| |
| |||||||
Log-Analyse und Auswertung: Windows 7: Wie kann ich den PC Performer, Speed Test 127 und Search Protect deinstallieren?Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
19.05.2014, 15:29
| #1 |
| |  Windows 7: Wie kann ich den PC Performer, Speed Test 127 und Search Protect deinstallieren? Die Programme PC Performer, Speed Test 127 und Search Protect lassen sich über die Systemsteuerung nicht deinstallieren. Wie kann ich dieses Problem beheben? Code:
ATTFilter Exportierte Ereignisse:
16.05.2014 13:03 [System-Scanner] Malware gefunden
Die Datei 'C:\Users\Zümrüt\AppData\Local\Temp\nsmE6C8.tmp'
enthielt einen Virus oder unerwünschtes Programm 'TR/Agent.616546.19' [trojan].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '56b36119.qua'
verschoben!
16.05.2014 13:02 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Users\Zümrüt\AppData\Local\Temp\nsyC5C1.tmp'
wurde ein Virus oder unerwünschtes Programm 'TR/Agent.616546.19' [trojan]
gefunden.
Ausgeführte Aktion: Zugriff verweigern
16.05.2014 13:02 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Users\Zümrüt\AppData\Local\Temp\nsmE6C8.tmp'
wurde ein Virus oder unerwünschtes Programm 'TR/Agent.616546.19' [trojan]
gefunden.
Ausgeführte Aktion: Zugriff verweigern
16.05.2014 13:02 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Users\Zümrüt\AppData\Local\Temp\ICReinstall_nsmE6C8.tmp'
wurde ein Virus oder unerwünschtes Programm 'TR/Agent.616546.19' [trojan]
gefunden.
Ausgeführte Aktion: Zugriff verweigern
16.05.2014 13:02 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Users\Zümrüt\AppData\Local\Temp\ICReinstall_nsyC5C1.tmp'
wurde ein Virus oder unerwünschtes Programm 'TR/Agent.616546.19' [trojan]
gefunden.
Ausgeführte Aktion: Zugriff verweigern
16.05.2014 13:00 [System-Scanner] Malware gefunden
Die Datei 'C:\Users\Zümrüt\AppData\Local\Microsoft\Windows\Temporary Internet
Files\Content.IE5\L9SKDHIO\Setup[1].exe'
enthielt einen Virus oder unerwünschtes Programm 'TR/Agent.616546.19' [trojan].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '56d66379.qua'
verschoben!
16.05.2014 12:59 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Users\Zümrüt\AppData\Local\Microsoft\Windows\Temporary
Internet Files\Content.IE5\L9SKDHIO\Setup[1].exe'
wurde ein Virus oder unerwünschtes Programm 'TR/Agent.616546.19' [trojan]
gefunden.
Ausgeführte Aktion: Zugriff verweigern
16.05.2014 12:59 [System-Scanner] Malware gefunden
Die Datei 'C:\Users\Zümrüt\AppData\Local\Microsoft\Windows\Temporary Internet
Files\Content.IE5\HA2U3BMX\Setup[1].exe'
enthielt einen Virus oder unerwünschtes Programm 'TR/Agent.616546.19' [trojan].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '56977bc6.qua'
verschoben!
16.05.2014 12:58 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Users\Zümrüt\AppData\Local\Microsoft\Windows\Temporary
Internet Files\Content.IE5\HA2U3BMX\Setup[1].exe'
wurde ein Virus oder unerwünschtes Programm 'TR/Agent.616546.19' [trojan]
gefunden.
Ausgeführte Aktion: Zugriff verweigern
16.05.2014 12:56 [Echtzeit-Scanner] Malware gefunden
In der Datei
'C:\Users\Zümrüt\AppData\Local\Temp\speedtest127\install_helper.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/BProtector.B' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern
16.05.2014 12:56 [Echtzeit-Scanner] Malware gefunden
In der Datei
'C:\Users\Zümrüt\AppData\Local\Temp\speedtest127\install_helper.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/BProtector.B' [adware]
gefunden.
Ausgeführte Aktion: Zugriff erlauben
16.05.2014 12:56 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Users\Zümrüt\AppData\Local\Temp\h5db5c3x\app_30672'
wurde ein Virus oder unerwünschtes Programm 'TR/Dropper.Gen' [trojan] gefunden.
Ausgeführte Aktion: Übergeben an Scanner
16.05.2014 12:56 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Users\Zümrüt\AppData\Local\Temp\h5db5c3x\app_30672'
wurde ein Virus oder unerwünschtes Programm 'TR/Dropper.Gen' [trojan] gefunden.
Ausgeführte Aktion: Zugriff erlauben
16.05.2014 12:56 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Users\Zümrüt\AppData\Local\Temp\h5db5c3x\app_30672'
wurde ein Virus oder unerwünschtes Programm 'TR/Dropper.Gen' [trojan] gefunden.
Ausgeführte Aktion: Zugriff verweigern
16.05.2014 12:56 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Users\Zümrüt\AppData\Local\Temp\h5db5c3x\app_30672'
wurde ein Virus oder unerwünschtes Programm 'TR/Dropper.Gen' [trojan] gefunden.
Ausgeführte Aktion: Zugriff erlauben
16.05.2014 12:56 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Users\Zümrüt\AppData\Local\Temp\h5db5c3x\app_30672'
wurde ein Virus oder unerwünschtes Programm 'TR/Dropper.Gen' [trojan] gefunden.
Ausgeführte Aktion: Zugriff erlauben
16.05.2014 12:56 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Users\Zümrüt\AppData\Local\Temp\h5db5c3x\app_21975'
wurde ein Virus oder unerwünschtes Programm 'TR/Dropper.Gen' [trojan] gefunden.
Ausgeführte Aktion: Übergeben an Scanner
16.05.2014 12:56 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Users\Zümrüt\AppData\Local\Temp\h5db5c3x\app_21975'
wurde ein Virus oder unerwünschtes Programm 'TR/Dropper.Gen' [trojan] gefunden.
Ausgeführte Aktion: Zugriff erlauben
16.05.2014 12:56 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Users\Zümrüt\AppData\Local\Temp\h5db5c3x\app_21975'
wurde ein Virus oder unerwünschtes Programm 'TR/Dropper.Gen' [trojan] gefunden.
Ausgeführte Aktion: Zugriff verweigern
16.05.2014 12:56 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Users\Zümrüt\AppData\Local\Temp\h5db5c3x\app_21975'
wurde ein Virus oder unerwünschtes Programm 'TR/Dropper.Gen' [trojan] gefunden.
Ausgeführte Aktion: Zugriff erlauben
16.05.2014 12:56 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Users\Zümrüt\AppData\Local\Temp\h5db5c3x\app_21975'
wurde ein Virus oder unerwünschtes Programm 'TR/Dropper.Gen' [trojan] gefunden.
Ausgeführte Aktion: Zugriff erlauben
06.05.2014 12:54 [System-Scanner] Malware gefunden
Die Datei
'C:\Users\Zümrüt\AppData\Local\Smartbar\Application\SmartbarVersionsHelper.exe'
enthielt einen Virus oder unerwünschtes Programm 'TR/Dropper.MSIL.Gen' [trojan].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '5bad2bc7.qua'
verschoben!
06.05.2014 12:52 [Echtzeit-Scanner] Malware gefunden
In der Datei
'C:\Users\Zümrüt\AppData\Local\Smartbar\Application\SmartbarVersionsHelper.exe'
wurde ein Virus oder unerwünschtes Programm 'TR/Dropper.MSIL.Gen' [trojan]
gefunden.
Ausgeführte Aktion: Zugriff verweigern
06.05.2014 12:52 [Echtzeit-Scanner] Malware gefunden
In der Datei
'C:\Users\Zümrüt\AppData\Local\Smartbar\Application\SmartbarVersionsHelper.exe'
wurde ein Virus oder unerwünschtes Programm 'TR/Dropper.MSIL.Gen' [trojan]
gefunden.
Ausgeführte Aktion: Zugriff erlauben
06.05.2014 12:52 [Echtzeit-Scanner] Malware gefunden
In der Datei
'C:\Users\Zümrüt\AppData\Local\Smartbar\Application\SmartbarVersionsHelper.exe'
wurde ein Virus oder unerwünschtes Programm 'TR/Dropper.MSIL.Gen' [trojan]
gefunden.
Ausgeführte Aktion: Übergeben an Scanner
Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-05-2014
Ran by Zümrüt (administrator) on ZÜMRÜT-PC on 19-05-2014 15:47:12
Running from C:\Users\Zümrüt\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
() C:\Windows\System32\dmwu.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
() C:\Program Files (x86)\LPT\srpts.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Client Connect LTD) C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Client Connect LTD) C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe
(Client Connect LTD) C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe
() C:\Windows\SysWOW64\jmdp\stij.exe
() C:\Windows\System32\ljkb\stij.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Dropbox, Inc.) C:\Users\Zümrüt\AppData\Roaming\Dropbox\bin\Dropbox.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(CyberLink) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
() C:\Users\Zümrüt\AppData\Local\Smartbar\Application\Lrcnta.exe
() C:\Users\Zümrüt\AppData\Local\LPT\srptm.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE
(Microsoft Corporation) C:\Windows\splwow64.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Users\Zümrüt\Downloads\Defogger.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2589992 2011-04-05] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12673128 2011-08-16] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277480 2011-08-16] (Realtek Semiconductor)
HKLM\...\Run: [Power Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1831016 2011-08-02] (Acer Incorporated)
HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-02] (Symantec Corporation)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-04-24] (NTI Corporation)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1103440 2011-07-01] (Dritek System Inc.)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Dolby PCEE4\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [SuiteTray] => C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [341360 2011-09-20] (Egis Technology Inc.)
HKLM-x32\...\Run: [ArcadeMovieService] => C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe [177448 2011-08-26] (CyberLink Corp.)
HKLM-x32\...\Run: [WinampAgent] => C:\Program Files (x86)\Winamp\winampa.exe [74752 2011-12-09] (Nullsoft, Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-03-02] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [522232 2012-09-26] (Cisco Systems, Inc.)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid}
HKU\S-1-5-19\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid}
HKU\S-1-5-20\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid}
HKU\S-1-5-21-1983832016-936756737-872752734-1000\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid}
HKU\S-1-5-21-1983832016-936756737-872752734-1001\...\Run: [Facebook Update] => C:\Users\Zümrüt\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-07-10] (Facebook Inc.)
HKU\S-1-5-21-1983832016-936756737-872752734-1001\...\Run: [Browser Infrastructure Helper] => C:\Users\Zümrüt\AppData\Local\Smartbar\Application\Smartbar.exe [28192 2014-05-05] (Smartbar)
HKU\S-1-5-21-1983832016-936756737-872752734-1004\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4272840 2014-03-31] (Microsoft Corporation)
HKU\S-1-5-21-1983832016-936756737-872752734-1004\...\Run: [Octoshape Streaming Services] => C:\Users\M.A.K\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [107800 2011-03-24] (Octoshape ApS)
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [202560 2014-05-03] (Client Connect LTD)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [241984 2011-10-16] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [171840 2014-05-03] (Client Connect LTD)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [203072 2011-10-16] (NVIDIA Corporation)
Startup: C:\Users\Zümrüt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Zümrüt\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Zümrüt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmwODjwdSN4nYKkLkiDsRZrjHk60SYY7Cl78H_h3cyuEGnob5GRpsGdyFykBBkBWRGBw2McZsLouNpGTnwryp245Hx5ptRReMm6-ViTDOHT0LQ1Z5nBZtzFzfe_-Sm0lJcWsCbyieDQldLsAfZKnuWYSTNOc,&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmwODjwdSN4nYKkLkiDsRZrjHk60SYY7Cl78H_h3cyuEGnob5GRpsGdyFykBBkBWRGBw2McZsLouNpGTnwryp245Hx5ptRReMm6-ViTDOHT0LQ1Z5nBZtzFzfe_-Sm0lJcWsCbyieDQldLsAfZKnuWYSTNOc,&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmwODjwdSN4nYKkLkiDsRZrjHk60SYY7Cl78H_h3cyuEGnob5GRpsGdyFykBBkBWRGBw2McZsLouNpGTnwryp245Hx5ptRReMm6-ViTDOHT0LQ1Z5nBZtzFzfe_-Sm0lJcWsCbyieDQldLsAfZKnuWYSTNOc,&q={searchTerms}
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmwODjwdSN4nYKkLkiDsRZrjHk60SYY7Cl78H_h3cyuEGnob5GRpsGdyFykBBkBWRGBw2McZsLouNpGTnwryp245Hx5ptRReMm6-ViTDOHT0LQ1Z5nBZtzFzfe_-Sm0lJcWsCbyieDQldLsAfZKnuWYSTNOc,&q={searchTerms}
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmwODjwdSN4nYKkLkiDsRZrjHk60SYY7Cl78H_h3cyuEGnob5GRpsGdyFykBBkBWRGBw2McZsLouNpGTnwryp245Hx5ptRReMm6-ViTDOHT0LQ1Z5nBZtzFzfe_-Sm0lJcWsCbyieDQldLsAfZKnuWYSTNOc,&q={searchTerms}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmwODjwdSN4nYKkLkiDsRZrjHk60SYY7Cl78H_h3cyuEGnob5GRpsGdyFykBBkBWRGBw2McZsLouNpGTnwryp245Hx5ptRReMm6-ViTDOHT0LQ1Z5nBZtzFzfe_-Sm0lJcWsCbyieDQldLsAfZKnuWYSTNOc,&q={searchTerms}
BHO: Speed Test 127 - {11C8C9C0-D918-44C0-8B5E-D297DA42F2C7} - C:\Program Files (x86)\Speed Test 127\ScriptHost64.dll (BestOffers)
BHO: SmartbarInternetExplorerBHOEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - mscoree.dll No File
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: WEB.DE Toolbar BHO - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Program Files\WEB.DE Toolbar\IE\uitb.dll (1und1 Mail und Media GmbH)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Speed Test 127 - {11C8C9C0-D918-44C0-8B5E-D297DA42F2C7} - C:\Program Files (x86)\Speed Test 127\ScriptHost.dll (BestOffers)
BHO-x32: Shopping Assistant Plugin - {1631550F-191D-4826-B069-D9439253D926} - C:\Program Files (x86)\PriceGong\2.6.7\PriceGongIE.dll (PriceGong)
BHO-x32: Shopping Helper SmartbarEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - mscoree.dll No File
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: WEB.DE Toolbar BHO - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Program Files (x86)\WEB.DE Toolbar\IE\uitb.dll (1und1 Mail und Media GmbH)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
Toolbar: HKLM - WEB.DE Toolbar - {C424171E-592A-415a-9EB1-DFD6D95D3530} - C:\Program Files\WEB.DE Toolbar\IE\uitb.dll (1und1 Mail und Media GmbH)
Toolbar: HKLM - Shopping Helper Smartbar - {ae07101b-46d4-4a98-af68-0333ea26e113} - mscoree.dll No File
Toolbar: HKLM-x32 - EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
Toolbar: HKLM-x32 - WEB.DE Toolbar - {C424171E-592A-415a-9EB1-DFD6D95D3530} - C:\Program Files (x86)\WEB.DE Toolbar\IE\uitb.dll (1und1 Mail und Media GmbH)
Toolbar: HKLM-x32 - Shopping Helper Smartbar - {ae07101b-46d4-4a98-af68-0333ea26e113} - mscoree.dll No File
Toolbar: HKCU - WEB.DE Toolbar - {C424171E-592A-415A-9EB1-DFD6D95D3530} - C:\Program Files\WEB.DE Toolbar\IE\uitb.dll (1und1 Mail und Media GmbH)
Toolbar: HKCU - No Name - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - No File
Toolbar: HKCU - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} - No File
Handler: webde - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files\WEB.DE Toolbar\IE\uitb.dll (1und1 Mail und Media GmbH)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: webde - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files (x86)\WEB.DE Toolbar\IE\uitb.dll (1und1 Mail und Media GmbH)
Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Filter-x32: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Filter-x32: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Filter-x32: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{3B7F2F84-982A-49EA-9368-45FB5BC144D9}: [NameServer]212.123.96.110,141.82.16.200
FireFox:
========
FF Plugin: @java.com/DTPlugin,version=10.9.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.9.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @Skype Technologies S.A..com/Skype Web Plugin - C:\Program Files (x86)\SkypeWebPlugin\npSkypeWebPlugin64.dll (Skype)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @Skype Technologies S.A..com/Skype Web Plugin - C:\Program Files (x86)\SkypeWebPlugin\npSkypeWebPlugin.dll (Skype)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Zümrüt\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF HKCU\...\Firefox\Extensions: [{8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}] - C:\Program Files (x86)\PriceGong\2.6.7\FF
FF Extension: PriceGong - C:\Program Files (x86)\PriceGong\2.6.7\FF [2012-09-25]
Chrome:
=======
CHR HomePage: hxxp://www.google.com
CHR StartupUrls: "hxxp://www.google.com/"
CHR DefaultSearchKeyword: trovi.search
CHR DefaultSearchProvider: Trovi search
CHR DefaultSearchURL: hxxp://www.trovigo.com/Results.aspx?gd=&ctid=CT3324415&octid=EB_ORIGINAL_CTID&ISID=ISID_ID&SearchSource=58&CUI=&UM=2&UP=SP1EF8BB08-EB82-48BC-AA59-8590B3BC051B&q={searchTerms}&SSPV=
CHR DefaultNewTabURL:
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.137\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.137\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.137\pdf.dll ()
CHR Plugin: (PriceGong) - C:\Users\Zümrüt\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok\5.6.7_0\plugins/npPriceGong_CH.dll (PriceGong)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U9) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (McAfee SiteAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll No File
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Java Deployment Toolkit 7.0.90.5) - C:\Windows\SysWOW64\npDeployJava1.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Extension: (Embed WMPlayer inline) - C:\Users\Zümrüt\AppData\Local\Google\Chrome\User Data\Default\Extensions\bamkbfdmckphehgiafpenehgebjgdlli [2012-12-12]
CHR Extension: (PriceGong) - C:\Users\Zümrüt\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok [2012-12-10]
CHR Extension: (SweetIM for Facebook) - C:\Users\Zümrüt\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn [2012-12-10]
CHR Extension: (SweetPacks Chrome Extension) - C:\Users\Zümrüt\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj [2013-10-04]
CHR HKLM-x32\...\Chrome\Extension: [bkomkajifikmkfnjgphkjcfeepbnojok] - C:\Program Files (x86)\PriceGong\2.6.7\pricegong.crx [2012-08-07]
CHR HKLM-x32\...\Chrome\Extension: [jcdgjdiieiljkfkdcloehkohchhpekkn] - C:\Users\Zümrüt\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx [2012-09-25]
CHR HKLM-x32\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Windows\SysWOW64\jmdp\SweetNT.crx [2014-04-06]
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-03-02] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-03-02] (Avira Operations GmbH & Co. KG)
R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [2496320 2014-05-03] (Client Connect LTD)
R2 IBUpdaterService; C:\Windows\system32\dmwu.exe [2276144 2014-04-07] ()
R2 LPTSystemUpdater; C:\Program Files (x86)\LPT\srpts.exe [37920 2014-03-30] ()
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-24] (NTI Corporation)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2140984 2014-04-15] (TuneUp Software)
R3 WinHttpAutoProxySvc; winhttp.dll [X]
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-17] (Avira Operations GmbH & Co. KG)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2014-03-26] (TuneUp Software)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-05-19 15:47 - 2014-05-19 15:47 - 00000000 ____D () C:\FRST
2014-05-19 15:45 - 2014-05-19 15:45 - 02067456 _____ (Farbar) C:\Users\Zümrüt\Downloads\FRST64.exe
2014-05-19 15:44 - 2014-05-19 15:44 - 00000474 _____ () C:\Users\Zümrüt\Downloads\defogger_disable.log
2014-05-19 15:44 - 2014-05-19 15:44 - 00000000 _____ () C:\Users\Zümrüt\defogger_reenable
2014-05-19 15:43 - 2014-05-19 15:43 - 00050477 _____ () C:\Users\Zümrüt\Downloads\Defogger.exe
2014-05-19 15:31 - 2014-05-19 15:31 - 00002213 _____ () C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk
2014-05-19 15:31 - 2014-05-19 15:31 - 00002205 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2014.lnk
2014-05-19 15:31 - 2014-05-19 15:31 - 00002193 _____ () C:\Users\Public\Desktop\TuneUp Utilities 2014.lnk
2014-05-19 15:31 - 2014-05-19 15:31 - 00000000 ____D () C:\Users\Zümrüt\AppData\Local\TuneUp Software
2014-05-19 15:31 - 2014-05-19 15:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2014
2014-05-19 15:31 - 2014-04-15 15:59 - 00040760 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe
2014-05-19 15:31 - 2014-04-15 15:59 - 00029496 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll
2014-05-19 15:31 - 2014-04-15 15:59 - 00025400 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll
2014-05-19 15:30 - 2014-05-19 15:31 - 00000000 ____D () C:\Program Files (x86)\TuneUp Utilities 2014
2014-05-19 15:29 - 2014-05-19 15:37 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-05-19 15:29 - 2014-05-19 15:29 - 27883432 _____ (TuneUp Software) C:\Users\Zümrüt\Downloads\TuneUpUtilities2014_de-DE.exe
2014-05-19 15:11 - 2014-05-19 15:47 - 00026010 _____ () C:\Users\Zümrüt\Downloads\FRST.txt
2014-05-19 15:11 - 2014-05-19 15:11 - 00033959 _____ () C:\Users\Zümrüt\Downloads\Addition.txt
2014-05-16 16:15 - 2014-05-19 10:29 - 00000370 _____ () C:\Windows\setupact.log
2014-05-16 16:15 - 2014-05-16 20:48 - 00002808 _____ () C:\Windows\PFRO.log
2014-05-16 16:15 - 2014-05-16 16:15 - 00000000 ____D () C:\Users\M.A.K\AppData\Roaming\PerformerSoft
2014-05-16 16:15 - 2014-05-16 16:15 - 00000000 ____D () C:\Users\M.A.K\AppData\Local\SearchProtect
2014-05-16 16:15 - 2014-05-16 16:15 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-16 12:59 - 2014-05-16 12:59 - 00003416 _____ () C:\Windows\System32\Tasks\{4191952B-4600-432A-ABD0-28B7523B4BF0}
2014-05-16 12:56 - 2014-05-19 15:02 - 00000278 _____ () C:\Windows\Tasks\PC Performer_DEFAULT.job
2014-05-16 12:56 - 2014-05-19 12:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Performer
2014-05-16 12:56 - 2014-05-16 16:15 - 00000286 _____ () C:\Windows\Tasks\PC Performer_UPDATES.job
2014-05-16 12:56 - 2014-05-16 12:56 - 00003032 _____ () C:\Windows\System32\Tasks\PC Performer_UPDATES
2014-05-16 12:56 - 2014-05-16 12:56 - 00002876 _____ () C:\Windows\System32\Tasks\PC Performer_DEFAULT
2014-05-16 12:56 - 2014-05-16 12:56 - 00000000 ____D () C:\Users\Zümrüt\AppData\Roaming\PerformerSoft
2014-05-16 12:56 - 2014-05-16 12:56 - 00000000 ____D () C:\Users\Zümrüt\AppData\Local\SearchProtect
2014-05-16 12:56 - 2014-05-16 12:56 - 00000000 ____D () C:\Program Files (x86)\Speed Test 127
2014-05-16 12:56 - 2014-05-16 12:56 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2014-05-16 12:56 - 2014-05-16 12:56 - 00000000 ____D () C:\Program Files (x86)\PC Performer
2014-05-16 12:55 - 2014-05-16 12:55 - 01342896 _____ (UPDF) C:\Users\Zümrüt\Downloads\UPDFSetup.exe
2014-05-16 12:22 - 2014-05-16 12:22 - 00000000 ____D () C:\Users\Zümrüt\AppData\Local\Skype
2014-05-15 13:45 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-15 13:45 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-15 13:45 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-15 13:45 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-15 13:45 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-15 13:45 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-15 11:14 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-15 11:14 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-15 11:14 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-15 11:14 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-15 11:14 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-15 11:14 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-15 11:14 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-15 11:14 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-15 11:14 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-15 11:14 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-15 11:14 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-15 11:14 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-15 11:14 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-15 11:14 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-15 11:14 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-15 11:14 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-15 11:14 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-15 11:14 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-15 11:14 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-15 11:14 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-15 11:14 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-15 11:14 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-15 11:14 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-15 11:14 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-15 11:14 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-15 11:14 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-15 11:14 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-15 11:14 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-15 11:14 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-15 11:14 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-15 11:14 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-15 11:14 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-15 11:14 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-15 11:14 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-15 11:14 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-15 11:14 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-15 11:14 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-15 11:14 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-15 11:14 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-15 11:14 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-15 11:14 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-15 11:14 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-15 11:14 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-15 11:14 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-15 11:14 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-11 23:24 - 2014-05-11 23:24 - 04557717 _____ () C:\Users\Zümrüt\Downloads\Wenn-Opa_s-parken.wmv
2014-05-08 13:49 - 2014-05-16 14:27 - 00000000 ____D () C:\Users\Zümrüt\Documents\Bewerbung
2014-05-08 13:48 - 2014-05-08 13:48 - 00000000 ____D () C:\Users\Zümrüt\Documents\Stex
2014-05-06 16:00 - 2014-05-15 13:49 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-06 14:33 - 2014-05-07 15:20 - 00000000 ____D () C:\Users\Zümrüt\Desktop\QM
2014-05-06 14:30 - 2014-05-07 14:51 - 00000000 ____D () C:\Users\Zümrüt\Desktop\Ali
2014-05-06 12:52 - 2014-05-06 12:52 - 00000000 ____D () C:\Users\Zümrüt\AppData\Local\LPT
2014-05-04 15:11 - 2014-05-04 15:11 - 00000000 ____D () C:\Users\Zümrüt\AppData\Roaming\DropboxMaster
2014-04-28 20:57 - 2014-04-28 20:57 - 00009728 ___SH () C:\Users\Zümrüt\Desktop\Thumbs.db
2014-04-26 22:09 - 2014-04-14 20:13 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-26 22:09 - 2014-04-14 20:05 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-26 22:09 - 2014-04-14 20:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-26 22:09 - 2014-04-14 20:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-26 22:08 - 2014-04-26 22:09 - 00004253 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
2014-04-26 15:56 - 2014-04-26 15:56 - 00000000 ____D () C:\Windows\de
2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\he
2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\fr
2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\fi
2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\es
2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\en
2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\el
2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\da
2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\cs
2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\bg
2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\ar
2014-04-26 15:53 - 2014-04-26 15:53 - 00001309 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\tr
2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\th
2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\sv
2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\sl
2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\sk
2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\ru
2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\ro
2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\pl
2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\nl
2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\it
2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\hu
2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\hr
2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\ca
2014-04-26 15:45 - 2014-04-26 15:45 - 00002490 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2014-04-26 15:35 - 2014-04-26 15:35 - 00000000 ____D () C:\Users\Zümrüt\Documents\OneNote-Notizbücher
2014-04-24 10:55 - 2014-04-24 10:55 - 00921654 _____ () C:\Users\Zümrüt\Downloads\g6.bmp
2014-04-24 10:54 - 2014-04-24 10:54 - 00921654 _____ () C:\Users\Zümrüt\Downloads\g5.bmp
2014-04-23 13:51 - 2014-04-23 13:51 - 00000000 __SHD () C:\Users\Zümrüt\AppData\Local\EmieUserList
2014-04-23 13:51 - 2014-04-23 13:51 - 00000000 __SHD () C:\Users\Zümrüt\AppData\Local\EmieSiteList
2014-04-23 00:27 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-23 00:27 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-23 00:27 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-23 00:27 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-23 00:27 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-23 00:27 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-23 00:27 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-23 00:27 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-23 00:27 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-23 00:27 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-23 00:27 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-23 00:27 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-23 00:27 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-23 00:27 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-23 00:27 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-23 00:27 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-23 00:27 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-23 00:27 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-23 00:27 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-23 00:27 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-23 00:27 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-23 00:27 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-23 00:27 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-23 00:27 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-23 00:27 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-23 00:27 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-23 00:27 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-23 00:27 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-23 00:27 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-23 00:27 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-23 00:27 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-23 00:27 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-23 00:27 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-23 00:27 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-23 00:27 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-23 00:26 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-23 00:26 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-23 00:26 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-23 00:26 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-23 00:26 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-23 00:26 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-23 00:26 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-23 00:26 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-23 00:26 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
==================== One Month Modified Files and Folders =======
2014-05-19 15:47 - 2014-05-19 15:47 - 00000000 ____D () C:\FRST
2014-05-19 15:47 - 2014-05-19 15:11 - 00026010 _____ () C:\Users\Zümrüt\Downloads\FRST.txt
2014-05-19 15:45 - 2014-05-19 15:45 - 02067456 _____ (Farbar) C:\Users\Zümrüt\Downloads\FRST64.exe
2014-05-19 15:44 - 2014-05-19 15:44 - 00000474 _____ () C:\Users\Zümrüt\Downloads\defogger_disable.log
2014-05-19 15:44 - 2014-05-19 15:44 - 00000000 _____ () C:\Users\Zümrüt\defogger_reenable
2014-05-19 15:44 - 2012-05-17 11:34 - 00000000 ____D () C:\Users\Zümrüt
2014-05-19 15:43 - 2014-05-19 15:43 - 00050477 _____ () C:\Users\Zümrüt\Downloads\Defogger.exe
2014-05-19 15:40 - 2012-02-02 23:03 - 01737115 _____ () C:\Windows\WindowsUpdate.log
2014-05-19 15:38 - 2012-12-08 23:51 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-19 15:38 - 2012-12-08 23:51 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-19 15:38 - 2012-11-02 22:50 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler
2014-05-19 15:38 - 2012-11-02 22:50 - 00003694 _____ () C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2014-05-19 15:37 - 2014-05-19 15:29 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-05-19 15:37 - 2013-10-23 14:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2014-05-19 15:35 - 2012-11-02 22:46 - 00000000 ____D () C:\ProgramData\TuneUp Software
2014-05-19 15:31 - 2014-05-19 15:31 - 00002213 _____ () C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk
2014-05-19 15:31 - 2014-05-19 15:31 - 00002205 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2014.lnk
2014-05-19 15:31 - 2014-05-19 15:31 - 00002193 _____ () C:\Users\Public\Desktop\TuneUp Utilities 2014.lnk
2014-05-19 15:31 - 2014-05-19 15:31 - 00000000 ____D () C:\Users\Zümrüt\AppData\Local\TuneUp Software
2014-05-19 15:31 - 2014-05-19 15:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2014
2014-05-19 15:31 - 2014-05-19 15:30 - 00000000 ____D () C:\Program Files (x86)\TuneUp Utilities 2014
2014-05-19 15:31 - 2012-11-02 22:47 - 00000000 ____D () C:\Users\Zümrüt\AppData\Roaming\TuneUp Software
2014-05-19 15:29 - 2014-05-19 15:29 - 27883432 _____ (TuneUp Software) C:\Users\Zümrüt\Downloads\TuneUpUtilities2014_de-DE.exe
2014-05-19 15:17 - 2012-06-01 15:00 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-19 15:11 - 2014-05-19 15:11 - 00033959 _____ () C:\Users\Zümrüt\Downloads\Addition.txt
2014-05-19 15:02 - 2014-05-16 12:56 - 00000278 _____ () C:\Windows\Tasks\PC Performer_DEFAULT.job
2014-05-19 13:09 - 2013-07-10 16:04 - 00000932 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1983832016-936756737-872752734-1001UA.job
2014-05-19 12:51 - 2014-05-16 12:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Performer
2014-05-19 10:38 - 2009-07-14 06:45 - 00016752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-19 10:38 - 2009-07-14 06:45 - 00016752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-19 10:32 - 2013-12-11 18:23 - 00000000 ___RD () C:\Users\Zümrüt\Dropbox
2014-05-19 10:32 - 2013-12-11 18:20 - 00000000 ____D () C:\Users\Zümrüt\AppData\Roaming\Dropbox
2014-05-19 10:32 - 2012-05-17 11:42 - 00000000 ____D () C:\ProgramData\clear.fi
2014-05-19 10:29 - 2014-05-16 16:15 - 00000370 _____ () C:\Windows\setupact.log
2014-05-19 10:29 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-16 20:48 - 2014-05-16 16:15 - 00002808 _____ () C:\Windows\PFRO.log
2014-05-16 16:16 - 2012-05-17 11:51 - 00000000 ___RD () C:\Users\M.A.K\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-16 16:16 - 2012-05-17 11:51 - 00000000 ___RD () C:\Users\M.A.K\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-16 16:15 - 2014-05-16 16:15 - 00000000 ____D () C:\Users\M.A.K\AppData\Roaming\PerformerSoft
2014-05-16 16:15 - 2014-05-16 16:15 - 00000000 ____D () C:\Users\M.A.K\AppData\Local\SearchProtect
2014-05-16 16:15 - 2014-05-16 16:15 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-16 16:15 - 2014-05-16 12:56 - 00000286 _____ () C:\Windows\Tasks\PC Performer_UPDATES.job
2014-05-16 14:27 - 2014-05-08 13:49 - 00000000 ____D () C:\Users\Zümrüt\Documents\Bewerbung
2014-05-16 13:06 - 2012-09-25 08:47 - 00000000 ____D () C:\Users\Zümrüt\Tracing
2014-05-16 13:06 - 2012-05-21 21:35 - 00000000 ____D () C:\Users\Zümrüt\AppData\Roaming\Winamp
2014-05-16 13:06 - 2007-07-12 03:49 - 00000000 ____D () C:\Windows\Panther
2014-05-16 12:59 - 2014-05-16 12:59 - 00003416 _____ () C:\Windows\System32\Tasks\{4191952B-4600-432A-ABD0-28B7523B4BF0}
2014-05-16 12:56 - 2014-05-16 12:56 - 00003032 _____ () C:\Windows\System32\Tasks\PC Performer_UPDATES
2014-05-16 12:56 - 2014-05-16 12:56 - 00002876 _____ () C:\Windows\System32\Tasks\PC Performer_DEFAULT
2014-05-16 12:56 - 2014-05-16 12:56 - 00000000 ____D () C:\Users\Zümrüt\AppData\Roaming\PerformerSoft
2014-05-16 12:56 - 2014-05-16 12:56 - 00000000 ____D () C:\Users\Zümrüt\AppData\Local\SearchProtect
2014-05-16 12:56 - 2014-05-16 12:56 - 00000000 ____D () C:\Program Files (x86)\Speed Test 127
2014-05-16 12:56 - 2014-05-16 12:56 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2014-05-16 12:56 - 2014-05-16 12:56 - 00000000 ____D () C:\Program Files (x86)\PC Performer
2014-05-16 12:56 - 2012-09-25 08:47 - 00000000 ____D () C:\Users\Zümrüt\AppData\Roaming\mozilla
2014-05-16 12:55 - 2014-05-16 12:55 - 01342896 _____ (UPDF) C:\Users\Zümrüt\Downloads\UPDFSetup.exe
2014-05-16 12:32 - 2012-05-23 00:04 - 00000000 ____D () C:\Users\Zümrüt\AppData\Roaming\Skype
2014-05-16 12:22 - 2014-05-16 12:22 - 00000000 ____D () C:\Users\Zümrüt\AppData\Local\Skype
2014-05-15 16:09 - 2013-07-10 16:04 - 00000910 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1983832016-936756737-872752734-1001Core.job
2014-05-15 13:55 - 2012-05-17 11:38 - 00000000 ___RD () C:\Users\Zümrüt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-15 13:55 - 2012-05-17 11:38 - 00000000 ___RD () C:\Users\Zümrüt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-15 13:49 - 2014-05-06 16:00 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-15 13:47 - 2012-06-15 13:03 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-15 13:44 - 2013-07-29 18:36 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-15 13:42 - 2012-05-31 14:58 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-15 11:17 - 2012-06-01 15:00 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-15 11:17 - 2012-06-01 15:00 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-15 11:17 - 2011-10-14 05:49 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-15 11:03 - 2011-10-14 05:49 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-05-15 11:02 - 2013-12-11 18:23 - 00001025 _____ () C:\Users\Zümrüt\Desktop\Dropbox.lnk
2014-05-15 11:02 - 2013-12-11 18:21 - 00000900 _____ () C:\Windows\wininit.ini
2014-05-15 11:02 - 2013-12-11 18:21 - 00000000 ____D () C:\Users\Zümrüt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-05-11 23:24 - 2014-05-11 23:24 - 04557717 _____ () C:\Users\Zümrüt\Downloads\Wenn-Opa_s-parken.wmv
2014-05-09 12:49 - 2012-07-06 15:43 - 00000000 ____D () C:\Users\Zümrüt\Documents\Ali
2014-05-09 08:14 - 2014-05-15 11:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-05-15 11:14 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-08 15:33 - 2012-12-08 23:51 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-08 15:33 - 2012-12-08 23:51 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-08 13:48 - 2014-05-08 13:48 - 00000000 ____D () C:\Users\Zümrüt\Documents\Stex
2014-05-07 15:20 - 2014-05-06 14:33 - 00000000 ____D () C:\Users\Zümrüt\Desktop\QM
2014-05-07 14:51 - 2014-05-06 14:30 - 00000000 ____D () C:\Users\Zümrüt\Desktop\Ali
2014-05-06 12:52 - 2014-05-06 12:52 - 00000000 ____D () C:\Users\Zümrüt\AppData\Local\LPT
2014-05-06 12:52 - 2014-04-13 20:23 - 00000000 ____D () C:\Users\Zümrüt\AppData\Local\Smartbar
2014-05-06 12:52 - 2012-05-17 11:34 - 00000000 ____D () C:\Users\Zümrüt\AppData\Local\VirtualStore
2014-05-06 06:40 - 2014-05-15 13:45 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 06:17 - 2014-05-15 13:45 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 05:25 - 2014-05-15 13:45 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-06 05:07 - 2014-05-15 13:45 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-06 05:00 - 2014-05-15 13:45 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-15 13:45 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-04 15:11 - 2014-05-04 15:11 - 00000000 ____D () C:\Users\Zümrüt\AppData\Roaming\DropboxMaster
2014-05-04 14:21 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-28 23:16 - 2012-02-03 07:55 - 00700134 _____ () C:\Windows\system32\perfh007.dat
2014-04-28 23:16 - 2012-02-03 07:55 - 00149984 _____ () C:\Windows\system32\perfc007.dat
2014-04-28 23:16 - 2009-07-14 07:13 - 01622236 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-28 20:57 - 2014-04-28 20:57 - 00009728 ___SH () C:\Users\Zümrüt\Desktop\Thumbs.db
2014-04-28 20:43 - 2013-05-23 11:51 - 00000000 ____D () C:\Users\Zümrüt\Desktop\Malik
2014-04-28 20:42 - 2014-01-20 23:41 - 00000000 ____D () C:\Users\Zümrüt\Desktop\Foto
2014-04-28 20:42 - 2014-01-13 14:04 - 00000000 ____D () C:\Users\Zümrüt\Desktop\Examen
2014-04-26 22:10 - 2013-10-23 14:01 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-26 22:09 - 2014-04-26 22:08 - 00004253 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
2014-04-26 22:09 - 2012-11-02 21:44 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-26 15:56 - 2014-04-26 15:56 - 00000000 ____D () C:\Windows\de
2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\he
2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\fr
2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\fi
2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\es
2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\en
2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\el
2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\da
2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\cs
2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\bg
2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\ar
2014-04-26 15:54 - 2011-10-14 05:42 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2014-04-26 15:53 - 2014-04-26 15:53 - 00001309 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\tr
2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\th
2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\sv
2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\sl
2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\sk
2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\ru
2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\ro
2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\pl
2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\nl
2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\it
2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\hu
2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\hr
2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\ca
2014-04-26 15:52 - 2012-12-05 15:59 - 00001378 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-04-26 15:50 - 2011-10-14 05:38 - 00001494 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2014-04-26 15:45 - 2014-04-26 15:45 - 00002490 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2014-04-26 15:45 - 2011-10-14 05:35 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-04-26 15:43 - 2012-12-05 15:49 - 00000000 ____D () C:\Program Files\Windows Live
2014-04-26 15:35 - 2014-04-26 15:35 - 00000000 ____D () C:\Users\Zümrüt\Documents\OneNote-Notizbücher
2014-04-26 15:25 - 2012-05-31 17:45 - 00000000 ____D () C:\Users\Zümrüt\AppData\Local\Windows Live
2014-04-24 10:55 - 2014-04-24 10:55 - 00921654 _____ () C:\Users\Zümrüt\Downloads\g6.bmp
2014-04-24 10:54 - 2014-04-24 10:54 - 00921654 _____ () C:\Users\Zümrüt\Downloads\g5.bmp
2014-04-23 13:51 - 2014-04-23 13:51 - 00000000 __SHD () C:\Users\Zümrüt\AppData\Local\EmieUserList
2014-04-23 13:51 - 2014-04-23 13:51 - 00000000 __SHD () C:\Users\Zümrüt\AppData\Local\EmieSiteList
2014-04-23 12:03 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-04-22 23:49 - 2012-05-17 11:54 - 00094576 _____ () C:\Users\Gast\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-22 23:49 - 2012-05-17 11:54 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-22 23:49 - 2012-05-17 11:54 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-04-22 23:48 - 2012-12-08 23:51 - 00002247 _____ () C:\Users\Gast\Desktop\Google Chrome.lnk
2014-04-22 23:48 - 2012-05-17 11:54 - 00001421 _____ () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Some content of TEMP:
====================
C:\Users\Gast\AppData\Local\Temp\avgnt.exe
C:\Users\M.A.K\AppData\Local\Temp\avgnt.exe
C:\Users\M.A.K\AppData\Local\Temp\Setup-yabrowser.exe
C:\Users\M.A.K\AppData\Local\Temp\SkypeSetup.exe
C:\Users\M.A.K\AppData\Local\Temp\yupdate-exec-yabrowser.exe
C:\Users\Zümrüt\AppData\Local\Temp\avgnt.exe
C:\Users\Zümrüt\AppData\Local\Temp\dlLogic.exe
C:\Users\Zümrüt\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpcoplfx.dll
C:\Users\Zümrüt\AppData\Local\Temp\GCVerifier.dll
C:\Users\Zümrüt\AppData\Local\Temp\nss24D7.exe
C:\Users\Zümrüt\AppData\Local\Temp\nsx20FF.exe
C:\Users\Zümrüt\AppData\Local\Temp\nsxE62D.exe
C:\Users\Zümrüt\AppData\Local\Temp\nsxEB5C.exe
C:\Users\Zümrüt\AppData\Local\Temp\spstub.exe
C:\Users\Zümrüt\AppData\Local\Temp\verifier.exe
C:\Users\Zümrüt\AppData\Local\Temp\WEB.DE_Toolbar_IE_Setup.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe
[2014-05-15 11:14] - [2014-03-04 11:43] - 0455168 ____A (Microsoft Corporation) 88AB9B72B4BF3963A0DE0820B4B0B06C
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-05-12 15:03
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-05-2014
Ran by Zümrüt at 2014-05-19 15:48:08
Running from C:\Users\Zümrüt\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
7-Zip 9.22beta (HKLM-x32\...\7-Zip) (Version: - )
Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.99 - NTI Corporation)
Acer Crystal Eye Webcam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 1.0.1904 - CyberLink Corp.)
Acer Crystal Eye Webcam (x32 Version: 1.0.1904 - CyberLink Corp.) Hidden
Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 6.00.3008 - Acer Incorporated)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3504 - Acer Incorporated)
Acer Games (HKLM-x32\...\WildTangent acer Master Uninstall) (Version: 1.0.2.5 - WildTangent)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3504 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0913.2011 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3500 - Acer Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.7.1.19610 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 2.7.1.19610 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader X (10.1.10) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.10 - Adobe Systems Incorporated)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Backup Manager V3 (x32 Version: 3.0.0.99 - NTI Corporation) Hidden
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Broadcom Card Reader Driver Installer (HKLM\...\{4710662C-8204-4334-A977-B1AC9E547819}) (Version: 14.8.2.2 - Broadcom Corporation)
Broadcom NetLink Controller (HKLM\...\{C91DCB72-F5BB-410D-A91A-314F5D1B4284}) (Version: 14.8.4.1 - Broadcom Corporation)
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Cisco AnyConnect Secure Mobility Client (HKLM-x32\...\Cisco AnyConnect Secure Mobility Client) (Version: 3.0.10057 - Cisco Systems, Inc.)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.0.10057 - Cisco Systems, Inc.) Hidden
clear.fi (HKLM-x32\...\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 1.0.2024.00 - CyberLink Corp.)
clear.fi (x32 Version: 1.0.1517_36458 - CyberLink Corp.) Hidden
clear.fi (x32 Version: 1.0.2024.00 - CyberLink Corp.) Hidden
clear.fi (x32 Version: 9.0.8026 - CyberLink Corp.) Hidden
clear.fi Client (HKLM-x32\...\{43AAE145-83CF-4C96-9A5E-756CEFCE879F}) (Version: 1.00.3500 - Acer Incorporated)
Crazy Chicken Kart 2 (x32 Version: 2.2.0.97 - WildTangent) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{349F73CA-653A-43A6-AE77-970B07D6EDA0}) (Version: - Microsoft)
Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.7000.7 - Dolby Laboratories Inc)
Dropbox (HKCU\...\Dropbox) (Version: 2.6.33 - Dropbox, Inc.)
eBay Worldwide (HKLM-x32\...\{D3E5A972-9A15-427D-AE78-8181A5FD943C}) (Version: 2.2.0409 - OEM)
EPSON Attach To Email (HKLM-x32\...\InstallShield_{20C45B32-5AB6-46A4-94EF-58950CAF05E5}) (Version: 1.01.0000 - SEIKO EPSON)
EPSON Attach To Email (x32 Version: 1.01.0000 - SEIKO EPSON) Hidden
EPSON Copy Utility 3 (HKLM-x32\...\{67EDD823-135A-4D59-87BD-950616D6E857}) (Version: 3.2.0.0 - )
EPSON Easy Photo Print (HKLM-x32\...\{BC69DDB8-4840-4D9B-BB31-0D4DB2BA1312}) (Version: 1.2.3.0 - )
EPSON File Manager (HKLM-x32\...\{E86BC406-944E-41F6-ADE6-2C136734C96B}) (Version: 1.1.0.0 - )
EPSON Web-To-Page (HKLM-x32\...\{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}) (Version: - )
EPSON-Drucker-Software (HKLM\...\EPSON Printer and Utilities) (Version: - SEIKO EPSON Corporation)
ESDX4000_4050_CX3900 (HKLM-x32\...\ESDX4000_4050_CX3900) (Version: - )
ETDWare PS/2-X64 8.0.6.3_WHQL (HKLM\...\Elantech) (Version: 8.0.6.3 - ELAN Microelectronic Corp.)
Evernote v. 4.5.1 (HKLM-x32\...\{28921580-E4BB-11E0-9FD7-1CC1DEF07CBE}) (Version: 4.5.1.5451 - Evernote Corp.)
Facebook Video Calling 2.0.0.447 (HKLM-x32\...\{8DF41A9F-FE13-43E8-A003-5F9B55A011EE}) (Version: 2.0.447 - Skype Limited)
FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden
FileZilla Client 3.2.7.1 (HKLM-x32\...\FileZilla Client) (Version: 3.2.7.1 - )
Final Drive: Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden
Fooz Kids (HKLM-x32\...\FoozKids) (Version: 3.0.8 - FUHU, Inc.)
Fooz Kids (x32 Version: 3.0.8 - FUHU, Inc.) Hidden
Fooz Kids Platform (HKLM-x32\...\{8D68CE08-9A14-4B7B-9857-3C646A2F34C7}) (Version: 2.1 - FUHU, Inc.)
Fotogaléria (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotogalerija (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotogalleri (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotogalleriet (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotoğraf Galerisi (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotótár (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galeria de Fotografias (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galeria de Fotos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galería de fotos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galeria fotogràfica (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galeria fotografii (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galerie foto (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galerija fotografija (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 34.0.1847.137 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
IB Updater Service (HKLM-x32\...\WNLT) (Version: 5.0.8.6 - ) <==== ATTENTION
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)
Insaniquarium Deluxe (x32 Version: 2.2.0.97 - WildTangent) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2418 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.5.0.1026 - Intel Corporation)
Internet-TV für Windows Media Center (HKLM-x32\...\{9D318C86-AF4C-409F-A6AC-7183FF4CF424}) (Version: 4.2.2.0 - Microsoft Corporation)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.550 - Oracle)
Java 7 Update 9 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417009FF}) (Version: 7.0.90 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java SE Development Kit 7 Update 9 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170090}) (Version: 1.7.0.90 - Oracle)
Java(TM) SE Development Kit 7 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170000}) (Version: 1.7.0.0 - Oracle)
Java(TM) SE Development Kit 7 (HKLM-x32\...\{32A3A4F4-B792-11D6-A78A-00B0D0170000}) (Version: 1.7.0.0 - Oracle)
Jewel Match 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden
Jewel Quest Solitaire (x32 Version: 2.2.0.95 - WildTangent) Hidden
John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Launch Manager (HKLM-x32\...\LManager) (Version: 5.1.7 - Acer Inc.)
LPT System Updater Service (x32 Version: 1.0.0.0 - LPT) Hidden <==== ATTENTION
Microsoft – Speichern als PDF – Add-In für 2007 Microsoft Office-Programme (HKLM-x32\...\{90120000-00B0-0407-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word Viewer 2003 (HKLM-x32\...\{90850407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
Mystery of Mortlake Mansion (x32 Version: 2.2.0.98 - WildTangent) Hidden
MyWinLocker (Version: 4.0.14.27 - Egis Technology Inc.) Hidden
MyWinLocker 4 (x32 Version: 4.0.14.27 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.19 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 4.0.14.19 - Egis Technology Inc.) Hidden
newsXpresso (HKLM-x32\...\InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}) (Version: 1.0.0.40 - esobi Inc.)
newsXpresso (x32 Version: 1.0.0.40 - esobi Inc.) Hidden
Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation)
NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.9002 - NTI Corporation)
NTI Media Maker 9 (x32 Version: 9.0.2.9002 - NTI Corporation) Hidden
NVIDIA Grafiktreiber 285.64 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 285.64 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.46.235 - NVIDIA Corporation) Hidden
NVIDIA Optimus 1.5.20 (Version: 1.5.20 - NVIDIA Corporation) Hidden
NVIDIA PhysX (HKLM-x32\...\{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}) (Version: 9.10.0514 - NVIDIA Corporation)
NVIDIA Systemsteuerung 285.64 (Version: 285.64 - NVIDIA Corporation) Hidden
NVIDIA Update Components (Version: 1.5.20 - NVIDIA Corporation) Hidden
OpenOffice.org 3.4 (HKLM-x32\...\{4C552FD3-2CCD-4E00-AC64-0681DBB3F8B5}) (Version: 3.4.9590 - OpenOffice.org)
PC Performer (HKLM-x32\...\PC Performer_is1) (Version: 11.10 - PerformerSoft LLC) <==== ATTENTION
Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden
Photo Common (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
PIF DESIGNER (HKLM-x32\...\{B90450DF-E781-46FD-B1F1-0C86DA40E443}) (Version: - )
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95 - WildTangent) Hidden
Poczta usługi Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
Pošta Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
PriceGong 2.6.7 (HKLM-x32\...\PriceGong) (Version: 2.6.7 - PriceGong) <==== ATTENTION
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Raccolta foto (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6438 - Realtek Semiconductor Corp.)
Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.13.1.47 - Client Connect LTD) <==== ATTENTION
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden
Shopping Helper Smartbar (HKLM-x32\...\{1F288D91-CACB-47A1-A7EC-27DAC3512CEE}) (Version: 11.55.63.16956 - ReSoft Ltd.) <==== ATTENTION
Shopping Helper Smartbar Engine (HKCU\...\{47cc61b5-00ef-4f70-8f12-823c5e7ba0bb}) (Version: 11.55.63.16956 - ReSoft Ltd.) <==== ATTENTION
Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Skype Web Plugin (HKLM-x32\...\{B51DD93B-3CB5-4D9D-BFF2-FD19DBBBFD9A}) (Version: 2.9.13008.18866 - Skype Technologies S.A.)
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Speed Test 127 (HKLM-x32\...\Speed Test 127) (Version: 3.0.0.0 - Speed Analysis) <==== ATTENTION
Torchlight (x32 Version: 2.2.0.97 - WildTangent) Hidden
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.296 - TuneUp Software) Hidden
TuneUp Utilities 2014 (HKLM-x32\...\TuneUp Utilities) (Version: 14.0.1000.296 - TuneUp Software)
TuneUp Utilities 2014 (x32 Version: 14.0.1000.296 - TuneUp Software) Hidden
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version: - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft)
Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version: - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version: - Microsoft)
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
Valokuvavalikoima (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.97 - WildTangent) Hidden
WEB.DE Softwareaktualisierung (HKLM-x32\...\1&1 Mail & Media GmbH 1und1Softwareaktualisierung) (Version: 3.0.0.55 - 1&1 Mail & Media GmbH)
WEB.DE Toolbar für Internet Explorer (HKLM-x32\...\1&1 Mail & Media GmbH Toolbar IE8) (Version: 1.7.2.0 - 1&1 Mail & Media GmbH)
WEB.DE Toolbar MSVC100 CRT x64 (Version: 1.0.0 - 1&1 Mail & Media GmbH) Hidden
WEB.DE Toolbar MSVC100 CRT x86 (x32 Version: 1.0.0 - 1&1 Mail & Media GmbH) Hidden
Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3504 - Acer Incorporated)
WildTangent Games App (Acer Games) (x32 Version: 4.0.5.14 - WildTangent) Hidden
Winamp (HKLM-x32\...\Winamp) (Version: 5.623 - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows Live Communications Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Family Safety (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Fotogalleri (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3528.0331 - společnost Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3528.0331 - společnost Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3528.0331 - Корпорация Майкрософт) Hidden
Windows Live MIME IFilter (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Temel Parçalar (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live 程式集 (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Liven peruspaketti (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Liven sähköposti (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Media Center Add-in for Silverlight (HKLM-x32\...\{0EDBEB2B-7C8D-42E6-8312-0F84394A3223}) (Version: 4.7.3.0 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Συλλογή φωτογραφιών (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 16.4.3528.0331 - Корпорация Майкрософт) Hidden
Фотоальбом (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Фотогалерия (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Фотографии (общедоступная версия) (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
גלריית התמונות (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
معرض الصور (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
影像中心 (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
==================== Restore Points =========================
04-05-2014 12:01:41 Windows Update
04-05-2014 13:35:46 Windows Update
06-05-2014 13:59:57 Windows Update
15-05-2014 09:06:57 Windows Update
15-05-2014 10:27:35 Windows Update
19-05-2014 13:29:54 TuneUp Utilities 2014 wird installiert
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {17D75C6B-B3A9-43C0-B345-90B805072C20} - System32\Tasks\{AE0B5569-2FCD-48C3-B723-D07419BCCA38} => Chrome.exe hxxp://ui.skype.com/ui/0/6.6.0.106/de/abandoninstall?page=tsPlugin
Task: {1A0A1082-5E3C-4CB5-A5E9-6FAD69BD81D2} - System32\Tasks\{679A2602-8E0E-4FE9-889F-E30EB3221B7D} => C:\Windows\twain_32\escndv\escndv.exe
Task: {26BF6667-9DD6-4121-AED8-B5F86DE397B1} - System32\Tasks\DMREngine => C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe [2011-08-24] (CyberLink)
Task: {2F08BD81-0B0D-47DF-B762-577899406FA9} - System32\Tasks\{82AC8EF9-862B-48BF-A7AD-93EFFBE3EDF3} => Chrome.exe hxxp://ui.skype.com/ui/0/6.11.0.102/de/abandoninstall?page=tsProgressBar
Task: {3B93DA68-575D-416A-AFBE-27B4080FF4D2} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {3EC3A3F5-603F-4046-B3CF-76577C539D4C} - System32\Tasks\{DEC00A54-EF68-4321-95F6-86BC0BB618F3} => C:\Windows\twain_32\escndv\escndv.exe
Task: {4106F9DD-B961-47A7-AC58-5A3405791D08} - System32\Tasks\clear.fiAgent => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe [2011-08-24] (CyberLink Corp.)
Task: {510F64C7-6FE2-450F-8072-6A8BDCA53ED9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-08] (Google Inc.)
Task: {6682202C-3A90-42A6-AABA-C92D59994A4F} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1983832016-936756737-872752734-1001Core => C:\Users\Zümrüt\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-07-10] (Facebook Inc.)
Task: {85A46426-66B5-4A39-A6EF-2405DBB343A6} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {88A04F8F-3906-47FE-93FC-16743E83D9DF} - System32\Tasks\clear.fi => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe [2011-08-24] (Acer Incorporated)
Task: {97610AD6-2E5F-4215-A406-7AF7C363C1BA} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1983832016-936756737-872752734-1001UA => C:\Users\Zümrüt\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-07-10] (Facebook Inc.)
Task: {9912962F-F5B8-44FF-8F96-8297758B6CB5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-08] (Google Inc.)
Task: {9D5CC427-C024-461A-8034-1E7DAE401D4A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-15] (Adobe Systems Incorporated)
Task: {9E889419-DB2C-4392-8220-16090F463B07} - System32\Tasks\Registration 1und1 Task => C:\Program Files (x86)\1und1Softwareaktualisierung\cdsupdclient.exe [2013-06-18] (1&1 Mail & Media GmbH)
Task: {A8FBA115-EF08-4D87-9BB2-709BE3F77088} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {AC25C3D6-1005-4453-9505-A45B641C287C} - System32\Tasks\Google Updater and Installer => C:\Users\Zümrüt\AppData\Local\Google\Update\GoogleUpdate.exe
Task: {AC4E5ACF-89F7-4220-BA21-81EE183975E2} - System32\Tasks\Microsoft\Windows\Application Experience\AitAgent => aitagent.exe
Task: {C337AA29-AFCA-4835-8CCE-B781C157A2CA} - System32\Tasks\{55547945-9F82-43AC-AA85-F569D03A0C6B} => C:\Windows\twain_32\escndv\escndv.exe
Task: {D2000BF0-C297-4CA6-96C3-C8F418DFF64F} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {E3163C33-301D-4730-A266-5518C5ED3967} - System32\Tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask => BthUdTask.exe
Task: {E98498D4-1BB2-4ED4-ADC7-D33D5DE33A26} - System32\Tasks\{E093A04E-4B44-4BA3-BFC2-36C87BA8B9C8} => C:\Windows\twain_32\escndv\escndv.exe
Task: {EB50E6DE-945E-4603-804A-C32C442368D0} - System32\Tasks\PC Performer_UPDATES => C:\Program Files (x86)\PC Performer\PCPerformer.exe [2013-06-19] (PerformerSoft LLC) <==== ATTENTION
Task: {F3105A07-73AA-4DA7-876A-802D754457B4} - System32\Tasks\{075A1E59-06ED-426E-9D60-87D38B0BBE3D} => C:\Windows\twain_32\escndv\escndv.exe
Task: {FDE43D88-9BB7-4953-BF29-057DD9C63009} - System32\Tasks\PC Performer_DEFAULT => C:\Program Files (x86)\PC Performer\PCPerformer.exe [2013-06-19] (PerformerSoft LLC) <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1983832016-936756737-872752734-1001Core.job => C:\Users\Zümrüt\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1983832016-936756737-872752734-1001UA.job => C:\Users\Zümrüt\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\PC Performer_DEFAULT.job => C:\Program Files (x86)\PC Performer\PCPerformer.exe <==== ATTENTION
Task: C:\Windows\Tasks\PC Performer_UPDATES.job => C:\Program Files (x86)\PC Performer\PCPerformer.exe <==== ATTENTION
==================== Loaded Modules (whitelisted) =============
2013-06-12 11:53 - 2014-04-07 16:57 - 02276144 _____ () C:\Windows\system32\dmwu.exe
2014-03-30 10:50 - 2014-03-30 10:50 - 00037920 _____ () C:\Program Files (x86)\LPT\srpts.exe
2009-08-23 19:24 - 2009-08-23 19:24 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2014-04-07 16:57 - 2014-04-07 16:57 - 01100592 _____ () C:\Windows\SysWOW64\jmdp\stij.exe
2014-04-07 16:57 - 2014-04-07 16:57 - 01303856 _____ () C:\Windows\System32\ljkb\stij.exe
2014-04-07 16:57 - 2014-04-07 16:57 - 01571120 _____ () C:\Windows\System32\ljkb\lmrn.dll
2011-10-14 05:57 - 2011-06-10 19:36 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-05-05 12:49 - 2014-05-05 12:49 - 00023072 _____ () C:\Users\Zümrüt\AppData\Local\Smartbar\Application\Lrcnta.exe
2014-05-05 12:50 - 2014-05-05 12:50 - 00023072 _____ () C:\Users\Zümrüt\AppData\Local\LPT\srptm.exe
2014-04-15 15:59 - 2014-04-15 15:59 - 00675640 _____ () C:\Program Files (x86)\TuneUp Utilities 2014\avgrepliba.dll
2014-05-19 15:43 - 2014-05-19 15:43 - 00050477 _____ () C:\Users\Zümrüt\Downloads\Defogger.exe
2012-10-17 16:03 - 2012-09-19 19:17 - 00397088 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2014-03-30 10:50 - 2014-03-30 10:50 - 00077856 _____ () C:\Program Files (x86)\LPT\srpt.dll
2014-03-30 10:50 - 2014-03-30 10:50 - 00023072 _____ () C:\Program Files (x86)\LPT\srptc.dll
2014-03-30 10:49 - 2014-03-30 10:49 - 00018976 _____ () C:\Program Files (x86)\LPT\Smartbar.Common.dll
2011-04-24 03:29 - 2011-04-24 03:29 - 00465640 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll
2011-04-24 03:29 - 2011-04-24 03:29 - 01081664 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll
2011-04-24 03:29 - 2011-04-24 03:29 - 00125760 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll
2014-04-07 16:57 - 2014-04-07 16:57 - 01266992 _____ () C:\Windows\SysWOW64\jmdp\lmrn.dll
2014-05-19 10:31 - 2014-05-19 10:31 - 00041984 _____ () c:\users\zmrt~1\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpcoplfx.dll
2013-10-19 01:55 - 2013-10-19 01:55 - 25100288 _____ () C:\Users\Zümrüt\AppData\Roaming\Dropbox\bin\libcef.dll
2011-08-24 19:03 - 2011-08-24 19:03 - 00206216 _____ () C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\CLNetMediaDMA.dll
2014-02-12 16:16 - 2014-02-12 16:16 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\ae685719bd599604bdf031cdad0ba38a\IsdiInterop.ni.dll
2011-10-14 05:15 - 2011-04-30 09:28 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2014-05-05 12:49 - 2014-05-05 12:49 - 00032288 _____ () C:\Users\Zümrüt\AppData\Local\Smartbar\Application\lrcnt.dll
2014-05-05 12:50 - 2014-05-05 12:50 - 00066080 _____ () C:\Users\Zümrüt\AppData\Local\Smartbar\Application\sppsm.dll
2014-05-05 12:50 - 2014-05-05 12:50 - 00024440 _____ () C:\Users\Zümrüt\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll
2014-05-05 12:50 - 2014-05-05 12:50 - 00057888 _____ () C:\Users\Zümrüt\AppData\Local\Smartbar\Application\srut.dll
2014-05-05 12:50 - 2014-05-05 12:50 - 00165408 _____ () C:\Users\Zümrüt\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll
2014-05-05 12:50 - 2014-05-05 12:50 - 00081952 _____ () C:\Users\Zümrüt\AppData\Local\LPT\srpt.dll
2014-05-05 12:50 - 2014-05-05 12:50 - 00023072 _____ () C:\Users\Zümrüt\AppData\Local\LPT\srptc.dll
2014-05-05 12:49 - 2014-05-05 12:49 - 00018976 _____ () C:\Users\Zümrüt\AppData\Local\LPT\Smartbar.Common.dll
2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\office14\Cultures\office.odf
2014-05-15 16:43 - 2014-05-08 01:29 - 00065352 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.137\chrome_elf.dll
2009-08-23 19:58 - 2009-08-23 19:58 - 00094208 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2014-05-15 16:43 - 2014-05-08 01:29 - 00674632 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.137\libglesv2.dll
2014-05-15 16:43 - 2014-05-08 01:29 - 00093000 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.137\libegl.dll
2014-05-15 16:43 - 2014-05-08 01:29 - 04081480 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.137\pdf.dll
2014-05-15 16:43 - 2014-05-08 01:29 - 00390472 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.137\ppGoogleNaClPluginChrome.dll
2014-05-15 16:43 - 2014-05-08 01:29 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.137\ffmpegsumo.dll
2014-05-15 16:43 - 2014-05-08 01:29 - 13695816 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.137\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== EXE Association (whitelisted) =============
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (05/19/2014 03:37:59 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: chrome.exe, Version: 34.0.1847.137, Zeitstempel: 0x536ab5d1
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000ce753
ID des fehlerhaften Prozesses: 0x6bc8
Startzeit der fehlerhaften Anwendung: 0xchrome.exe0
Pfad der fehlerhaften Anwendung: chrome.exe1
Pfad des fehlerhaften Moduls: chrome.exe2
Berichtskennung: chrome.exe3
Error: (05/19/2014 03:10:24 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: chrome.exe, Version: 34.0.1847.137, Zeitstempel: 0x536ab5d1
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000ce753
ID des fehlerhaften Prozesses: 0x64ac
Startzeit der fehlerhaften Anwendung: 0xchrome.exe0
Pfad der fehlerhaften Anwendung: chrome.exe1
Pfad des fehlerhaften Moduls: chrome.exe2
Berichtskennung: chrome.exe3
Error: (05/19/2014 03:09:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: chrome.exe, Version: 34.0.1847.137, Zeitstempel: 0x536ab5d1
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000ce753
ID des fehlerhaften Prozesses: 0x658c
Startzeit der fehlerhaften Anwendung: 0xchrome.exe0
Pfad der fehlerhaften Anwendung: chrome.exe1
Pfad des fehlerhaften Moduls: chrome.exe2
Berichtskennung: chrome.exe3
Error: (05/19/2014 02:06:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: chrome.exe, Version: 34.0.1847.137, Zeitstempel: 0x536ab5d1
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000ce753
ID des fehlerhaften Prozesses: 0x499c
Startzeit der fehlerhaften Anwendung: 0xchrome.exe0
Pfad der fehlerhaften Anwendung: chrome.exe1
Pfad des fehlerhaften Moduls: chrome.exe2
Berichtskennung: chrome.exe3
Error: (05/19/2014 01:52:04 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Smartbar.exe, Version 11.55.63.16956 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 3e0
Startzeit: 01cf733c7f88e2c7
Endzeit: 7
Anwendungspfad: C:\Users\Zümrüt\AppData\Local\Smartbar\Application\Smartbar.exe
Berichts-ID: f6adb604-df4b-11e3-a6bc-dc0ea1240320
Error: (05/19/2014 01:51:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: chrome.exe, Version: 34.0.1847.137, Zeitstempel: 0x536ab5d1
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000ce753
ID des fehlerhaften Prozesses: 0x1c98
Startzeit der fehlerhaften Anwendung: 0xchrome.exe0
Pfad der fehlerhaften Anwendung: chrome.exe1
Pfad des fehlerhaften Moduls: chrome.exe2
Berichtskennung: chrome.exe3
Error: (05/19/2014 00:14:05 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: chrome.exe, Version: 34.0.1847.137, Zeitstempel: 0x536ab5d1
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000ce753
ID des fehlerhaften Prozesses: 0x834
Startzeit der fehlerhaften Anwendung: 0xchrome.exe0
Pfad der fehlerhaften Anwendung: chrome.exe1
Pfad des fehlerhaften Moduls: chrome.exe2
Berichtskennung: chrome.exe3
Error: (05/19/2014 10:40:18 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "G:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"
Error: (05/19/2014 10:29:38 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/16/2014 11:58:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: chrome.exe, Version: 34.0.1847.137, Zeitstempel: 0x536ab5d1
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000ce753
ID des fehlerhaften Prozesses: 0x2d2c
Startzeit der fehlerhaften Anwendung: 0xchrome.exe0
Pfad der fehlerhaften Anwendung: chrome.exe1
Pfad des fehlerhaften Moduls: chrome.exe2
Berichtskennung: chrome.exe3
System errors:
=============
Error: (05/19/2014 10:30:50 AM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1053WSearch{9E175B6D-F52A-11D8-B9A5-505054503030}
Error: (05/19/2014 10:30:50 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (05/19/2014 10:30:03 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht.
Error: (05/17/2014 00:27:49 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}
Error: (05/16/2014 04:33:01 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}
Error: (05/16/2014 10:43:35 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde nicht richtig gestartet.
Error: (05/12/2014 00:18:21 PM) (Source: NetBT) (EventID: 4321) (User: )
Description: Der Name "WORKGROUP :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.178.21
registriert werden. Der Computer mit IP-Adresse 192.168.178.1 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.
Error: (05/11/2014 11:24:53 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {46986115-84D6-459C-8F95-52DD653E532E}
Error: (05/09/2014 07:56:14 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (05/09/2014 07:56:13 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht.
Microsoft Office Sessions:
=========================
Error: (05/19/2014 03:37:59 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: chrome.exe34.0.1847.137536ab5d1ntdll.dll6.1.7601.18247521ea8e7c0000374000ce7536bc801cf7363ae1c9d60C:\Program Files (x86)\Google\Chrome\Application\chrome.exeC:\Windows\SysWOW64\ntdll.dllca7f69dc-df5a-11e3-a6bc-dc0ea1240320
Error: (05/19/2014 03:10:24 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: chrome.exe34.0.1847.137536ab5d1ntdll.dll6.1.7601.18247521ea8e7c0000374000ce75364ac01cf73639bc59142C:\Program Files (x86)\Google\Chrome\Application\chrome.exeC:\Windows\SysWOW64\ntdll.dllefa8ff41-df56-11e3-a6bc-dc0ea1240320
Error: (05/19/2014 03:09:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: chrome.exe34.0.1847.137536ab5d1ntdll.dll6.1.7601.18247521ea8e7c0000374000ce753658c01cf7362f18e0faaC:\Program Files (x86)\Google\Chrome\Application\chrome.exeC:\Windows\SysWOW64\ntdll.dllcfd72ea8-df56-11e3-a6bc-dc0ea1240320
Error: (05/19/2014 02:06:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: chrome.exe34.0.1847.137536ab5d1ntdll.dll6.1.7601.18247521ea8e7c0000374000ce753499c01cf735a9d77f368C:\Program Files (x86)\Google\Chrome\Application\chrome.exeC:\Windows\SysWOW64\ntdll.dll0d813253-df4e-11e3-a6bc-dc0ea1240320
Error: (05/19/2014 01:52:04 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Smartbar.exe11.55.63.169563e001cf733c7f88e2c77C:\Users\Zümrüt\AppData\Local\Smartbar\Application\Smartbar.exef6adb604-df4b-11e3-a6bc-dc0ea1240320
Error: (05/19/2014 01:51:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: chrome.exe34.0.1847.137536ab5d1ntdll.dll6.1.7601.18247521ea8e7c0000374000ce7531c9801cf734b122cb753C:\Program Files (x86)\Google\Chrome\Application\chrome.exeC:\Windows\SysWOW64\ntdll.dllea14b765-df4b-11e3-a6bc-dc0ea1240320
Error: (05/19/2014 00:14:05 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: chrome.exe34.0.1847.137536ab5d1ntdll.dll6.1.7601.18247521ea8e7c0000374000ce75383401cf733d3af12a95C:\Program Files (x86)\Google\Chrome\Application\chrome.exeC:\Windows\SysWOW64\ntdll.dll4e76952a-df3e-11e3-a6bc-dc0ea1240320
Error: (05/19/2014 10:40:18 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: G:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)
Error: (05/19/2014 10:29:38 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/16/2014 11:58:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: chrome.exe34.0.1847.137536ab5d1ntdll.dll6.1.7601.18247521ea8e7c0000374000ce7532d2c01cf714bd702dbaaC:\Program Files (x86)\Google\Chrome\Application\chrome.exeC:\Windows\SysWOW64\ntdll.dll2ff45cb8-dd45-11e3-aa33-dc0ea1240320
==================== Memory info ===========================
Percentage of memory in use: 37%
Total physical RAM: 8043.86 MB
Available physical RAM: 5025.43 MB
Total Pagefile: 16085.9 MB
Available Pagefile: 12896.52 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive c: (Acer) (Fixed) (Total:680.54 GB) (Free:607.66 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: F4C69166)
Partition 1: (Not Active) - (Size=18 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=681 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
19.05.2014, 15:42
| #2 |
| /// TB-Ausbilder   | Windows 7: Wie kann ich den PC Performer, Speed Test 127 und Search Protect deinstallieren? Mein Name ist Timo und ich werde Dir bei deinem Problem behilflich sein.
Hinweis: Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist meist der Schnellere und immer der sicherste Weg. Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis dir jemand vom Team sagt, dass Du clean bist. Wichtig: |
|
19.05.2014, 18:05
| #3 |
| /// TB-Ausbilder | Windows 7: Wie kann ich den PC Performer, Speed Test 127 und Search Protect deinstallieren? Dann wollen wir mal loslegen und den nervigen Programmen den Kampf ansagen
__________________  Schritt 1 Software mit Revo Uninstaller deinstallieren Downloade Dir bitte den Revo Uninstaller
Schritt 2 Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Schritt 3 Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Schritt 4 Downloade Dir bitte  Malwarebytes Anti-Malware
Schritt 5 Starte noch einmal FRST.
Bitte poste in deiner Antwort:
|
|
19.05.2014, 21:56
| #4 |
| | Windows 7: Wie kann ich den PC Performer, Speed Test 127 und Search Protect deinstallieren? Hallo Timo, vielen Dank für die schnelle Antwort und Hilfe! Ich habe alle Schritte nacheinander durchgeführt. Nur Schritt 3 hat irgendwie nicht funktioniert, obwohl ich mein Antivirus-Programm deaktiviert habe. Es hat so ausgesehen, als wäre der Scan durchgeführt worden. Es ergab sich aber kein Logfile dazu.. Anbei die anderen Logfiles.. Code:
ATTFilter # AdwCleaner v3.210 - Bericht erstellt am 19/05/2014 um 21:35:24
# Aktualisiert 19/05/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Zümrüt - ZÜMRÜT-PC
# Gestartet von : C:\Users\Zümrüt\Downloads\adwcleaner_3.210.exe
# Option : Suchen
***** [ Dienste ] *****
Dienst Gefunden : IBUpdaterService
Dienst Gefunden : LPTSystemUpdater
***** [ Dateien / Ordner ] *****
Datei Gefunden : C:\Users\M.A.K\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.softonic.de_0.localstorage
Datei Gefunden : C:\Users\M.A.K\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.softonic.de_0.localstorage-journal
Datei Gefunden : C:\Users\M.A.K\daemonprocess.txt
Datei Gefunden : C:\Users\ZMRT~1\AppData\Local\Temp\uninstaller.exe
Datei Gefunden : C:\Users\Zümrüt\daemonprocess.txt
Datei Gefunden : C:\Windows\System32\dmwu.exe
Datei Gefunden : C:\Windows\System32\ImhxxpComm.dll
Datei Gefunden : C:\Windows\System32\roboot64.exe
Datei Gefunden : C:\Windows\System32\Tasks\PC Performer_DEFAULT
Datei Gefunden : C:\Windows\System32\Tasks\PC Performer_UPDATES
Datei Gefunden : C:\Windows\Tasks\PC Performer_DEFAULT.job
Datei Gefunden : C:\Windows\Tasks\PC Performer_UPDATES.job
Ordner Gefunden : C:\Program Files (x86)\LPT
Ordner Gefunden : C:\Program Files (x86)\SmartTweak
Ordner Gefunden : C:\Program Files (x86)\Speed Test 127
Ordner Gefunden : C:\ProgramData\ParetoLogic
Ordner Gefunden : C:\ProgramData\RegClean
Ordner Gefunden : C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok
Ordner Gefunden : C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
Ordner Gefunden : C:\Users\Gast\AppData\LocalLow\PriceGong
Ordner Gefunden : C:\Users\Gast\AppData\LocalLow\SweetIM
Ordner Gefunden : C:\Users\M.A.K\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok
Ordner Gefunden : C:\Users\M.A.K\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
Ordner Gefunden : C:\Users\M.A.K\AppData\Local\SearchProtect
Ordner Gefunden : C:\Users\M.A.K\AppData\Local\Software
Ordner Gefunden : C:\Users\M.A.K\AppData\Local\Yandex
Ordner Gefunden : C:\Users\M.A.K\AppData\LocalLow\PriceGong
Ordner Gefunden : C:\Users\M.A.K\AppData\LocalLow\SweetIM
Ordner Gefunden : C:\Users\M.A.K\AppData\LocalLow\Yandex
Ordner Gefunden : C:\Users\M.A.K\AppData\Roaming\PerformerSoft
Ordner Gefunden : C:\Users\M.A.K\AppData\Roaming\Systweak
Ordner Gefunden : C:\Users\M.A.K\AppData\Roaming\Yandex
Ordner Gefunden : C:\Users\ZMRT~1\AppData\Local\Temp\Smartbar
Ordner Gefunden : C:\Users\Zümrüt\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Ordner Gefunden : C:\Users\Zümrüt\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
Ordner Gefunden : C:\Users\Zümrüt\AppData\Local\LPT
Ordner Gefunden : C:\Users\Zümrüt\AppData\Local\Mobogenie
Ordner Gefunden : C:\Users\Zümrüt\AppData\Local\SearchProtect
Ordner Gefunden : C:\Users\Zümrüt\AppData\Local\Smartbar
Ordner Gefunden : C:\Users\Zümrüt\AppData\Local\Software
Ordner Gefunden : C:\Users\Zümrüt\AppData\LocalLow\Smartbar
Ordner Gefunden : C:\Users\Zümrüt\AppData\Roaming\DriverCure
Ordner Gefunden : C:\Users\Zümrüt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SmartTweak Software
Ordner Gefunden : C:\Users\Zümrüt\AppData\Roaming\ParetoLogic
Ordner Gefunden : C:\Users\Zümrüt\AppData\Roaming\PerformerSoft
Ordner Gefunden : C:\Users\Zümrüt\AppData\Roaming\Systweak
Ordner Gefunden : C:\Windows\System32\ljkb
Ordner Gefunden : C:\Windows\SysWOW64\ARFC
Ordner Gefunden : C:\Windows\SysWOW64\jmdp
Ordner Gefunden : C:\Windows\SysWOW64\WNLT
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Daten Gefunden : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll
Daten Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll
Schlüssel Gefunden : HKCU\Software\IM
Schlüssel Gefunden : HKCU\Software\ImInstaller
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11C8C9C0-D918-44C0-8B5E-D297DA42F2C7}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1631550F-191D-4826-B069-D9439253D926}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C424171E-592A-415A-9EB1-DFD6D95D3530}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11C8C9C0-D918-44C0-8B5E-D297DA42F2C7}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1631550F-191D-4826-B069-D9439253D926}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C424171E-592A-415A-9EB1-DFD6D95D3530}
Schlüssel Gefunden : HKCU\Software\ParetoLogic
Schlüssel Gefunden : HKCU\Software\PerformerSoft
Schlüssel Gefunden : HKCU\Software\SmartBar
Schlüssel Gefunden : HKCU\Software\smartbarbackup
Schlüssel Gefunden : HKCU\Software\smartbarlog
Schlüssel Gefunden : HKCU\Software\smarttweak
Schlüssel Gefunden : HKCU\Software\systweak
Schlüssel Gefunden : HKCU\Software\WNLT
Schlüssel Gefunden : [x64] HKCU\Software\IM
Schlüssel Gefunden : [x64] HKCU\Software\ImInstaller
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gefunden : [x64] HKCU\Software\ParetoLogic
Schlüssel Gefunden : [x64] HKCU\Software\PerformerSoft
Schlüssel Gefunden : [x64] HKCU\Software\SmartBar
Schlüssel Gefunden : [x64] HKCU\Software\smartbarbackup
Schlüssel Gefunden : [x64] HKCU\Software\smartbarlog
Schlüssel Gefunden : [x64] HKCU\Software\smarttweak
Schlüssel Gefunden : [x64] HKCU\Software\systweak
Schlüssel Gefunden : [x64] HKCU\Software\WNLT
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{18B9B16E-716F-43DF-A6AD-512C7D2EB983}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{19975B78-1907-4DD6-A437-4C48120F46A4}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{562B9316-C08A-444A-9482-62080DD851AE}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{562B9317-C08A-444A-9482-62080DD851AE}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\AddonsFramework.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\ButtonSite.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\ScriptHost.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{11C8C9C0-D918-44C0-8B5E-D297DA42F2C7}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{75CC1BBE-D96F-45DF-A622-D60BFA8AF49E}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{C424171E-592A-415A-9EB1-DFD6D95D3530}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{E09EF104-3849-47F4-B005-A120558F3FEF}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{FB61B649-3FC8-4754-89A2-501456130AB5}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\driverscanner
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\iesmartbar.bho
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{045F91B3-695F-423A-98C7-8DE3C47AA020}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{1348BD1B-C32A-41A7-9BD4-5377AA1AB925}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{395AFE6E-8308-48DB-89BE-ED5F4AA3D3EC}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{43969E3F-3E7C-4911-A8F1-79C6CA6AC731}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{43B390F0-6BA2-45CA-ABF2-5DB0CEE9B49D}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{6E4C89CF-3061-4EE4-B22A-B7A8AAEA5CB3}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{94CADA2E-1D3F-419F-8A3D-06C58EDF53C8}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{9E52EB8B-8DD9-4605-AD36-D352BCD482F2}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{A1440EC3-F0FA-407A-B811-DE6668C06D29}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{B9A84AD0-5777-46FD-8B8F-1EBD06750FBC}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{BBBE01ED-0F1E-44DB-88C1-5CC1AEE3B462}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C1995F88-1C7F-40D7-B0FA-6F107F6308B8}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C815E3DA-0823-49B0-9270-D1771D58B317}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{E4A994B0-5550-4680-A4C6-B9470B888069}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{EE95078D-518C-4FD2-8093-FD1D4E33D3CA}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{F9EB11AB-9384-4736-9B33-993940F88895}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Speed Test 127.BackgroundHostObject
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Speed Test 127.BackgroundHostObject.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Speed Test 127.Navbar
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Speed Test 127.Navbar.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Speed Test 127.ScriptHostObject
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Speed Test 127.ScriptHostObject.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Speed Test 127.Tool
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Speed Test 127.Tool.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{3013E03D-89D5-4580-8560-DB198297CC29}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{53FDCCB0-2404-4274-9002-5A3A1FD40426}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{B69509B5-4A90-4433-A2DE-BE439F6581F2}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{F2F1AE7C-149B-46D3-9498-12572C7AFE11}
Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasapi32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasmancs
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasapi32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasmancs
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\sweetimsetup_rasapi32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\sweetimsetup_rasmancs
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\sweetpacksupdatemanager_rasapi32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11C8C9C0-D918-44C0-8B5E-D297DA42F2C7}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BC0BF363-63AB-4FF7-8EF1-AE0D7F711B24}
Schlüssel Gefunden : HKLM\Software\ParetoLogic
Schlüssel Gefunden : HKLM\Software\PerformerSoft
Schlüssel Gefunden : HKLM\Software\systweak
Schlüssel Gefunden : HKLM\Software\Uniblue
Schlüssel Gefunden : HKLM\Software\Uniblue\DriverScanner
Schlüssel Gefunden : HKLM\Software\WNLT
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{11C8C9C0-D918-44C0-8B5E-D297DA42F2C7}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{75CC1BBE-D96F-45DF-A622-D60BFA8AF49E}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{C424171E-592A-415A-9EB1-DFD6D95D3530}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{E09EF104-3849-47F4-B005-A120558F3FEF}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{FB61B649-3FC8-4754-89A2-501456130AB5}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{045F91B3-695F-423A-98C7-8DE3C47AA020}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{1348BD1B-C32A-41A7-9BD4-5377AA1AB925}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{395AFE6E-8308-48DB-89BE-ED5F4AA3D3EC}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{43969E3F-3E7C-4911-A8F1-79C6CA6AC731}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{43B390F0-6BA2-45CA-ABF2-5DB0CEE9B49D}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{6E4C89CF-3061-4EE4-B22A-B7A8AAEA5CB3}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{94CADA2E-1D3F-419F-8A3D-06C58EDF53C8}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{9E52EB8B-8DD9-4605-AD36-D352BCD482F2}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{A1440EC3-F0FA-407A-B811-DE6668C06D29}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{B9A84AD0-5777-46FD-8B8F-1EBD06750FBC}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{BBBE01ED-0F1E-44DB-88C1-5CC1AEE3B462}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{C1995F88-1C7F-40D7-B0FA-6F107F6308B8}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{C815E3DA-0823-49B0-9270-D1771D58B317}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{E4A994B0-5550-4680-A4C6-B9470B888069}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{EE95078D-518C-4FD2-8093-FD1D4E33D3CA}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{F9EB11AB-9384-4736-9B33-993940F88895}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11C8C9C0-D918-44C0-8B5E-D297DA42F2C7}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\WNLT
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{C424171E-592A-415A-9EB1-DFD6D95D3530}]
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Wert Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Browser Infrastructure Helper]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{C424171E-592A-415A-9EB1-DFD6D95D3530}]
Wert Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Wert Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{C424171E-592A-415A-9EB1-DFD6D95D3530}]
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.17041
Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page] - hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmwODjwdSN4nYKkLkiDsRZrjHk60SYY7Cl78H_h3cyuEGnob5GRpsGdyFykBBkBWRGBw2McZsLouNpGTnwryp245Hx5ptRReMm6-ViTDOHT0LQ1Z5nBZtzFzfe_-Sm0lJcWsCbyieDQldLsAfZKnuWYSTNOM,&q={searchTerms}
Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar] - hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmwODjwdSN4nYKkLkiDsRZrjHk60SYY7Cl78H_h3cyuEGnob5GRpsGdyFykBBkBWRGBw2McZsLouNpGTnwryp245Hx5ptRReMm6-ViTDOHT0LQ1Z5nBZtzFzfe_-Sm0lJcWsCbyieDQldLsAfZKnuWYSTNOM,&q={searchTerms}
Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL] - hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmwODjwdSN4nYKkLkiDsRZrjHk60SYY7Cl78H_h3cyuEGnob5GRpsGdyFykBBkBWRGBw2McZsLouNpGTnwryp245Hx5ptRReMm6-ViTDOHT0LQ1Z5nBZtzFzfe_-Sm0lJcWsCbyieDQldLsAfZKnuWYSTNOM,&q={searchTerms}
Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant] - hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmwODjwdSN4nYKkLkiDsRZrjHk60SYY7Cl78H_h3cyuEGnob5GRpsGdyFykBBkBWRGBw2McZsLouNpGTnwryp245Hx5ptRReMm6-ViTDOHT0LQ1Z5nBZtzFzfe_-Sm0lJcWsCbyieDQldLsAfZKnuWYSTNOM,&q={searchTerms}
Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default] - hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmwODjwdSN4nYKkLkiDsRZrjHk60SYY7Cl78H_h3cyuEGnob5GRpsGdyFykBBkBWRGBw2McZsLouNpGTnwryp245Hx5ptRReMm6-ViTDOHT0LQ1Z5nBZtzFzfe_-Sm0lJcWsCbyieDQldLsAfZKnuWYSTNOM,&q={searchTerms}
Einstellung Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default] - hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmwODjwdSN4nYKkLkiDsRZrjHk60SYY7Cl78H_h3cyuEGnob5GRpsGdyFykBBkBWRGBw2McZsLouNpGTnwryp245Hx5ptRReMm6-ViTDOHT0LQ1Z5nBZtzFzfe_-Sm0lJcWsCbyieDQldLsAfZKnuWYSTNOc,&q={searchTerms}
-\\ Google Chrome v34.0.1847.137
[ Datei : C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Gefunden [Search Provider] : hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmwODjwdSN4nYKkLkiDsRZrjHk60SYY7Cl78H_h3cyuEGnob5GRpsGdyFykBBkBWRGBw2McZsLouNpGTnwryp245Hx5ptRReMm6-ViTDOHT0LQ1Z5nBZtzFzfe_-Sm0lJcWsCbyieDQldLsAfZKnuWYSTNOc,&q={searchTerms}
Gefunden [Search Provider] : hxxp://mystart.incredibar.com/?a=6PRFYy48Z5&i=26&loc=skw&search={searchTerms}
Gefunden [Homepage] : hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmwODjwdSN4nYKkLkiDsRZrjHk60SYY7Cl78H_h3cyuEGnob5GRpsGdyFykBBkBWRGBw2McZsLouNpGTnwryp245Hx5ptSeNHJ4zOV3AHwNqYaWGYOjiqpVE0TI2d6Af_7wo4KokiXY3n3p0_-0rOLUGLa3s,
Gefunden [Extension] : bkomkajifikmkfnjgphkjcfeepbnojok
Gefunden [Extension] : ogccgbmabaphcakpiclgcnmcnimhokcj
[ Datei : C:\Users\M.A.K\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Gefunden [Search Provider] : hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmwODjwdSN4nYKkLkiDsRZrjHk60SYY7Cl78H_h3cyuEGnob5GRpsGdyFykBBkBWRGBw2McZsLouNpGTnwryp245Hx5ptRReMm6-ViTDOHT0LQ1Z5nBZtzFzfe_-Sm0lJcWsCbyieDQldLsAfZKnuWYSTNOc,&q={searchTerms}
Gefunden [Search Provider] : hxxp://mystart.incredibar.com/?a=6PRaS6Ux6M&i=26&loc=skw&search={searchTerms}
Gefunden [Homepage] : hxxp://mystart.incredibar.com/?a=6PRaS6Ux6M&i=26&loc=skw
Gefunden [Extension] : bkomkajifikmkfnjgphkjcfeepbnojok
Gefunden [Extension] : booedmolknjekdopkepjjeckmjkdpfgl
Gefunden [Extension] : flpcjncodpafbgdpnkljologafpionhb
Gefunden [Extension] : ogccgbmabaphcakpiclgcnmcnimhokcj
[ Datei : C:\Users\Zümrüt\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Gefunden [Search Provider] : hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmwODjwdSN4nYKkLkiDsRZrjHk60SYY7Cl78H_h3cyuEGnob5GRpsGdyFykBBkBWRGBw2McZsLouNpGTnwryp245Hx5ptRReMm6-ViTDOHT0LQ1Z5nBZtzFzfe_-Sm0lJcWsCbyieDQldLsAfZKnuWYSTNOc,&q={searchTerms}
Gefunden [Search Provider] : hxxp://www.trovigo.com/Results.aspx?gd=&ctid=CT3324415&octid=EB_ORIGINAL_CTID&ISID=ISID_ID&SearchSource=58&CUI=&UM=2&UP=SP1EF8BB08-EB82-48BC-AA59-8590B3BC051B&q={searchTerms}&SSPV=
Gefunden [Extension] : booedmolknjekdopkepjjeckmjkdpfgl
Gefunden [Extension] : flpcjncodpafbgdpnkljologafpionhb
Gefunden [Extension] : jcdgjdiieiljkfkdcloehkohchhpekkn
Gefunden [Extension] : ogccgbmabaphcakpiclgcnmcnimhokcj
*************************
AdwCleaner[R0].txt - [21744 octets] - [19/05/2014 21:35:24]
########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [21805 octets] ##########
Code:
ATTFilter # AdwCleaner v3.210 - Bericht erstellt am 19/05/2014 um 21:36:06
# Aktualisiert 19/05/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Zümrüt - ZÜMRÜT-PC
# Gestartet von : C:\Users\Zümrüt\Downloads\adwcleaner_3.210.exe
# Option : Löschen
***** [ Dienste ] *****
[#] Dienst Gelöscht : IBUpdaterService
Dienst Gelöscht : LPTSystemUpdater
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\ParetoLogic
Ordner Gelöscht : C:\ProgramData\RegClean
Ordner Gelöscht : C:\Program Files (x86)\LPT
Ordner Gelöscht : C:\Program Files (x86)\SmartTweak
Ordner Gelöscht : C:\Program Files (x86)\Speed Test 127
Ordner Gelöscht : C:\Windows\SysWOW64\ARFC
Ordner Gelöscht : C:\Windows\SysWOW64\jmdp
Ordner Gelöscht : C:\Windows\SysWOW64\WNLT
Ordner Gelöscht : C:\Windows\System32\ljkb
Ordner Gelöscht : C:\Users\ZMRT~1\AppData\Local\Temp\Smartbar
Ordner Gelöscht : C:\Users\Gast\AppData\LocalLow\PriceGong
Ordner Gelöscht : C:\Users\Gast\AppData\LocalLow\SweetIM
Ordner Gelöscht : C:\Users\M.A.K\AppData\Local\SearchProtect
Ordner Gelöscht : C:\Users\M.A.K\AppData\Local\Yandex
Ordner Gelöscht : C:\Users\M.A.K\AppData\LocalLow\PriceGong
Ordner Gelöscht : C:\Users\M.A.K\AppData\LocalLow\SweetIM
Ordner Gelöscht : C:\Users\M.A.K\AppData\LocalLow\Yandex
Ordner Gelöscht : C:\Users\M.A.K\AppData\Roaming\PerformerSoft
Ordner Gelöscht : C:\Users\M.A.K\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\M.A.K\AppData\Roaming\Yandex
Ordner Gelöscht : C:\Users\Zümrüt\AppData\Local\LPT
Ordner Gelöscht : C:\Users\Zümrüt\AppData\Local\Mobogenie
Ordner Gelöscht : C:\Users\Zümrüt\AppData\Local\SearchProtect
Ordner Gelöscht : C:\Users\Zümrüt\AppData\Local\Smartbar
Ordner Gelöscht : C:\Users\Zümrüt\AppData\LocalLow\Smartbar
Ordner Gelöscht : C:\Users\Zümrüt\AppData\Roaming\DriverCure
Ordner Gelöscht : C:\Users\Zümrüt\AppData\Roaming\ParetoLogic
Ordner Gelöscht : C:\Users\Zümrüt\AppData\Roaming\PerformerSoft
Ordner Gelöscht : C:\Users\Zümrüt\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\Zümrüt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SmartTweak Software
Ordner Gelöscht : C:\Users\M.A.K\AppData\Local\Software
Ordner Gelöscht : C:\Users\Zümrüt\AppData\Local\Software
Ordner Gelöscht : C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok
Ordner Gelöscht : C:\Users\M.A.K\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok
Ordner Gelöscht : C:\Users\Zümrüt\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Ordner Gelöscht : C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
Ordner Gelöscht : C:\Users\M.A.K\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
Ordner Gelöscht : C:\Users\Zümrüt\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
Datei Gelöscht : C:\Windows\System32\dmwu.exe
Datei Gelöscht : C:\Windows\System32\ImhxxpComm.dll
Datei Gelöscht : C:\Windows\System32\roboot64.exe
Datei Gelöscht : C:\Users\ZMRT~1\AppData\Local\Temp\uninstaller.exe
Datei Gelöscht : C:\Users\M.A.K\daemonprocess.txt
Datei Gelöscht : C:\Users\Zümrüt\daemonprocess.txt
Datei Gelöscht : C:\Users\M.A.K\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.softonic.de_0.localstorage
Datei Gelöscht : C:\Users\M.A.K\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.softonic.de_0.localstorage-journal
Datei Gelöscht : C:\Windows\Tasks\PC Performer_DEFAULT.job
Datei Gelöscht : C:\Windows\System32\Tasks\PC Performer_DEFAULT
Datei Gelöscht : C:\Windows\Tasks\PC Performer_UPDATES.job
Datei Gelöscht : C:\Windows\System32\Tasks\PC Performer_UPDATES
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Browser Infrastructure Helper]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\AddonsFramework.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\ButtonSite.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\ScriptHost.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\driverscanner
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.bho
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Speed Test 127.BackgroundHostObject
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Speed Test 127.BackgroundHostObject.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Speed Test 127.Navbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Speed Test 127.Navbar.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Speed Test 127.ScriptHostObject
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Speed Test 127.ScriptHostObject.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Speed Test 127.Tool
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Speed Test 127.Tool.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetimsetup_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetimsetup_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetpacksupdatemanager_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{18B9B16E-716F-43DF-A6AD-512C7D2EB983}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{19975B78-1907-4DD6-A437-4C48120F46A4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{562B9316-C08A-444A-9482-62080DD851AE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{562B9317-C08A-444A-9482-62080DD851AE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{11C8C9C0-D918-44C0-8B5E-D297DA42F2C7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{75CC1BBE-D96F-45DF-A622-D60BFA8AF49E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C424171E-592A-415A-9EB1-DFD6D95D3530}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E09EF104-3849-47F4-B005-A120558F3FEF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FB61B649-3FC8-4754-89A2-501456130AB5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{045F91B3-695F-423A-98C7-8DE3C47AA020}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1348BD1B-C32A-41A7-9BD4-5377AA1AB925}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{395AFE6E-8308-48DB-89BE-ED5F4AA3D3EC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{43969E3F-3E7C-4911-A8F1-79C6CA6AC731}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{43B390F0-6BA2-45CA-ABF2-5DB0CEE9B49D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6E4C89CF-3061-4EE4-B22A-B7A8AAEA5CB3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{94CADA2E-1D3F-419F-8A3D-06C58EDF53C8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E52EB8B-8DD9-4605-AD36-D352BCD482F2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A1440EC3-F0FA-407A-B811-DE6668C06D29}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B9A84AD0-5777-46FD-8B8F-1EBD06750FBC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{BBBE01ED-0F1E-44DB-88C1-5CC1AEE3B462}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C1995F88-1C7F-40D7-B0FA-6F107F6308B8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C815E3DA-0823-49B0-9270-D1771D58B317}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E4A994B0-5550-4680-A4C6-B9470B888069}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EE95078D-518C-4FD2-8093-FD1D4E33D3CA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F9EB11AB-9384-4736-9B33-993940F88895}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{3013E03D-89D5-4580-8560-DB198297CC29}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{53FDCCB0-2404-4274-9002-5A3A1FD40426}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{B69509B5-4A90-4433-A2DE-BE439F6581F2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{F2F1AE7C-149B-46D3-9498-12572C7AFE11}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11C8C9C0-D918-44C0-8B5E-D297DA42F2C7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11C8C9C0-D918-44C0-8B5E-D297DA42F2C7}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1631550F-191D-4826-B069-D9439253D926}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C424171E-592A-415A-9EB1-DFD6D95D3530}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11C8C9C0-D918-44C0-8B5E-D297DA42F2C7}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1631550F-191D-4826-B069-D9439253D926}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C424171E-592A-415A-9EB1-DFD6D95D3530}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{C424171E-592A-415A-9EB1-DFD6D95D3530}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{C424171E-592A-415A-9EB1-DFD6D95D3530}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{11C8C9C0-D918-44C0-8B5E-D297DA42F2C7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{75CC1BBE-D96F-45DF-A622-D60BFA8AF49E}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{C424171E-592A-415A-9EB1-DFD6D95D3530}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{E09EF104-3849-47F4-B005-A120558F3FEF}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{FB61B649-3FC8-4754-89A2-501456130AB5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{045F91B3-695F-423A-98C7-8DE3C47AA020}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1348BD1B-C32A-41A7-9BD4-5377AA1AB925}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{395AFE6E-8308-48DB-89BE-ED5F4AA3D3EC}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{43969E3F-3E7C-4911-A8F1-79C6CA6AC731}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{43B390F0-6BA2-45CA-ABF2-5DB0CEE9B49D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{6E4C89CF-3061-4EE4-B22A-B7A8AAEA5CB3}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{94CADA2E-1D3F-419F-8A3D-06C58EDF53C8}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9E52EB8B-8DD9-4605-AD36-D352BCD482F2}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A1440EC3-F0FA-407A-B811-DE6668C06D29}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B9A84AD0-5777-46FD-8B8F-1EBD06750FBC}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{BBBE01ED-0F1E-44DB-88C1-5CC1AEE3B462}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C1995F88-1C7F-40D7-B0FA-6F107F6308B8}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C815E3DA-0823-49B0-9270-D1771D58B317}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E4A994B0-5550-4680-A4C6-B9470B888069}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EE95078D-518C-4FD2-8093-FD1D4E33D3CA}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F9EB11AB-9384-4736-9B33-993940F88895}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11C8C9C0-D918-44C0-8B5E-D297DA42F2C7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{C424171E-592A-415A-9EB1-DFD6D95D3530}]
Schlüssel Gelöscht : HKCU\Software\IM
Schlüssel Gelöscht : HKCU\Software\ImInstaller
Schlüssel Gelöscht : HKCU\Software\ParetoLogic
Schlüssel Gelöscht : HKCU\Software\PerformerSoft
Schlüssel Gelöscht : HKCU\Software\SmartBar
Schlüssel Gelöscht : HKCU\Software\smartbarbackup
Schlüssel Gelöscht : HKCU\Software\smartbarlog
Schlüssel Gelöscht : HKCU\Software\smarttweak
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKCU\Software\WNLT
Schlüssel Gelöscht : HKLM\Software\ParetoLogic
Schlüssel Gelöscht : HKLM\Software\PerformerSoft
Schlüssel Gelöscht : HKLM\Software\systweak
Schlüssel Gelöscht : HKLM\Software\Uniblue
Schlüssel Gelöscht : HKLM\Software\WNLT
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BC0BF363-63AB-4FF7-8EF1-AE0D7F711B24}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\WNLT
Daten Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll
Daten Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.17041
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]
-\\ Google Chrome v34.0.1847.137
[ Datei : C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Gelöscht [Search Provider] : hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmwODjwdSN4nYKkLkiDsRZrjHk60SYY7Cl78H_h3cyuEGnob5GRpsGdyFykBBkBWRGBw2McZsLouNpGTnwryp245Hx5ptRReMm6-ViTDOHT0LQ1Z5nBZtzFzfe_-Sm0lJcWsCbyieDQldLsAfZKnuWYSTNOc,&q={searchTerms}
Gelöscht [Search Provider] : hxxp://mystart.incredibar.com/?a=6PRFYy48Z5&i=26&loc=skw&search={searchTerms}
Gelöscht [Homepage] : hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmwODjwdSN4nYKkLkiDsRZrjHk60SYY7Cl78H_h3cyuEGnob5GRpsGdyFykBBkBWRGBw2McZsLouNpGTnwryp245Hx5ptSeNHJ4zOV3AHwNqYaWGYOjiqpVE0TI2d6Af_7wo4KokiXY3n3p0_-0rOLUGLa3s,
Gelöscht [Extension] : bkomkajifikmkfnjgphkjcfeepbnojok
Gelöscht [Extension] : ogccgbmabaphcakpiclgcnmcnimhokcj
[ Datei : C:\Users\M.A.K\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Gelöscht [Search Provider] : hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmwODjwdSN4nYKkLkiDsRZrjHk60SYY7Cl78H_h3cyuEGnob5GRpsGdyFykBBkBWRGBw2McZsLouNpGTnwryp245Hx5ptRReMm6-ViTDOHT0LQ1Z5nBZtzFzfe_-Sm0lJcWsCbyieDQldLsAfZKnuWYSTNOc,&q={searchTerms}
Gelöscht [Search Provider] : hxxp://mystart.incredibar.com/?a=6PRaS6Ux6M&i=26&loc=skw&search={searchTerms}
Gelöscht [Homepage] : hxxp://mystart.incredibar.com/?a=6PRaS6Ux6M&i=26&loc=skw
Gelöscht [Extension] : bkomkajifikmkfnjgphkjcfeepbnojok
Gelöscht [Extension] : booedmolknjekdopkepjjeckmjkdpfgl
Gelöscht [Extension] : flpcjncodpafbgdpnkljologafpionhb
Gelöscht [Extension] : ogccgbmabaphcakpiclgcnmcnimhokcj
[ Datei : C:\Users\Zümrüt\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Gelöscht [Search Provider] : hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmwODjwdSN4nYKkLkiDsRZrjHk60SYY7Cl78H_h3cyuEGnob5GRpsGdyFykBBkBWRGBw2McZsLouNpGTnwryp245Hx5ptRReMm6-ViTDOHT0LQ1Z5nBZtzFzfe_-Sm0lJcWsCbyieDQldLsAfZKnuWYSTNOc,&q={searchTerms}
Gelöscht [Search Provider] : hxxp://www.trovigo.com/Results.aspx?gd=&ctid=CT3324415&octid=EB_ORIGINAL_CTID&ISID=ISID_ID&SearchSource=58&CUI=&UM=2&UP=SP1EF8BB08-EB82-48BC-AA59-8590B3BC051B&q={searchTerms}&SSPV=
Gelöscht [Extension] : booedmolknjekdopkepjjeckmjkdpfgl
Gelöscht [Extension] : flpcjncodpafbgdpnkljologafpionhb
Gelöscht [Extension] : jcdgjdiieiljkfkdcloehkohchhpekkn
Gelöscht [Extension] : ogccgbmabaphcakpiclgcnmcnimhokcj
*************************
AdwCleaner[R0].txt - [22066 octets] - [19/05/2014 21:35:24]
AdwCleaner[S0].txt - [19736 octets] - [19/05/2014 21:36:06]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [19797 octets] ##########
Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Protection, 19.05.2014 21:47:13, SYSTEM, ZÃ?MRÃ?T-PC, Protection, Malware Protection, Starting, Protection, 19.05.2014 21:47:13, SYSTEM, ZÃ?MRÃ?T-PC, Protection, Malware Protection, Started, Protection, 19.05.2014 21:47:13, SYSTEM, ZÃ?MRÃ?T-PC, Protection, Malicious Website Protection, Starting, Update, 19.05.2014 21:47:18, SYSTEM, ZÃ?MRÃ?T-PC, Manual, Rootkit Database, 2014.2.20.1, 2014.3.27.1, Update, 19.05.2014 21:47:31, SYSTEM, ZÃ?MRÃ?T-PC, Manual, Malware Database, 2014.3.4.9, 2014.5.19.10, Protection, 19.05.2014 21:47:39, SYSTEM, ZÃ?MRÃ?T-PC, Protection, Malicious Website Protection, Started, Protection, 19.05.2014 21:47:43, SYSTEM, ZÃ?MRÃ?T-PC, Protection, Refresh, Starting, Protection, 19.05.2014 21:47:43, SYSTEM, ZÃ?MRÃ?T-PC, Protection, Malicious Website Protection, Stopping, Protection, 19.05.2014 21:47:43, SYSTEM, ZÃ?MRÃ?T-PC, Protection, Malicious Website Protection, Stopped, Protection, 19.05.2014 21:47:46, SYSTEM, ZÃ?MRÃ?T-PC, Protection, Refresh, Success, Protection, 19.05.2014 21:47:46, SYSTEM, ZÃ?MRÃ?T-PC, Protection, Malicious Website Protection, Starting, Protection, 19.05.2014 21:47:47, SYSTEM, ZÃ?MRÃ?T-PC, Protection, Malicious Website Protection, Started, Protection, 19.05.2014 22:22:01, SYSTEM, ZÃ?MRÃ?T-PC, Protection, Malware Protection, Starting, Protection, 19.05.2014 22:22:01, SYSTEM, ZÃ?MRÃ?T-PC, Protection, Malware Protection, Started, Protection, 19.05.2014 22:22:01, SYSTEM, ZÃ?MRÃ?T-PC, Protection, Malicious Website Protection, Starting, Protection, 19.05.2014 22:24:24, SYSTEM, ZÃ?MRÃ?T-PC, Protection, Malicious Website Protection, Started, (end) Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-05-2014 Ran by Zümrüt (administrator) on ZÜMRÜT-PC on 19-05-2014 22:29:19 Running from C:\Users\Zümrüt\Downloads Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe (Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (CyberLink) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Dropbox, Inc.) C:\Users\Zümrüt\AppData\Roaming\Dropbox\bin\Dropbox.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe (CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe (Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe (Intel Corporation) C:\Windows\System32\igfxext.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2589992 2011-04-05] (ELAN Microelectronics Corp.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12673128 2011-08-16] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277480 2011-08-16] (Realtek Semiconductor) HKLM\...\Run: [Power Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1831016 2011-08-02] (Acer Incorporated) HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-02] (Symantec Corporation) HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-04-24] (NTI Corporation) HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1103440 2011-07-01] (Dritek System Inc.) HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Dolby PCEE4\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.) HKLM-x32\...\Run: [SuiteTray] => C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [341360 2011-09-20] (Egis Technology Inc.) HKLM-x32\...\Run: [ArcadeMovieService] => C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe [177448 2011-08-26] (CyberLink Corp.) HKLM-x32\...\Run: [WinampAgent] => C:\Program Files (x86)\Winamp\winampa.exe [74752 2011-12-09] (Nullsoft, Inc.) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-03-02] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [522232 2012-09-26] (Cisco Systems, Inc.) Winlogon\Notify\igfxcui: igfxdev.dll [X] HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid} HKU\S-1-5-19\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid} HKU\S-1-5-20\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid} HKU\S-1-5-21-1983832016-936756737-872752734-1000\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid} HKU\S-1-5-21-1983832016-936756737-872752734-1001\...\Run: [Facebook Update] => C:\Users\Zümrüt\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-07-10] (Facebook Inc.) AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [241984 2011-10-16] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [203072 2011-10-16] (NVIDIA Corporation) Startup: C:\Users\Zümrüt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Zümrüt\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Zümrüt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: WEB.DE Toolbar BHO - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Program Files\WEB.DE Toolbar\IE\uitb.dll (1und1 Mail und Media GmbH) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: WEB.DE Toolbar BHO - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Program Files (x86)\WEB.DE Toolbar\IE\uitb.dll (1und1 Mail und Media GmbH) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION) Toolbar: HKLM-x32 - EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION) Toolbar: HKCU - No Name - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - No File Handler: webde - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files\WEB.DE Toolbar\IE\uitb.dll (1und1 Mail und Media GmbH) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Handler-x32: webde - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files (x86)\WEB.DE Toolbar\IE\uitb.dll (1und1 Mail und Media GmbH) Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File Filter-x32: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File Filter-x32: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File Filter-x32: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{3B7F2F84-982A-49EA-9368-45FB5BC144D9}: [NameServer]212.123.96.110,141.82.16.200 FireFox: ======== FF Plugin: @java.com/DTPlugin,version=10.9.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.9.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @Skype Technologies S.A..com/Skype Web Plugin - C:\Program Files (x86)\SkypeWebPlugin\npSkypeWebPlugin64.dll (Skype) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @Skype Technologies S.A..com/Skype Web Plugin - C:\Program Files (x86)\SkypeWebPlugin\npSkypeWebPlugin.dll (Skype) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Zümrüt\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) Chrome: ======= CHR HomePage: hxxp://www.google.com CHR StartupUrls: "hxxp://www.google.com/" CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.137\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.137\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.137\pdf.dll () CHR Plugin: (PriceGong) - C:\Users\Zümrüt\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok\5.6.7_0\plugins/npPriceGong_CH.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll No File CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll No File CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File CHR Plugin: (Java(TM) Platform SE 7 U9) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (McAfee SiteAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll No File CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (Java Deployment Toolkit 7.0.90.5) - C:\Windows\SysWOW64\npDeployJava1.dll No File CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File CHR Extension: (Embed WMPlayer inline) - C:\Users\Zümrüt\AppData\Local\Google\Chrome\User Data\Default\Extensions\bamkbfdmckphehgiafpenehgebjgdlli [2012-12-12] ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-03-02] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-03-02] (Avira Operations GmbH & Co. KG) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation) R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation) R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-24] (NTI Corporation) R3 WinHttpAutoProxySvc; winhttp.dll [X] ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-17] (Avira Operations GmbH & Co. KG) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-05-19] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-04-03] (Malwarebytes Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-05-19 22:28 - 2014-05-19 22:28 - 00001691 _____ () C:\Users\Zümrüt\Desktop\mbam.txt 2014-05-19 21:47 - 2014-05-19 22:24 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-05-19 21:47 - 2014-05-19 21:47 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-05-19 21:47 - 2014-05-19 21:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-05-19 21:47 - 2014-05-19 21:47 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-05-19 21:47 - 2014-05-19 21:47 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-05-19 21:47 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-05-19 21:47 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-05-19 21:47 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-05-19 21:46 - 2014-05-19 21:46 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Zümrüt\Downloads\mbam-setup-2.0.1.1004.exe 2014-05-19 21:43 - 2014-05-19 21:43 - 00000000 ____D () C:\Windows\ERUNT 2014-05-19 21:42 - 2014-05-19 21:42 - 01016261 _____ (Thisisu) C:\Users\Zümrüt\Downloads\JRT.exe 2014-05-19 21:35 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll 2014-05-19 21:34 - 2014-05-19 21:36 - 00000000 ____D () C:\AdwCleaner 2014-05-19 21:34 - 2014-05-19 21:34 - 01326389 _____ () C:\Users\Zümrüt\Downloads\adwcleaner_3.210.exe 2014-05-19 20:54 - 2014-05-19 20:54 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Zümrüt\Downloads\revosetup95.exe 2014-05-19 20:54 - 2014-05-19 20:54 - 00001268 _____ () C:\Users\Zümrüt\Desktop\Revo Uninstaller.lnk 2014-05-19 20:54 - 2014-05-19 20:54 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2014-05-19 16:24 - 2014-05-19 16:24 - 00015024 _____ () C:\Users\Zümrüt\Desktop\Ereignisse.txt 2014-05-19 15:55 - 2014-05-19 15:55 - 00051312 _____ () C:\Users\Zümrüt\Desktop\Addition.txt 2014-05-19 15:54 - 2014-05-19 15:54 - 00060568 _____ () C:\Users\Zümrüt\Desktop\FRST.txt 2014-05-19 15:47 - 2014-05-19 22:29 - 00000000 ____D () C:\FRST 2014-05-19 15:45 - 2014-05-19 15:45 - 02067456 _____ (Farbar) C:\Users\Zümrüt\Downloads\FRST64.exe 2014-05-19 15:44 - 2014-05-19 15:44 - 00000474 _____ () C:\Users\Zümrüt\Downloads\defogger_disable.log 2014-05-19 15:44 - 2014-05-19 15:44 - 00000000 _____ () C:\Users\Zümrüt\defogger_reenable 2014-05-19 15:43 - 2014-05-19 15:43 - 00050477 _____ () C:\Users\Zümrüt\Downloads\Defogger.exe 2014-05-19 15:31 - 2014-05-19 15:31 - 00000000 ____D () C:\Users\Zümrüt\AppData\Local\TuneUp Software 2014-05-19 15:29 - 2014-05-19 15:37 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2014-05-19 15:29 - 2014-05-19 15:29 - 27883432 _____ (TuneUp Software) C:\Users\Zümrüt\Downloads\TuneUpUtilities2014_de-DE.exe 2014-05-19 15:11 - 2014-05-19 22:29 - 00019251 _____ () C:\Users\Zümrüt\Downloads\FRST.txt 2014-05-19 15:11 - 2014-05-19 15:48 - 00051312 _____ () C:\Users\Zümrüt\Downloads\Addition.txt 2014-05-16 16:15 - 2014-05-19 22:21 - 00008546 _____ () C:\Windows\PFRO.log 2014-05-16 16:15 - 2014-05-19 22:21 - 00000538 _____ () C:\Windows\setupact.log 2014-05-16 16:15 - 2014-05-16 16:15 - 00000000 _____ () C:\Windows\setuperr.log 2014-05-16 12:59 - 2014-05-16 12:59 - 00003416 _____ () C:\Windows\System32\Tasks\{4191952B-4600-432A-ABD0-28B7523B4BF0} 2014-05-16 12:55 - 2014-05-16 12:55 - 01342896 _____ (UPDF) C:\Users\Zümrüt\Downloads\UPDFSetup.exe 2014-05-16 12:22 - 2014-05-16 12:22 - 00000000 ____D () C:\Users\Zümrüt\AppData\Local\Skype 2014-05-15 13:45 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-15 13:45 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-15 13:45 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-15 13:45 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-15 13:45 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-15 13:45 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-05-15 11:14 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-15 11:14 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-15 11:14 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-05-15 11:14 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-05-15 11:14 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-05-15 11:14 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-05-15 11:14 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-05-15 11:14 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-05-15 11:14 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-05-15 11:14 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-05-15 11:14 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-05-15 11:14 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-05-15 11:14 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-05-15 11:14 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-05-15 11:14 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-05-15 11:14 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2014-05-15 11:14 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-05-15 11:14 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-05-15 11:14 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-05-15 11:14 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-05-15 11:14 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-05-15 11:14 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2014-05-15 11:14 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-05-15 11:14 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2014-05-15 11:14 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2014-05-15 11:14 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2014-05-15 11:14 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2014-05-15 11:14 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-05-15 11:14 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-05-15 11:14 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-05-15 11:14 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-05-15 11:14 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-05-15 11:14 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2014-05-15 11:14 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-05-15 11:14 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-05-15 11:14 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-05-15 11:14 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-05-15 11:14 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll 2014-05-15 11:14 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll 2014-05-15 11:14 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll 2014-05-15 11:14 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll 2014-05-15 11:14 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll 2014-05-15 11:14 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll 2014-05-15 11:14 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-05-15 11:14 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-05-11 23:24 - 2014-05-11 23:24 - 04557717 _____ () C:\Users\Zümrüt\Downloads\Wenn-Opa_s-parken.wmv 2014-05-08 13:49 - 2014-05-16 14:27 - 00000000 ____D () C:\Users\Zümrüt\Documents\Bewerbung 2014-05-08 13:48 - 2014-05-08 13:48 - 00000000 ____D () C:\Users\Zümrüt\Documents\Stex 2014-05-06 16:00 - 2014-05-15 13:49 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-05-06 14:33 - 2014-05-07 15:20 - 00000000 ____D () C:\Users\Zümrüt\Desktop\QM 2014-05-06 14:30 - 2014-05-07 14:51 - 00000000 ____D () C:\Users\Zümrüt\Desktop\Ali 2014-05-04 15:11 - 2014-05-04 15:11 - 00000000 ____D () C:\Users\Zümrüt\AppData\Roaming\DropboxMaster 2014-04-28 20:57 - 2014-04-28 20:57 - 00009728 ___SH () C:\Users\Zümrüt\Desktop\Thumbs.db 2014-04-26 22:09 - 2014-04-14 20:13 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-04-26 22:09 - 2014-04-14 20:05 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-04-26 22:09 - 2014-04-14 20:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-04-26 22:09 - 2014-04-14 20:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-04-26 22:08 - 2014-04-26 22:09 - 00004253 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log 2014-04-26 15:56 - 2014-04-26 15:56 - 00000000 ____D () C:\Windows\de 2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\he 2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\fr 2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\fi 2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\es 2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\en 2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\el 2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\da 2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\cs 2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\bg 2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\ar 2014-04-26 15:53 - 2014-04-26 15:53 - 00001309 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk 2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\tr 2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\th 2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\sv 2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\sl 2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\sk 2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\ru 2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\ro 2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\pl 2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\nl 2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\it 2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\hu 2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\hr 2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\ca 2014-04-26 15:45 - 2014-04-26 15:45 - 00002490 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk 2014-04-26 15:35 - 2014-04-26 15:35 - 00000000 ____D () C:\Users\Zümrüt\Documents\OneNote-Notizbücher 2014-04-24 10:55 - 2014-04-24 10:55 - 00921654 _____ () C:\Users\Zümrüt\Downloads\g6.bmp 2014-04-24 10:54 - 2014-04-24 10:54 - 00921654 _____ () C:\Users\Zümrüt\Downloads\g5.bmp 2014-04-23 13:51 - 2014-04-23 13:51 - 00000000 __SHD () C:\Users\Zümrüt\AppData\Local\EmieUserList 2014-04-23 13:51 - 2014-04-23 13:51 - 00000000 __SHD () C:\Users\Zümrüt\AppData\Local\EmieSiteList 2014-04-23 00:27 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-04-23 00:27 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-04-23 00:27 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-04-23 00:27 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-04-23 00:27 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-04-23 00:27 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-04-23 00:27 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-04-23 00:27 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-04-23 00:27 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-04-23 00:27 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-04-23 00:27 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-04-23 00:27 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-04-23 00:27 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-04-23 00:27 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-04-23 00:27 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-04-23 00:27 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-04-23 00:27 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-04-23 00:27 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-04-23 00:27 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-04-23 00:27 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-04-23 00:27 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-04-23 00:27 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-04-23 00:27 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-04-23 00:27 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-04-23 00:27 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-04-23 00:27 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-04-23 00:27 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-04-23 00:27 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-04-23 00:27 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-04-23 00:27 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-04-23 00:27 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-04-23 00:27 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-04-23 00:27 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-04-23 00:27 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-04-23 00:27 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-04-23 00:26 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-04-23 00:26 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-04-23 00:26 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-04-23 00:26 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-04-23 00:26 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-04-23 00:26 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-04-23 00:26 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-04-23 00:26 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-04-23 00:26 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll ==================== One Month Modified Files and Folders ======= 2014-05-19 22:29 - 2014-05-19 15:47 - 00000000 ____D () C:\FRST 2014-05-19 22:29 - 2014-05-19 15:11 - 00019251 _____ () C:\Users\Zümrüt\Downloads\FRST.txt 2014-05-19 22:28 - 2014-05-19 22:28 - 00001691 _____ () C:\Users\Zümrüt\Desktop\mbam.txt 2014-05-19 22:24 - 2014-05-19 21:47 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-05-19 22:23 - 2013-12-11 18:23 - 00000000 ___RD () C:\Users\Zümrüt\Dropbox 2014-05-19 22:23 - 2013-12-11 18:20 - 00000000 ____D () C:\Users\Zümrüt\AppData\Roaming\Dropbox 2014-05-19 22:22 - 2012-12-08 23:51 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-05-19 22:22 - 2012-05-17 11:42 - 00000000 ____D () C:\ProgramData\clear.fi 2014-05-19 22:21 - 2014-05-16 16:15 - 00008546 _____ () C:\Windows\PFRO.log 2014-05-19 22:21 - 2014-05-16 16:15 - 00000538 _____ () C:\Windows\setupact.log 2014-05-19 22:21 - 2012-02-02 23:03 - 01759364 _____ () C:\Windows\WindowsUpdate.log 2014-05-19 22:21 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-05-19 22:17 - 2012-06-01 15:00 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-05-19 22:09 - 2013-07-10 16:04 - 00000932 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1983832016-936756737-872752734-1001UA.job 2014-05-19 21:47 - 2014-05-19 21:47 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-05-19 21:47 - 2014-05-19 21:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-05-19 21:47 - 2014-05-19 21:47 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-05-19 21:47 - 2014-05-19 21:47 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-05-19 21:46 - 2014-05-19 21:46 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Zümrüt\Downloads\mbam-setup-2.0.1.1004.exe 2014-05-19 21:45 - 2009-07-14 06:45 - 00016752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-05-19 21:45 - 2009-07-14 06:45 - 00016752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-05-19 21:43 - 2014-05-19 21:43 - 00000000 ____D () C:\Windows\ERUNT 2014-05-19 21:42 - 2014-05-19 21:42 - 01016261 _____ (Thisisu) C:\Users\Zümrüt\Downloads\JRT.exe 2014-05-19 21:38 - 2012-12-08 23:51 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-05-19 21:36 - 2014-05-19 21:34 - 00000000 ____D () C:\AdwCleaner 2014-05-19 21:36 - 2012-05-17 11:50 - 00000000 ____D () C:\Users\M.A.K 2014-05-19 21:36 - 2012-05-17 11:34 - 00000000 ____D () C:\Users\Zümrüt 2014-05-19 21:34 - 2014-05-19 21:34 - 01326389 _____ () C:\Users\Zümrüt\Downloads\adwcleaner_3.210.exe 2014-05-19 20:54 - 2014-05-19 20:54 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Zümrüt\Downloads\revosetup95.exe 2014-05-19 20:54 - 2014-05-19 20:54 - 00001268 _____ () C:\Users\Zümrüt\Desktop\Revo Uninstaller.lnk 2014-05-19 20:54 - 2014-05-19 20:54 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2014-05-19 16:24 - 2014-05-19 16:24 - 00015024 _____ () C:\Users\Zümrüt\Desktop\Ereignisse.txt 2014-05-19 16:09 - 2013-07-10 16:04 - 00000910 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1983832016-936756737-872752734-1001Core.job 2014-05-19 15:55 - 2014-05-19 15:55 - 00051312 _____ () C:\Users\Zümrüt\Desktop\Addition.txt 2014-05-19 15:54 - 2014-05-19 15:54 - 00060568 _____ () C:\Users\Zümrüt\Desktop\FRST.txt 2014-05-19 15:48 - 2014-05-19 15:11 - 00051312 _____ () C:\Users\Zümrüt\Downloads\Addition.txt 2014-05-19 15:45 - 2014-05-19 15:45 - 02067456 _____ (Farbar) C:\Users\Zümrüt\Downloads\FRST64.exe 2014-05-19 15:44 - 2014-05-19 15:44 - 00000474 _____ () C:\Users\Zümrüt\Downloads\defogger_disable.log 2014-05-19 15:44 - 2014-05-19 15:44 - 00000000 _____ () C:\Users\Zümrüt\defogger_reenable 2014-05-19 15:43 - 2014-05-19 15:43 - 00050477 _____ () C:\Users\Zümrüt\Downloads\Defogger.exe 2014-05-19 15:38 - 2012-11-02 22:50 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler 2014-05-19 15:38 - 2012-11-02 22:50 - 00003694 _____ () C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm 2014-05-19 15:37 - 2014-05-19 15:29 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2014-05-19 15:37 - 2013-10-23 14:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit 2014-05-19 15:35 - 2012-11-02 22:46 - 00000000 ____D () C:\ProgramData\TuneUp Software 2014-05-19 15:31 - 2014-05-19 15:31 - 00000000 ____D () C:\Users\Zümrüt\AppData\Local\TuneUp Software 2014-05-19 15:31 - 2012-11-02 22:47 - 00000000 ____D () C:\Users\Zümrüt\AppData\Roaming\TuneUp Software 2014-05-19 15:29 - 2014-05-19 15:29 - 27883432 _____ (TuneUp Software) C:\Users\Zümrüt\Downloads\TuneUpUtilities2014_de-DE.exe 2014-05-16 16:16 - 2012-05-17 11:51 - 00000000 ___RD () C:\Users\M.A.K\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-05-16 16:16 - 2012-05-17 11:51 - 00000000 ___RD () C:\Users\M.A.K\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-05-16 16:15 - 2014-05-16 16:15 - 00000000 _____ () C:\Windows\setuperr.log 2014-05-16 14:27 - 2014-05-08 13:49 - 00000000 ____D () C:\Users\Zümrüt\Documents\Bewerbung 2014-05-16 13:06 - 2012-09-25 08:47 - 00000000 ____D () C:\Users\Zümrüt\Tracing 2014-05-16 13:06 - 2012-05-21 21:35 - 00000000 ____D () C:\Users\Zümrüt\AppData\Roaming\Winamp 2014-05-16 13:06 - 2007-07-12 03:49 - 00000000 ____D () C:\Windows\Panther 2014-05-16 12:59 - 2014-05-16 12:59 - 00003416 _____ () C:\Windows\System32\Tasks\{4191952B-4600-432A-ABD0-28B7523B4BF0} 2014-05-16 12:56 - 2012-09-25 08:47 - 00000000 ____D () C:\Users\Zümrüt\AppData\Roaming\mozilla 2014-05-16 12:55 - 2014-05-16 12:55 - 01342896 _____ (UPDF) C:\Users\Zümrüt\Downloads\UPDFSetup.exe 2014-05-16 12:32 - 2012-05-23 00:04 - 00000000 ____D () C:\Users\Zümrüt\AppData\Roaming\Skype 2014-05-16 12:22 - 2014-05-16 12:22 - 00000000 ____D () C:\Users\Zümrüt\AppData\Local\Skype 2014-05-15 13:55 - 2012-05-17 11:38 - 00000000 ___RD () C:\Users\Zümrüt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-05-15 13:55 - 2012-05-17 11:38 - 00000000 ___RD () C:\Users\Zümrüt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-05-15 13:49 - 2014-05-06 16:00 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-05-15 13:47 - 2012-06-15 13:03 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-05-15 13:44 - 2013-07-29 18:36 - 00000000 ____D () C:\Windows\system32\MRT 2014-05-15 13:42 - 2012-05-31 14:58 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-05-15 11:17 - 2012-06-01 15:00 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-05-15 11:17 - 2012-06-01 15:00 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-05-15 11:17 - 2011-10-14 05:49 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-05-15 11:03 - 2011-10-14 05:49 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk 2014-05-15 11:02 - 2013-12-11 18:23 - 00001025 _____ () C:\Users\Zümrüt\Desktop\Dropbox.lnk 2014-05-15 11:02 - 2013-12-11 18:21 - 00000900 _____ () C:\Windows\wininit.ini 2014-05-15 11:02 - 2013-12-11 18:21 - 00000000 ____D () C:\Users\Zümrüt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-05-11 23:24 - 2014-05-11 23:24 - 04557717 _____ () C:\Users\Zümrüt\Downloads\Wenn-Opa_s-parken.wmv 2014-05-09 12:49 - 2012-07-06 15:43 - 00000000 ____D () C:\Users\Zümrüt\Documents\Ali 2014-05-09 08:14 - 2014-05-15 11:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-09 08:11 - 2014-05-15 11:14 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-08 15:33 - 2012-12-08 23:51 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-05-08 15:33 - 2012-12-08 23:51 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-05-08 13:48 - 2014-05-08 13:48 - 00000000 ____D () C:\Users\Zümrüt\Documents\Stex 2014-05-07 15:20 - 2014-05-06 14:33 - 00000000 ____D () C:\Users\Zümrüt\Desktop\QM 2014-05-07 14:51 - 2014-05-06 14:30 - 00000000 ____D () C:\Users\Zümrüt\Desktop\Ali 2014-05-06 12:52 - 2012-05-17 11:34 - 00000000 ____D () C:\Users\Zümrüt\AppData\Local\VirtualStore 2014-05-06 06:40 - 2014-05-15 13:45 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-06 06:17 - 2014-05-15 13:45 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-06 05:25 - 2014-05-15 13:45 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-06 05:07 - 2014-05-15 13:45 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-06 05:00 - 2014-05-15 13:45 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-06 04:10 - 2014-05-15 13:45 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-05-04 15:11 - 2014-05-04 15:11 - 00000000 ____D () C:\Users\Zümrüt\AppData\Roaming\DropboxMaster 2014-05-04 14:21 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-04-28 23:16 - 2012-02-03 07:55 - 00700134 _____ () C:\Windows\system32\perfh007.dat 2014-04-28 23:16 - 2012-02-03 07:55 - 00149984 _____ () C:\Windows\system32\perfc007.dat 2014-04-28 23:16 - 2009-07-14 07:13 - 01622236 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-04-28 20:57 - 2014-04-28 20:57 - 00009728 ___SH () C:\Users\Zümrüt\Desktop\Thumbs.db 2014-04-28 20:43 - 2013-05-23 11:51 - 00000000 ____D () C:\Users\Zümrüt\Desktop\Malik 2014-04-28 20:42 - 2014-01-20 23:41 - 00000000 ____D () C:\Users\Zümrüt\Desktop\Foto 2014-04-28 20:42 - 2014-01-13 14:04 - 00000000 ____D () C:\Users\Zümrüt\Desktop\Examen 2014-04-26 22:10 - 2013-10-23 14:01 - 00000000 ____D () C:\ProgramData\Oracle 2014-04-26 22:09 - 2014-04-26 22:08 - 00004253 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log 2014-04-26 22:09 - 2012-11-02 21:44 - 00000000 ____D () C:\Program Files (x86)\Java 2014-04-26 15:56 - 2014-04-26 15:56 - 00000000 ____D () C:\Windows\de 2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\he 2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\fr 2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\fi 2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\es 2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\en 2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\el 2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\da 2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\cs 2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\bg 2014-04-26 15:54 - 2014-04-26 15:54 - 00000000 ____D () C:\Windows\ar 2014-04-26 15:54 - 2011-10-14 05:42 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live 2014-04-26 15:53 - 2014-04-26 15:53 - 00001309 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk 2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\tr 2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\th 2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\sv 2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\sl 2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\sk 2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\ru 2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\ro 2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\pl 2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\nl 2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\it 2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\hu 2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\hr 2014-04-26 15:53 - 2014-04-26 15:53 - 00000000 ____D () C:\Windows\ca 2014-04-26 15:52 - 2012-12-05 15:59 - 00001378 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk 2014-04-26 15:50 - 2011-10-14 05:38 - 00001494 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk 2014-04-26 15:45 - 2014-04-26 15:45 - 00002490 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk 2014-04-26 15:45 - 2011-10-14 05:35 - 00000000 ____D () C:\Program Files (x86)\Windows Live 2014-04-26 15:43 - 2012-12-05 15:49 - 00000000 ____D () C:\Program Files\Windows Live 2014-04-26 15:35 - 2014-04-26 15:35 - 00000000 ____D () C:\Users\Zümrüt\Documents\OneNote-Notizbücher 2014-04-26 15:25 - 2012-05-31 17:45 - 00000000 ____D () C:\Users\Zümrüt\AppData\Local\Windows Live 2014-04-24 10:55 - 2014-04-24 10:55 - 00921654 _____ () C:\Users\Zümrüt\Downloads\g6.bmp 2014-04-24 10:54 - 2014-04-24 10:54 - 00921654 _____ () C:\Users\Zümrüt\Downloads\g5.bmp 2014-04-23 13:51 - 2014-04-23 13:51 - 00000000 __SHD () C:\Users\Zümrüt\AppData\Local\EmieUserList 2014-04-23 13:51 - 2014-04-23 13:51 - 00000000 __SHD () C:\Users\Zümrüt\AppData\Local\EmieSiteList 2014-04-23 12:03 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-04-22 23:49 - 2012-05-17 11:54 - 00094576 _____ () C:\Users\Gast\AppData\Local\GDIPFONTCACHEV1.DAT 2014-04-22 23:49 - 2012-05-17 11:54 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-04-22 23:49 - 2012-05-17 11:54 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-04-22 23:48 - 2012-12-08 23:51 - 00002247 _____ () C:\Users\Gast\Desktop\Google Chrome.lnk 2014-04-22 23:48 - 2012-05-17 11:54 - 00001421 _____ () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk Some content of TEMP: ==================== C:\Users\Gast\AppData\Local\Temp\avgnt.exe C:\Users\M.A.K\AppData\Local\Temp\avgnt.exe C:\Users\M.A.K\AppData\Local\Temp\Setup-yabrowser.exe C:\Users\M.A.K\AppData\Local\Temp\SkypeSetup.exe C:\Users\M.A.K\AppData\Local\Temp\yupdate-exec-yabrowser.exe C:\Users\Zümrüt\AppData\Local\Temp\avgnt.exe C:\Users\Zümrüt\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpqiittt.dll C:\Users\Zümrüt\AppData\Local\Temp\DseShExt-x64.dll C:\Users\Zümrüt\AppData\Local\Temp\DseShExt-x86.dll C:\Users\Zümrüt\AppData\Local\Temp\nss24D7.exe C:\Users\Zümrüt\AppData\Local\Temp\nsx20FF.exe C:\Users\Zümrüt\AppData\Local\Temp\nsxE62D.exe C:\Users\Zümrüt\AppData\Local\Temp\nsxEB5C.exe C:\Users\Zümrüt\AppData\Local\Temp\Quarantine.exe C:\Users\Zümrüt\AppData\Local\Temp\SDShelEx-win32.dll C:\Users\Zümrüt\AppData\Local\Temp\SDShelEx-x64.dll C:\Users\Zümrüt\AppData\Local\Temp\WEB.DE_Toolbar_IE_Setup.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe [2014-05-15 11:14] - [2014-03-04 11:43] - 0455168 ____A (Microsoft Corporation) 88AB9B72B4BF3963A0DE0820B4B0B06C C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-05-12 15:03 ==================== End Of Log ============================ |
|
20.05.2014, 09:13
| #5 |
| /// TB-Ausbilder | Windows 7: Wie kann ich den PC Performer, Speed Test 127 und Search Protect deinstallieren? Nächster Schritt: ESET Online Scanner
Wir haben am Anfang die veraltete 64-bit Version von Java deinstalliert. Unter Java-Downloads für alle Betriebssysteme findest du die aktuelle 64-bit Version Java 7 Update 55. Die 64-bit Version ist i.d.R. nur für 64-bit Browser notwendig und auch auf 64-bit Betriebsystemen meistens nicht notwendig. Die von dir erwähnten Programme sollten durch den Einsatz von Revo Uninstall entfernt wurden sein. Tauchen die Programme noch irgendwo auf ? Wie verhält sich dein Rechner jetzt im allgemeinen ? |
|
20.05.2014, 13:08
| #6 |
| | Windows 7: Wie kann ich den PC Performer, Speed Test 127 und Search Protect deinstallieren? Nächster Schritt durchgeführt! Ich hatte bereits die neue Java-Version. Die Programme wurden erfolgreich entfernt. Hier das Logfile: Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=c1e907e6c020634fba49bdd1de70d14e
# engine=18333
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-05-20 11:41:53
# local_time=2014-05-20 01:41:53 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775165 100 96 8268 266009403 1041 0
# compatibility_mode=5893 16776573 100 94 50003 152215963 0 0
# scanned=177898
# found=1
# cleaned=0
# scan_time=5963
sh=18BA4299F03603A2760ADE5D39AFA088E0001579 ft=1 fh=1573f8389d50612a vn="Variante von Win32/SpeedingUpMyPC Anwendung" ac=I fn="C:\Users\Zümrüt\Downloads\PCSpeedMaximizer.exe"
|
|
20.05.2014, 18:54
| #7 |
| /// TB-Ausbilder | Windows 7: Wie kann ich den PC Performer, Speed Test 127 und Search Protect deinstallieren? Ok ! Deine Logs sind sauber und die von dir gemeldeten Programme wurden entfernt. Wir haben gewonnen  Jetzt räumen wir noch auf: Schritt 1 Die Reihenfolge ist hier entscheidend.
Zum Abschluss Abschließend habe ich noch ein paar Tipps zur Absicherung deines Systems. Ich kann gar nicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti-Viren-Programm und zusätzlicher Schutz
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden. Mozilla Firefox
Performance
Was du vermeiden solltest:
Nun bleibt mir nur noch dir viel Spaß beim sicheren Surfen zu wünschen... ... und vielleicht möchtest du ja das Trojaner-Board unterstützen? Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann. |
|
20.05.2014, 22:19
| #8 |
| | Windows 7: Wie kann ich den PC Performer, Speed Test 127 und Search Protect deinstallieren? Vielen Dank für die Unterstützung! Nur hat der Download des Programms DelFix nicht funktioniert. Es heißt, die Webseite sei nicht verfügbar. Was jetzt? |
|
20.05.2014, 22:26
| #9 |
| /// TB-Ausbilder | Windows 7: Wie kann ich den PC Performer, Speed Test 127 und Search Protect deinstallieren? Hmm gerade frisch getestet, die Webseite funktioniert. Probier den Direktlink noch mal: DelFix - Download - Filepony |
|
21.05.2014, 13:07
| #10 |
| | Windows 7: Wie kann ich den PC Performer, Speed Test 127 und Search Protect deinstallieren? Ja! Heute hat's geklappt mit dem Download! Super! Vielen Dank! Eine Frage hätte ich aber noch.. Wenn ich meinen PC starte, kommt immer die Fehlermeldung 'SuiteTray.exe-Systemfehler: Das Programm kann nicht gestartet werden, da CryptoAPI.dll auf dem Computer fehlt' Kann man dieses Problem auch irgendwie beheben? |
|
21.05.2014, 14:00
| #11 |
| /// TB-Ausbilder | Windows 7: Wie kann ich den PC Performer, Speed Test 127 und Search Protect deinstallieren? Der Fehler kommt vom Acer eRecovery Management. Ich poste eine Lösung aus der Microsoft Community: Code:
ATTFilter Hi,
I had the same problem with my new Acer computer. I submitted a ticket to Acer support and got the following response on how to reinstall the MyWinLocker application, which fixed the problem:
Click Start, and then All Programs
Click Acer, and then Acer eRecovery Management
You may be prompted to enter or create a password. This password will be required to use eRecovery in the future.
In the next window on the left toolbar, select Restore.
Choose Reinstall Drivers or Applications
Choose Contents
Choose the driver or application you wish to install: (MyWinLocker)
On the right, click the Install link and follow the prompts.
The computer may restart when installation is complete. If it does not restart, manually shutdown and restart the computer.
Klicke Start, alle Programme Klicke auf Acer, dann Acer eRecovery Managment Du wirst evtl nach danach gefragt, dein Passwort einzugeben oder zu erstellen. Dieses Passwort wird zukünftig von eRecovery benötigt. Im nächsten Fenster, wähle aus der linken Werkzeugleiste "Wiederherstellen" Wähle "Treiber oder Anwendung erneut installieren" Wähle "Inhalte" Wähle den Treiber oder Anwendung die du installieren willst. (MyWinLocker) Auf der Rechten Seite, klicke auf den Installations-Link und folge den Anweisungen. Der Computer wird wahrscheinlich neustarten, sobald die Installation abgeschlossen ist. Falls nicht, starte den Rechner manuell neu. Probier mal bitte diese Schritte aus. |
|
21.05.2014, 21:31
| #12 |
| | Windows 7: Wie kann ich den PC Performer, Speed Test 127 und Search Protect deinstallieren? super!! Vielen vielen Dank! Habe sonst keine Fragen mehr!  |
|
21.05.2014, 21:46
| #13 |
| /// TB-Ausbilder | Windows 7: Wie kann ich den PC Performer, Speed Test 127 und Search Protect deinstallieren? Freut mich das ich helfen konnte.  |
|
| Themen zu Windows 7: Wie kann ich den PC Performer, Speed Test 127 und Search Protect deinstallieren? |
| 4d36e972-e325-11ce-bfc1-08002be10318, antivir, antivirus, association, avira, browser, desktop, email, error, excel, flash player, google, helper.exe, home, homepage, icreinstall, internet, launch, malware, msiexec.exe, problem, realtek, registry, rundll, security, siteadvisor, speedtest, svchost.exe, symantec, trojan, virus, windows, wscript.exe |
Linear-Darstellung
