| |
| |||||||
Log-Analyse und Auswertung: adware-Bprotect durch McAfee entdeckt und konnte nicht entfernt werdenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
05.05.2014, 20:45
| #1 |
| |  adware-Bprotect durch McAfee entdeckt und konnte nicht entfernt werden Hallo liebe IT-Spezialisten! Ich hoffe, Ihr könnt mir helfen. Mein Computer arbeitet seit einigen Tagen langsamer als sonst. Das Mailprogramm Mozilla Thunderbird hängt... Betriebssystem ist Windows 7 Home Premium. Ich habe den Rechner mit McAfee scannen lassen. Es wurden ein Paar Viren gefunden. Der eine davon -Adware-Bprotect- konnte leider nicht entfernt werden. Hier sind die Logfiles von Farbar (FRST.txt): FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-05-2014 02
Ran by Tanja (administrator) on TANJA-PC on 05-05-2014 21:19:29
Running from C:\Users\Tanja\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe
( ) C:\Windows\System32\lxeccoms.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
() C:\Program Files (x86)\HomeTab\WConnectorHandler.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
() C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe
() C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\ezprint.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Lavasoft) C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Lavasoft) C:\ProgramData\Search Protection\SearchProtection.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe
(Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McUICnt.exe
(soft Xpansion) C:\Program Files (x86)\Common Files\soft Xpansion\sxds10.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\Core\mchost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(McAfee, Inc.) C:\Program Files\mcafee\msm\McSmtFwk.exe
() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareDesktop.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [FreeFallProtection] => C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe [686704 2010-12-17] ()
HKLM\...\Run: [IntelPAN] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-07-28] (Intel(R) Corporation)
HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [4479648 2011-01-25] (Dell Inc.)
HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [Stage Remote] => C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe [2022976 2011-06-28] ()
HKLM\...\Run: [lxecmon.exe] => C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe [770728 2011-01-23] ()
HKLM\...\Run: [EzPrint] => C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\ezprint.exe [148280 2011-01-23] ()
HKLM\...\Run: [DellStage] => C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe [2195824 2012-02-01] ()
HKLM\...\Run: [] => [X]
HKLM\...\Run: [AdAwareTray] => C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe [4114264 2014-01-23] ()
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2013-12-18] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Dell DataSafe Online] => C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe [3396448 2013-11-11] (Dell, Inc.)
HKLM-x32\...\Run: [mcui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-01-28] (McAfee, Inc.)
HKLM-x32\...\Run: [Lexmark Pro800-Pro900 Series] => C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\fm3032.exe [316072 2011-01-23] ()
HKLM-x32\...\Run: [AccuWeatherWidget] => C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe [968048 2012-02-01] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254896 2012-09-17] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-01-28] (McAfee, Inc.)
HKLM-x32\...\Run: [Ad-Aware Browsing Protection] => C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe [559696 2013-09-27] (Lavasoft)
HKLM-x32\...\Run: [Search Protection] => C:\ProgramData\Search Protection\SearchProtection.exe [949512 2014-02-17] (Lavasoft)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-3715489345-1050972543-478851-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-10-02] (Skype Technologies S.A.)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [226920 2011-04-22] (NVIDIA Corporation)
Startup: C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IMVU.lnk
ShortcutTarget: IMVU.lnk -> C:\Users\Gast\AppData\Roaming\IMVUClient\IMVUQualityAgent.exe ()
Startup: C:\Users\Mascha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk
ShortcutTarget: Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk -> C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe (Intel® Corporation)
Startup: C:\Users\Tanja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\Video\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk
ShortcutTarget: Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk -> C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe (Intel® Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://search.babylon.com/?affID=114211&tt=3612_3&babsrc=HP_ss&mntrId=c43f51d200000000000074e50b3f07c1
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://dell.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x51FBC3AEF6A5CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.certified-toolbar.com?si=46364&tid=3869&ver=5.7&ts=1375105834002.000005&tguid=46364-3869-1395730212770-747088-b5678&st=chrome&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.certified-toolbar.com?si=46364&tid=3869&ver=5.7&ts=1375105834002.000005&tguid=46364-3869-1395730212770-747088-b5678&st=chrome&q=
URLSearchHook: HKLM-x32 - (No Name) - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No File
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - DefaultScope {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=5.7&ts=1375105834002.000005&tguid=46364-3869-1395730212770-747088-b5678&q={searchTerms}
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=5.7&ts=1375105834002.000005&tguid=46364-3869-1395730212770-747088-b5678&q={searchTerms}
SearchScopes: HKLM-x32 - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010006.10031&barid={7B48AE94-139E-11E2-AACC-848F69B0791A}
SearchScopes: HKCU - DefaultScope {794B2C93-9B33-4B66-A556-F35D9ACBCBA6} URL = hxxp://de.search.yahoo.com/search?fr=mcafee&type=A011DE105&p={SearchTerms}
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - BrowserMngrDefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&affID=114211&tt=3612_3&babsrc=SP_ss&mntrId=c43f51d200000000000074e50b3f07c1
SearchScopes: HKCU - {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = hxxp://securedsearch2.lavasoft.com/results.php?pr=vmn&id=adawaretb&v=3_8&idate=2014-05-05&hsimp=yhs-lavasoft&ent=ch&q={searchTerms}
SearchScopes: HKCU - {794B2C93-9B33-4B66-A556-F35D9ACBCBA6} URL = hxxp://de.search.yahoo.com/search?fr=mcafee&type=A011DE105&p={SearchTerms}
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=5.7&ts=1375105834002.000005&tguid=46364-3869-1395730212770-747088-b5678&q={searchTerms}
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=4.9&ts=1375105834002.000005&tguid=46364-3869-1375105834002-F5FC849EF3E676B8AF12E817760E08CB&q={searchTerms}
BHO: Ad-Aware Security Add-on - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - C:\Program Files (x86)\Lavasoft\AdAware SecureSearch Toolbar\adawareDx64.dll ()
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO: HomeTab - {ba696155-d96e-4281-b467-0367a0456474} - C:\Program Files\HomeTab\IE\HomeTab.dll (Simply Tech LTD.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
BHO-x32: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - C:\Program Files\mcafee\msk\mskapbho.dll ()
BHO-x32: No Name - {2EECD738-5844-4a99-B4B6-146BF802613B} - No File
BHO-x32: Ad-Aware Security Add-on - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - C:\Program Files (x86)\Lavasoft\AdAware SecureSearch Toolbar\adawareDx.dll ()
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: HomeTab - {ba696155-d96e-4281-b467-0367a0456474} - C:\Program Files (x86)\HomeTab\IE\HomeTab.dll (Simply Tech LTD.)
BHO-x32: Flagfox - {BA7B8F39-DF7F-4A98-83E9-57CE6ED9CA24} - C:\Users\Tanja\AppData\LocalLow\Flagfox\IE\Flagfox.dll (Dave G)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Toolbar: HKLM - Free PDF Perfect - {EFC2B9BE-AB2B-47F1-A47D-9EB28E58C917} - C:\Program Files (x86)\Freemium\Free PDF Perfect\ieagent64.dll (soft Xpansion)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM - HomeTab - {ba696155-d96e-4281-b467-0367a0456474} - C:\Program Files\HomeTab\IE\HomeTab.dll (Simply Tech LTD.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM - Ad-Aware Security Add-on - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - C:\Program Files (x86)\Lavasoft\AdAware SecureSearch Toolbar\adawareDx64.dll ()
Toolbar: HKLM-x32 - Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
Toolbar: HKLM-x32 - No Name - {98889811-442D-49dd-99D7-DC866BE87DBC} - No File
Toolbar: HKLM-x32 - No Name - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No File
Toolbar: HKLM-x32 - HomeTab - {ba696155-d96e-4281-b467-0367a0456474} - C:\Program Files (x86)\HomeTab\IE\HomeTab.dll (Simply Tech LTD.)
Toolbar: HKLM-x32 - Free PDF Perfect - {EFC2B9BE-AB2B-47F1-A47D-9EB28E58C917} - C:\Program Files (x86)\Freemium\Free PDF Perfect\ieagent32.dll (soft Xpansion)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - Ad-Aware Security Add-on - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - C:\Program Files (x86)\Lavasoft\AdAware SecureSearch Toolbar\adawareDx.dll ()
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKCU - No Name - {977AE9CC-AF83-45E8-9E03-E2798216E2D5} - No File
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default
FF NewTab: about:home
FF SearchEngineOrder.1: Web Search
FF Homepage: about:home
FF Keyword.URL: hxxp://securedsearch2.lavasoft.com/results.php?pr=vmn&id=adawaretb&v=3_8&idate=__installtime__&hsimp=yhs-lavasoft&ent=bs&q=
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @innoplus.de/ino3DViewer - C:\Program Files (x86)\innoplus\3D-Viewer-innoPlus\npIno3DViewer.dll (INNOVA-engineering GmbH Dresden)
FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_37 - C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @soft-xpansion/npsxpdf - C:\Program Files (x86)\Common Files\Freemium\np-sxpdf.dll (soft-Xpansion)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\searchplugins\bProtect.xml
FF SearchPlugin: C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\searchplugins\dvdvideosofttb-de-customized-web-search.xml
FF SearchPlugin: C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\searchplugins\sweetim.xml
FF SearchPlugin: C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\adawaretb.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Savings Sidekick - C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Extensions\crossriderapp5060@crossrider.com [2012-11-22]
FF Extension: pricealarm - C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM [2013-07-29]
FF Extension: Babylon - C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Extensions\ffxtlbr@babylon.com [2012-09-09]
FF Extension: DVDVideoSoftTB DE - C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Extensions\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} [2014-05-05]
FF Extension: HomeTab - C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Extensions\{24532715-4abc-47ee-bd4f-a6774d0723d2} [2014-04-14]
FF Extension: Ad-Aware Security Add-on - C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Extensions\{87934c42-161d-45bc-8cef-ef18abe2a30c} [2014-05-05]
FF Extension: IMinent Toolbar - C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444} [2012-06-17]
FF Extension: FoxyDeal - C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Extensions\{F58A62EB-38DC-43C4-A539-DC52E135208D} [2013-07-29]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-22]
FF Extension: SweetPacks Toolbar for Firefox - C:\Users\Tanja\AppData\Roaming\Mozilla\Firefox\Profiles\8465b6yz.default\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi [2012-10-11]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-04-03]
FF HKLM-x32\...\Firefox\Extensions: [webbooster@iminent.com] - C:\Program Files (x86)\Iminent\webbooster@iminent.com
FF HKLM-x32\...\Firefox\Extensions: [{B45418F9-6406-4828-9D1A-35313FB1E2D6}] - C:\ProgramData\Freemium\Free PDF Perfect\Data\fftb
FF Extension: Free PDF Perfect - C:\ProgramData\Freemium\Free PDF Perfect\Data\fftb [2013-07-29]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2013-11-26]
FF HKLM-x32\...\Thunderbird\Extensions: [{B45418F9-6406-4828-9D1A-35313FB1E2D6}] - C:\ProgramData\Freemium\Free PDF Perfect\Data\fftb
FF Extension: Free PDF Perfect - C:\ProgramData\Freemium\Free PDF Perfect\Data\fftb [2013-07-29]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2011-10-11]
FF HKCU\...\Firefox\Extensions: [{b64982b1-d112-42b5-b1e4-d3867c4533f8}] - C:\ProgramData\Browser Manager\2.3.787.43\{16cdff19-861d-48e3-a751-d99a27784753}\FirefoxExtension
Chrome:
=======
CHR HomePage: hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_8&idate=2014-05-05&ent=hp&u=544AC73567361970CE68AE5367C2C7DA
CHR StartupUrls: "hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_8&idate=2014-05-05&ent=hp&u=544AC73567361970CE68AE5367C2C7DA", "about:newtab?source=home"
CHR Extension: (Google Docs) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-13]
CHR Extension: (Google Drive) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-13]
CHR Extension: (YouTube) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-13]
CHR Extension: (Flagfox) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfdfamfnacokbbbnmpdfmhonipnhmbid [2013-06-19]
CHR Extension: (Google-Suche) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-13]
CHR Extension: (Savings Sidekick) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo [2014-01-13]
CHR Extension: (SiteAdvisor) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2014-01-13]
CHR Extension: (NewTab Connect) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlceijfdfeghdhmmbhbcffanmcggoojf [2014-05-05]
CHR Extension: (Google Wallet) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-13]
CHR Extension: (Google Mail) - C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-13]
CHR HKLM-x32\...\Chrome\Extension: [cfdfamfnacokbbbnmpdfmhonipnhmbid] - C:\Users\Tanja\AppData\LocalLow\Flagfox\CHROME\Flagfox.crx [2013-04-28]
CHR HKLM-x32\...\Chrome\Extension: [dhdepfaagokllfmhfbcfmocaeigmoebo] - C:\Users\Tanja\AppData\Local\Savings Sidekick\Chrome\Savings Sidekick.crx [2012-08-22]
CHR HKLM-x32\...\Chrome\Extension: [pgafcinpmmpklohkojmllohdhomoefph] - C:\ProgramData\Browser Manager\2.3.787.43\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.crx [2012-08-22]
==================== Services (Whitelisted) =================
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S4 IBUpdaterService; C:\Windows\system32\dmwu.exe [1447728 2013-05-21] ()
R2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe [702744 2014-01-23] ()
S2 lxecCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxecserv.exe [45736 2010-04-14] (Lexmark International, Inc.)
R2 lxec_device; C:\Windows\system32\lxeccoms.exe [1052328 2010-04-14] ( )
R2 lxec_device; C:\Windows\SysWOW64\lxeccoms.exe [598696 2010-04-14] ( )
R2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178528 2014-01-28] (McAfee, Inc.)
S3 McAWFwk; C:\Program Files\mcafee\msc\McAWFwk.exe [220528 2010-08-30] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [602944 2013-08-02] (McAfee, Inc.)
S4 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1025712 2014-01-21] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-03-17] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [185792 2014-03-17] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-07-28] ()
R3 SXDS10; C:\Program Files (x86)\Common Files\soft Xpansion\sxds10.exe [234096 2013-07-29] (soft Xpansion)
S4 Browser Manager; C:\ProgramData\Browser Manager\2.3.787.43\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe [X]
==================== Drivers (Whitelisted) ====================
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70592 2014-03-17] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [180272 2014-03-17] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311600 2014-03-17] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [522360 2014-03-17] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [783864 2014-03-17] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [422712 2014-01-21] (McAfee, Inc.)
S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [96592 2014-01-21] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [345456 2014-03-17] (McAfee, Inc.)
S3 NvStUSB; C:\Windows\system32\drivers\nvstusb.sys [121960 2010-12-12] ()
R3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [329800 2013-07-17] (BitDefender S.R.L.)
R3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-05-05 21:05 - 2014-05-05 21:05 - 00001785 ____C () C:\Users\Public\Desktop\iTunes.lnk
2014-05-05 21:05 - 2014-05-05 21:05 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-05-05 21:04 - 2014-05-05 21:05 - 00000000 ___DC () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-05-05 21:04 - 2014-05-05 21:05 - 00000000 ___DC () C:\Program Files\iTunes
2014-05-05 21:04 - 2014-05-05 21:05 - 00000000 ___DC () C:\Program Files (x86)\iTunes
2014-05-05 20:59 - 2014-05-05 20:59 - 00000000 ___DC () C:\Program Files\Bonjour
2014-05-05 20:59 - 2014-05-05 20:59 - 00000000 ___DC () C:\Program Files (x86)\Bonjour
2014-05-05 20:44 - 2014-05-05 20:46 - 00048975 ____C () C:\Users\Tanja\Downloads\Addition.txt
2014-05-05 20:43 - 2014-05-05 21:19 - 00031850 ____C () C:\Users\Tanja\Downloads\FRST.txt
2014-05-05 20:43 - 2014-05-05 21:19 - 00000000 ___DC () C:\FRST
2014-05-05 20:42 - 2014-05-05 20:42 - 02063872 ____C (Farbar) C:\Users\Tanja\Downloads\FRST64.exe
2014-05-05 20:34 - 2014-05-05 20:45 - 148885840 ____C (Apple Inc.) C:\Users\Tanja\Downloads\iTunes64Setup(1).exe
2014-05-05 20:07 - 2014-05-05 20:07 - 00000000 _SHDC () C:\Users\Tanja\AppData\Local\EmieUserList
2014-05-05 20:07 - 2014-05-05 20:07 - 00000000 _SHDC () C:\Users\Tanja\AppData\Local\EmieSiteList
2014-05-05 20:02 - 2014-05-05 20:02 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2014-05-05 19:55 - 2014-05-05 19:55 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Roxio Log Files
2014-05-05 19:37 - 2014-05-05 19:37 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\LavasoftStatistics
2014-05-05 18:59 - 2014-05-05 19:53 - 00002267 ____C () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk
2014-05-05 18:59 - 2014-05-05 18:59 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ad-Aware Antivirus
2014-05-05 18:57 - 2014-05-05 20:02 - 00000000 ___DC () C:\ProgramData\Ad-Aware Browsing Protection
2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\SecureSearch
2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\Users\Tanja\AppData\Local\adawarebp
2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\ProgramData\Search Protection
2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\Program Files\Lavasoft
2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\Program Files (x86)\Toolbar Cleaner
2014-05-05 18:56 - 2014-05-05 18:56 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Lavasoft
2014-05-05 18:56 - 2014-05-05 18:56 - 00000000 ___DC () C:\Program Files (x86)\Lavasoft
2014-05-05 18:55 - 2014-05-05 18:55 - 00000000 ___DC () C:\Program Files\Common Files\Lavasoft
2014-05-05 18:54 - 2014-05-05 18:54 - 00000000 ___DC () C:\ProgramData\Lavasoft
2014-05-05 18:53 - 2014-05-05 18:53 - 01727624 ____C () C:\Users\Tanja\Downloads\Adaware_Installer.exe
2014-05-05 18:44 - 2014-05-05 18:44 - 00728960 ____C (Enigma Software Group USA, LLC.) C:\Users\Tanja\Downloads\SpyHunter-Installer(1).exe
2014-05-05 18:13 - 2014-05-05 20:09 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Nico Mak Computing
2014-05-05 18:13 - 2014-05-05 18:13 - 04892480 ____C (WinZip International LLC ) C:\Users\Tanja\Downloads\wzmp_8.exe
2014-05-05 14:10 - 2014-05-05 14:10 - 00000000 ___DC () C:\Program Files\Enigma Software Group
2014-05-05 14:10 - 2014-05-05 14:10 - 00000000 ____C () C:\autoexec.bat
2014-05-05 14:09 - 2014-05-05 20:08 - 00000000 ___DC () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-05-05 14:06 - 2014-05-05 14:06 - 00728960 ____C (Enigma Software Group USA, LLC.) C:\Users\Tanja\Downloads\SpyHunter-Installer.exe
2014-05-05 11:15 - 2014-05-05 19:53 - 00000000 ___DC () C:\Program Files (x86)\Mozilla Thunderbird
2014-04-22 17:36 - 2014-04-22 17:38 - 23549440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 17387008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-22 17:36 - 2014-04-22 17:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-22 17:36 - 2014-04-22 17:38 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-22 17:36 - 2014-04-22 17:38 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-22 17:36 - 2014-04-22 17:38 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-22 17:36 - 2014-04-22 17:38 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-22 17:36 - 2014-04-22 17:38 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-22 17:36 - 2014-04-22 17:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-22 17:36 - 2014-04-22 17:38 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-22 17:36 - 2014-04-22 17:38 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-22 17:36 - 2014-04-22 17:38 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-22 17:09 - 2014-04-22 17:09 - 00002096 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2014-04-22 17:09 - 2014-04-22 17:09 - 00002084 ____C () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2014-04-22 17:07 - 2014-04-22 17:09 - 21987424 ____C (Mozilla) C:\Users\Tanja\Downloads\Thunderbird Setup 24.4.0.exe
2014-04-22 16:34 - 2013-09-23 13:49 - 00197704 ____C (McAfee, Inc.) C:\Windows\system32\Drivers\HipShieldK.sys
2014-04-17 10:30 - 2014-04-17 10:30 - 00002982 ____C () C:\Windows\System32\Tasks\{B47D42E0-03AF-400A-A540-7F155D64C658}
2014-04-14 13:07 - 2014-04-14 13:07 - 00000000 ___DC () C:\Users\Tanja\AppData\Local\{24A9CB4F-290F-4EC2-8C42-657A2FCA4CDB}
2014-04-10 12:43 - 2014-04-10 12:43 - 00002982 ____C () C:\Windows\System32\Tasks\{299B3EF5-797C-4235-B0D6-04E28BA85DE4}
2014-04-10 12:41 - 2014-04-10 12:41 - 00002982 ____C () C:\Windows\System32\Tasks\{C804B517-5AD4-41F7-82A2-B16ED4D0997C}
2014-04-10 12:41 - 2014-04-10 12:41 - 00002982 ____C () C:\Windows\System32\Tasks\{5A6EB0BF-B98A-4B53-A91D-46DCEF4430B3}
2014-04-10 12:41 - 2014-04-10 12:41 - 00002982 ____C () C:\Windows\System32\Tasks\{4348CFF2-7F8D-4849-B373-1FA61EDB155C}
2014-04-10 11:04 - 2014-04-10 12:29 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-10 11:04 - 2014-04-10 12:29 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-10 11:04 - 2014-04-10 12:29 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-10 11:04 - 2014-04-10 12:29 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-10 11:04 - 2014-04-10 12:28 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-10 11:04 - 2014-04-10 12:28 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-10 11:04 - 2014-04-10 12:28 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-10 11:04 - 2014-04-10 12:28 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-10 11:04 - 2014-04-10 12:28 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-10 11:04 - 2014-04-10 12:28 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-10 11:04 - 2014-04-10 12:28 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-10 11:04 - 2014-04-10 12:28 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-10 11:04 - 2014-04-10 12:28 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-10 11:04 - 2014-04-10 12:28 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-10 11:04 - 2014-04-10 12:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-10 11:04 - 2014-04-10 12:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-10 11:04 - 2014-02-04 04:35 - 00274880 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-07 07:07 - 2014-05-05 21:12 - 00001110 ____C () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf521f401f7f7b.job
2014-04-07 07:07 - 2014-04-07 07:07 - 00004106 ____C () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1cf521f401f7f7b
==================== One Month Modified Files and Folders =======
2014-05-05 21:19 - 2014-05-05 20:43 - 00031850 ____C () C:\Users\Tanja\Downloads\FRST.txt
2014-05-05 21:19 - 2014-05-05 20:43 - 00000000 ___DC () C:\FRST
2014-05-05 21:12 - 2014-04-07 07:07 - 00001110 ____C () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf521f401f7f7b.job
2014-05-05 21:05 - 2014-05-05 21:05 - 00001785 ____C () C:\Users\Public\Desktop\iTunes.lnk
2014-05-05 21:05 - 2014-05-05 21:05 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-05-05 21:05 - 2014-05-05 21:04 - 00000000 ___DC () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-05-05 21:05 - 2014-05-05 21:04 - 00000000 ___DC () C:\Program Files\iTunes
2014-05-05 21:05 - 2014-05-05 21:04 - 00000000 ___DC () C:\Program Files (x86)\iTunes
2014-05-05 21:04 - 2014-01-14 20:16 - 00000000 ___DC () C:\Program Files\iPod
2014-05-05 20:59 - 2014-05-05 20:59 - 00000000 ___DC () C:\Program Files\Bonjour
2014-05-05 20:59 - 2014-05-05 20:59 - 00000000 ___DC () C:\Program Files (x86)\Bonjour
2014-05-05 20:58 - 2012-05-12 21:42 - 00000000 ___DC () C:\ProgramData\Apple
2014-05-05 20:46 - 2014-05-05 20:44 - 00048975 ____C () C:\Users\Tanja\Downloads\Addition.txt
2014-05-05 20:45 - 2014-05-05 20:34 - 148885840 ____C (Apple Inc.) C:\Users\Tanja\Downloads\iTunes64Setup(1).exe
2014-05-05 20:43 - 2009-07-14 06:45 - 00021296 ___HC () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-05 20:43 - 2009-07-14 06:45 - 00021296 ___HC () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-05 20:42 - 2014-05-05 20:42 - 02063872 ____C (Farbar) C:\Users\Tanja\Downloads\FRST64.exe
2014-05-05 20:30 - 2012-10-11 14:32 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\DVDVideoSoft
2014-05-05 20:27 - 2012-06-22 23:09 - 00000884 ____C () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-05 20:22 - 2012-10-11 14:23 - 00000000 ___DC () C:\Program Files (x86)\SweetIM
2014-05-05 20:22 - 2011-10-14 11:45 - 00064024 ____C () C:\Users\Tanja\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-05 20:19 - 2012-10-11 14:23 - 00000000 ___DC () C:\ProgramData\SweetIM
2014-05-05 20:18 - 2011-12-11 22:21 - 00000000 ___DC () C:\Program Files (x86)\UltraStar
2014-05-05 20:09 - 2014-05-05 18:13 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Nico Mak Computing
2014-05-05 20:08 - 2014-05-05 14:09 - 00000000 ___DC () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-05-05 20:07 - 2014-05-05 20:07 - 00000000 _SHDC () C:\Users\Tanja\AppData\Local\EmieUserList
2014-05-05 20:07 - 2014-05-05 20:07 - 00000000 _SHDC () C:\Users\Tanja\AppData\Local\EmieSiteList
2014-05-05 20:07 - 2011-10-15 23:24 - 00000000 ___DC () C:\Users\Tanja\AppData\Local\Google
2014-05-05 20:02 - 2014-05-05 20:02 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2014-05-05 20:02 - 2014-05-05 18:57 - 00000000 ___DC () C:\ProgramData\Ad-Aware Browsing Protection
2014-05-05 20:02 - 2011-10-11 09:49 - 01374325 ____C () C:\Windows\WindowsUpdate.log
2014-05-05 20:01 - 2011-10-11 17:32 - 00000000 ___DC () C:\ProgramData\Sonic
2014-05-05 20:01 - 2011-10-11 17:31 - 00000000 ___DC () C:\ProgramData\Roxio
2014-05-05 20:01 - 2011-10-11 17:30 - 00000000 ___DC () C:\Program Files (x86)\Roxio
2014-05-05 19:57 - 2010-11-21 08:50 - 00700118 ____C () C:\Windows\system32\perfh007.dat
2014-05-05 19:57 - 2010-11-21 08:50 - 00149968 ____C () C:\Windows\system32\perfc007.dat
2014-05-05 19:57 - 2009-07-14 07:13 - 01622228 ____C () C:\Windows\system32\PerfStringBackup.INI
2014-05-05 19:56 - 2011-10-14 11:51 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Roxio
2014-05-05 19:55 - 2014-05-05 19:55 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Roxio Log Files
2014-05-05 19:53 - 2014-05-05 18:59 - 00002267 ____C () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk
2014-05-05 19:53 - 2014-05-05 11:15 - 00000000 ___DC () C:\Program Files (x86)\Mozilla Thunderbird
2014-05-05 19:53 - 2012-06-27 15:10 - 00000000 ___DC () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-05 19:52 - 2012-05-28 20:50 - 00000000 ___DC () C:\ProgramData\boost_interprocess
2014-05-05 19:51 - 2014-02-21 11:36 - 00001106 ____C () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf2ee873e0378f.job
2014-05-05 19:51 - 2011-10-27 21:28 - 00198803 ____C () C:\ProgramData\lxecscan.log
2014-05-05 19:51 - 2011-10-11 17:27 - 00000000 ___DC () C:\Program Files (x86)\McAfee
2014-05-05 19:51 - 2011-10-11 17:21 - 00000000 ___DC () C:\Users\Default\AppData\Local\SoftThinks
2014-05-05 19:51 - 2011-10-11 17:21 - 00000000 ___DC () C:\Users\Default User\AppData\Local\SoftThinks
2014-05-05 19:51 - 2011-10-11 17:14 - 00000000 ___DC () C:\Program Files (x86)\Dell DataSafe Local Backup
2014-05-05 19:51 - 2011-10-11 09:47 - 00000000 ___DC () C:\ProgramData\NVIDIA
2014-05-05 19:51 - 2010-11-21 05:47 - 00294022 ____C () C:\Windows\PFRO.log
2014-05-05 19:51 - 2009-07-14 07:08 - 00000006 ___HC () C:\Windows\Tasks\SA.DAT
2014-05-05 19:51 - 2009-07-14 06:51 - 00142366 ____C () C:\Windows\setupact.log
2014-05-05 19:37 - 2014-05-05 19:37 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\LavasoftStatistics
2014-05-05 19:30 - 2012-09-09 20:56 - 00000000 ___DC () C:\Program Files (x86)\Savings Sidekick
2014-05-05 18:59 - 2014-05-05 18:59 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ad-Aware Antivirus
2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\SecureSearch
2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\Users\Tanja\AppData\Local\adawarebp
2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\ProgramData\Search Protection
2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\Program Files\Lavasoft
2014-05-05 18:57 - 2014-05-05 18:57 - 00000000 ___DC () C:\Program Files (x86)\Toolbar Cleaner
2014-05-05 18:56 - 2014-05-05 18:56 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Lavasoft
2014-05-05 18:56 - 2014-05-05 18:56 - 00000000 ___DC () C:\Program Files (x86)\Lavasoft
2014-05-05 18:55 - 2014-05-05 18:55 - 00000000 ___DC () C:\Program Files\Common Files\Lavasoft
2014-05-05 18:54 - 2014-05-05 18:54 - 00000000 ___DC () C:\ProgramData\Lavasoft
2014-05-05 18:53 - 2014-05-05 18:53 - 01727624 ____C () C:\Users\Tanja\Downloads\Adaware_Installer.exe
2014-05-05 18:44 - 2014-05-05 18:44 - 00728960 ____C (Enigma Software Group USA, LLC.) C:\Users\Tanja\Downloads\SpyHunter-Installer(1).exe
2014-05-05 18:13 - 2014-05-05 18:13 - 04892480 ____C (WinZip International LLC ) C:\Users\Tanja\Downloads\wzmp_8.exe
2014-05-05 14:58 - 2011-12-11 22:21 - 00001017 _____ () C:\Users\UpdatusUser\Desktop\UltraStar.lnk
2014-05-05 14:58 - 2011-10-29 19:54 - 00001115 _____ () C:\Users\UpdatusUser\Desktop\PDF Passwort Knacker 1.0.lnk
2014-05-05 14:49 - 2012-06-29 19:08 - 00001017 ____C () C:\Users\TAN\Desktop\UltraStar.lnk
2014-05-05 14:48 - 2013-07-29 15:33 - 00001072 ____C () C:\Users\Public\Desktop\PDF24 Editor.lnk
2014-05-05 14:48 - 2013-07-29 15:33 - 00001057 ____C () C:\Users\Public\Desktop\PDF24 Fax.lnk
2014-05-05 14:48 - 2013-06-06 21:38 - 00001239 ____C () C:\Users\Public\Desktop\ElsterFormular.lnk
2014-05-05 14:48 - 2013-02-27 13:15 - 00002148 ____C () C:\Users\Public\Desktop\Nero Blu-ray Player.lnk
2014-05-05 14:48 - 2012-11-26 10:54 - 00001033 ____C () C:\Users\Public\Desktop\Adobe Download Assistant.lnk
2014-05-05 14:48 - 2012-06-17 13:26 - 00000962 ____C () C:\Users\Public\Desktop\calibre - E-book management.lnk
2014-05-05 14:48 - 2011-10-27 21:26 - 00001959 ____C () C:\Users\Public\Desktop\Lexmark-Druckerstartseite starten.LNK
2014-05-05 14:48 - 2011-10-15 23:36 - 00001136 ____C () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-05-05 14:34 - 2011-10-11 17:35 - 00000945 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zinio Reader 4.lnk
2014-05-05 14:34 - 2011-10-11 17:25 - 00002488 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2014-05-05 14:34 - 2011-10-11 17:25 - 00001460 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2014-05-05 14:34 - 2011-10-11 17:25 - 00001376 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Photo Gallery.lnk
2014-05-05 14:34 - 2011-10-11 17:25 - 00001307 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Movie Maker.lnk
2014-05-05 14:33 - 2012-11-26 10:54 - 00001045 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Download Assistant.lnk
2014-05-05 14:33 - 2011-10-15 23:36 - 00001148 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-05-05 14:33 - 2011-10-14 11:45 - 00001931 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hilfedokumentation von Dell.lnk
2014-05-05 14:10 - 2014-05-05 14:10 - 00000000 ___DC () C:\Program Files\Enigma Software Group
2014-05-05 14:10 - 2014-05-05 14:10 - 00000000 ____C () C:\autoexec.bat
2014-05-05 14:06 - 2014-05-05 14:06 - 00728960 ____C (Enigma Software Group USA, LLC.) C:\Users\Tanja\Downloads\SpyHunter-Installer.exe
2014-05-05 12:05 - 2013-05-23 09:44 - 00003440 _____ () C:\Windows\System32\Tasks\PCDEventLauncherTask
2014-05-05 10:28 - 2012-06-22 23:09 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-05 10:27 - 2012-06-22 23:09 - 00692400 ____C (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-05 10:27 - 2011-10-11 16:55 - 00070832 ____C (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-05 10:14 - 2011-10-27 10:25 - 00000000 ___DC () C:\Users\Tanja\AppData\Local\Thunderbird
2014-05-01 21:50 - 2012-06-30 20:49 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\SoftGrid Client
2014-05-01 21:38 - 2011-12-26 11:14 - 00000000 ___DC () C:\Users\Tanja\AppData\Roaming\Skype
2014-04-30 08:26 - 2011-10-27 21:30 - 00000000 ___DC () C:\ProgramData\Lx_cats
2014-04-30 06:51 - 2014-01-13 13:22 - 00002177 ____C () C:\Users\Public\Desktop\Google Chrome.lnk
2014-04-23 09:51 - 2009-07-14 05:20 - 00000000 ___DC () C:\Windows\PolicyDefinitions
2014-04-22 17:38 - 2014-04-22 17:36 - 23549440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 17387008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-22 17:38 - 2014-04-22 17:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-22 17:38 - 2014-04-22 17:36 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-22 17:38 - 2014-04-22 17:36 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-22 17:38 - 2014-04-22 17:36 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-22 17:38 - 2014-04-22 17:36 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-22 17:38 - 2014-04-22 17:36 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-22 17:38 - 2014-04-22 17:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-22 17:38 - 2014-04-22 17:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-22 17:38 - 2014-04-22 17:36 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-22 17:38 - 2014-04-22 17:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-22 17:09 - 2014-04-22 17:09 - 00002096 ____C () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2014-04-22 17:09 - 2014-04-22 17:09 - 00002084 ____C () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2014-04-22 17:09 - 2014-04-22 17:07 - 21987424 ____C (Mozilla) C:\Users\Tanja\Downloads\Thunderbird Setup 24.4.0.exe
2014-04-17 10:30 - 2014-04-17 10:30 - 00002982 ____C () C:\Windows\System32\Tasks\{B47D42E0-03AF-400A-A540-7F155D64C658}
2014-04-14 20:49 - 2013-06-06 21:38 - 00000000 ___DC () C:\Program Files (x86)\ElsterFormular
2014-04-14 20:43 - 2011-10-14 11:44 - 00000000 ___DC () C:\Users\Tanja
2014-04-14 13:34 - 2014-04-03 10:39 - 00000000 ___DC () C:\Program Files (x86)\Mozilla Firefox
2014-04-14 13:34 - 2013-12-11 20:26 - 00000000 ____D () C:\Windows\System32\Tasks\SystemSockets
2014-04-14 13:34 - 2013-07-29 16:10 - 00000000 ____D () C:\Windows\System32\Tasks\ProtectedSearch
2014-04-14 13:34 - 2013-07-29 15:51 - 00000000 ___DC () C:\Program Files (x86)\HomeTab
2014-04-14 13:34 - 2013-07-29 15:51 - 00000000 ____D () C:\Windows\System32\Tasks\Browser Updater
2014-04-14 13:07 - 2014-04-14 13:07 - 00000000 ___DC () C:\Users\Tanja\AppData\Local\{24A9CB4F-290F-4EC2-8C42-657A2FCA4CDB}
2014-04-12 11:01 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-10 12:43 - 2014-04-10 12:43 - 00002982 ____C () C:\Windows\System32\Tasks\{299B3EF5-797C-4235-B0D6-04E28BA85DE4}
2014-04-10 12:41 - 2014-04-10 12:41 - 00002982 ____C () C:\Windows\System32\Tasks\{C804B517-5AD4-41F7-82A2-B16ED4D0997C}
2014-04-10 12:41 - 2014-04-10 12:41 - 00002982 ____C () C:\Windows\System32\Tasks\{5A6EB0BF-B98A-4B53-A91D-46DCEF4430B3}
2014-04-10 12:41 - 2014-04-10 12:41 - 00002982 ____C () C:\Windows\System32\Tasks\{4348CFF2-7F8D-4849-B373-1FA61EDB155C}
2014-04-10 12:29 - 2014-04-10 11:04 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-10 12:29 - 2014-04-10 11:04 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-10 12:29 - 2014-04-10 11:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-10 12:29 - 2014-04-10 11:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-10 12:28 - 2014-04-10 11:04 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-10 12:28 - 2014-04-10 11:04 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-10 12:28 - 2014-04-10 11:04 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-10 12:28 - 2014-04-10 11:04 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-10 12:28 - 2014-04-10 11:04 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-10 12:28 - 2014-04-10 11:04 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-10 12:28 - 2014-04-10 11:04 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-10 12:28 - 2014-04-10 11:04 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-10 12:28 - 2014-04-10 11:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-10 12:28 - 2014-04-10 11:04 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-10 12:28 - 2014-04-10 11:04 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-10 12:28 - 2014-04-10 11:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-09 07:55 - 2013-07-29 15:51 - 00034376 ____C () C:\Windows\Launcher.exe
2014-04-07 07:07 - 2014-04-07 07:07 - 00004106 ____C () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1cf521f401f7f7b
2014-04-07 07:07 - 2014-02-21 11:36 - 00003854 ____C () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1cf2ee873e0378f
Files to move or delete:
====================
C:\ProgramData\l_0_00_re.pad
Some content of TEMP:
====================
C:\Users\Gast\AppData\Local\Temp\conduitinstaller.exe
C:\Users\Tanja\AppData\Local\Temp\2b6ddf79-14f0-4d62-a761-19e52e27b3ab.exe
C:\Users\Tanja\AppData\Local\Temp\ah_fedtv.dll
C:\Users\Tanja\AppData\Local\Temp\jre-6u37-windows-i586-iftw.exe
C:\Users\Tanja\AppData\Local\Temp\mgsqlite3.dll
C:\Users\Tanja\AppData\Local\Temp\nsl25CD.tmp.tbDVDV.dll
C:\Users\Tanja\AppData\Local\Temp\pdf24-creator-update.exe
C:\Users\Tanja\AppData\Local\Temp\Shortcut_SweetIM_2.exe
C:\Users\Tanja\AppData\Local\Temp\SHSetup.exe
C:\Users\Tanja\AppData\Local\Temp\SIMEEIInstaller.exe
C:\Users\Tanja\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Tanja\AppData\Local\Temp\SQLite.dll
C:\Users\Tanja\AppData\Local\Temp\sqlite3.exe
C:\Users\Tanja\AppData\Local\Temp\tbu1E78.exe
C:\Users\Tanja\AppData\Local\Temp\tbu209A.exe
C:\Users\Tanja\AppData\Local\Temp\tbu227D.exe
C:\Users\Tanja\AppData\Local\Temp\tbu275D.exe
C:\Users\Tanja\AppData\Local\Temp\tbu3054.exe
C:\Users\Tanja\AppData\Local\Temp\tbu30C.exe
C:\Users\Tanja\AppData\Local\Temp\tbu39F3.exe
C:\Users\Tanja\AppData\Local\Temp\tbu51E.exe
C:\Users\Tanja\AppData\Local\Temp\tbu74E1.exe
C:\Users\Tanja\AppData\Local\Temp\tbuA543.exe
C:\Users\Tanja\AppData\Local\Temp\tbuB25D.exe
C:\Users\Tanja\AppData\Local\Temp\tbuC0AF.exe
C:\Users\Tanja\AppData\Local\Temp\tbuD28A.exe
C:\Users\Tanja\AppData\Local\Temp\tbuD7D7.exe
C:\Users\Tanja\AppData\Local\Temp\vcredist_x86.exe
C:\Users\Tanja\AppData\Local\Temp\YontooSetup-S.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-04-29 08:20
==================== End Of Log ============================
Kann mit bitte jemand helfen? Danke im Voraus Hier kommt noch die Addition.txt: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 05-05-2014 02
Ran by Tanja at 2014-05-05 21:57:20
Running from C:\Users\Tanja\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {ADA629C7-7F48-5689-624A-3B76997E0892}
AV: Ad-Aware Antivirus (Disabled - Out of date) {D87B6541-12A1-DAEA-0033-9B8057AAB996}
AS: Ad-Aware Antivirus (Disabled - Out of date) {631A84A5-349B-D564-3A83-A0F22C2DF32B}
AS: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {16C7C823-5972-5907-58FA-0004E2F9422F}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee Firewall (Enabled) {959DA8E2-3527-57D1-4915-924367AD4FE9}
FW: Ad-Aware Firewall (Disabled) {E040E464-58CE-DBB2-2B6C-32B5A979FEED}
==================== Installed Programs ======================
3D-Viewer-innoplus (HKLM-x32\...\{B96DB037-DBEA-4186-9081-9CBD537F82E8}) (Version: 13.01.16 - INNOVA-engineering GmbH)
ABBYY FineReader 6.0 Sprint (HKLM-x32\...\{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}) (Version: 6.00.2146.41621 - ABBYY Software House)
AccelerometerP11 (HKLM-x32\...\{87434D51-51DB-4109-B68F-A829ECDCF380}) (Version: 2.00.11.22 - STMicroelectronics)
Ad-Aware Antivirus (HKLM\...\{6A16ADA5-0B30-4893-84AB-961B1340D14A}_AdAwareUpdater) (Version: 11.1.5354.0 - Lavasoft)
Ad-Aware Security Add-on (HKLM-x32\...\adawaretb) (Version: 3.8.0.11 - Lavasoft)
AdAwareInstaller (Version: 11.1.5354.0 - Lavasoft) Hidden
AdAwareUpdater (Version: 11.1.5354.0 - Lavasoft) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.6.0.19120 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 2.6.0.19120 - Adobe Systems Incorporated) Hidden
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.3 - Adobe Systems Incorporated)
Adobe Download Assistant (x32 Version: 1.2.3 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.206 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.206 - Adobe Systems Incorporated)
Adobe Reader X (10.1.9) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.9 - Adobe Systems Incorporated)
Advanced Archive Password Recovery (HKCU\...\Advanced Archive Password Recovery) (Version: 4.53 - ElcomSoft Co. Ltd.)
Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)
AntimalwareEngine (Version: 2.6.0.0 - Lavasoft) Hidden
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
calibre (HKLM-x32\...\{531336A9-55EB-4367-8064-7180849D5676}) (Version: 0.8.53 - Kovid Goyal)
CamControl LITE V 4.05 (HKLM-x32\...\CamControl LITE_is1) (Version: - )
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dell DataSafe Local Backup - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: 9.4.60 - Dell Inc.)
Dell DataSafe Local Backup (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 9.4.60 - Dell Inc.)
Dell DataSafe Online (HKLM-x32\...\{7EC66A95-AC2D-4127-940B-0445A526AB2F}) (Version: 2.1.19634 - Dell)
Dell DataSafe Online (HKLM-x32\...\{C53BCCBE-9268-4C09-82E9-611444A73B3F}) (Version: 2.8.1.10 - Dell)
Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)
Dell Getting Started Guide (HKLM-x32\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.)
Dell MusicStage (HKLM-x32\...\{3255BC3F-32BA-41ED-93A0-B9AEB6CDD9E6}) (Version: 1.5.201.0 - Fingertapps)
Dell PhotoStage (HKLM-x32\...\{E4335E82-17B3-460F-9E70-39D9BC269DB3}) (Version: 1.5.0.65 - ArcSoft)
Dell Stage (HKLM-x32\...\{E2F57269-065E-4B19-8CDA-AB6C401FAF1A}) (Version: 1.7.209.0 - Fingertapps)
Dell Stage Remote (HKLM-x32\...\{AF4D3C63-009B-4A17-B02E-D395065DD3F0}) (Version: 2.0.0.43 - ArcSoft)
Dell VideoStage (HKLM-x32\...\InstallShield_{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}) (Version: 1.2.0.1712 - CyberLink Corp.)
Dell VideoStage (x32 Version: 1.2.0.1712 - CyberLink Corp.) Hidden
Dell Webcam Central (HKLM-x32\...\Dell Webcam Central) (Version: 2.00.44 - Creative Technology Ltd)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 15.1.13904 - Landesfinanzdirektion Thüringen)
FoxyDeal (HKLM-x32\...\FoxyDeal) (Version: 1.1.0 - R&E Media GmbH)
Free Pdf Perfect Prereq (HKLM-x32\...\{a6eb67cd-4f30-4fa0-a040-b778d22b46d8}) (Version: 1.0.0.66 - Covus Freemium GmbH)
Free Pdf Perfect Prereq (x32 Version: 1.0.0.66 - Covus Freemium GmbH) Hidden
Freemium Free PDF Perfect (HKLM-x32\...\{88265079-D6F4-4292-86BE-D2053E80BFE4}) (Version: 1.0 - Freemium)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 34.0.1847.131 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
HomeTab 6.0 (HKLM-x32\...\{3a4935b3-b7a0-4065-8ccc-0030471b33f1}_is1) (Version: 6.0 - HomeTab) <==== ATTENTION
IB Updater Service (HKLM-x32\...\WNLT) (Version: 3.0.5.4 - ) <==== ATTENTION
iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2342 - Intel Corporation)
Intel(R) PROSet/Wireless WiFi-Software (HKLM\...\{25FBDA9A-E868-4B3B-B9FF-D923818511A1}) (Version: 14.2.0000 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.37 - Irfan Skiljan)
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java Auto Updater (x32 Version: 2.0.7.2 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 27 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416027FF}) (Version: 6.0.270 - Oracle)
Java(TM) 6 Update 37 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216037FF}) (Version: 6.0.370 - Oracle)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Lexmark Pro800-Pro900 Series (HKLM\...\Lexmark Pro800-Pro900 Series) (Version: - Lexmark International, Inc.)
McAfee SecurityCenter (HKLM-x32\...\MSC) (Version: 12.8.944 - McAfee, Inc.)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 24.5.0 - Mozilla)
Mozilla Thunderbird 24.5.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.5.0 (x86 de)) (Version: 24.5.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
My Dell (HKLM\...\PC-Doctor for Windows) (Version: 3.5.6426.22 - PC-Doctor, Inc.)
Nero 10 Movie ThemePack Basic (x32 Version: 10.6.10000.1.0 - Nero AG) Hidden
Nero Blu-ray Player (x32 Version: 12.0.20012 - Nero AG) Hidden
Nero Control Center 10 (x32 Version: 10.6.13000.0.11 - Nero AG) Hidden
Nero ControlCenter 10 Help (CHM) (x32 Version: 10.2.10800 - Nero AG) Hidden
Nero Core Components 10 (x32 Version: 2.0.20000.9.12 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.11500.28.0 - Nero AG) Hidden
NVIDIA 3D Vision Treiber 268.30 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 268.30 - NVIDIA Corporation)
NVIDIA Grafiktreiber 268.30 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 268.30 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.265.41.0 - NVIDIA Corporation) Hidden
NVIDIA Optimus 1.0.21 (Version: 1.0.21 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6830 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 268.30 (Version: 268.30 - NVIDIA Corporation) Hidden
NVIDIA Update Components (Version: 1.0.21 - NVIDIA Corporation) Hidden
OpenOffice.org 3.4.1 (HKLM-x32\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 8.4.1.210 - Electronic Arts, Inc.)
PDF Passwort Knacker 1 (HKLM-x32\...\PDF Passwort Knacker 1) (Version: - )
PDF24 Creator 5.7.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 11.0.10 - Dell Inc.)
QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6312 - Realtek Semiconductor Corp.)
Savings Sidekick (HKLM-x32\...\Savings Sidekick) (Version: 1.22.150.150 - 215 Apps) <==== ATTENTION
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Stanza (HKLM-x32\...\Stanza) (Version: - )
SweetIM for Messenger 3.7 (HKLM-x32\...\{7683B745-6060-41FD-AA75-0BBB383FEAD4}) (Version: 3.7.0005 - SweetIM Technologies Ltd.) <==== ATTENTION
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.6.0 - Synaptics Incorporated)
SyncUP (HKLM-x32\...\{D92C9CCE-E5F0-4125-977A-0590F3225B74}) (Version: 10.2.14900 - Nero AG)
SyncUP (x32 Version: 1.12.12400.17.102 - Nero AG) Hidden
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel)
Updater Service (HKLM-x32\...\Updater Service) (Version: 14,12,8,9 - ) <==== ATTENTION
VideoPerformer (HKLM-x32\...\VideoPerformer) (Version: - PerformerSoft LLC) <==== ATTENTION
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Zinio Reader 4 (HKLM-x32\...\ZinioReader4) (Version: 4.2.4164 - Zinio LLC)
Zinio Reader 4 (x32 Version: 4.2.4164 - Zinio LLC) Hidden
==================== Restore Points =========================
22-04-2014 14:56:40 Removed Bonjour
22-04-2014 15:35:40 Windows Update
29-04-2014 10:11:45 Windows Update
05-05-2014 08:01:27 Windows Update
05-05-2014 12:09:40 Installed SpyHunter
05-05-2014 16:54:11 AA11
05-05-2014 18:06:51 Removed SpyHunter
05-05-2014 18:07:25 Removed SpyHunter
05-05-2014 18:19:05 Removed Update Manager for SweetPacks 1.1
05-05-2014 18:21:55 Removed Internet Explorer Toolbar 4.6 by SweetPacks
05-05-2014 18:59:55 Installed iTunes
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____C C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {1ACD70FD-4579-4C90-8337-465F457EE28C} - System32\Tasks\GoogleUpdateTaskMachineCore1cf2ee873e0378f => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-10-15] (Google Inc.)
Task: {2168C9CA-67D0-41C3-8ED6-5F24B18BCB86} - System32\Tasks\GoogleUpdateTaskMachineUA1cf521f401f7f7b => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-10-15] (Google Inc.)
Task: {285EE32B-E5AD-479D-B168-7ADEE1C9EFCC} - System32\Tasks\{5A6EB0BF-B98A-4B53-A91D-46DCEF4430B3} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-05-05] (Mozilla Corporation)
Task: {35C250A6-3660-499A-92D1-E48E55639B2B} - System32\Tasks\{B47D42E0-03AF-400A-A540-7F155D64C658} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-05-05] (Mozilla Corporation)
Task: {40D3CB72-A7C9-4CF0-9018-FC0D33C19487} - System32\Tasks\Video Performer Manager => Sc.exe start Video Performer Manager
Task: {43A0083C-1317-4BE9-93FA-1D0EB5DB8472} - System32\Tasks\{2CF18FC4-6F01-40B7-8E75-A5045D887787} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-05-05] (Mozilla Corporation)
Task: {5DA631BD-8411-4531-8E37-5BDE34478BCE} - System32\Tasks\{4348CFF2-7F8D-4849-B373-1FA61EDB155C} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-05-05] (Mozilla Corporation)
Task: {6B86F44A-F3CF-4CD0-B9D7-55A62DC38215} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {7166A41B-3E73-4148-82B9-28A9219D8FBD} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {749D4F46-858E-4E7B-A6A0-773539F2C8E1} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-05] (Adobe Systems Incorporated)
Task: {74A17E5D-7904-43D8-AD9C-A600DF7FB23A} - System32\Tasks\{C804B517-5AD4-41F7-82A2-B16ED4D0997C} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-05-05] (Mozilla Corporation)
Task: {8A7E82BE-800F-4F4C-8023-5702C8F1062A} - System32\Tasks\{FF24D7BB-3AA2-4955-9D7F-9E7EB56B8929} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-05-05] (Mozilla Corporation)
Task: {A266C8AF-FF73-43AF-A25A-1720961238AD} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\My Dell\sessionchecker.exe [2014-01-31] (PC-Doctor, Inc.)
Task: {AB024251-19B7-46FF-A612-2F995D87E993} - System32\Tasks\ProtectedSearch\Protected Search => C:\Program Files (x86)\HomeTab\WSearchDefender.exe [2014-04-09] ()
Task: {AF4B7A7F-D2BB-4B60-BAF4-1B5A3825A767} - System32\Tasks\YourFile Update => C:\Program Files (x86)\YourFileDownloader\YourFileUpdater.exe <==== ATTENTION
Task: {D68BAD47-5CF0-4D84-A37F-25E56577D684} - System32\Tasks\SystemSockets\SystemSockets => C:\Program Files (x86)\HomeTab\WConnectorHandler.exe [2014-01-09] ()
Task: {D8BE0879-0DEB-47B7-B591-981C6D1D3AC2} - System32\Tasks\Browser Updater\Browser Updater => C:\Program Files (x86)\HomeTab\WSystemUpdate.exe [2014-02-04] ()
Task: {DABB326C-06F5-4AEE-9FC5-EDBBF28F1C53} - System32\Tasks\{299B3EF5-797C-4235-B0D6-04E28BA85DE4} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-05-05] (Mozilla Corporation)
Task: {DC363C81-2D7E-471A-BF40-65557B936E1D} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe
Task: {ED13BC92-AEFF-41E9-A1A0-EB2394E045F2} - System32\Tasks\Browser Manager => Sc.exe start Browser Manager
Task: {FA0DBEB5-9D91-43F9-8EB8-8950C6461E8F} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\My Dell\uaclauncher.exe [2014-01-31] (PC-Doctor, Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf2ee873e0378f.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf521f401f7f7b.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2011-07-28 03:07 - 2011-07-28 03:07 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll
2011-10-27 21:27 - 2009-11-26 01:09 - 00053760 _____ () C:\Windows\System32\LXECPMON.DLL
2011-10-27 21:26 - 2009-01-13 08:15 - 04485120 _____ () C:\Windows\System32\LXECOEM.DLL
2011-10-27 21:29 - 2009-11-04 08:17 - 00189440 _____ () C:\Windows\system32\spool\PRTPROCS\x64\lxecdrpp.dll
2014-01-23 16:09 - 2014-01-23 16:09 - 00702744 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe
2014-01-23 16:30 - 2014-01-23 16:30 - 00103800 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_thread-vc100-mt-1_55.dll
2014-01-23 16:30 - 2014-01-23 16:30 - 00024440 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_system-vc100-mt-1_55.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00033656 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_chrono-vc100-mt-1_55.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00055680 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_date_time-vc100-mt-1_55.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00123776 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_filesystem-vc100-mt-1_55.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 03720040 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareServiceKernel.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00685904 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\SQLite.dll
2014-01-23 16:30 - 2014-01-23 16:30 - 00158032 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\pugixml.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 02595144 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\RCF.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00788856 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_regex-vc100-mt-1_55.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00602984 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareActivation.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00291192 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareApplicationUpdater.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00142696 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareGamingMode.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00098648 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareReset.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00120152 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTime.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00268152 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareDefinitionsUpdater.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00198024 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareDefinitionsUpdaterScheduler.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00417128 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareIgnoreList.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00253800 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareQuarantine.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00293744 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareAntiMalwareEngine.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00212336 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareAntiRootkitEngine.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00509808 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareScannerHistory.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00607584 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareScanner.dll
2014-01-23 16:30 - 2014-01-23 16:30 - 00035192 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_timer-vc100-mt-1_55.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00325488 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareScannerScheduler.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00333688 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareRealTimeProtection.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00227688 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareIncompatibles.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00219488 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareAntiSpam.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00129896 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareAntiPhishing.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00599920 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareParentalControl.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 01926504 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareWebProtection.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00263536 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareEmailProtection.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00650608 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareNetworkProtection.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00490848 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareInstaller.dll
2014-01-23 16:30 - 2014-01-23 16:30 - 00106824 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\zlib.dll
2014-01-23 16:30 - 2014-01-23 16:30 - 00149840 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\libssh2.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00358744 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwarePromo.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00291680 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareFeedback.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00154464 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\SecurityCenter.dll
2013-07-17 17:10 - 2013-07-17 17:10 - 00777296 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\2.6.0.0\BDSmartDB.dll
2011-10-27 21:28 - 2009-12-16 06:42 - 00205824 ____C () C:\Program Files\Lexmark\Pro800-Pro900 Series\lxecmicro.dll
2011-10-27 21:28 - 2010-04-01 12:30 - 01558528 ____C () C:\Program Files\Lexmark\Pro800-Pro900 Series\lxecdrs64.dll
2011-10-27 21:28 - 2009-03-10 00:44 - 00015360 ____C () C:\Program Files\Lexmark\Pro800-Pro900 Series\lxeccaps64.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 02141040 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareShellExtension.dll
2011-10-11 17:14 - 2011-08-18 17:05 - 02751808 _____ () C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
2013-12-11 20:25 - 2014-01-09 09:16 - 00034376 ____C () C:\Program Files (x86)\HomeTab\WConnectorHandler.exe
2011-10-11 18:21 - 2011-03-26 10:28 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-10-11 17:05 - 2010-12-17 17:25 - 00686704 _____ () C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe
2011-07-28 03:07 - 2011-07-28 03:07 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
2011-06-28 02:26 - 2011-06-28 02:26 - 02022976 _____ () C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
2011-10-27 21:26 - 2011-01-23 19:47 - 00770728 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe
2011-10-27 21:26 - 2011-01-23 19:47 - 00148280 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\ezprint.exe
2011-06-29 15:52 - 2011-06-29 15:52 - 00474176 _____ () C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
2014-01-23 16:29 - 2014-01-23 16:29 - 04114264 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe
2014-01-23 16:29 - 2014-01-23 16:29 - 00500088 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_locale-vc100-mt-1_55.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00361824 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\HtmlFramework.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00066904 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\DllStorage.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00788848 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTrayDefaultSkin.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 00139608 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\Localization.dll
2011-10-27 21:28 - 2009-05-18 08:32 - 01416192 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\lxecptpc.dll
2011-10-27 21:28 - 2009-11-04 08:19 - 00198656 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\lxecdrui.dll
2011-10-27 21:28 - 2009-06-07 19:55 - 00152576 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\lxecPRPR.DLL
2011-10-27 21:28 - 2009-11-04 08:17 - 00280576 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\lxecdr.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 07980896 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareDesktop.exe
2014-01-23 16:29 - 2014-01-23 16:29 - 00451464 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_program_options-vc100-mt-1_55.dll
2014-01-23 16:29 - 2014-01-23 16:29 - 07888760 ____C () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareDesktopDefaultSkin.dll
2010-03-17 03:28 - 2010-03-17 03:28 - 01926144 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtCore4.dll
2010-03-22 22:52 - 2010-03-22 22:52 - 06776832 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtGui4.dll
2010-03-17 03:28 - 2010-03-17 03:28 - 00635904 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtNetwork4.dll
2010-03-17 03:28 - 2010-03-17 03:28 - 00326144 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtXml4.dll
2011-06-25 06:20 - 2011-06-25 06:20 - 00565968 _____ () C:\Program Files (x86)\Dell\Stage Remote\sqlite3.dll
2011-06-28 02:25 - 2011-06-28 02:25 - 00058944 _____ () C:\Program Files (x86)\Dell\Stage Remote\DataService.dll
2011-06-25 06:32 - 2011-06-25 06:32 - 00323136 _____ () C:\Program Files (x86)\Dell\Stage Remote\de-DE\UI\ManagerUI.dll
2010-03-12 02:52 - 2010-03-12 02:52 - 00028160 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qgif4.dll
2010-03-05 22:07 - 2010-03-05 22:07 - 00031744 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qico4.dll
2010-03-05 22:07 - 2010-03-05 22:07 - 00125952 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qjpeg4.dll
2010-03-12 02:52 - 2010-03-12 02:52 - 00225280 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qmng4.dll
2011-10-27 21:26 - 2010-04-01 12:23 - 00389120 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecscw.dll
2011-10-27 21:26 - 2009-05-27 07:16 - 00192512 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecdatr.dll
2011-10-27 21:26 - 2009-05-27 07:13 - 00081920 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxeccats.dll
2011-10-27 21:26 - 2010-04-01 12:24 - 01159168 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecDRS.dll
2011-10-27 21:26 - 2009-03-10 00:43 - 00155648 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxeccaps.dll
2011-10-27 21:15 - 2009-02-20 10:48 - 00381440 ____C () C:\Windows\system32\lxecsm.dll
2011-10-27 21:15 - 2009-04-28 09:56 - 00024064 ____C () C:\Windows\system32\lxecsmr.dll
2011-10-27 21:26 - 2010-04-05 05:56 - 00716954 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\Epwizard.DLL
2011-10-27 21:26 - 2010-04-05 05:55 - 00159890 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\customui.dll
2011-10-27 21:26 - 2010-04-05 05:54 - 00123033 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\Eputil.DLL
2011-10-27 21:26 - 2010-04-05 05:54 - 00143502 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\Imagutil.DLL
2011-10-27 21:26 - 2010-04-05 05:55 - 00061604 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\Epfunct.DLL
2011-10-27 21:26 - 2009-06-23 06:09 - 02203648 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\EPWizRes.dll
2011-10-27 21:26 - 2009-06-23 06:10 - 00045056 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\epstring.dll
2011-10-27 21:26 - 2009-06-23 06:11 - 00102400 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\EPOEMDll.dll
2011-10-27 21:26 - 2009-04-07 14:25 - 00409600 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\iptk.dll
2011-10-27 21:26 - 2009-03-02 09:25 - 00151552 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecptp.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2013-09-14 02:51 - 2013-09-14 02:51 - 00087952 ____C () C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll
2013-09-14 02:50 - 2013-09-14 02:50 - 01242952 ____C () C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll
2014-04-03 10:39 - 2014-04-03 10:39 - 03642480 ____C () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2011-04-21 19:32 - 2011-04-21 19:32 - 00235112 ____C () C:\Program Files (x86)\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll
2014-05-05 10:27 - 2014-05-05 10:27 - 16351920 ____C () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll
2014-02-12 20:58 - 2014-02-12 20:58 - 00073544 ____C () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 20:58 - 2014-02-12 20:58 - 01044808 ____C () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-02-12 20:58 - 2014-02-12 20:58 - 00237384 ____C () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxslt.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
==================== EXE Association (whitelisted) =============
==================== Disabled items from MSCONFIG ==============
MSCONFIG\startupreg: (default) =>
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: Dell Webcam Central => "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: NeroLauncher => C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe 900
MSCONFIG\startupreg: NVHotkey => rundll32.exe C:\Windows\system32\nvHotkey.dll,Start
MSCONFIG\startupreg: PDFPrint => C:\Program Files (x86)\PDF24\pdf24.exe
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /MAXX3
MSCONFIG\startupreg: RTHDVCPL => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s
MSCONFIG\startupreg: SynTPEnh => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (05/05/2014 08:59:55 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "ConvertStringSidToSid(S-1-5-21-3715489345-1050972543-478851-1009.bak)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
.
Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt
Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {ddb024b6-0663-48bb-8e30-ea7b80c0971b}
Error: (05/05/2014 08:21:55 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "ConvertStringSidToSid(S-1-5-21-3715489345-1050972543-478851-1009.bak)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
.
Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt
Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {a9121f39-b264-422b-bf5b-ee43b4b6abb4}
Error: (05/05/2014 08:19:05 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "ConvertStringSidToSid(S-1-5-21-3715489345-1050972543-478851-1009.bak)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
.
Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt
Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {a9121f39-b264-422b-bf5b-ee43b4b6abb4}
Error: (05/05/2014 08:07:25 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "ConvertStringSidToSid(S-1-5-21-3715489345-1050972543-478851-1009.bak)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
.
Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt
Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {afd23484-43a4-4f22-8431-5520559e93da}
Error: (05/05/2014 08:06:51 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "ConvertStringSidToSid(S-1-5-21-3715489345-1050972543-478851-1009.bak)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
.
Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt
Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {afd23484-43a4-4f22-8431-5520559e93da}
Error: (05/05/2014 08:04:30 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Stream product id=0x0066): Streaming Failed
Error: (05/05/2014 08:03:00 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
Too many failures while downloading ranges: 2
Error: (05/05/2014 07:51:41 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/05/2014 06:54:11 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "ConvertStringSidToSid(S-1-5-21-3715489345-1050972543-478851-1009.bak)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
.
Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt
Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {dba2e9fe-b691-421b-9276-f0a3f4cc46a2}
Error: (05/05/2014 02:09:40 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "ConvertStringSidToSid(S-1-5-21-3715489345-1050972543-478851-1009.bak)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
.
Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt
Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {e0573b55-7682-4ab4-a13b-1cce06a7d602}
System errors:
=============
Error: (05/05/2014 07:52:13 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst SftService erreicht.
Error: (05/05/2014 07:51:39 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "lxecCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (05/05/2014 07:51:39 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst lxecCATSCustConnectService erreicht.
Error: (05/05/2014 10:05:47 AM) (Source: DCOM) (User: )
Description: {209500FC-6B45-4693-8871-6296C4843751}
Error: (05/05/2014 09:59:18 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst SftService erreicht.
Error: (05/05/2014 09:57:25 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "lxecCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (05/05/2014 09:57:25 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst lxecCATSCustConnectService erreicht.
Error: (05/05/2014 09:57:24 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 05.05.2014 um 09:55:33 unerwartet heruntergefahren.
Error: (05/05/2014 09:52:44 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst SftService erreicht.
Error: (05/05/2014 09:51:44 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "lxecCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Microsoft Office Sessions:
=========================
Error: (05/05/2014 08:59:55 PM) (Source: VSS)(User: )
Description: ConvertStringSidToSid(S-1-5-21-3715489345-1050972543-478851-1009.bak)0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt
Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {ddb024b6-0663-48bb-8e30-ea7b80c0971b}
Error: (05/05/2014 08:21:55 PM) (Source: VSS)(User: )
Description: ConvertStringSidToSid(S-1-5-21-3715489345-1050972543-478851-1009.bak)0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt
Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {a9121f39-b264-422b-bf5b-ee43b4b6abb4}
Error: (05/05/2014 08:19:05 PM) (Source: VSS)(User: )
Description: ConvertStringSidToSid(S-1-5-21-3715489345-1050972543-478851-1009.bak)0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt
Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {a9121f39-b264-422b-bf5b-ee43b4b6abb4}
Error: (05/05/2014 08:07:25 PM) (Source: VSS)(User: )
Description: ConvertStringSidToSid(S-1-5-21-3715489345-1050972543-478851-1009.bak)0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt
Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {afd23484-43a4-4f22-8431-5520559e93da}
Error: (05/05/2014 08:06:51 PM) (Source: VSS)(User: )
Description: ConvertStringSidToSid(S-1-5-21-3715489345-1050972543-478851-1009.bak)0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt
Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {afd23484-43a4-4f22-8431-5520559e93da}
Error: (05/05/2014 08:04:30 PM) (Source: CVHSVC)(User: )
Description: (Stream product id=0x0066): Streaming Failed
Error: (05/05/2014 08:03:00 PM) (Source: CVHSVC)(User: )
Description: Too many failures while downloading ranges: 2
Error: (05/05/2014 07:51:41 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/05/2014 06:54:11 PM) (Source: VSS)(User: )
Description: ConvertStringSidToSid(S-1-5-21-3715489345-1050972543-478851-1009.bak)0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt
Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {dba2e9fe-b691-421b-9276-f0a3f4cc46a2}
Error: (05/05/2014 02:09:40 PM) (Source: VSS)(User: )
Description: ConvertStringSidToSid(S-1-5-21-3715489345-1050972543-478851-1009.bak)0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt
Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {e0573b55-7682-4ab4-a13b-1cce06a7d602}
==================== Memory info ===========================
Percentage of memory in use: 60%
Total physical RAM: 8086.17 MB
Available physical RAM: 3164.76 MB
Total Pagefile: 16170.52 MB
Available Pagefile: 12263.45 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:679 GB) (Free:557.43 GB) NTFS
Drive f: () (Removable) (Total:7.5 GB) (Free:2.93 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 699 GB) (Disk ID: 07F2837E)
Partition 1: (Not Active) - (Size=102 MB) - (Type=DE)
Partition 2: (Active) - (Size=20 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=679 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 8 GB) (Disk ID: 00000000)
Partition: GPT Partition Type.
==================== End Of Log ============================
Geändert von Tanjuscha75 (05.05.2014 um 20:59 Uhr) Grund: Ergänzung |
| Themen zu adware-Bprotect durch McAfee entdeckt und konnte nicht entfernt werden |
| ad-aware, antivirus, association, bonjour, computer, defender, device driver, firefox, flash player, freemium, home, homepage, mcafee firewall, mp3, msil/psw.agent.nfx, newtab, registry, services.exe, siteadvisor, spyhunter, spyhunter entfernen, svchost.exe, temp, vcredist, win32/hoax.archsms.hl, windows, wscript.exe |
Baum-Darstellung