Program Files\Lexmark\Pro800-Pro900 Series\lxecmicro.dll
2011-10-27 21:28 - 2010-04-01 12:30 - 01558528 ____C () C:\Program Files\Lexmark\Pro800-Pro900 Series\lxecdrs64.dll
2011-10-27 21:28 - 2009-03-10 00:44 - 00015360 ____C () C:\Program Files\Lexmark\Pro800-Pro900 Series\lxeccaps64.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 02141040 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareShellExtension.dll
2011-10-11 17:14 - 2011-08-18 17:05 - 02751808 _____ () C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
2011-10-11 18:21 - 2011-03-26 10:28 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-10-11 17:05 - 2010-12-17 17:25 - 00686704 _____ () C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe
2011-07-28 03:07 - 2011-07-28 03:07 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
2011-08-08 18:26 - 2011-08-08 18:26 - 02034752 ____C () C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
2011-10-27 21:26 - 2011-01-23 19:47 - 00770728 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe
2011-10-27 21:26 - 2011-01-23 19:47 - 00148280 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\ezprint.exe
2014-01-23 16:29 - 2014-01-23 16:29 - 04114264 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe
2014-01-23 16:29 - 2014-01-23 16:29 - 00500088 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_locale-vc100-mt-1_55.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00361824 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\HtmlFramework.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00066904 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\DllStorage.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00788848 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTrayDefaultSkin.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00139608 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\Localization.dll
2012-02-01 12:50 - 2012-02-01 12:50 - 00968048 _____ () C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe
2011-08-08 18:26 - 2011-08-08 18:26 - 00475200 ____C () C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
2011-10-27 21:28 - 2009-05-18 08:32 - 01416192 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\lxecptpc.dll
2011-10-27 21:28 - 2009-11-04 08:19 - 00198656 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\lxecdrui.dll
2011-10-27 21:28 - 2009-06-07 19:55 - 00152576 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\lxecPRPR.DLL
2011-10-27 21:28 - 2009-11-04 08:17 - 00280576 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\lxecdr.dll
2014-02-12 20:58 - 2014-02-12 20:58 - 00073544 ____C () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 20:58 - 2014-02-12 20:58 - 01044808 ____C () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2010-03-16 20:28 - 2010-03-16 20:28 - 01926144 ____C () C:\Program Files (x86)\Dell\Stage Remote\QtCore4.dll
2010-03-22 15:52 - 2010-03-22 15:52 - 06776832 ____C () C:\Program Files (x86)\Dell\Stage Remote\QtGui4.dll
2010-03-16 20:28 - 2010-03-16 20:28 - 00635904 ____C () C:\Program Files (x86)\Dell\Stage Remote\QtNetwork4.dll
2010-03-16 20:28 - 2010-03-16 20:28 - 00326144 ____C () C:\Program Files (x86)\Dell\Stage Remote\QtXml4.dll
2011-06-24 23:20 - 2011-06-24 23:20 - 00565968 ____C () C:\Program Files (x86)\Dell\Stage Remote\sqlite3.dll
2011-07-17 10:35 - 2011-07-17 10:35 - 00058944 ____C () C:\Program Files (x86)\Dell\Stage Remote\DataService.dll
2011-07-21 08:35 - 2011-07-21 08:35 - 00328256 ____C () C:\Program Files (x86)\Dell\Stage Remote\de-DE\UI\ManagerUI.dll
2010-03-11 19:52 - 2010-03-11 19:52 - 00028160 ____C () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qgif4.dll
2010-03-05 15:07 - 2010-03-05 15:07 - 00031744 ____C () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qico4.dll
2010-03-05 15:07 - 2010-03-05 15:07 - 00125952 ____C () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qjpeg4.dll
2010-03-11 19:52 - 2010-03-11 19:52 - 00225280 ____C () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qmng4.dll
2011-10-27 21:26 - 2010-04-01 12:23 - 00389120 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecscw.dll
2011-10-27 21:26 - 2009-05-27 07:16 - 00192512 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecdatr.dll
2011-10-27 21:26 - 2009-05-27 07:13 - 00081920 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxeccats.dll
2011-10-27 21:26 - 2010-04-01 12:24 - 01159168 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecDRS.dll
2011-10-27 21:26 - 2009-03-10 00:43 - 00155648 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxeccaps.dll
2011-10-27 21:15 - 2009-02-20 10:48 - 00381440 ____C () C:\Windows\system32\lxecsm.dll
2011-10-27 21:15 - 2009-04-28 09:56 - 00024064 ____C () C:\Windows\system32\lxecsmr.dll
2011-10-27 21:26 - 2010-04-05 05:56 - 00716954 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\Epwizard.DLL
2011-10-27 21:26 - 2010-04-05 05:55 - 00159890 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\customui.dll
2011-10-27 21:26 - 2010-04-05 05:54 - 00123033 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\Eputil.DLL
2011-10-27 21:26 - 2010-04-05 05:54 - 00143502 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\Imagutil.DLL
2011-10-27 21:26 - 2010-04-05 05:55 - 00061604 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\Epfunct.DLL
2011-10-27 21:26 - 2009-06-23 06:09 - 02203648 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\EPWizRes.dll
2011-10-27 21:26 - 2009-06-23 06:10 - 00045056 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\epstring.dll
2011-10-27 21:26 - 2009-06-23 06:11 - 00102400 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\EPOEMDll.dll
2011-10-27 21:26 - 2009-04-07 14:25 - 00409600 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\iptk.dll
2011-10-27 21:26 - 2009-03-02 09:25 - 00151552 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecptp.dll
2012-02-01 12:44 - 2012-02-01 12:44 - 08151040 _____ () C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\QtGui4.dll
2012-02-01 12:44 - 2012-02-01 12:44 - 02278400 _____ () C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\QtCore4.dll
2014-04-03 10:39 - 2014-05-12 07:30 - 03839088 ____C () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2011-04-21 19:32 - 2011-04-21 19:32 - 00235112 ____C () C:\Program Files (x86)\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
==================== EXE Association (whitelisted) =============
==================== Disabled items from MSCONFIG ==============
MSCONFIG\startupreg: (default) =>
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: Dell Webcam Central => "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: NeroLauncher => C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe 900
MSCONFIG\startupreg: NVHotkey => rundll32.exe C:\Windows\system32\nvHotkey.dll,Start
MSCONFIG\startupreg: PDFPrint => C:\Program Files (x86)\PDF24\pdf24.exe
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /MAXX3
MSCONFIG\startupreg: RTHDVCPL => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s
MSCONFIG\startupreg: SynTPEnh => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (05/16/2014 05:29:38 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Error: (05/16/2014 05:28:09 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Nur zur Information.
(Stream product id=0x0066): Streaming Failed
Error: (05/16/2014 05:25:53 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Nur zur Information.
Too many failures while downloading ranges: 2
Error: (05/16/2014 05:19:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/16/2014 05:16:00 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Nur zur Information.
(Stream product id=0x0066): Streaming Failed
Error: (05/16/2014 05:12:48 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Nur zur Information.
Too many failures while downloading ranges: 2
Error: (05/16/2014 05:06:04 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/15/2014 00:49:16 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Nur zur Information.
(Stream product id=0x0066): Streaming Failed
Error: (05/15/2014 00:47:16 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Nur zur Information.
Too many failures while downloading ranges: 2
Error: (05/15/2014 00:41:54 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (05/16/2014 05:28:24 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde nicht richtig gestartet.
Error: (05/16/2014 05:25:52 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "McAfee Home Network" wurde nicht richtig gestartet.
Error: (05/16/2014 05:25:34 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {211EBA3A-EA5A-496B-A021-5C6BEB365E4C}
Error: (05/16/2014 05:22:14 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst SftService erreicht.
Error: (05/16/2014 05:21:44 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst SftService erreicht.
Error: (05/16/2014 05:20:57 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst MBAMService erreicht.
Error: (05/16/2014 05:19:30 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "lxecCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (05/16/2014 05:19:30 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst lxecCATSCustConnectService erreicht.
Error: (05/16/2014 05:07:25 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst SftService erreicht.
Error: (05/16/2014 05:05:54 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "lxecCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Microsoft Office Sessions:
=========================
Error: (05/16/2014 05:29:38 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe
Error: (05/16/2014 05:28:09 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: (Stream product id=0x0066): Streaming Failed
Error: (05/16/2014 05:25:53 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Too many failures while downloading ranges: 2
Error: (05/16/2014 05:19:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/16/2014 05:16:00 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: (Stream product id=0x0066): Streaming Failed
Error: (05/16/2014 05:12:48 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Too many failures while downloading ranges: 2
Error: (05/16/2014 05:06:04 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/15/2014 00:49:16 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: (Stream product id=0x0066): Streaming Failed
Error: (05/15/2014 00:47:16 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Too many failures while downloading ranges: 2
Error: (05/15/2014 00:41:54 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
==================== Memory info ===========================
Percentage of memory in use: 41%
Total physical RAM: 8086.17 MB
Available physical RAM: 4761.51 MB
Total Pagefile: 16170.52 MB
Available Pagefile: 12715.04 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:679 GB) (Free:563.08 GB) NTFS
Drive f: () (Removable) (Total:7.5 GB) (Free:2.93 GB) FAT32
Drive g: () (Removable) (Total:3.77 GB) (Free:2.71 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 699 GB) (Disk ID: 07F2837E)
Partition 1: (Not Active) - (Size=102 MB) - (Type=DE)
Partition 2: (Active) - (Size=20 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=679 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 8 GB) (Disk ID: 00000000)
Partition: GPT Partition Type.
========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 4 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=4 GB) - (Type=0C)
==================== End Of Log ============================
HAst Du vielleicht ein Rat für micht? Hallo Schrauber! Der Thunderbird spinnt leider weiter. Woran könnte es liegen? Hier ist eine frische Addition.txt: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-05-2014
Ran by Tanja at 2014-05-16 21:37:22
Running from C:\Users\Tanja\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {ADA629C7-7F48-5689-624A-3B76997E0892}
AV: Ad-Aware Antivirus (Disabled - Out of date) {D87B6541-12A1-DAEA-0033-9B8057AAB996}
AS: Ad-Aware Antivirus (Disabled - Out of date) {631A84A5-349B-D564-3A83-A0F22C2DF32B}
AS: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {16C7C823-5972-5907-58FA-0004E2F9422F}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee Firewall (Enabled) {959DA8E2-3527-57D1-4915-924367AD4FE9}
FW: Ad-Aware Firewall (Disabled) {E040E464-58CE-DBB2-2B6C-32B5A979FEED}
==================== Installed Programs ======================
3D-Viewer-innoplus (HKLM-x32\...\{B96DB037-DBEA-4186-9081-9CBD537F82E8}) (Version: 13.01.16 - INNOVA-engineering GmbH)
ABBYY FineReader 6.0 Sprint (HKLM-x32\...\{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}) (Version: 6.00.2146.41621 - ABBYY Software House)
AccelerometerP11 (HKLM-x32\...\{87434D51-51DB-4109-B68F-A829ECDCF380}) (Version: 2.00.11.22 - STMicroelectronics)
Ad-Aware Antivirus (HKLM\...\{6A16ADA5-0B30-4893-84AB-961B1340D14A}_AdAwareUpdater) (Version: 11.1.5354.0 - Lavasoft)
AdAwareInstaller (Version: 11.1.5354.0 - Lavasoft) Hidden
AdAwareUpdater (Version: 11.1.5354.0 - Lavasoft) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 13.0.0.111 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 13.0.0.111 - Adobe Systems Incorporated) Hidden
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.3 - Adobe Systems Incorporated)
Adobe Download Assistant (x32 Version: 1.2.3 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 13 ActiveX (HKLM-x32\...\{1BBE4C53-634B-44B3-8693-314ED6260557}) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\{ADEE751B-09AE-4DA7-9658-DCF90E8F9ED7}) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader X (10.1.10) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.10 - Adobe Systems Incorporated)
Advanced Archive Password Recovery (HKCU\...\Advanced Archive Password Recovery) (Version: 4.53 - ElcomSoft Co. Ltd.)
Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)
AntimalwareEngine (Version: 2.6.0.0 - Lavasoft) Hidden
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
calibre (HKLM-x32\...\{531336A9-55EB-4367-8064-7180849D5676}) (Version: 0.8.53 - Kovid Goyal)
CamControl LITE V 4.05 (HKLM-x32\...\CamControl LITE_is1) (Version: - )
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dell DataSafe Local Backup - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: 9.4.60 - Dell Inc.)
Dell DataSafe Local Backup (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 9.4.60 - Dell Inc.)
Dell DataSafe Online (HKLM-x32\...\{7EC66A95-AC2D-4127-940B-0445A526AB2F}) (Version: 2.1.19634 - Dell)
Dell DataSafe Online (HKLM-x32\...\{C53BCCBE-9268-4C09-82E9-611444A73B3F}) (Version: 2.9.0.19 - Dell)
Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)
Dell Getting Started Guide (HKLM-x32\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.)
Dell MusicStage (HKLM-x32\...\{3255BC3F-32BA-41ED-93A0-B9AEB6CDD9E6}) (Version: 1.5.201.0 - Fingertapps)
Dell PhotoStage (HKLM-x32\...\{E4335E82-17B3-460F-9E70-39D9BC269DB3}) (Version: 1.5.0.65 - ArcSoft)
Dell Stage (HKLM-x32\...\{E2F57269-065E-4B19-8CDA-AB6C401FAF1A}) (Version: 1.7.209.0 - Fingertapps)
Dell Stage Remote (HKLM-x32\...\{2299EEBD-0A83-4B26-AA4A-057AE9E5BAE8}) (Version: 2.0.0.50 - ArcSoft)
Dell Stage Remote (HKLM-x32\...\{AF4D3C63-009B-4A17-B02E-D395065DD3F0}) (Version: 2.0.0.50 - ArcSoft)
Dell VideoStage (HKLM-x32\...\InstallShield_{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}) (Version: 1.2.0.1712 - CyberLink Corp.)
Dell VideoStage (x32 Version: 1.2.0.1712 - CyberLink Corp.) Hidden
Dell Webcam Central (HKLM-x32\...\Dell Webcam Central) (Version: 2.00.44 - Creative Technology Ltd)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 15.1.13904 - Landesfinanzdirektion Thüringen)
Free Pdf Perfect Prereq (HKLM-x32\...\{a6eb67cd-4f30-4fa0-a040-b778d22b46d8}) (Version: 1.0.0.66 - Covus Freemium GmbH)
Free Pdf Perfect Prereq (x32 Version: 1.0.0.66 - Covus Freemium GmbH) Hidden
Freemium Free PDF Perfect (HKLM-x32\...\{88265079-D6F4-4292-86BE-D2053E80BFE4}) (Version: 1.0 - Freemium)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 34.0.1847.137 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2342 - Intel Corporation)
Intel(R) PROSet/Wireless WiFi-Software (HKLM\...\{25FBDA9A-E868-4B3B-B9FF-D923818511A1}) (Version: 14.2.0000 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.37 - Irfan Skiljan)
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 55 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417055FF}) (Version: 7.0.550 - Oracle)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Lexmark Pro800-Pro900 Series (HKLM\...\Lexmark Pro800-Pro900 Series) (Version: - Lexmark International, Inc.)
Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
McAfee SecurityCenter (HKLM-x32\...\MSC) (Version: 12.8.957 - McAfee, Inc.)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mozilla Firefox 29.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 24.5.0 - Mozilla)
Mozilla Thunderbird 24.5.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.5.0 (x86 de)) (Version: 24.5.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
My Dell (HKLM\...\PC-Doctor for Windows) (Version: 3.5.6426.22 - PC-Doctor, Inc.)
Nero 10 Movie ThemePack Basic (x32 Version: 10.6.10000.1.0 - Nero AG) Hidden
Nero Blu-ray Player (x32 Version: 12.0.20012 - Nero AG) Hidden
Nero Control Center 10 (x32 Version: 10.6.13000.0.11 - Nero AG) Hidden
Nero ControlCenter 10 Help (CHM) (x32 Version: 10.2.10800 - Nero AG) Hidden
Nero Core Components 10 (x32 Version: 2.0.20000.9.12 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.11500.28.0 - Nero AG) Hidden
NVIDIA 3D Vision Treiber 268.30 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 268.30 - NVIDIA Corporation)
NVIDIA Grafiktreiber 268.30 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 268.30 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.265.41.0 - NVIDIA Corporation) Hidden
NVIDIA Optimus 1.0.21 (Version: 1.0.21 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6830 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 268.30 (Version: 268.30 - NVIDIA Corporation) Hidden
NVIDIA Update Components (Version: 1.0.21 - NVIDIA Corporation) Hidden
OpenOffice 4.0.0 (HKLM-x32\...\{B28DBCBA-60F8-40ED-B35B-F510C327946C}) (Version: 4.00.9702 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 8.4.1.210 - Electronic Arts, Inc.)
PDF Passwort Knacker 1 (HKLM-x32\...\PDF Passwort Knacker 1) (Version: - )
PDF24 Creator 5.7.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 11.0.10 - Dell Inc.)
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6312 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Stanza (HKLM-x32\...\Stanza) (Version: - )
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.6.0 - Synaptics Incorporated)
SyncUP (HKLM-x32\...\{D92C9CCE-E5F0-4125-977A-0590F3225B74}) (Version: 10.2.14900 - Nero AG)
SyncUP (x32 Version: 1.12.12400.17.102 - Nero AG) Hidden
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Zinio Reader 4 (HKLM-x32\...\ZinioReader4) (Version: 4.2.4164 - Zinio LLC)
Zinio Reader 4 (x32 Version: 4.2.4164 - Zinio LLC) Hidden
==================== Restore Points =========================
10-05-2014 17:24:04 Ende der Bereinigung
12-05-2014 10:23:09 OpenOffice 4.0.0 wird installiert
12-05-2014 10:28:14 Installed MSXML 4.0 SP3 Parser
12-05-2014 10:38:36 Installed Dell Stage Remote.
15-05-2014 07:49:04 Windows Update
15-05-2014 10:21:50 Windows Update
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____C C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {1ACD70FD-4579-4C90-8337-465F457EE28C} - System32\Tasks\GoogleUpdateTaskMachineCore1cf2ee873e0378f => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-10-15] (Google Inc.)
Task: {2168C9CA-67D0-41C3-8ED6-5F24B18BCB86} - System32\Tasks\GoogleUpdateTaskMachineUA1cf521f401f7f7b => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-10-15] (Google Inc.)
Task: {285EE32B-E5AD-479D-B168-7ADEE1C9EFCC} - System32\Tasks\{5A6EB0BF-B98A-4B53-A91D-46DCEF4430B3} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-04-24] (Mozilla Corporation)
Task: {35C250A6-3660-499A-92D1-E48E55639B2B} - System32\Tasks\{B47D42E0-03AF-400A-A540-7F155D64C658} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-04-24] (Mozilla Corporation)
Task: {40D3CB72-A7C9-4CF0-9018-FC0D33C19487} - System32\Tasks\Video Performer Manager => Sc.exe start Video Performer Manager
Task: {43A0083C-1317-4BE9-93FA-1D0EB5DB8472} - System32\Tasks\{2CF18FC4-6F01-40B7-8E75-A5045D887787} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-04-24] (Mozilla Corporation)
Task: {5DA631BD-8411-4531-8E37-5BDE34478BCE} - System32\Tasks\{4348CFF2-7F8D-4849-B373-1FA61EDB155C} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-04-24] (Mozilla Corporation)
Task: {6B86F44A-F3CF-4CD0-B9D7-55A62DC38215} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {7166A41B-3E73-4148-82B9-28A9219D8FBD} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {749D4F46-858E-4E7B-A6A0-773539F2C8E1} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {74A17E5D-7904-43D8-AD9C-A600DF7FB23A} - System32\Tasks\{C804B517-5AD4-41F7-82A2-B16ED4D0997C} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-04-24] (Mozilla Corporation)
Task: {8A7E82BE-800F-4F4C-8023-5702C8F1062A} - System32\Tasks\{FF24D7BB-3AA2-4955-9D7F-9E7EB56B8929} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-04-24] (Mozilla Corporation)
Task: {A266C8AF-FF73-43AF-A25A-1720961238AD} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\My Dell\sessionchecker.exe [2014-01-31] (PC-Doctor, Inc.)
Task: {AB024251-19B7-46FF-A612-2F995D87E993} - \ProtectedSearch\Protected Search No Task File <==== ATTENTION
Task: {AF4B7A7F-D2BB-4B60-BAF4-1B5A3825A767} - \YourFile Update No Task File <==== ATTENTION
Task: {D68BAD47-5CF0-4D84-A37F-25E56577D684} - System32\Tasks\SystemSockets\SystemSockets => C:\Program Files (x86)\HomeTab\WConnectorHandler.exe
Task: {D8BE0879-0DEB-47B7-B591-981C6D1D3AC2} - \Browser Updater\Browser Updater No Task File <==== ATTENTION
Task: {DABB326C-06F5-4AEE-9FC5-EDBBF28F1C53} - System32\Tasks\{299B3EF5-797C-4235-B0D6-04E28BA85DE4} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-04-24] (Mozilla Corporation)
Task: {DC363C81-2D7E-471A-BF40-65557B936E1D} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe
Task: {ED13BC92-AEFF-41E9-A1A0-EB2394E045F2} - \Browser Manager No Task File <==== ATTENTION
Task: {FA0DBEB5-9D91-43F9-8EB8-8950C6461E8F} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\My Dell\uaclauncher.exe [2014-01-31] (PC-Doctor, Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf2ee873e0378f.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf521f401f7f7b.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2011-07-28 03:07 - 2011-07-28 03:07 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll
2011-10-11 18:22 - 2011-04-22 18:13 - 00004096 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2011-10-27 21:27 - 2009-11-26 01:09 - 00053760 _____ () C:\Windows\System32\LXECPMON.DLL
2011-10-27 21:26 - 2009-01-13 08:15 - 04485120 _____ () C:\Windows\System32\LXECOEM.DLL
2011-10-27 21:29 - 2009-11-04 08:17 - 00189440 _____ () C:\Windows\system32\spool\PRTPROCS\x64\lxecdrpp.dll
2014-01-23 16:09 - 2014-01-23 16:09 - 00702744 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe
2014-01-23 16:30 - 2014-01-23 16:30 - 00103800 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_thread-vc100-mt-1_55.dll
2014-01-23 16:30 - 2014-01-23 16:30 - 00024440 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_system-vc100-mt-1_55.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00033656 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_chrono-vc100-mt-1_55.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00055680 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_date_time-vc100-mt-1_55.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00123776 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_filesystem-vc100-mt-1_55.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 03720040 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareServiceKernel.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00685904 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\SQLite.dll
2014-01-23 16:30 - 2014-01-23 16:30 - 00158032 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\pugixml.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 02595144 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\RCF.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00788856 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_regex-vc100-mt-1_55.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00602984 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareActivation.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00291192 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareApplicationUpdater.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00142696 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareGamingMode.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00098648 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareReset.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00120152 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTime.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00268152 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareDefinitionsUpdater.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00198024 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareDefinitionsUpdaterScheduler.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00417128 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareIgnoreList.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00253800 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareQuarantine.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00293744 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareAntiMalwareEngine.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00212336 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareAntiRootkitEngine.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00509808 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareScannerHistory.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00607584 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareScanner.dll
2014-01-23 16:30 - 2014-01-23 16:30 - 00035192 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_timer-vc100-mt-1_55.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00325488 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareScannerScheduler.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00333688 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareRealTimeProtection.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00227688 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareIncompatibles.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00219488 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareAntiSpam.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00129896 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareAntiPhishing.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00599920 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareParentalControl.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 01926504 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareWebProtection.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00263536 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareEmailProtection.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00650608 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareNetworkProtection.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00490848 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareInstaller.dll
2014-01-23 16:30 - 2014-01-23 16:30 - 00106824 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\zlib.dll
2014-01-23 16:30 - 2014-01-23 16:30 - 00149840 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\libssh2.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00358744 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwarePromo.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00291680 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareFeedback.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00154464 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\SecurityCenter.dll
2013-07-17 17:10 - 2013-07-17 17:10 - 00777296 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\2.6.0.0\BDSmartDB.dll
2011-10-27 21:28 - 2009-12-16 06:42 - 00205824 ____C () C:\Program Files\Lexmark\Pro800-Pro900 Series\lxecmicro.dll
2011-10-27 21:28 - 2010-04-01 12:30 - 01558528 ____C () C:\Program Files\Lexmark\Pro800-Pro900 Series\lxecdrs64.dll
2011-10-27 21:28 - 2009-03-10 00:44 - 00015360 ____C () C:\Program Files\Lexmark\Pro800-Pro900 Series\lxeccaps64.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 02141040 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareShellExtension.dll
2011-10-11 18:21 - 2011-03-26 10:28 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-10-11 17:05 - 2010-12-17 17:25 - 00686704 _____ () C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe
2011-07-28 03:07 - 2011-07-28 03:07 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
2011-08-08 18:26 - 2011-08-08 18:26 - 02034752 ____C () C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
2011-10-27 21:26 - 2011-01-23 19:47 - 00770728 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe
2014-01-23 16:29 - 2014-01-23 16:29 - 04114264 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe
2014-01-23 16:29 - 2014-01-23 16:29 - 00500088 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_locale-vc100-mt-1_55.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00361824 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\HtmlFramework.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00066904 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\DllStorage.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00788848 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTrayDefaultSkin.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00139608 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\Localization.dll
2011-10-11 17:14 - 2011-08-18 17:05 - 02751808 _____ () C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
2012-02-01 12:50 - 2012-02-01 12:50 - 00968048 _____ () C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe
2011-08-08 18:26 - 2011-08-08 18:26 - 00475200 ____C () C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
2014-02-12 20:58 - 2014-02-12 20:58 - 00073544 ____C () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 20:58 - 2014-02-12 20:58 - 01044808 ____C () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2010-03-16 20:28 - 2010-03-16 20:28 - 01926144 ____C () C:\Program Files (x86)\Dell\Stage Remote\QtCore4.dll
2010-03-22 15:52 - 2010-03-22 15:52 - 06776832 ____C () C:\Program Files (x86)\Dell\Stage Remote\QtGui4.dll
2010-03-16 20:28 - 2010-03-16 20:28 - 00635904 ____C () C:\Program Files (x86)\Dell\Stage Remote\QtNetwork4.dll
2010-03-16 20:28 - 2010-03-16 20:28 - 00326144 ____C () C:\Program Files (x86)\Dell\Stage Remote\QtXml4.dll
2011-06-24 23:20 - 2011-06-24 23:20 - 00565968 ____C () C:\Program Files (x86)\Dell\Stage Remote\sqlite3.dll
2011-07-17 10:35 - 2011-07-17 10:35 - 00058944 ____C () C:\Program Files (x86)\Dell\Stage Remote\DataService.dll
2011-07-21 08:35 - 2011-07-21 08:35 - 00328256 ____C () C:\Program Files (x86)\Dell\Stage Remote\de-DE\UI\ManagerUI.dll
2010-03-11 19:52 - 2010-03-11 19:52 - 00028160 ____C () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qgif4.dll
2010-03-05 15:07 - 2010-03-05 15:07 - 00031744 ____C () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qico4.dll
2010-03-05 15:07 - 2010-03-05 15:07 - 00125952 ____C () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qjpeg4.dll
2010-03-11 19:52 - 2010-03-11 19:52 - 00225280 ____C () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qmng4.dll
2011-10-27 21:26 - 2010-04-01 12:23 - 00389120 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecscw.dll
2011-10-27 21:26 - 2009-05-27 07:16 - 00192512 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecdatr.dll
2011-10-27 21:26 - 2009-05-27 07:13 - 00081920 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxeccats.dll
2011-10-27 21:26 - 2010-04-01 12:24 - 01159168 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecDRS.dll
2011-10-27 21:26 - 2009-03-10 00:43 - 00155648 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxeccaps.dll
2011-10-27 21:15 - 2009-02-20 10:48 - 00381440 ____C () C:\Windows\system32\lxecsm.dll
2011-10-27 21:15 - 2009-04-28 09:56 - 00024064 ____C () C:\Windows\system32\lxecsmr.dll
2012-02-01 12:44 - 2012-02-01 12:44 - 08151040 _____ () C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\QtGui4.dll
2012-02-01 12:44 - 2012-02-01 12:44 - 02278400 _____ () C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\QtCore4.dll
2014-04-03 10:39 - 2014-05-12 07:30 - 03839088 ____C () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2011-04-21 19:32 - 2011-04-21 19:32 - 00235112 ____C () C:\Program Files (x86)\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
==================== EXE Association (whitelisted) =============
==================== Disabled items from MSCONFIG ==============
MSCONFIG\startupreg: (default) =>
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: Dell Webcam Central => "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: NeroLauncher => C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe 900
MSCONFIG\startupreg: NVHotkey => rundll32.exe C:\Windows\system32\nvHotkey.dll,Start
MSCONFIG\startupreg: PDFPrint => C:\Program Files (x86)\PDF24\pdf24.exe
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /MAXX3
MSCONFIG\startupreg: RTHDVCPL => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s
MSCONFIG\startupreg: SynTPEnh => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (05/16/2014 07:41:33 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: PSIA.exe, Version: 3.0.0.9016, Zeitstempel: 0x52a1d50f
Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f
Ausnahmecode: 0x80000003
Fehleroffset: 0x00048614
ID des fehlerhaften Prozesses: 0xa34
Startzeit der fehlerhaften Anwendung: 0xPSIA.exe0
Pfad der fehlerhaften Anwendung: PSIA.exe1
Pfad des fehlerhaften Moduls: PSIA.exe2
Berichtskennung: PSIA.exe3
Error: (05/16/2014 07:41:16 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Nur zur Information.
(Stream product id=0x0066): Streaming Failed
Error: (05/16/2014 07:38:19 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Nur zur Information.
Too many failures while downloading ranges: 2
Error: (05/16/2014 07:36:11 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/16/2014 05:29:38 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Error: (05/16/2014 05:28:09 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Nur zur Information.
(Stream product id=0x0066): Streaming Failed
Error: (05/16/2014 05:25:53 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Nur zur Information.
Too many failures while downloading ranges: 2
Error: (05/16/2014 05:19:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/16/2014 05:16:00 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Nur zur Information.
(Stream product id=0x0066): Streaming Failed
Error: (05/16/2014 05:12:48 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Nur zur Information.
Too many failures while downloading ranges: 2
System errors:
=============
Error: (05/16/2014 08:26:34 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {209500FC-6B45-4693-8871-6296C4843751}
Error: (05/16/2014 07:41:36 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Secunia PSI Agent" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (05/16/2014 07:41:35 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "McAfee Home Network" wurde nicht richtig gestartet.
Error: (05/16/2014 07:37:09 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst SftService erreicht.
Error: (05/16/2014 07:36:04 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "lxecCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (05/16/2014 07:36:04 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst lxecCATSCustConnectService erreicht.
Error: (05/16/2014 05:28:24 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde nicht richtig gestartet.
Error: (05/16/2014 05:25:52 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "McAfee Home Network" wurde nicht richtig gestartet.
Error: (05/16/2014 05:25:34 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {211EBA3A-EA5A-496B-A021-5C6BEB365E4C}
Error: (05/16/2014 05:22:14 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst SftService erreicht.
Microsoft Office Sessions:
=========================
Error: (05/16/2014 07:41:33 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: PSIA.exe3.0.0.901652a1d50fole32.dll6.1.7601.175144ce7b96f8000000300048614a3401cf712d4fe31ae1C:\Program Files (x86)\Secunia\PSI\PSIA.exeC:\Windows\syswow64\ole32.dll51d488d8-dd21-11e3-8932-848f69b0791a
Error: (05/16/2014 07:41:16 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: (Stream product id=0x0066): Streaming Failed
Error: (05/16/2014 07:38:19 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Too many failures while downloading ranges: 2
Error: (05/16/2014 07:36:11 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/16/2014 05:29:38 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe
Error: (05/16/2014 05:28:09 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: (Stream product id=0x0066): Streaming Failed
Error: (05/16/2014 05:25:53 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Too many failures while downloading ranges: 2
Error: (05/16/2014 05:19:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/16/2014 05:16:00 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: (Stream product id=0x0066): Streaming Failed
Error: (05/16/2014 05:12:48 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Too many failures while downloading ranges: 2
==================== Memory info ===========================
Percentage of memory in use: 40%
Total physical RAM: 8086.17 MB
Available physical RAM: 4840.09 MB
Total Pagefile: 16170.52 MB
Available Pagefile: 12601.93 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:679 GB) (Free:562.65 GB) NTFS
Drive f: () (Removable) (Total:7.5 GB) (Free:2.93 GB) FAT32
Drive g: () (Removable) (Total:3.77 GB) (Free:2.71 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 699 GB) (Disk ID: 07F2837E)
Partition 1: (Not Active) - (Size=102 MB) - (Type=DE)
Partition 2: (Active) - (Size=20 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=679 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 8 GB) (Disk ID: 00000000)
Partition: GPT Partition Type.
========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 4 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=4 GB) - (Type=0C)
==================== End Of Log ============================
|
|
16.05.2014, 20:39
| #12 |
| | adware-Bprotect durch McAfee entdeckt und konnte nicht entfernt werden und FRST.txt: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-05-2014 Ran by Tanja (administrator) on TANJA-PC on 16-05-2014 21:36:54 Running from C:\Users\Tanja\Desktop Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe (Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe ( ) C:\Windows\System32\lxeccoms.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (McAfee, Inc.) C:\Windows\System32\mfevtps.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe () C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe () C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe (SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe () C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe () C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe (Lavasoft) C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe () C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (McAfee, Inc.) C:\Program Files\mcafee\msm\McSmtFwk.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McUICnt.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [FreeFallProtection] => C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe [686704 2010-12-17] () HKLM\...\Run: [IntelPAN] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-07-28] (Intel(R) Corporation) HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [4479648 2011-01-25] (Dell Inc.) HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" HKLM\...\Run: [Stage Remote] => C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe [2034752 2011-08-08] () HKLM\...\Run: [lxecmon.exe] => C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe [770728 2011-01-23] () HKLM\...\Run: [EzPrint] => C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\ezprint.exe [148280 2011-01-23] () HKLM\...\Run: [DellStage] => C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe [2195824 2012-02-01] () HKLM\...\Run: [] => [X] HKLM\...\Run: [AdAwareTray] => C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe [4114264 2014-01-23] () HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2014-05-08] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Dell DataSafe Online] => C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe [3398512 2014-04-09] (Dell, Inc.) HKLM-x32\...\Run: [mcui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-04-25] (McAfee, Inc.) HKLM-x32\...\Run: [Lexmark Pro800-Pro900 Series] => C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\fm3032.exe [316072 2011-01-23] () HKLM-x32\...\Run: [AccuWeatherWidget] => C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe [968048 2012-02-01] () HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-04-25] (McAfee, Inc.) HKLM-x32\...\Run: [Ad-Aware Browsing Protection] => C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe [559696 2013-09-27] (Lavasoft) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer: [NoControlPanel] 0 HKU\S-1-5-21-3715489345-1050972543-478851-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-10-02] (Skype Technologies S.A.) AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [226920 2011-04-22] (NVIDIA Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia) Startup: C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IMVU.lnk ShortcutTarget: IMVU.lnk -> C:\Users\Gast\AppData\Roaming\IMVUClient\IMVUQualityAgent.exe () Startup: C:\Users\Mascha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk ShortcutTarget: Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk -> C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe (Intel® Corporation) Startup: C:\Users\Video\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk ShortcutTarget: Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk -> C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe (Intel® Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://dell.de.msn.com/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x51FBC3AEF6A5CD01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank URLSearchHook: HKLM-x32 - (No Name) - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No File SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {794B2C93-9B33-4B66-A556-F35D9ACBCBA6} URL = hxxp://de.search.yahoo.com/search?fr=mcafee&type=A011DE105&p={SearchTerms} BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll () BHO-x32: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - C:\Program Files\mcafee\msk\mskapbho.dll () BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - Free PDF Perfect - {EFC2B9BE-AB2B-47F1-A47D-9EB28E58C917} - C:\Program Files (x86)\Freemium\Free PDF Perfect\ieagent64.dll (soft Xpansion) Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKLM-x32 - Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll () Toolbar: HKLM-x32 - No Name - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No File Toolbar: HKLM-x32 - Free PDF Perfect - {EFC2B9BE-AB2B-47F1-A47D-9EB28E58C917} - C:\Program Files (x86)\Freemium\Free PDF Perfect\ieagent32.dll (soft Xpansion) Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.) Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default FF NewTab: about:home FF Homepage: about:home FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll () FF Plugin: @java.com/DTPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @innoplus.de/ino3DViewer - C:\Program Files (x86)\innoplus\3D-Viewer-innoPlus\npIno3DViewer.dll (INNOVA-engineering GmbH Dresden) FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL () FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @soft-xpansion/npsxpdf - C:\Program Files (x86)\Common Files\Freemium\np-sxpdf.dll (soft-Xpansion) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: FoxyDeal - C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Extensions\{F58A62EB-38DC-43C4-A539-DC52E135208D} [2013-07-29] FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-22] FF Extension: Adblock Edge - C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi [2014-05-10] FF HKLM-x32\...\Firefox\Extensions: [{B45418F9-6406-4828-9D1A-35313FB1E2D6}] - C:\ProgramData\Freemium\Free PDF Perfect\Data\fftb FF Extension: Free PDF Perfect - C:\ProgramData\Freemium\Free PDF Perfect\Data\fftb [2013-07-29] FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2013-11-26] FF HKLM-x32\...\Thunderbird\Extensions: [{B45418F9-6406-4828-9D1A-35313FB1E2D6}] - C:\ProgramData\Freemium\Free PDF Perfect\Data\fftb FF Extension: Free PDF Perfect - C:\ProgramData\Freemium\Free PDF Perfect\Data\fftb [2013-07-29] FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2011-10-11] Chrome: ======= CHR HomePage: hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_8&idate=2014-05-05&ent=hp&u=544AC73567361970CE68AE5367C2C7DA CHR StartupUrls: "hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_8&idate=2014-05-05&ent=hp&u=544AC73567361970CE68AE5367C2C7DA", "about:newtab?source=home" CHR Extension: (Google Docs) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-13] CHR Extension: (Google Drive) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-13] CHR Extension: (YouTube) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-13] CHR Extension: (Google-Suche) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-13] CHR Extension: (SiteAdvisor) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2014-01-13] CHR Extension: (Google Wallet) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-13] CHR Extension: (Google Mail) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-13] ==================== Services (Whitelisted) ================= R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe [702744 2014-01-23] () S2 lxecCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxecserv.exe [45736 2010-04-14] (Lexmark International, Inc.) R2 lxec_device; C:\Windows\system32\lxeccoms.exe [1052328 2010-04-14] ( ) R2 lxec_device; C:\Windows\SysWOW64\lxeccoms.exe [598696 2010-04-14] ( ) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation) R2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.) R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178528 2014-04-25] (McAfee, Inc.) S3 McAWFwk; C:\Program Files\mcafee\msc\McAWFwk.exe [220528 2010-08-30] (McAfee, Inc.) R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 McNaiAnn; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [602944 2013-08-02] (McAfee, Inc.) S4 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.) R2 mcpltsvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 McProxy; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1025712 2014-01-21] (McAfee, Inc.) R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-03-17] (McAfee, Inc.) R2 mfevtp; C:\Windows\system32\mfevtps.exe [185792 2014-03-17] (McAfee, Inc.) R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-07-28] () S2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia) S2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia) S3 SXDS10; C:\Program Files (x86)\Common Files\soft Xpansion\sxds10.exe [234096 2013-07-29] (soft Xpansion) ==================== Drivers (Whitelisted) ==================== R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70592 2014-03-17] (McAfee, Inc.) S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-05-16] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-04-03] (Malwarebytes Corporation) R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [180272 2014-03-17] (McAfee, Inc.) R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311600 2014-03-17] (McAfee, Inc.) R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [522360 2014-03-17] (McAfee, Inc.) R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [783864 2014-03-17] (McAfee, Inc.) R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [422712 2014-01-21] (McAfee, Inc.) S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [96592 2014-01-21] (McAfee, Inc.) R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [345456 2014-03-17] (McAfee, Inc.) S3 NvStUSB; C:\Windows\system32\drivers\nvstusb.sys [121960 2010-12-12] () R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia) R3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [329800 2013-07-17] (BitDefender S.R.L.) S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-05-16 20:47 - 2014-05-16 20:47 - 00002096 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk 2014-05-16 20:47 - 2014-05-16 20:47 - 00002084 ____C () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2014-05-16 20:47 - 2014-05-16 20:47 - 00000000 ___DC () C:\Program Files (x86)\Mozilla Thunderbird 2014-05-16 20:47 - 2014-05-16 20:47 - 00000000 ___DC () C:\Program Files (x86)\Mozilla Maintenance Service 2014-05-16 20:45 - 2014-05-16 20:45 - 00961360 ____C (Chip Digital GmbH) C:\Users\Tanja\Downloads\Thunderbird - CHIP-Downloader(1).exe 2014-05-16 20:44 - 2014-05-16 20:44 - 00961360 ____C (Chip Digital GmbH) C:\Users\Tanja\Downloads\Thunderbird - CHIP-Downloader.exe 2014-05-16 20:29 - 2014-05-16 20:29 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee 2014-05-16 19:33 - 2014-05-16 19:38 - 00000000 ___DC () C:\AdwCleaner 2014-05-16 19:30 - 2014-05-16 19:30 - 01325827 ____C () C:\Users\Tanja\Desktop\adwcleaner_3.208.exe 2014-05-16 17:34 - 2014-05-16 17:34 - 00044936 ____C () C:\Users\Tanja\Desktop\Addition.txt 2014-05-16 17:33 - 2014-05-16 21:37 - 00024733 ____C () C:\Users\Tanja\Desktop\FRST.txt 2014-05-16 17:33 - 2014-05-16 21:36 - 00000000 ___DC () C:\FRST 2014-05-16 17:32 - 2014-05-16 17:33 - 02067456 ____C (Farbar) C:\Users\Tanja\Desktop\FRST64.exe 2014-05-16 17:31 - 2014-05-16 17:31 - 00000472 ____C () C:\Users\Tanja\Desktop\defogger_disable.log 2014-05-16 17:30 - 2014-05-16 17:30 - 00000000 ____C () C:\Users\Tanja\defogger_reenable 2014-05-16 17:29 - 2014-05-16 17:29 - 00050477 ____C () C:\Users\Tanja\Desktop\Defogger.exe 2014-05-15 12:38 - 2014-05-15 12:38 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-15 12:38 - 2014-05-15 12:38 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-15 12:38 - 2014-05-15 12:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-15 12:38 - 2014-05-15 12:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-15 12:38 - 2014-05-15 12:38 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-15 12:38 - 2014-05-15 12:38 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-05-15 12:22 - 2014-05-15 12:22 - 00262750 ____C () C:\Windows\msxml4-KB2758694-enu.LOG 2014-05-15 10:01 - 2014-05-15 12:39 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-05-15 10:01 - 2014-05-15 12:39 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-05-15 10:01 - 2014-05-15 12:39 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-15 10:01 - 2014-05-15 12:39 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-05-15 10:01 - 2014-05-15 12:38 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-05-15 10:01 - 2014-05-15 12:38 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-05-15 10:01 - 2014-05-15 12:38 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-05-15 10:01 - 2014-05-15 12:38 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-05-15 10:01 - 2014-05-15 12:38 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-05-15 10:01 - 2014-05-15 12:38 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-05-15 10:01 - 2014-05-15 12:38 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-05-15 10:01 - 2014-05-15 12:38 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-05-12 12:40 - 2014-05-12 12:40 - 00448512 ____C (OldTimer Tools) C:\Users\Tanja\Desktop\TFC.exe 2014-05-12 12:40 - 2014-05-12 12:40 - 00064024 ____C () C:\Users\Tanja\AppData\Local\GDIPFONTCACHEV1.DAT 2014-05-12 12:38 - 2014-05-12 12:38 - 00000000 ___DC () C:\Users\Tanja\AppData\Local\Downloaded Installations 2014-05-12 12:29 - 2014-05-12 12:29 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\OpenOffice 2014-05-12 12:27 - 2014-05-12 12:27 - 02434048 ____C () C:\Users\Tanja\Downloads\msxml(2).msi 2014-05-12 12:27 - 2014-05-12 12:27 - 02434048 ____C () C:\Users\Tanja\Downloads\msxml(1).msi 2014-05-12 12:26 - 2014-05-12 12:26 - 00001116 ____C () C:\Users\Public\Desktop\OpenOffice 4.0.0.lnk 2014-05-12 12:26 - 2014-05-12 12:26 - 00000000 __SDC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.0 2014-05-12 12:25 - 2014-05-12 12:25 - 00000000 ___DC () C:\Program Files (x86)\OpenOffice 4 2014-05-10 20:49 - 2014-05-10 20:50 - 02434048 ____C () C:\Users\Tanja\Downloads\msxml.msi 2014-05-10 19:51 - 2014-05-10 19:50 - 00264616 ____C (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-05-10 19:50 - 2014-05-10 19:50 - 00175528 ____C (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-05-10 19:50 - 2014-05-10 19:50 - 00175016 ____C (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-05-10 19:50 - 2014-05-10 19:50 - 00096168 ____C (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-05-10 19:48 - 2014-05-10 19:48 - 00001847 ____C () C:\Users\Public\Desktop\QuickTime Player.lnk 2014-05-10 19:48 - 2014-05-10 19:48 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2014-05-10 19:48 - 2014-05-10 19:48 - 00000000 ___DC () C:\Program Files (x86)\QuickTime 2014-05-10 19:46 - 2014-05-10 19:46 - 00313256 ____C (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-05-10 19:46 - 2014-05-10 19:46 - 00189352 ____C (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-05-10 19:46 - 2014-05-10 19:46 - 00189352 ____C (Oracle Corporation) C:\Windows\system32\java.exe 2014-05-10 19:46 - 2014-05-10 19:46 - 00108968 ____C (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2014-05-10 19:46 - 2014-05-10 19:46 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-05-10 19:45 - 2014-05-10 19:46 - 00448512 ____C (OldTimer Tools) C:\Users\Tanja\Downloads\TFC.exe 2014-05-10 19:42 - 2014-05-10 19:42 - 00700980 ____C () C:\Users\Tanja\Downloads\adblock_edge-2.0.7-sm+an+tb+fx-windows.xpi 2014-05-10 19:37 - 2014-05-10 19:38 - 17305616 ____C (Malwarebytes Corporation ) C:\Users\Tanja\Downloads\mbam-setup-2.0.1.1004.exe 2014-05-10 19:36 - 2014-05-10 19:36 - 00001067 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk 2014-05-10 19:36 - 2014-05-10 19:36 - 00000000 ___DC () C:\Users\Tanja\AppData\Local\Secunia PSI 2014-05-10 19:36 - 2014-05-10 19:36 - 00000000 ___DC () C:\Program Files (x86)\Secunia 2014-05-10 19:35 - 2014-05-10 19:35 - 05329480 ____C (Secunia) C:\Users\Tanja\Downloads\PSISetup_3.0.0.9016.exe 2014-05-10 19:23 - 2014-05-10 19:25 - 00002139 ____C () C:\DelFix.txt 2014-05-10 19:06 - 2014-05-10 19:07 - 21987152 ____C (Mozilla) C:\Users\Tanja\Downloads\Thunderbird Setup 24.5.0(1).exe 2014-05-10 19:04 - 2014-05-10 19:05 - 19662544 ____C (Mozilla) C:\Users\Tanja\Downloads\Thunderbird Setup 24.5.0.exe 2014-05-09 03:00 - 2014-05-15 12:40 - 00000000 __SDC () C:\Windows\system32\CompatTel 2014-05-06 20:30 - 2014-05-10 19:23 - 00000000 ___DC () C:\Windows\ERUNT 2014-05-06 13:39 - 2010-08-30 08:34 - 00536576 ____C (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll 2014-05-06 12:25 - 2014-05-16 20:59 - 00119512 ____C (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-05-06 12:25 - 2014-05-10 19:40 - 00001100 ____C () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-05-06 12:25 - 2014-05-10 19:40 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-05-06 12:25 - 2014-04-03 09:51 - 00088280 ____C (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-05-06 12:25 - 2014-04-03 09:51 - 00063192 ____C (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-05-06 12:25 - 2014-04-03 09:50 - 00025816 ____C (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-05-06 12:23 - 2014-05-06 12:24 - 17305616 ____C (Malwarebytes Corporation ) C:\Users\Tanja\Desktop\mbam-setup-2.0.1.1004.exe 2014-05-06 11:48 - 2014-05-06 11:48 - 00269048 ____C () C:\Windows\Minidump\050614-30295-01.dmp 2014-05-06 07:27 - 2014-05-06 07:27 - 00013824 ____C () C:\Users\Tanja\AppData\Roaming\FAXLOG32.CDX 2014-05-06 07:27 - 2014-05-06 07:27 - 00001906 ____C () C:\Users\Tanja\AppData\Roaming\FAXLOG32.DBF 2014-05-06 07:27 - 2014-05-06 07:27 - 00001024 ____C () C:\Users\Tanja\AppData\Roaming\FAXLOG32.FPT 2014-05-05 22:57 - 2014-05-10 19:40 - 00000000 ___DC () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-05-05 22:57 - 2014-05-05 22:57 - 00000000 ___DC () C:\ProgramData\Malwarebytes 2014-05-05 22:34 - 2014-05-05 22:34 - 00001262 ____C () C:\Users\Tanja\Desktop\Revo Uninstaller.lnk 2014-05-05 22:34 - 2014-05-05 22:34 - 00000000 ___DC () C:\Program Files (x86)\VS Revo Group 2014-05-05 22:29 - 2014-05-05 22:29 - 02623656 ____C (VS Revo Group Ltd.) C:\Users\Tanja\Desktop\revosetup95.exe 2014-05-05 22:09 - 2014-05-05 22:09 - 00380416 ____C () C:\Users\Tanja\Desktop\Gmer-19357.exe 2014-05-05 21:05 - 2014-05-06 18:47 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2014-05-05 21:05 - 2014-05-05 21:05 - 00001785 ____C () C:\Users\Public\Desktop\iTunes.lnk 2014-05-05 21:04 - 2014-05-05 21:05 - 00000000 ___DC () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-05-05 21:04 - 2014-05-05 21:05 - 00000000 ___DC () C:\Program Files\iTunes 2014-05-05 21:04 - 2014-05-05 21:05 - 00000000 ___DC () C:\Program Files (x86)\iTunes 2014-05-05 20:59 - 2014-05-05 20:59 - 00000000 ___DC () C:\Program Files\Bonjour 2014-05-05 20:59 - 2014-05-05 20:59 - 00000000 ___DC () C:\Program Files (x86)\Bonjour 2014-05-05 20:34 - 2014-05-05 20:45 - 148885840 ____C (Apple Inc.) C:\Users\Tanja\Downloads\iTunes64Setup(1).exe 2014-05-05 20:07 - 2014-05-05 20:07 - 00000000 _SHDC () C:\Users\Tanja\AppData\Local\EmieUserList 2014-05-05 20:07 - 2014-05-05 20:07 - 00000000 _SHDC () C:\Users\Tanja\AppData\Local\EmieSiteList 2014-05-05 19:55 - 2014-05-05 19:55 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Roxio Log Files 2014-05-05 19:37 - 2014-05-05 19:37 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\LavasoftStatistics 2014-05-05 18:59 - 2014-05-16 19:36 - 00002267 ____C () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk 2014-05-05 18:59 - 2014-05-06 18:47 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ad-Aware Antivirus 2014-05-05 18:57 - 2014-05-16 19:37 - 00000000 ___DC () C:\ProgramData\Ad-Aware Browsing Protection 2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\Users\Tanja\AppData\Local\adawarebp 2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\Program Files\Lavasoft 2014-05-05 18:56 - 2014-05-05 18:56 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Lavasoft 2014-05-05 18:56 - 2014-05-05 18:56 - 00000000 ___DC () C:\Program Files (x86)\Lavasoft 2014-05-05 18:55 - 2014-05-05 18:55 - 00000000 ___DC () C:\Program Files\Common Files\Lavasoft 2014-05-05 18:54 - 2014-05-05 18:54 - 00000000 ___DC () C:\ProgramData\Lavasoft 2014-05-05 18:53 - 2014-05-05 18:53 - 01727624 ____C () C:\Users\Tanja\Downloads\Adaware_Installer.exe 2014-05-05 18:44 - 2014-05-05 18:44 - 00728960 ____C (Enigma Software Group USA, LLC.) C:\Users\Tanja\Downloads\SpyHunter-Installer(1).exe 2014-05-05 18:13 - 2014-05-05 20:09 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Nico Mak Computing 2014-05-05 18:13 - 2014-05-05 18:13 - 04892480 ____C (WinZip International LLC ) C:\Users\Tanja\Downloads\wzmp_8.exe 2014-05-05 14:10 - 2014-05-05 14:10 - 00000000 ___DC () C:\Program Files\Enigma Software Group 2014-05-05 14:10 - 2014-05-05 14:10 - 00000000 ____C () C:\autoexec.bat 2014-05-05 14:09 - 2014-05-05 20:08 - 00000000 ___DC () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP 2014-05-05 14:06 - 2014-05-05 14:06 - 00728960 ____C (Enigma Software Group USA, LLC.) C:\Users\Tanja\Downloads\SpyHunter-Installer.exe 2014-04-22 17:36 - 2014-04-22 17:38 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-04-22 17:36 - 2014-04-22 17:38 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-04-22 17:36 - 2014-04-22 17:38 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-04-22 17:36 - 2014-04-22 17:38 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-04-22 17:36 - 2014-04-22 17:38 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-04-22 17:36 - 2014-04-22 17:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-04-22 17:36 - 2014-04-22 17:38 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-04-22 17:36 - 2014-04-22 17:38 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-04-22 17:36 - 2014-04-22 17:38 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-04-22 17:07 - 2014-04-22 17:09 - 21987424 ____C (Mozilla) C:\Users\Tanja\Downloads\Thunderbird Setup 24.4.0.exe 2014-04-22 16:34 - 2013-09-23 13:49 - 00197704 ____C (McAfee, Inc.) C:\Windows\system32\Drivers\HipShieldK.sys 2014-04-17 10:30 - 2014-04-17 10:30 - 00002982 ____C () C:\Windows\System32\Tasks\{B47D42E0-03AF-400A-A540-7F155D64C658} ==================== One Month Modified Files and Folders ======= 2014-05-16 21:37 - 2014-05-16 17:33 - 00024733 ____C () C:\Users\Tanja\Desktop\FRST.txt 2014-05-16 21:36 - 2014-05-16 17:33 - 00000000 ___DC () C:\FRST 2014-05-16 21:27 - 2012-06-22 23:09 - 00000884 ____C () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-05-16 21:18 - 2014-04-07 07:07 - 00001110 ____C () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf521f401f7f7b.job 2014-05-16 20:59 - 2014-05-06 12:25 - 00119512 ____C (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-05-16 20:47 - 2014-05-16 20:47 - 00002096 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk 2014-05-16 20:47 - 2014-05-16 20:47 - 00002084 ____C () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2014-05-16 20:47 - 2014-05-16 20:47 - 00000000 ___DC () C:\Program Files (x86)\Mozilla Thunderbird 2014-05-16 20:47 - 2014-05-16 20:47 - 00000000 ___DC () C:\Program Files (x86)\Mozilla Maintenance Service 2014-05-16 20:45 - 2014-05-16 20:45 - 00961360 ____C (Chip Digital GmbH) C:\Users\Tanja\Downloads\Thunderbird - CHIP-Downloader(1).exe 2014-05-16 20:44 - 2014-05-16 20:44 - 00961360 ____C (Chip Digital GmbH) C:\Users\Tanja\Downloads\Thunderbird - CHIP-Downloader.exe 2014-05-16 20:29 - 2014-05-16 20:29 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee 2014-05-16 19:47 - 2009-07-14 06:45 - 00021296 ___HC () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-05-16 19:47 - 2009-07-14 06:45 - 00021296 ___HC () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-05-16 19:42 - 2010-11-21 08:50 - 00700118 ____C () C:\Windows\system32\perfh007.dat 2014-05-16 19:42 - 2010-11-21 08:50 - 00149968 ____C () C:\Windows\system32\perfc007.dat 2014-05-16 19:42 - 2009-07-14 07:13 - 01622228 ____C () C:\Windows\system32\PerfStringBackup.INI 2014-05-16 19:41 - 2011-10-11 09:49 - 01304163 ____C () C:\Windows\WindowsUpdate.log 2014-05-16 19:38 - 2014-05-16 19:33 - 00000000 ___DC () C:\AdwCleaner 2014-05-16 19:38 - 2012-05-28 20:50 - 00000000 ___DC () C:\ProgramData\boost_interprocess 2014-05-16 19:37 - 2014-05-05 18:57 - 00000000 ___DC () C:\ProgramData\Ad-Aware Browsing Protection 2014-05-16 19:37 - 2014-02-21 11:36 - 00001106 ____C () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf2ee873e0378f.job 2014-05-16 19:37 - 2011-10-27 21:28 - 00203028 ____C () C:\ProgramData\lxecscan.log 2014-05-16 19:37 - 2011-10-11 17:21 - 00000000 ___DC () C:\Users\Default\AppData\Local\SoftThinks 2014-05-16 19:37 - 2011-10-11 17:21 - 00000000 ___DC () C:\Users\Default User\AppData\Local\SoftThinks 2014-05-16 19:37 - 2011-10-11 17:14 - 00000000 ___DC () C:\Program Files (x86)\Dell DataSafe Local Backup 2014-05-16 19:36 - 2014-05-05 18:59 - 00002267 ____C () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk 2014-05-16 19:36 - 2011-10-11 09:47 - 00000000 ___DC () C:\ProgramData\NVIDIA 2014-05-16 19:36 - 2009-07-14 07:08 - 00000006 ___HC () C:\Windows\Tasks\SA.DAT 2014-05-16 19:36 - 2009-07-14 06:51 - 00143374 ____C () C:\Windows\setupact.log 2014-05-16 19:35 - 2010-11-21 05:47 - 00297734 ____C () C:\Windows\PFRO.log 2014-05-16 19:30 - 2014-05-16 19:30 - 01325827 ____C () C:\Users\Tanja\Desktop\adwcleaner_3.208.exe 2014-05-16 17:34 - 2014-05-16 17:34 - 00044936 ____C () C:\Users\Tanja\Desktop\Addition.txt 2014-05-16 17:33 - 2014-05-16 17:32 - 02067456 ____C (Farbar) C:\Users\Tanja\Desktop\FRST64.exe 2014-05-16 17:31 - 2014-05-16 17:31 - 00000472 ____C () C:\Users\Tanja\Desktop\defogger_disable.log 2014-05-16 17:30 - 2014-05-16 17:30 - 00000000 ____C () C:\Users\Tanja\defogger_reenable 2014-05-16 17:30 - 2011-10-14 11:44 - 00000000 ___DC () C:\Users\Tanja 2014-05-16 17:29 - 2014-05-16 17:29 - 00050477 ____C () C:\Users\Tanja\Desktop\Defogger.exe 2014-05-15 12:53 - 2011-10-27 21:30 - 00000000 ___DC () C:\ProgramData\Lx_cats 2014-05-15 12:44 - 2011-10-14 11:50 - 00000000 __RDC () C:\Users\Tanja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-05-15 12:44 - 2011-10-14 11:50 - 00000000 __RDC () C:\Users\Tanja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-05-15 12:40 - 2014-05-09 03:00 - 00000000 __SDC () C:\Windows\system32\CompatTel 2014-05-15 12:39 - 2014-05-15 10:01 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-05-15 12:39 - 2014-05-15 10:01 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-05-15 12:39 - 2014-05-15 10:01 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-15 12:39 - 2014-05-15 10:01 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-15 12:38 - 2014-05-15 12:38 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-15 12:38 - 2014-05-15 12:38 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-15 12:38 - 2014-05-15 12:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-15 12:38 - 2014-05-15 12:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-15 12:38 - 2014-05-15 12:38 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-15 12:38 - 2014-05-15 12:38 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-05-15 12:38 - 2014-05-15 10:01 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-05-15 12:38 - 2014-05-15 10:01 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-05-15 12:38 - 2014-05-15 10:01 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-05-15 12:38 - 2014-05-15 10:01 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-05-15 12:38 - 2014-05-15 10:01 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-05-15 12:38 - 2014-05-15 10:01 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-05-15 12:38 - 2014-05-15 10:01 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-05-15 12:38 - 2014-05-15 10:01 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-05-15 12:22 - 2014-05-15 12:22 - 00262750 ____C () C:\Windows\msxml4-KB2758694-enu.LOG 2014-05-15 11:23 - 2013-05-23 09:44 - 00003440 _____ () C:\Windows\System32\Tasks\PCDEventLauncherTask 2014-05-14 13:33 - 2011-10-15 23:22 - 00002021 ____C () C:\Users\Public\Desktop\Adobe Reader X.lnk 2014-05-14 13:33 - 2011-10-11 17:13 - 00002441 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk 2014-05-14 13:28 - 2012-06-22 23:09 - 00692400 ____C (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-05-14 13:28 - 2012-06-22 23:09 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-05-14 13:28 - 2011-10-11 16:55 - 00070832 ____C (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-05-14 13:14 - 2009-07-14 06:45 - 00294712 ____C () C:\Windows\system32\FNTCACHE.DAT 2014-05-12 12:40 - 2014-05-12 12:40 - 00448512 ____C (OldTimer Tools) C:\Users\Tanja\Desktop\TFC.exe 2014-05-12 12:40 - 2014-05-12 12:40 - 00064024 ____C () C:\Users\Tanja\AppData\Local\GDIPFONTCACHEV1.DAT 2014-05-12 12:38 - 2014-05-12 12:38 - 00000000 ___DC () C:\Users\Tanja\AppData\Local\Downloaded Installations 2014-05-12 12:38 - 2011-10-11 17:18 - 00000000 ___DC () C:\Program Files (x86)\Dell 2014-05-12 12:29 - 2014-05-12 12:29 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\OpenOffice 2014-05-12 12:28 - 2011-10-15 22:59 - 00000000 ___DC () C:\Program Files (x86)\MSXML 4.0 2014-05-12 12:27 - 2014-05-12 12:27 - 02434048 ____C () C:\Users\Tanja\Downloads\msxml(2).msi 2014-05-12 12:27 - 2014-05-12 12:27 - 02434048 ____C () C:\Users\Tanja\Downloads\msxml(1).msi 2014-05-12 12:26 - 2014-05-12 12:26 - 00001116 ____C () C:\Users\Public\Desktop\OpenOffice 4.0.0.lnk 2014-05-12 12:26 - 2014-05-12 12:26 - 00000000 __SDC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.0 2014-05-12 12:25 - 2014-05-12 12:25 - 00000000 ___DC () C:\Program Files (x86)\OpenOffice 4 2014-05-12 12:25 - 2013-06-19 22:51 - 00000000 ___DC () C:\Program Files (x86)\OpenOffice.org 3 2014-05-12 09:33 - 2011-10-11 17:27 - 00000000 ___DC () C:\Program Files (x86)\McAfee 2014-05-12 07:30 - 2014-04-03 10:39 - 00000000 ___DC () C:\Program Files (x86)\Mozilla Firefox 2014-05-10 21:23 - 2012-05-12 21:44 - 00000000 ___DC () C:\Users\Tanja\AppData\Local\Apple Computer 2014-05-10 20:50 - 2014-05-10 20:49 - 02434048 ____C () C:\Users\Tanja\Downloads\msxml.msi 2014-05-10 20:41 - 2013-06-06 22:04 - 00000000 ___DC () C:\Users\Tanja\Documents\ESt_Erklärung 2014-05-10 19:50 - 2014-05-10 19:51 - 00264616 ____C (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-05-10 19:50 - 2014-05-10 19:50 - 00175528 ____C (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-05-10 19:50 - 2014-05-10 19:50 - 00175016 ____C (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-05-10 19:50 - 2014-05-10 19:50 - 00096168 ____C (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-05-10 19:50 - 2011-10-11 17:03 - 00000000 ___DC () C:\Program Files (x86)\Java 2014-05-10 19:48 - 2014-05-10 19:48 - 00001847 ____C () C:\Users\Public\Desktop\QuickTime Player.lnk 2014-05-10 19:48 - 2014-05-10 19:48 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2014-05-10 19:48 - 2014-05-10 19:48 - 00000000 ___DC () C:\Program Files (x86)\QuickTime 2014-05-10 19:46 - 2014-05-10 19:46 - 00313256 ____C (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-05-10 19:46 - 2014-05-10 19:46 - 00189352 ____C (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-05-10 19:46 - 2014-05-10 19:46 - 00189352 ____C (Oracle Corporation) C:\Windows\system32\java.exe 2014-05-10 19:46 - 2014-05-10 19:46 - 00108968 ____C (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2014-05-10 19:46 - 2014-05-10 19:46 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-05-10 19:46 - 2014-05-10 19:45 - 00448512 ____C (OldTimer Tools) C:\Users\Tanja\Downloads\TFC.exe 2014-05-10 19:46 - 2011-10-11 17:03 - 00000000 ___DC () C:\Program Files\Java 2014-05-10 19:42 - 2014-05-10 19:42 - 00700980 ____C () C:\Users\Tanja\Downloads\adblock_edge-2.0.7-sm+an+tb+fx-windows.xpi 2014-05-10 19:40 - 2014-05-06 12:25 - 00001100 ____C () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-05-10 19:40 - 2014-05-06 12:25 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-05-10 19:40 - 2014-05-05 22:57 - 00000000 ___DC () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-05-10 19:38 - 2014-05-10 19:37 - 17305616 ____C (Malwarebytes Corporation ) C:\Users\Tanja\Downloads\mbam-setup-2.0.1.1004.exe 2014-05-10 19:36 - 2014-05-10 19:36 - 00001067 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk 2014-05-10 19:36 - 2014-05-10 19:36 - 00000000 ___DC () C:\Users\Tanja\AppData\Local\Secunia PSI 2014-05-10 19:36 - 2014-05-10 19:36 - 00000000 ___DC () C:\Program Files (x86)\Secunia 2014-05-10 19:36 - 2009-07-14 05:20 - 00000000 __RDC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup 2014-05-10 19:35 - 2014-05-10 19:35 - 05329480 ____C (Secunia) C:\Users\Tanja\Downloads\PSISetup_3.0.0.9016.exe 2014-05-10 19:25 - 2014-05-10 19:23 - 00002139 ____C () C:\DelFix.txt 2014-05-10 19:23 - 2014-05-06 20:30 - 00000000 ___DC () C:\Windows\ERUNT 2014-05-10 19:07 - 2014-05-10 19:06 - 21987152 ____C (Mozilla) C:\Users\Tanja\Downloads\Thunderbird Setup 24.5.0(1).exe 2014-05-10 19:05 - 2014-05-10 19:04 - 19662544 ____C (Mozilla) C:\Users\Tanja\Downloads\Thunderbird Setup 24.5.0.exe 2014-05-10 19:03 - 2011-10-27 10:25 - 00000000 ___DC () C:\Users\Tanja\AppData\Local\Thunderbird 2014-05-08 20:20 - 2011-12-26 11:14 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Skype 2014-05-08 18:13 - 2014-04-07 07:07 - 00004106 ____C () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1cf521f401f7f7b 2014-05-08 18:13 - 2014-02-21 11:36 - 00003854 ____C () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1cf2ee873e0378f 2014-05-08 08:08 - 2013-10-24 20:50 - 00001976 ____C () C:\Users\Public\Desktop\Dell DataSafe Online.lnk 2014-05-08 08:08 - 2011-10-11 17:26 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell DataSafe Online 2014-05-06 18:47 - 2014-05-05 21:05 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2014-05-06 18:47 - 2014-05-05 18:59 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ad-Aware Antivirus 2014-05-06 18:47 - 2013-12-11 20:26 - 00000000 ___DC () C:\Windows\System32\Tasks\SystemSockets 2014-05-06 18:47 - 2012-09-20 20:28 - 00000000 ___DC () C:\Users\Gast 2014-05-06 18:47 - 2012-08-28 21:49 - 00000000 ___DC () C:\Users\Video 2014-05-06 18:47 - 2011-12-22 23:09 - 00000000 ___DC () C:\Users\Mascha 2014-05-06 18:47 - 2011-10-11 17:32 - 00000000 ___DC () C:\ProgramData\Uninstall 2014-05-06 18:47 - 2011-10-11 16:50 - 00000000 ___DC () C:\Windows\SysWOW64\NV 2014-05-06 18:47 - 2011-10-11 09:45 - 00000000 ___DC () C:\Windows\SysWOW64\RTCOM 2014-05-06 18:47 - 2009-07-14 05:20 - 00000000 ___DC () C:\Windows\SysWOW64\Recovery 2014-05-06 18:47 - 2009-07-14 05:20 - 00000000 ___DC () C:\Windows\registration 2014-05-06 18:47 - 2009-07-14 05:20 - 00000000 ___DC () C:\Windows\AppCompat 2014-05-06 18:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-05-06 18:43 - 2011-12-22 23:49 - 00000000 ____D () C:\Users\Mascha\AppData\Local\Google 2014-05-06 18:43 - 2011-10-15 23:36 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Mozilla 2014-05-06 13:43 - 2013-07-29 16:10 - 00000000 ___DC () C:\Windows\System32\Tasks\ProtectedSearch 2014-05-06 13:43 - 2013-07-29 15:51 - 00000000 ___DC () C:\Windows\System32\Tasks\Browser Updater 2014-05-06 12:24 - 2014-05-06 12:23 - 17305616 ____C (Malwarebytes Corporation ) C:\Users\Tanja\Desktop\mbam-setup-2.0.1.1004.exe 2014-05-06 12:22 - 2009-07-14 05:20 - 00000000 ___DC () C:\Windows\system32\NDF 2014-05-06 11:48 - 2014-05-06 11:48 - 00269048 ____C () C:\Windows\Minidump\050614-30295-01.dmp 2014-05-06 11:48 - 2012-02-18 22:30 - 00000000 ___DC () C:\Windows\Minidump 2014-05-06 11:48 - 2012-02-18 22:29 - 251116278 _____ () C:\Windows\MEMORY.DMP 2014-05-06 07:27 - 2014-05-06 07:27 - 00013824 ____C () C:\Users\Tanja\AppData\Roaming\FAXLOG32.CDX 2014-05-06 07:27 - 2014-05-06 07:27 - 00001906 ____C () C:\Users\Tanja\AppData\Roaming\FAXLOG32.DBF 2014-05-06 07:27 - 2014-05-06 07:27 - 00001024 ____C () C:\Users\Tanja\AppData\Roaming\FAXLOG32.FPT 2014-05-05 22:57 - 2014-05-05 22:57 - 00000000 ___DC () C:\ProgramData\Malwarebytes 2014-05-05 22:34 - 2014-05-05 22:34 - 00001262 ____C () C:\Users\Tanja\Desktop\Revo Uninstaller.lnk 2014-05-05 22:34 - 2014-05-05 22:34 - 00000000 ___DC () C:\Program Files (x86)\VS Revo Group 2014-05-05 22:29 - 2014-05-05 22:29 - 02623656 ____C (VS Revo Group Ltd.) C:\Users\Tanja\Desktop\revosetup95.exe 2014-05-05 22:09 - 2014-05-05 22:09 - 00380416 ____C () C:\Users\Tanja\Desktop\Gmer-19357.exe 2014-05-05 21:05 - 2014-05-05 21:05 - 00001785 ____C () C:\Users\Public\Desktop\iTunes.lnk 2014-05-05 21:05 - 2014-05-05 21:04 - 00000000 ___DC () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-05-05 21:05 - 2014-05-05 21:04 - 00000000 ___DC () C:\Program Files\iTunes 2014-05-05 21:05 - 2014-05-05 21:04 - 00000000 ___DC () C:\Program Files (x86)\iTunes 2014-05-05 21:04 - 2014-01-14 20:16 - 00000000 ___DC () C:\Program Files\iPod 2014-05-05 20:59 - 2014-05-05 20:59 - 00000000 ___DC () C:\Program Files\Bonjour 2014-05-05 20:59 - 2014-05-05 20:59 - 00000000 ___DC () C:\Program Files (x86)\Bonjour 2014-05-05 20:58 - 2012-05-12 21:42 - 00000000 ___DC () C:\ProgramData\Apple 2014-05-05 20:45 - 2014-05-05 20:34 - 148885840 ____C (Apple Inc.) C:\Users\Tanja\Downloads\iTunes64Setup(1).exe 2014-05-05 20:30 - 2012-10-11 14:32 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\DVDVideoSoft 2014-05-05 20:18 - 2011-12-11 22:21 - 00000000 ___DC () C:\Program Files (x86)\UltraStar 2014-05-05 20:09 - 2014-05-05 18:13 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Nico Mak Computing 2014-05-05 20:08 - 2014-05-05 14:09 - 00000000 ___DC () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP 2014-05-05 20:07 - 2014-05-05 20:07 - 00000000 _SHDC () C:\Users\Tanja\AppData\Local\EmieUserList 2014-05-05 20:07 - 2014-05-05 20:07 - 00000000 _SHDC () C:\Users\Tanja\AppData\Local\EmieSiteList 2014-05-05 20:07 - 2011-10-15 23:24 - 00000000 ___DC () C:\Users\Tanja\AppData\Local\Google 2014-05-05 20:01 - 2011-10-11 17:32 - 00000000 ___DC () C:\ProgramData\Sonic 2014-05-05 20:01 - 2011-10-11 17:31 - 00000000 ___DC () C:\ProgramData\Roxio 2014-05-05 20:01 - 2011-10-11 17:30 - 00000000 ___DC () C:\Program Files (x86)\Roxio 2014-05-05 19:56 - 2011-10-14 11:51 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Roxio 2014-05-05 19:55 - 2014-05-05 19:55 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Roxio Log Files 2014-05-05 19:37 - 2014-05-05 19:37 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\LavasoftStatistics 2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\Users\Tanja\AppData\Local\adawarebp 2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\Program Files\Lavasoft 2014-05-05 18:56 - 2014-05-05 18:56 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Lavasoft 2014-05-05 18:56 - 2014-05-05 18:56 - 00000000 ___DC () C:\Program Files (x86)\Lavasoft 2014-05-05 18:55 - 2014-05-05 18:55 - 00000000 ___DC () C:\Program Files\Common Files\Lavasoft 2014-05-05 18:54 - 2014-05-05 18:54 - 00000000 ___DC () C:\ProgramData\Lavasoft 2014-05-05 18:53 - 2014-05-05 18:53 - 01727624 ____C () C:\Users\Tanja\Downloads\Adaware_Installer.exe 2014-05-05 18:44 - 2014-05-05 18:44 - 00728960 ____C (Enigma Software Group USA, LLC.) C:\Users\Tanja\Downloads\SpyHunter-Installer(1).exe 2014-05-05 18:13 - 2014-05-05 18:13 - 04892480 ____C (WinZip International LLC ) C:\Users\Tanja\Downloads\wzmp_8.exe 2014-05-05 14:58 - 2011-12-11 22:21 - 00001017 _____ () C:\Users\UpdatusUser\Desktop\UltraStar.lnk 2014-05-05 14:58 - 2011-10-29 19:54 - 00001115 _____ () C:\Users\UpdatusUser\Desktop\PDF Passwort Knacker 1.0.lnk 2014-05-05 14:49 - 2012-06-29 19:08 - 00001017 ____C () C:\Users\TAN\Desktop\UltraStar.lnk 2014-05-05 14:48 - 2013-07-29 15:33 - 00001072 ____C () C:\Users\Public\Desktop\PDF24 Editor.lnk 2014-05-05 14:48 - 2013-07-29 15:33 - 00001057 ____C () C:\Users\Public\Desktop\PDF24 Fax.lnk 2014-05-05 14:48 - 2013-06-06 21:38 - 00001239 ____C () C:\Users\Public\Desktop\ElsterFormular.lnk 2014-05-05 14:48 - 2013-02-27 13:15 - 00002148 ____C () C:\Users\Public\Desktop\Nero Blu-ray Player.lnk 2014-05-05 14:48 - 2012-11-26 10:54 - 00001033 ____C () C:\Users\Public\Desktop\Adobe Download Assistant.lnk 2014-05-05 14:48 - 2012-06-17 13:26 - 00000962 ____C () C:\Users\Public\Desktop\calibre - E-book management.lnk 2014-05-05 14:48 - 2011-10-27 21:26 - 00001959 ____C () C:\Users\Public\Desktop\Lexmark-Druckerstartseite starten.LNK 2014-05-05 14:48 - 2011-10-15 23:36 - 00001136 ____C () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-05-05 14:34 - 2011-10-11 17:35 - 00000945 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zinio Reader 4.lnk 2014-05-05 14:34 - 2011-10-11 17:25 - 00002488 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk 2014-05-05 14:34 - 2011-10-11 17:25 - 00001460 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk 2014-05-05 14:34 - 2011-10-11 17:25 - 00001376 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Photo Gallery.lnk 2014-05-05 14:34 - 2011-10-11 17:25 - 00001307 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Movie Maker.lnk 2014-05-05 14:33 - 2012-11-26 10:54 - 00001045 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Download Assistant.lnk 2014-05-05 14:33 - 2011-10-15 23:36 - 00001148 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-05-05 14:33 - 2011-10-14 11:45 - 00001931 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hilfedokumentation von Dell.lnk 2014-05-05 14:10 - 2014-05-05 14:10 - 00000000 ___DC () C:\Program Files\Enigma Software Group 2014-05-05 14:10 - 2014-05-05 14:10 - 00000000 ____C () C:\autoexec.bat 2014-05-05 14:06 - 2014-05-05 14:06 - 00728960 ____C (Enigma Software Group USA, LLC.) C:\Users\Tanja\Downloads\SpyHunter-Installer.exe 2014-05-01 21:50 - 2012-06-30 20:49 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\SoftGrid Client 2014-04-23 09:51 - 2009-07-14 05:20 - 00000000 ___DC () C:\Windows\PolicyDefinitions 2014-04-22 17:38 - 2014-04-22 17:36 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-04-22 17:38 - 2014-04-22 17:36 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-04-22 17:38 - 2014-04-22 17:36 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-04-22 17:38 - 2014-04-22 17:36 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-04-22 17:38 - 2014-04-22 17:36 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-04-22 17:38 - 2014-04-22 17:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-04-22 17:38 - 2014-04-22 17:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-04-22 17:38 - 2014-04-22 17:36 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-04-22 17:38 - 2014-04-22 17:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-04-22 17:09 - 2014-04-22 17:07 - 21987424 ____C (Mozilla) C:\Users\Tanja\Downloads\Thunderbird Setup 24.4.0.exe 2014-04-17 10:30 - 2014-04-17 10:30 - 00002982 ____C () C:\Windows\System32\Tasks\{B47D42E0-03AF-400A-A540-7F155D64C658} Some content of TEMP: ==================== C:\Users\Tanja\AppData\Local\Temp\2b6ddf79-14f0-4d62-a761-19e52e27b3ab.exe C:\Users\Tanja\AppData\Local\Temp\ah_fedtv.dll C:\Users\Tanja\AppData\Local\Temp\jre-6u37-windows-i586-iftw.exe C:\Users\Tanja\AppData\Local\Temp\nsl25CD.tmp.tbDVDV.dll C:\Users\Tanja\AppData\Local\Temp\pdf24-creator-update.exe C:\Users\Tanja\AppData\Local\Temp\Quarantine.exe C:\Users\Tanja\AppData\Local\Temp\SHSetup.exe C:\Users\Tanja\AppData\Local\Temp\SIMEEIInstaller.exe C:\Users\Tanja\AppData\Local\Temp\SkypeSetup.exe C:\Users\Tanja\AppData\Local\Temp\sqlite3.exe C:\Users\Tanja\AppData\Local\Temp\stageremote_2.0.0.43_2.0.0.50_update_all.exe C:\Users\Tanja\AppData\Local\Temp\vcredist_x86.exe C:\Users\Tanja\AppData\Local\Temp\YontooSetup-S.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe [2014-05-15 10:01] - [2014-05-15 12:38] - 0455168 ____A (Microsoft Corporation) 88AB9B72B4BF3963A0DE0820B4B0B06C C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-04-29 08:20 ==================== End Of Log ============================ |
|
17.05.2014, 19:45
| #13 |
| /// the machine /// TB-Ausbilder | adware-Bprotect durch McAfee entdeckt und konnte nicht entfernt werden Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter Task: {AB024251-19B7-46FF-A612-2F995D87E993} - \ProtectedSearch\Protected Search No Task File <==== ATTENTION
Task: {AF4B7A7F-D2BB-4B60-BAF4-1B5A3825A767} - \YourFile Update No Task File <==== ATTENTION
Task: {D8BE0879-0DEB-47B7-B591-981C6D1D3AC2} - \Browser Updater\Browser Updater No Task File <==== ATTENTION
Task: {ED13BC92-AEFF-41E9-A1A0-EB2394E045F2} - \Browser Manager No Task File <==== ATTENTION
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Was für Probleme genau?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
26.05.2014, 21:32
| #14 |
| | adware-Bprotect durch McAfee entdeckt und konnte nicht entfernt werden Hi, Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 25-05-2014 02
Ran by Tanja at 2014-05-26 22:13:01 Run:1
Running from C:\Users\Tanja\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Task: {AB024251-19B7-46FF-A612-2F995D87E993} - \ProtectedSearch\Protected Search No Task File <==== ATTENTION
Task: {AF4B7A7F-D2BB-4B60-BAF4-1B5A3825A767} - \YourFile Update No Task File <==== ATTENTION
Task: {D8BE0879-0DEB-47B7-B591-981C6D1D3AC2} - \Browser Updater\Browser Updater No Task File <==== ATTENTION
Task: {ED13BC92-AEFF-41E9-A1A0-EB2394E045F2} - \Browser Manager No Task File <==== ATTENTION
*****************
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{AB024251-19B7-46FF-A612-2F995D87E993} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AB024251-19B7-46FF-A612-2F995D87E993} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ProtectedSearch\Protected Search => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{AF4B7A7F-D2BB-4B60-BAF4-1B5A3825A767} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AF4B7A7F-D2BB-4B60-BAF4-1B5A3825A767} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\YourFile Update => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D8BE0879-0DEB-47B7-B591-981C6D1D3AC2} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D8BE0879-0DEB-47B7-B591-981C6D1D3AC2} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Browser Updater\Browser Updater => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{ED13BC92-AEFF-41E9-A1A0-EB2394E045F2} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ED13BC92-AEFF-41E9-A1A0-EB2394E045F2} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Browser Manager => Key deleted successfully.
==== End of Fixlog ====
bei jedem klick dauert es 1-2 Minuten bis die Funktion endlich ausgeführt wird. Egal was ich mache: öffnen, schließen, weiterleiten der E-Mails oder antworten auf die E-Mails. Dabei ersheint oben in der Menüleiste (keine Rückmeldung) und Thunderbird hängt. Das nervt. Ich habe ihn bereits mehrere male neu installiert- bringt leider nichts. LG, Tanjuscha |
|
27.05.2014, 18:22
| #15 |
| /// the machine /// TB-Ausbilder | adware-Bprotect durch McAfee entdeckt und konnte nicht entfernt werden Hast Du auch mal die restlichen Daten gelöscht nach Deinstallieren? Deinstallier ihn mal mit Revo Uninstaller.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu adware-Bprotect durch McAfee entdeckt und konnte nicht entfernt werden |
| ad-aware, antivirus, association, bonjour, computer, defender, device driver, firefox, flash player, freemium, home, homepage, mcafee firewall, mp3, msil/psw.agent.nfx, newtab, registry, services.exe, siteadvisor, spyhunter, spyhunter entfernen, svchost.exe, temp, vcredist, win32/hoax.archsms.hl, windows, wscript.exe |
Linear-Darstellung
