| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Pop-Ups öffnen automatisch - adservWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
05.06.2014, 16:09
| #1 |
| |  Pop-Ups öffnen automatisch - adserv Hallo, ich habe seit ca. 30.06 folgendes Problem: Bei ca 2/3 aller neuen Seitenaufrufe im Internet wird in der unteren linken Ecke Werbung angezeigt. Er versucht sich immer mit adserv.quality-channel zu verbinden. Und wenn ich auf bestimmten Seiten bin, dort auf ein Reiter klicke werde ich sofort an find-all-what-you-want.com weiter geleitet obwohl die übliche "Vorschau" die richtige Ziel URL anzeigt. Übernacht habe ich den DE-Cleaner-RettungsCD-v3.5.1 darüberlaufen lassen. Leider gibt es davon keine logfile mehr. Übertags habe ich F-Prot (lässt kein logfile zu) und Malwarebytes Anti Malware noch darüberlaufen lassen. Cookies, Verlauf und alle weiteren Auswahlmöglichkeiten habe ich selbstverständlich gelöscht. Firefox auf Werkszustand zurückgesetzt. Und mit Hilfe von dem Add-On Block site die genannten Seiten gesperrt. Rahmenbedingungen: Windows XP Professional SP3 Firefox 29.0.1 Ich hoffe Ihr könnt mir helfen.  Quelltext anzeigen lassen der Werbung: Code:
ATTFilter <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "hxxp://www.w3.org/TR/html4/loose.dtd">
<html>
<head></head>
<body id="home">
<iframe width="0" height="0" frameborder="0" style="display:none;" name="spon_vdz_countframe" src="/static/sys/pixel.gif"></iframe>
<div id="spSZM"></div>
<div style="position:absolute;top: -100px;left: 0px;"></div>
<script type="text/javascript"></script>
<script src="hxxp://adserv.quality-channel.de/RealMedia/ads/adstream_mjx.…,x03,x04,x05,x06,x07,x08,x09,x10,x11,x12,x20,x21,x22,x23,x70" language="JavaScript1.1" type="text/javascript"></script>
<div id="spOasTop"></div>
<div id="wrapper"></div>
<div id="_rjkkvyjkph" style="z-index:9998;cursor:pointer;position:fixed !important;positi…ext-align:center;margin:0;overflow:hidden;vertical-align:top">
<div style="background: url("hxxp://www.google-analytics.com/img/closebu…at scroll 100% 0% transparent; height: 15px; display: block;">
<div style="padding-top:15px;">
<div style="border:white 2px solid;">
<iframe width="300" height="250" frameborder="0" src="hxxp://ads.find-all-you-want.com/openx.html" scrolling="no" marginheight="0" marginwidth="0">
#document
<!--
/* Revive Adserver iFrame Tag v3.0.2 */
-->
<!--
/*
* This tag has been generated for use on a no…
-->
<html>
<head></head>
<body>
<iframe id="a613e8d3" width="300" height="250" frameborder="0" scrolling="no" src="hxxp://ads.find-all-you-want.com/www/delivery/afr.php?zoneid=7&cb=INSERT_RANDOM_NUMBER_HERE" name="a613e8d3">
#document
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "hxxp://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html lang="en" xml:lang="en" xmlns="hxxp://www.w3.org/1999/xhtml"></html>
</iframe>
</body>
</html>
</iframe>
</div>
</div>
</div>
</div>
<script async="" src="hxxp://www.google-analytics.com/gs.js?1&code=5390848fd17a4&t…%2F&u=7&t=0&pref=&utmcc=__utma%3D%2B__utmz%3D&bd=&lng=de&bh="></script>
</body>
</html>
Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 05.06.2014 Scan Time: 11:41:25 Logfile: daniel.txt Administrator: Yes Version: 2.00.2.1012 Malware Database: v2014.03.04.09 Rootkit Database: v2014.02.20.01 License: Free Malware Protection: Disabled Malicious Website Protection: Disabled Self-protection: Disabled OS: Windows XP Service Pack 3 CPU: x86 File System: NTFS User: kp Scan Type: Threat Scan Result: Completed Objects Scanned: 393422 Time Elapsed: 44 min, 29 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 4 PUP.Optional.Iminent, C:\Programme\Gemeinsame Dateien\Umbrella\Umbrella.exe, 400, Delete-on-Reboot, [e8614eb1ccae4de9a31322273dc418e8] PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\SweetIM.exe, 1980, Delete-on-Reboot, [8bbee916a8d2999dd3a4b998e02401ff] PUP.Optional.SweetIM, C:\Programme\SweetIM\Communicator\SweetPacksUpdateManager.exe, 2080, Delete-on-Reboot, [1e2b49b6cdad56e0235430215aaa3dc3] Adware.InstallBrain, C:\WINDOWS\system32\dmwu.exe, 1808, Delete-on-Reboot, [400942bd374387af285cb6ce46bd50b0] Modules: 35 PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgAdaptersProxy.dll, Delete-on-Reboot, [ba8f31ce14667cbac4b3b899af55c13f], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgAdaptersProxy.dll, Delete-on-Reboot, [ba8f31ce14667cbac4b3b899af55c13f], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgAdaptersProxy.dll, Delete-on-Reboot, [ba8f31ce14667cbac4b3b899af55c13f], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgAdaptersProxy.dll, Delete-on-Reboot, [ba8f31ce14667cbac4b3b899af55c13f], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgAdaptersProxy.dll, Delete-on-Reboot, [ba8f31ce14667cbac4b3b899af55c13f], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgAdaptersProxy.dll, Delete-on-Reboot, [ba8f31ce14667cbac4b3b899af55c13f], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgAdaptersProxy.dll, Delete-on-Reboot, [ba8f31ce14667cbac4b3b899af55c13f], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgAdaptersProxy.dll, Delete-on-Reboot, [ba8f31ce14667cbac4b3b899af55c13f], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgAdaptersProxy.dll, Delete-on-Reboot, [ba8f31ce14667cbac4b3b899af55c13f], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgAdaptersProxy.dll, Delete-on-Reboot, [ba8f31ce14667cbac4b3b899af55c13f], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgAdaptersProxy.dll, Delete-on-Reboot, [ba8f31ce14667cbac4b3b899af55c13f], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgAdaptersProxy.dll, Delete-on-Reboot, [ba8f31ce14667cbac4b3b899af55c13f], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgAdaptersProxy.dll, Delete-on-Reboot, [ba8f31ce14667cbac4b3b899af55c13f], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgAdaptersProxy.dll, Delete-on-Reboot, [ba8f31ce14667cbac4b3b899af55c13f], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgAdaptersProxy.dll, Delete-on-Reboot, [ba8f31ce14667cbac4b3b899af55c13f], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgAdaptersProxy.dll, Delete-on-Reboot, [ba8f31ce14667cbac4b3b899af55c13f], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgAdaptersProxy.dll, Delete-on-Reboot, [ba8f31ce14667cbac4b3b899af55c13f], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgAdaptersProxy.dll, Delete-on-Reboot, [ba8f31ce14667cbac4b3b899af55c13f], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgAdaptersProxy.dll, Delete-on-Reboot, [ba8f31ce14667cbac4b3b899af55c13f], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgAdaptersProxy.dll, Delete-on-Reboot, [ba8f31ce14667cbac4b3b899af55c13f], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgAdaptersProxy.dll, Delete-on-Reboot, [ba8f31ce14667cbac4b3b899af55c13f], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgAdaptersProxy.dll, Delete-on-Reboot, [ba8f31ce14667cbac4b3b899af55c13f], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgAdaptersProxy.dll, Delete-on-Reboot, [ba8f31ce14667cbac4b3b899af55c13f], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgAdaptersProxy.dll, Delete-on-Reboot, [ba8f31ce14667cbac4b3b899af55c13f], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgUpdateSupport.dll, Delete-on-Reboot, [381114ebdc9ef83e0f68ef628e768977], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgsimcommon.dll, Delete-on-Reboot, [83c69a655a201224afc8034e0df7ae52], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgcommon.dll, Delete-on-Reboot, [be8b7f80601ad95d5423430e10f435cb], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgcommunication.dll, Delete-on-Reboot, [3811c738304a85b1fe79163bcc389c64], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mghooking.dll, Delete-on-Reboot, [10396d92f5859c9ae88fda77c4400ff1], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgxml_wrapper.dll, Delete-on-Reboot, [cb7e69961565c57187f0a9a8887c36ca], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgconfig.dll, Delete-on-Reboot, [4009d22db1c9d75fc7b0e96841c3d62a], PUP.Optional.SweetIM, C:\Programme\SweetIM\Communicator\mgcommon.dll, Delete-on-Reboot, [28214fb0cdadf73f56211e33e71d20e0], PUP.Optional.SweetIM, C:\Programme\SweetIM\Communicator\mgxml_wrapper.dll, Delete-on-Reboot, [5ced69965a2066d03e3928290ff58779], PUP.Optional.SweetIM, C:\Programme\SweetIM\Communicator\mgcommunication.dll, Delete-on-Reboot, [8ebbdb24a1d989ad1a5d96bb5ca849b7], PUP.Optional.SweetIM, C:\Programme\SweetIM\Communicator\mgsimcommon.dll, Delete-on-Reboot, [4bfe8d724c2e55e1eb8c331eec18f907], Registry Keys: 199 PUP.Optional.Iminent, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SProtection, Quarantined, [e8614eb1ccae4de9a31322273dc418e8], PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\CLSID\{112BA211-334C-4A90-90EC-2AD1CDAB287C}, Quarantined, [e960f20d3941989e0966542f778902fe], PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\iminent.iminentHlpr.1, Quarantined, [e960f20d3941989e0966542f778902fe], PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\iminent.iminentHlpr, Quarantined, [e960f20d3941989e0966542f778902fe], PUP.Optional.Iminent, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{112BA211-334C-4A90-90EC-2AD1CDAB287C}, Quarantined, [e960f20d3941989e0966542f778902fe], PUP.Optional.Iminent, HKU\S-1-5-21-790525478-1606980848-725345543-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{112BA211-334C-4A90-90EC-2AD1CDAB287C}, Quarantined, [e960f20d3941989e0966542f778902fe], PUP.Optional.Iminent, HKU\S-1-5-21-790525478-1606980848-725345543-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{112BA211-334C-4A90-90EC-2AD1CDAB287C}, Quarantined, [e960f20d3941989e0966542f778902fe], PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\CLSID\{112BA211-334C-4A90-90EC-2AD1CDAB287C}\INPROCSERVER32, Quarantined, [e960f20d3941989e0966542f778902fe], PUP.Optional.SweetPacks, HKLM\SOFTWARE\CLASSES\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}, Quarantined, [ea5ffa05ceac72c4869ab1a016ee33cd], PUP.Optional.SweetPacks, HKLM\SOFTWARE\CLASSES\TYPELIB\{EEE6C35E-6118-11DC-9C72-001320C79847}, Quarantined, [ea5ffa05ceac72c4869ab1a016ee33cd], PUP.Optional.SweetPacks, HKLM\SOFTWARE\CLASSES\INTERFACE\{EEE6C358-6118-11DC-9C72-001320C79847}, Quarantined, [ea5ffa05ceac72c4869ab1a016ee33cd], PUP.Optional.SweetPacks, HKLM\SOFTWARE\CLASSES\INTERFACE\{EEE6C359-6118-11DC-9C72-001320C79847}, Quarantined, [ea5ffa05ceac72c4869ab1a016ee33cd], PUP.Optional.SweetPacks, HKLM\SOFTWARE\CLASSES\SWEETIE.IEToolbar.1, Quarantined, [ea5ffa05ceac72c4869ab1a016ee33cd], PUP.Optional.SweetPacks, HKLM\SOFTWARE\CLASSES\SWEETIE.IEToolbar, Quarantined, [ea5ffa05ceac72c4869ab1a016ee33cd], PUP.Optional.SweetPacks, HKU\S-1-5-21-790525478-1606980848-725345543-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{EEE6C35B-6118-11DC-9C72-001320C79847}, Quarantined, [ea5ffa05ceac72c4869ab1a016ee33cd], PUP.Optional.SweetPacks, HKU\S-1-5-21-790525478-1606980848-725345543-1007-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{EEE6C35B-6118-11DC-9C72-001320C79847}, Quarantined, [ea5ffa05ceac72c4869ab1a016ee33cd], PUP.Optional.SweetPacks, HKU\S-1-5-21-790525478-1606980848-725345543-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{EEE6C35B-6118-11DC-9C72-001320C79847}, Quarantined, [ea5ffa05ceac72c4869ab1a016ee33cd], PUP.Optional.SweetPacks, HKU\S-1-5-21-790525478-1606980848-725345543-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{EEE6C35B-6118-11DC-9C72-001320C79847}, Quarantined, [ea5ffa05ceac72c4869ab1a016ee33cd], PUP.Optional.SweetPacks, HKU\S-1-5-21-790525478-1606980848-725345543-1007-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{EEE6C35B-6118-11DC-9C72-001320C79847}, Quarantined, [ea5ffa05ceac72c4869ab1a016ee33cd], PUP.Optional.SweetPacks, HKU\S-1-5-21-790525478-1606980848-725345543-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{EEE6C35B-6118-11DC-9C72-001320C79847}, Quarantined, [ea5ffa05ceac72c4869ab1a016ee33cd], PUP.Optional.SweetPacks, HKLM\SOFTWARE\CLASSES\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}, Quarantined, [ea5ffa05ceac72c4869ab1a016ee33cd], PUP.Optional.SweetPacks, HKLM\SOFTWARE\CLASSES\Toolbar3.SWEETIE.1, Quarantined, [ea5ffa05ceac72c4869ab1a016ee33cd], PUP.Optional.SweetPacks, HKLM\SOFTWARE\CLASSES\Toolbar3.SWEETIE, Quarantined, [ea5ffa05ceac72c4869ab1a016ee33cd], PUP.Optional.SweetPacks, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{EEE6C35C-6118-11DC-9C72-001320C79847}, Quarantined, [ea5ffa05ceac72c4869ab1a016ee33cd], PUP.Optional.SweetPacks, HKU\S-1-5-21-790525478-1606980848-725345543-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{EEE6C35C-6118-11DC-9C72-001320C79847}, Quarantined, [ea5ffa05ceac72c4869ab1a016ee33cd], PUP.Optional.SweetPacks, HKU\S-1-5-21-790525478-1606980848-725345543-1007-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{EEE6C35C-6118-11DC-9C72-001320C79847}, Quarantined, [ea5ffa05ceac72c4869ab1a016ee33cd], PUP.Optional.SweetPacks, HKU\S-1-5-21-790525478-1606980848-725345543-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{EEE6C35C-6118-11DC-9C72-001320C79847}, Quarantined, [ea5ffa05ceac72c4869ab1a016ee33cd], PUP.Optional.SweetPacks, HKU\S-1-5-21-790525478-1606980848-725345543-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{EEE6C35C-6118-11DC-9C72-001320C79847}, Quarantined, [ea5ffa05ceac72c4869ab1a016ee33cd], PUP.Optional.SweetPacks, HKU\S-1-5-21-790525478-1606980848-725345543-1007-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{EEE6C35C-6118-11DC-9C72-001320C79847}, Quarantined, [ea5ffa05ceac72c4869ab1a016ee33cd], PUP.Optional.SweetPacks, HKU\S-1-5-21-790525478-1606980848-725345543-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{EEE6C35C-6118-11DC-9C72-001320C79847}, Quarantined, [ea5ffa05ceac72c4869ab1a016ee33cd], PUP.Optional.SweetPacks, HKLM\SOFTWARE\CLASSES\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}\INPROCSERVER32, Quarantined, [ea5ffa05ceac72c4869ab1a016ee33cd], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\APPID\{0E4B2CAB-B859-4C57-B96E-63DDEC692BC4}, Quarantined, [cc7db8475c1efe3843a1b58a2dd504fc], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\CLSID\{01A602A0-D0B9-445B-8081-719E4177C4A7}, Quarantined, [bd8c04fbeb8f95a1e93eea8a23df7f81], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.ShowControlCenterCommand, Quarantined, [bd8c04fbeb8f95a1e93eea8a23df7f81], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\CLSID\{1FAFD711-ABF9-4F6A-8130-5166C7371427}, Quarantined, [f05938c7720838fe568a95deca38cf31], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\iminent.iminentdskBnd.1, Quarantined, [f05938c7720838fe568a95deca38cf31], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\iminent.iminentdskBnd, Quarantined, [f05938c7720838fe568a95deca38cf31], PUP.Optional.Iminent.A, HKU\S-1-5-21-790525478-1606980848-725345543-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{1FAFD711-ABF9-4F6A-8130-5166C7371427}, Quarantined, [f05938c7720838fe568a95deca38cf31], PUP.Optional.Iminent.A, HKU\S-1-5-21-790525478-1606980848-725345543-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{1FAFD711-ABF9-4F6A-8130-5166C7371427}, Quarantined, [f05938c7720838fe568a95deca38cf31], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\CLSID\{58124A0B-DC32-4180-9BFF-E0E21AE34026}, Quarantined, [4207cb3436445dd9e58a87ec8a78e41c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\CLSID\{57CADC46-58FF-4105-B733-5A9F3FC9783C}, Quarantined, [4207cb3436445dd9e58a87ec8a78e41c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\ComObject.DeskbarEnabler.1, Quarantined, [4207cb3436445dd9e58a87ec8a78e41c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\ComObject.DeskbarEnabler, Quarantined, [4207cb3436445dd9e58a87ec8a78e41c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\CLSID\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}, Quarantined, [4207cb3436445dd9e58a87ec8a78e41c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}, Quarantined, [4207cb3436445dd9e58a87ec8a78e41c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{2A42D13C-D427-4787-821B-CF6973855778}, Quarantined, [4207cb3436445dd9e58a87ec8a78e41c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{3D8478AA-7B88-48A9-8BCB-B85D594411EC}, Quarantined, [4207cb3436445dd9e58a87ec8a78e41c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}, Quarantined, [4207cb3436445dd9e58a87ec8a78e41c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}, Quarantined, [4207cb3436445dd9e58a87ec8a78e41c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}, Quarantined, [4207cb3436445dd9e58a87ec8a78e41c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\TBSB01620.TBSB01620.3, Quarantined, [4207cb3436445dd9e58a87ec8a78e41c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\TBSB01620.TBSB01620, Quarantined, [4207cb3436445dd9e58a87ec8a78e41c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\TBSB01620.IEToolbar, Quarantined, [4207cb3436445dd9e58a87ec8a78e41c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\TBSB01620.IEToolbar.1, Quarantined, [4207cb3436445dd9e58a87ec8a78e41c], PUP.Optional.Iminent.A, HKU\S-1-5-21-790525478-1606980848-725345543-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}, Quarantined, [4207cb3436445dd9e58a87ec8a78e41c], PUP.Optional.Iminent.A, HKU\S-1-5-21-790525478-1606980848-725345543-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}, Quarantined, [4207cb3436445dd9e58a87ec8a78e41c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\CLSID\{9F34B17E-FF0D-4FAB-97C4-9713FEE79052}, Quarantined, [4207cb3436445dd9e58a87ec8a78e41c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Toolbar3.ContextMenuNotifier.1, Quarantined, [4207cb3436445dd9e58a87ec8a78e41c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Toolbar3.ContextMenuNotifier, Quarantined, [4207cb3436445dd9e58a87ec8a78e41c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\CLSID\{D565B35E-B787-40FA-95E3-E3562F8FC1A0}, Quarantined, [4207cb3436445dd9e58a87ec8a78e41c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Toolbar3.CustomInternetSecurityImpl.1, Quarantined, [4207cb3436445dd9e58a87ec8a78e41c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Toolbar3.CustomInternetSecurityImpl, Quarantined, [4207cb3436445dd9e58a87ec8a78e41c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\CLSID\{58124A0B-DC32-4180-9BFF-E0E21AE34026}\INPROCSERVER32, Quarantined, [4207cb3436445dd9e58a87ec8a78e41c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Toolbar3.TBSB01620.1, Quarantined, [4207cb3436445dd9e58a87ec8a78e41c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Toolbar3.TBSB01620, Quarantined, [4207cb3436445dd9e58a87ec8a78e41c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{58124A0B-DC32-4180-9BFF-E0E21AE34026}, Quarantined, [4207cb3436445dd9e58a87ec8a78e41c], PUP.Optional.Iminent.A, HKU\S-1-5-21-790525478-1606980848-725345543-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{58124A0B-DC32-4180-9BFF-E0E21AE34026}, Quarantined, [4207cb3436445dd9e58a87ec8a78e41c], PUP.Optional.Iminent.A, HKU\S-1-5-21-790525478-1606980848-725345543-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{58124A0B-DC32-4180-9BFF-E0E21AE34026}, Quarantined, [4207cb3436445dd9e58a87ec8a78e41c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}, Quarantined, [ce7b3ac51e5ce05682ee2d46ab57a45c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\CLSID\{5C176BA0-6FC0-4EBD-8ACF-24AC592506B6}, Quarantined, [ce7b3ac51e5ce05682ee2d46ab57a45c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{A9CAF365-EA35-45DA-BD8B-2EFA09D374AC}, Quarantined, [ce7b3ac51e5ce05682ee2d46ab57a45c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{ACA608DB-A210-4253-B799-3FD24E9A7BF5}, Quarantined, [ce7b3ac51e5ce05682ee2d46ab57a45c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{C58D664A-3DBC-4925-AE74-0382007DF113}, Quarantined, [ce7b3ac51e5ce05682ee2d46ab57a45c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}, Quarantined, [ce7b3ac51e5ce05682ee2d46ab57a45c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\IminentWebBooster.ScriptExtender.1, Quarantined, [ce7b3ac51e5ce05682ee2d46ab57a45c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\IminentWebBooster.ScriptExtender, Quarantined, [ce7b3ac51e5ce05682ee2d46ab57a45c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}\INPROCSERVER32, Quarantined, [ce7b3ac51e5ce05682ee2d46ab57a45c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\IminentWebBooster.BrowserHelperObject.1, Quarantined, [ce7b3ac51e5ce05682ee2d46ab57a45c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\IminentWebBooster.BrowserHelperObject, Quarantined, [ce7b3ac51e5ce05682ee2d46ab57a45c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}, Quarantined, [ce7b3ac51e5ce05682ee2d46ab57a45c], PUP.Optional.Iminent.A, HKU\S-1-5-21-790525478-1606980848-725345543-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}, Quarantined, [ce7b3ac51e5ce05682ee2d46ab57a45c], PUP.Optional.Iminent.A, HKU\S-1-5-21-790525478-1606980848-725345543-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}, Quarantined, [ce7b3ac51e5ce05682ee2d46ab57a45c], PUP.Optional.Iminent.A, HKU\S-1-5-21-790525478-1606980848-725345543-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}, Quarantined, [68e107f80c6e73c3e8f6e98a62a0ac54], PUP.Optional.Iminent.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}, Quarantined, [68e107f80c6e73c3e8f6e98a62a0ac54], PUP.Optional.Iminent.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{0af350d9-3916-454b-ac53-0b0b65f41301}, Quarantined, [b59406f95b1fe35313353e369270e917], PUP.Optional.Iminent.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68B81CCD-A80C-4060-8947-5AE69ED01199}, Quarantined, [53f600ff4b2f8babc782ff7548ba4eb2], PUP.Optional.Iminent.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}, Quarantined, [ee5bae515a204aecde6c4c2809f94eb2], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\CLSID\{26C9BBE4-6D45-4AB6-A5B4-E068C9F5EF6D}, Quarantined, [9aaf1ce367130f2728ec792f00033bc5], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\IminentWebBooster.ActiveContentHandle.1, Quarantined, [9aaf1ce367130f2728ec792f00033bc5], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\IminentWebBooster.ActiveContentHandler, Quarantined, [9aaf1ce367130f2728ec792f00033bc5], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\CLSID\{D8F01233-2DE6-4EE7-8988-37263F00651B}, Quarantined, [9aaf1ce367130f2728ec792f00033bc5], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\IminentWebBooster.TinyUrlHandler.1, Quarantined, [9aaf1ce367130f2728ec792f00033bc5], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\IminentWebBooster.TinyUrlHandler, Quarantined, [9aaf1ce367130f2728ec792f00033bc5], PUP.Optional.Iminent.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IMBoosterARP, Quarantined, [9aaf1ce367130f2728ec792f00033bc5], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\CLSID\{3BDF4CE9-E81D-432B-A55E-9F0570CE811F}, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{01221FCC-4BFB-461C-B08C-F6D2DF309921}, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\TbCommonUtils.CommonUtils.1, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\TbCommonUtils.CommonUtils, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\CLSID\{CA3EB689-8F09-4026-AA10-B9534C691CE0}, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{4509D3CC-B642-4745-B030-645B79522C6D}, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{4897BBA6-48D9-468C-8EFA-846275D7701B}, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\URLSearchHook.ToolbarURLSearchHook.1, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\URLSearchHook.ToolbarURLSearchHook, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{B87F8B63-7274-43FD-87FA-09D3B7496148}, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{452AE416-9A97-44CA-93DA-D0F15C36254F}, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{45CDA4F7-594C-49A0-AAD1-8224517FE979}, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{81E852CC-1FD5-4004-8761-79A48B975E29}, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{B9F43021-60D4-42A6-A065-9BA37F38AC47}, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, HKLM\SOFTWARE\Iminent, Quarantined, [97b2d52a95e547ef9ed45f36d62c9d63], PUP.Optional.Iminent.A, HKLM\SOFTWARE\IminentToolbar, Quarantined, [00490bf47901dc5ae781eda91ce6b64a], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\esrv.iminentESrvc, Quarantined, [0f3a05fa047662d459cdb3e2956d6d93], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\esrv.iminentESrvc.1, Quarantined, [32176798e2989b9b2ef8ff9648ba25db], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\iminent, Quarantined, [89c0cc33cdad063033f7714ff70c05fb], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Business.Tinyfying.DownloadArgs, Quarantined, [400956a97a0093a325ae83287d869c64], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Business.Tinyfying.LinkToPromoteArgs, Quarantined, [6cddd7280e6c90a63f94e1cae71ceb15], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Business.Tinyfying.RawDataArgs, Quarantined, [4108659a304aa09610c32f7cfd066997], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Business.Tinyfying.TinyUrlArgs, Quarantined, [c9801de2cdad47ef9c375b505aa915eb], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Business.Tinyfying.ViralLinkArgs, Quarantined, [ef5ae01f0d6d90a65a795e4d50b3f10f], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\iminent.iminentappCore, Quarantined, [c6830bf4e09a62d48d9af3a2f012b749], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\iminent.iminentappCore.1, Quarantined, [7bce97684832bf778b9cd5c07b8728d8], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.ClientCallback, Quarantined, [0841728d79014fe7a2813573877ca45c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.ContractBase, Quarantined, [83c6af50f585b482db487e2a0af9ff01], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.AddToUserContentCommand, Quarantined, [1e2b926d780258de170c54544ab99c64], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.CheckLoginStatusCommand, Quarantined, [99b0619e3b3f191d38ebfeaad03328d8], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.CleanCacheCommand, Quarantined, [3217b14e08721c1a74afa602768d6898], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.GameOverCallback, Quarantined, [5aef78879fdbca6c67bcf2b69271ce32], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.GetCreditCommand, Quarantined, [af9ac33c45352f07eb380e9af1127f81], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.GetInstallationContextCommand, Quarantined, [450408f7c7b3bb7ba77cb8f0aa595ba5], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.GetLoginStatusCommand, Quarantined, [f554fb041e5c7fb775aef3b532d1d52b], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.GetLoginStatusResult, Quarantined, [6fdabd42b7c3251164bf07a18f74738d], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.GetVariableCommand, Quarantined, [004951ae3f3b34021a09a3055ca77789], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.GetVariableResult, Quarantined, [3316916ea3d75fd7bd669216ed167e82], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.InstallationContextResult, Quarantined, [60e94bb42951ee48859e8a1e2cd7be42], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.LoadContentCommand, Quarantined, [4009669936449a9c6eb5bbeda0635da3], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.LoadContentCommandResult, Quarantined, [5feacd323e3cef47879c6642758e4fb1], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.LoginCommand, Quarantined, [ae9b39c6f7834fe729fa3375d2313fc1], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.LoginStatusChangedCallback, Quarantined, [71d8d52a85f5092d77accade55aea15f], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.LogoutCommand, Quarantined, [5ced44bbb2c82f078d96a800b350d62a], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.MergeIdentityCommand, Quarantined, [d5749f60de9c67cfe53e396f3fc48977], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.MyAccountCommand, Quarantined, [361326d92258999df0334a5e30d311ef], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.PlayContentCommand, Quarantined, [1a2fbc43a0da3ff7a083ffa9ef14728e], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.PostContentCallback, Quarantined, [79d02fd087f3d264e43fbeea7c87ca36], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.RecycleViewsCommand, Quarantined, [5dec0bf497e36dc948dbf0b811f236ca], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.SetVariableCommand, Quarantined, [e0698b742654e55125fee1c7887bc33d], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.ShowBrowserWindowCommand, Quarantined, [f55444bb7a0049edfe259d0b58ab9868], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.ShowPluginWindowCommand, Quarantined, [9faa956a196187af58cb119725dea060], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.TestContentCommand, Quarantined, [cb7ee21daecc2214ca597038847faa56], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.UserContentChangedCallback, Quarantined, [7bcefa05a7d3c86ef42facfcd82b17e9], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.VariableChangedCallback, Quarantined, [96b3d629e09af34367bc357326ddb54b], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.WarmUpCommand, Quarantined, [65e4758a4c2e6bcb899afdabe91ac13f], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.WelcomeCommand, Quarantined, [f455c23d4c2e50e610137f29a063916f], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.ServerCommand, Quarantined, [59f051ae7ffb39fdec3773355ea56e92], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.ServerResult, Quarantined, [e8617b843f3b91a533f0e6c2d92ad729], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.LightContent, Quarantined, [0346748bb8c22610bb68cfd9f0135ca4], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.LightUri, Quarantined, [65e466992c4e7cba74af9f099f64e61a], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.MediatorServiceProxy, Quarantined, [7ecb1de2ceacb1853ae9aefaa45ff907], PUP.Optional.SweetIM.A, HKLM\SOFTWARE\CLASSES\SweetIM_URLSearchHook.ToolbarURLSearchHook, Quarantined, [73d6fe012c4e072f4a189c1428db1ee2], PUP.Optional.SweetIM.A, HKLM\SOFTWARE\CLASSES\SweetIM_URLSearchHook.ToolbarURLSearchHook.1, Quarantined, [71d82dd22b4f270f87dba808b251659b], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\APPID\Iminent.WebBooster.InternetExplorer.DLL, Quarantined, [361342bdacce37ffd4074b68a55e3fc1], PUP.Optional.Iminent.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\igdhbblpcellaljokkpfhcjlagemhgjl, Quarantined, [9baebe4117635dd9d9982b6ad82af60a], PUP.Optional.SweetIM.A, HKLM\SOFTWARE\SWEETIM, Quarantined, [0445708f2e4c53e33589298248bb649c], Adware.InstallBrain, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IBUpdaterService, Quarantined, [400942bd374387af285cb6ce46bd50b0], PUP.Optional.InstallBrain.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WNLT, Quarantined, [58f18b74d2a873c346ace8c99c67b848], PUP.Optional.DataMngr.A, HKU\S-1-5-21-790525478-1606980848-725345543-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr, Quarantined, [ba8f20df21595fd76e399515986be51b], PUP.Optional.DataMngr.A, HKU\S-1-5-21-790525478-1606980848-725345543-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr_Toolbar, Quarantined, [c386916ed4a6f244abfb9e0cd3305ca4], PUP.Optional.SweetIM.A, HKU\S-1-5-21-790525478-1606980848-725345543-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SWEETIM, Quarantined, [b198936c5624c76ff1ccd7d434cf37c9], PUP.Optional.DataMngr.A, HKU\S-1-5-21-790525478-1606980848-725345543-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr, Quarantined, [3613946b7ffb1323caddc0ea5da6e41c], PUP.Optional.DataMngr.A, HKU\S-1-5-21-790525478-1606980848-725345543-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr_Toolbar, Quarantined, [d47550afc7b3280e04a203a7e41f34cc], PUP.Optional.Iminent.A, HKU\S-1-5-21-790525478-1606980848-725345543-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Iminent, Quarantined, [57f240bf4d2d0531a2d1811480827c84], PUP.Optional.InstallBrain.A, HKU\S-1-5-21-790525478-1606980848-725345543-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WNLT, Quarantined, [58f1906f4139ee4808ead8d9e12233cd], PUP.Optional.DataMngr.A, HKU\S-1-5-21-790525478-1606980848-725345543-1007-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr, Quarantined, [1138cb347a0041f580272288fb08d42c], PUP.Optional.DataMngr.A, HKU\S-1-5-21-790525478-1606980848-725345543-1007-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr_Toolbar, Quarantined, [88c154ab7bffd75faafc56541ce711ef], PUP.Optional.Iminent.A, HKU\S-1-5-21-790525478-1606980848-725345543-1007-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Iminent, Quarantined, [c28743bcf48644f2195aaee77c866e92], PUP.Optional.DataMngr.A, HKU\S-1-5-21-790525478-1606980848-725345543-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr, Quarantined, [8ebb39c69dddbe782e790f9b1ce7a060], PUP.Optional.DataMngr.A, HKU\S-1-5-21-790525478-1606980848-725345543-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr_Toolbar, Quarantined, [5feada251e5c8bab961059519172b24e], PUP.Optional.Iminent.A, HKU\S-1-5-21-790525478-1606980848-725345543-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Iminent, Quarantined, [6fda54ab7ffb033394df435207fb52ae], PUP.Optional.Iminent.A, HKU\S-1-5-21-790525478-1606980848-725345543-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\IminentToolbar, Quarantined, [6bdeb54a582241f504650a8cce34946c], PUP.Optional.Iminent, HKU\S-1-5-21-790525478-1606980848-725345543-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}, Quarantined, [8cbda65996e473c3934a3f81857e6b95], PUP.Optional.InstallBrain.A, HKU\S-1-5-21-790525478-1606980848-725345543-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WNLT, Quarantined, [0d3ca857ee8cfd39af43258c887b38c8], PUP.Optional.DataMngr.A, HKU\S-1-5-21-790525478-1606980848-725345543-1009-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr, Quarantined, [ff4a09f6790158ded0d77e2ceb18867a], PUP.Optional.DataMngr.A, HKU\S-1-5-21-790525478-1606980848-725345543-1009-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr_Toolbar, Quarantined, [97b2bf404634bf77376f5e4cf2110cf4], PUP.Optional.DataMngr.A, HKU\S-1-5-21-790525478-1606980848-725345543-1010-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr, Quarantined, [80c98976572396a02a7d505a679cfc04], PUP.Optional.DataMngr.A, HKU\S-1-5-21-790525478-1606980848-725345543-1010-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr_Toolbar, Quarantined, [c188748bf08a70c61f87c1e91fe4a35d], PUP.Optional.Iminent.A, HKU\S-1-5-21-790525478-1606980848-725345543-1010-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Iminent, Quarantined, [88c1bd425d1ddc5a7af99afb13efe51b], PUP.Optional.InstallBrain.A, HKU\S-1-5-21-790525478-1606980848-725345543-1010-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WNLT, Quarantined, [f653cd32c4b6a591b83a149d58abbb45], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\CLSID\{A2CC3C46-143B-4142-9D5A-B8543F0A6F55}, Quarantined, [05440af56515ea4c5a282066b9493fc1], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\CLSID\{9FD0C1D9-180B-4834-B80B-4B7325AF90E1}, Quarantined, [05440af56515ea4c5a282066b9493fc1], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\i, Quarantined, [05440af56515ea4c5a282066b9493fc1], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{8E9F2D02-6B06-4EBA-92C2-68438EADED28}, Quarantined, [05440af56515ea4c5a282066b9493fc1], PUP.Optional.Iminent.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\iminent, Quarantined, [05440af56515ea4c5a282066b9493fc1], PUP.Optional.SweetIM.A, HKLM\SOFTWARE\CLASSES\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{EEE6C35F-6118-11DC-9C72-001320C79847}, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{EEE6C35A-6118-11DC-9C72-001320C79847}, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, HKU\S-1-5-21-790525478-1606980848-725345543-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{EEE6C35D-6118-11DC-9C72-001320C79847}, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.InstallBrain.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WNLT, Quarantined, [3f0ab946f486f0468bb4483f19e9f60a], Registry Values: 38 PUP.Optional.SweetIM, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|SweetIM, C:\Programme\SweetIM\Messenger\SweetIM.exe, Quarantined, [8bbee916a8d2999dd3a4b998e02401ff] PUP.Optional.SweetIM, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Sweetpacks Communicator, C:\Programme\SweetIM\Communicator\SweetPacksUpdateManager.exe, Quarantined, [1e2b49b6cdad56e0235430215aaa3dc3] PUP.Optional.SweetPacks, HKU\S-1-5-21-790525478-1606980848-725345543-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER|{EEE6C35B-6118-11DC-9C72-001320C79847}, ì?æ??á??ç??á??ì?*ä??, Quarantined, [ea5ffa05ceac72c4869ab1a016ee33cd] PUP.Optional.SweetPacks, HKU\S-1-5-21-790525478-1606980848-725345543-1007-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER|{EEE6C35B-6118-11DC-9C72-001320C79847}, ì?æ??á??ç??á??ì?*ä??, Quarantined, [ea5ffa05ceac72c4869ab1a016ee33cd] PUP.Optional.SweetPacks, HKU\S-1-5-21-790525478-1606980848-725345543-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER|{EEE6C35B-6118-11DC-9C72-001320C79847}, ì?æ??á??ç??á??ì?*ä??, Quarantined, [ea5ffa05ceac72c4869ab1a016ee33cd] PUP.Optional.SweetPacks, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{EEE6C35B-6118-11DC-9C72-001320C79847}, Quarantined, [ea5ffa05ceac72c4869ab1a016ee33cd], PUP.Optional.Iminent.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{1FAFD711-ABF9-4F6A-8130-5166C7371427}, Iminent Toolbar, Quarantined, [f05938c7720838fe568a95deca38cf31] PUP.Optional.Iminent.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{977AE9CC-AF83-45E8-9E03-E2798216E2D5}, Quarantined, [4207cb3436445dd9e58a87ec8a78e41c], PUP.Optional.Iminent.A, HKU\S-1-5-21-790525478-1606980848-725345543-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS|{84FF7BD6-B47F-46F8-9130-01B2696B36CB}, Quarantined, [68e107f80c6e73c3e8f6e98a62a0ac54], PUP.Optional.Iminent.A, HKU\S-1-5-21-790525478-1606980848-725345543-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}, Quarantined, [4009fd02275351e5f9e587ecc0426997], PUP.Optional.Iminent.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}, Quarantined, [fd4c8c7389f1fb3b94ddd59ed032e917], PUP.Optional.Iminent.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{1FAFD711-ABF9-4F6A-8130-5166C7371427}, Quarantined, [68e1708fa3d7e74f8a56ef84ee14867a], Backdoor.Agent.WMC, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\TERMINAL SERVER\INSTALL\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Windows Messages Controler, c:\windows\sms.exe, Quarantined, [1138f50a82f80e28504a9dfa4db6d030] Trojan.Agent, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\TERMINAL SERVER\INSTALL\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Microsoft Firevall Engine, c:\windows\mdm.exe, Quarantined, [9faa48b76218999d277ae27dd52e19e7] Spyware.Agent, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION|Start Page, fbdirecto.net/1/, Quarantined, [b4957b8457239a9c1e54b9decb3830d0] PUP.Optional.Datamngr.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|DATAMNGR, C:\PROGRA~1\SEARCH~1\Datamngr\DATAMN~1.EXE, Quarantined, [0f3a2ad57ffba88e8f4db0f7f70c0bf5] PUP.Optional.Iminent.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Iminent, C:\Programme\Iminent\Iminent.exe /warmup "F77F87E5-A6BD-4922-A530-EDF63D7E9F8C", Quarantined, [084125dabbbfdf57c74a396f54afaa56] PUP.Optional.Iminent.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|IminentMessenger, C:\Programme\Iminent\Iminent.Messengers.exe, Quarantined, [1237689763174fe701110b9d51b228d8] Backdoor.Agent.WMC, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Windows Messages Controler, c:\windows\sms.exe, Quarantined, [5aef2ed1cdadec4ac7d43b5c18ebe41c] Backdoor.Agent, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Microsoft Firevall Engine, c:\windows\mdm.exe, Quarantined, [163334cba7d372c4f771005db64d10f0] Trojan.Agent, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|lsass.exe, "C:\Dokumente und Einstellungen\kp\Anwendungsdaten\lsass.exe", Quarantined, [80c9ee11daa0280e0bca60592dd5bd43] Trojan.Agent.MP, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|NetworkUpdater, C:\DOKUME~1\kp\LOKALE~1\Temp\temp4083550928.exe, Quarantined, [9eaba55a2d4d6acc9137d2d3699a0df3] PUP.Optional.SweetIM.A, HKLM\SOFTWARE\SWEETIM|simapp_id, {C76E0AF5-2659-4ED8-902A-4EE450EA8223}, Quarantined, [0445708f2e4c53e33589298248bb649c] PUP.Optional.Iminent.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SPROTECTION|ImagePath, C:\Programme\Gemeinsame Dateien\Umbrella\Umbrella.exe, Quarantined, [084189765b1f92a4868aa206cd36dd23] PUP.Optional.InstallBrain.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WNLT|URL, Quarantined, [58f18b74d2a873c346ace8c99c67b848], PUP.Optional.SweetIM.A, HKU\S-1-5-21-790525478-1606980848-725345543-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SWEETIM|simapp_id, {C76E0AF5-2659-4ED8-902A-4EE450EA8223}, Quarantined, [b198936c5624c76ff1ccd7d434cf37c9] PUP.Optional.InstallBrain.A, HKU\S-1-5-21-790525478-1606980848-725345543-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WNLT|URL, Quarantined, [58f1906f4139ee4808ead8d9e12233cd], Trojan.Agent, HKU\S-1-5-21-790525478-1606980848-725345543-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Winlogon, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\Microsoft\winlogon.exe, Quarantined, [1e2b847b80fad066600dd4d69e64c838] Backdoor.Agent.WMC, HKU\S-1-5-21-790525478-1606980848-725345543-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Windows Messages Controler, c:\windows\sms.exe, Quarantined, [f257c837ef8b8babbce0f99e23e052ae] Backdoor.Agent, HKU\S-1-5-21-790525478-1606980848-725345543-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Microsoft Firevall Engine, c:\windows\mdm.exe, Quarantined, [4bfe8d7275050333b2b55904a16219e7] Trojan.Agent, HKU\S-1-5-21-790525478-1606980848-725345543-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|lsass.exe, "C:\Dokumente und Einstellungen\kp\Anwendungsdaten\lsass.exe", Quarantined, [430619e692e8092dd7fbc1f836cc57a9] PUP.Optional.InstallBrain.A, HKU\S-1-5-21-790525478-1606980848-725345543-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WNLT|URL, Quarantined, [0d3ca857ee8cfd39af43258c887b38c8], PUP.Optional.InstallBrain.A, HKU\S-1-5-21-790525478-1606980848-725345543-1010-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WNLT|URL, Quarantined, [f653cd32c4b6a591b83a149d58abbb45], PUP.Optional.SweetIM.A, HKU\S-1-5-21-790525478-1606980848-725345543-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS|{EEE6C35D-6118-11DC-9C72-001320C79847}, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, HKU\S-1-5-21-790525478-1606980848-725345543-1007-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS|{EEE6C35D-6118-11DC-9C72-001320C79847}, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, HKU\S-1-5-21-790525478-1606980848-725345543-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS|{EEE6C35D-6118-11DC-9C72-001320C79847}, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\SHAREDDLLS|C:\PROGRAMME\SWEETIM\TOOLBARS\INTERNET EXPLORER\MGHELPERAPP.EXE, 1, Quarantined, [83c631cede9c8da950b74d3a32d013ed] PUP.Optional.SweetIM.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\SHAREDDLLS|C:\PROGRAMME\SWEETIM\TOOLBARS\INTERNET EXPLORER\MGTOOLBARPROXY.DLL, 1, Quarantined, [83c631cede9c8da950b74d3a32d013ed] Registry Data: 5 PUM.Disabled.SecurityCenter, HKLM\SOFTWARE\MICROSOFT\SECURITY CENTER|AntiVirusDisableNotify, 1, Good: (0), Bad: (1),Replaced,[8abf7887daa05adcdc2577b319ebae52] PUM.Disabled.SecurityCenter, HKLM\SOFTWARE\MICROSOFT\SECURITY CENTER|FirewallDisableNotify, 1, Good: (0), Bad: (1),Replaced,[5ced44bb5d1d83b3b64ce842758fa25e] PUM.Disabled.SecurityCenter, HKLM\SOFTWARE\MICROSOFT\SECURITY CENTER|UpdatesDisableNotify, 1, Good: (0), Bad: (1),Replaced,[76d3fe01ccaeec4a5ea52406b54fd42c] Hijack.StartPage, HKU\S-1-5-21-790525478-1606980848-725345543-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, fbdirecto.net/1/, Good: (hxxp://www.google.com), Bad: (fbdirecto.net/1/),Replaced,[fd4cf708e39768ce6bb4c46209fb9f61] Hijack.StartPage, HKU\S-1-5-21-790525478-1606980848-725345543-1010-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, fbdirecto.net/1/, Good: (hxxp://www.google.com), Bad: (fbdirecto.net/1/),Replaced,[20298f70ee8cb581041bbc6a4cb8fb05] Folders: 29 Adware.InstallBrain, C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\IBUpdaterService, Quarantined, [6bde708fc4b6d1659ae9d6aedc2758a8], PUP.Optional.Iminent.A, C:\Programme\Iminent, Quarantined, [9aaf1ce367130f2728ec792f00033bc5], PUP.Optional.Iminent.A, C:\Programme\Iminent\inst, Quarantined, [9aaf1ce367130f2728ec792f00033bc5], PUP.Optional.Iminent.A, C:\Programme\Iminent\inst\Bootstrapper, Quarantined, [9aaf1ce367130f2728ec792f00033bc5], PUP.Optional.Iminent.A, C:\Programme\IMinent Toolbar, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, C:\Dokumente und Einstellungen\ds\Anwendungsdaten\Iminent\Mediator, Quarantined, [fb4e9f6096e4f83efa5aef97fd05817f], PUP.Optional.Iminent.A, C:\Dokumente und Einstellungen\ds\Anwendungsdaten\Iminent\Mediator\Datas, Quarantined, [fb4e9f6096e4f83efa5aef97fd05817f], PUP.Optional.Iminent.A, C:\Dokumente und Einstellungen\rm\Anwendungsdaten\Iminent\Mediator, Quarantined, [54f5ce31f783c96db89caadc23df5aa6], PUP.Optional.Iminent.A, C:\Dokumente und Einstellungen\rm\Anwendungsdaten\Iminent\Mediator\Datas, Quarantined, [54f5ce31f783c96db89caadc23df5aa6], PUP.Optional.Iminent.A, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\Toolbar4\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}, Quarantined, [61e801fed0aa072f6103394dbd45d52b], PUP.Optional.Iminent.A, C:\Programme\IminentToolbar, Quarantined, [05440af56515ea4c5a282066b9493fc1], PUP.Optional.Iminent.A, C:\Programme\IminentToolbar\1.8.28.3, Quarantined, [05440af56515ea4c5a282066b9493fc1], PUP.Optional.Iminent.A, C:\Programme\IminentToolbar\1.8.28.3\bh, Quarantined, [05440af56515ea4c5a282066b9493fc1], PUP.Optional.Iminent.A, C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\Iminent, Quarantined, [ce7bbc43e298d066f3b1c2c43dc526da], PUP.Optional.Iminent.A, C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\Iminent\Log, Quarantined, [ce7bbc43e298d066f3b1c2c43dc526da], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\conf, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\blue, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\green, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\orange, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.InstallBrain.A, C:\WINDOWS\system32\WNLT\Installation, Quarantined, [3f0ab946f486f0468bb4483f19e9f60a], PUP.Optional.Iminent.A, C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\mt_ffx\IminentToolbar, Quarantined, [dd6c6996c7b386b052e5daaeb74bad53], PUP.Optional.Iminent.A, C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\mt_ffx\IminentToolbar\iminent, Quarantined, [dd6c6996c7b386b052e5daaeb74bad53], PUP.Optional.Iminent.A, C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\mt_ffx\IminentToolbar\iminent\1.8.28.3, Quarantined, [dd6c6996c7b386b052e5daaeb74bad53], PUP.Optional.Iminent.A, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\IminentToolbar, Quarantined, [b198946b7208ab8b45190e7a877b07f9], PUP.Optional.Iminent.A, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\IminentToolbar\iminent, Quarantined, [b198946b7208ab8b45190e7a877b07f9], Files: 233 PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgAdaptersProxy.dll, Delete-on-Reboot, [ba8f31ce14667cbac4b3b899af55c13f], PUP.Optional.Iminent, C:\Programme\Gemeinsame Dateien\Umbrella\Umbrella.exe, Delete-on-Reboot, [e8614eb1ccae4de9a31322273dc418e8], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\SweetIM.exe, Delete-on-Reboot, [8bbee916a8d2999dd3a4b998e02401ff], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgUpdateSupport.dll, Delete-on-Reboot, [381114ebdc9ef83e0f68ef628e768977], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgsimcommon.dll, Delete-on-Reboot, [83c69a655a201224afc8034e0df7ae52], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgcommon.dll, Delete-on-Reboot, [be8b7f80601ad95d5423430e10f435cb], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgcommunication.dll, Delete-on-Reboot, [3811c738304a85b1fe79163bcc389c64], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mghooking.dll, Delete-on-Reboot, [10396d92f5859c9ae88fda77c4400ff1], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgxml_wrapper.dll, Delete-on-Reboot, [cb7e69961565c57187f0a9a8887c36ca], PUP.Optional.SweetIM, C:\Programme\SweetIM\Messenger\mgconfig.dll, Delete-on-Reboot, [4009d22db1c9d75fc7b0e96841c3d62a], PUP.Optional.SweetIM, C:\Programme\SweetIM\Communicator\SweetPacksUpdateManager.exe, Delete-on-Reboot, [1e2b49b6cdad56e0235430215aaa3dc3], PUP.Optional.SweetIM, C:\Programme\SweetIM\Communicator\mgcommon.dll, Delete-on-Reboot, [28214fb0cdadf73f56211e33e71d20e0], PUP.Optional.SweetIM, C:\Programme\SweetIM\Communicator\mgxml_wrapper.dll, Delete-on-Reboot, [5ced69965a2066d03e3928290ff58779], PUP.Optional.SweetIM, C:\Programme\SweetIM\Communicator\mgcommunication.dll, Delete-on-Reboot, [8ebbdb24a1d989ad1a5d96bb5ca849b7], PUP.Optional.SweetIM, C:\Programme\SweetIM\Communicator\mgsimcommon.dll, Delete-on-Reboot, [4bfe8d724c2e55e1eb8c331eec18f907], PUP.Optional.Iminent, C:\Programme\IminentToolbar\1.8.28.3\bh\iminent.dll, Quarantined, [e960f20d3941989e0966542f778902fe], PUP.Optional.SweetPacks, C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll, Quarantined, [ea5ffa05ceac72c4869ab1a016ee33cd], PUP.Optional.Iminent.A, C:\Programme\IminentToolbar\1.8.28.3\iminentTlbr.dll, Quarantined, [f05938c7720838fe568a95deca38cf31], PUP.Optional.Iminent.A, C:\Programme\IMinent Toolbar\tbcore3.dll, Quarantined, [4207cb3436445dd9e58a87ec8a78e41c], PUP.Optional.Iminent.A, C:\Programme\Iminent\Minibar.InternetExplorer.BHOx86.dll, Quarantined, [ce7b3ac51e5ce05682ee2d46ab57a45c], Trojan.Agent.MDM, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\17E.exe.vir, Quarantined, [e46507f8502a181ea5a48fd7847ded13], Trojan.Agent, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\1D0.exe.vir, Quarantined, [40093fc07703b185d016681620e110f0], Worm.Autorun, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\1D6.exe.vir, Quarantined, [8abfb6491b5f0c2a56fa1f5cf20f6a96], Trojan.Ransom.ED, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\45.exe.vir, Quarantined, [4cfd29d6d2a88aac9cab7af2ee135ca4], Trojan.Ransom.DF, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\46.exe.vir, Quarantined, [f0598b74d3a780b646a894d9f11052ae], Trojan.Ransom.ED, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\4F.exe.vir, Quarantined, [97b2e61984f6e155ec5b2b41867bbf41], Trojan.Agent, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\76.exe.vir, Quarantined, [7bce6f901961b97dcb757d3eb050f20e], Trojan.Agent, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\7A.exe.vir, Quarantined, [0841827d780253e371cf8f2cca3639c7], Trojan.Agent, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\82.exe.vir, Quarantined, [8abfd42bd3a70a2c62de912a9c6420e0], Spyware.Password, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\8A.exe.vir, Quarantined, [430632cd631769cdd9925bede41d09f7], Trojan.Agent, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\8D.exe.vir, Quarantined, [014805fad6a4f442013feccfcb35e31d], Trojan.Agent, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\8F.exe.vir, Quarantined, [eb5e1ce3106a2511320e19a2d32d07f9], Trojan.Agent, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\93.exe.vir, Quarantined, [49009c635c1ef73f7ac6a01b867a956b], Trojan.Agent, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\95.exe.vir, Quarantined, [f45504fbc4b6ba7c261a6853db259070], Trojan.Agent, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\97.exe.vir, Quarantined, [a5a4807f0971f640cc740facac5425db], Worm.Autorun, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\98.exe.vir, Quarantined, [ff4a6798daa0ea4c66ea3f3c0bf65aa6], Worm.Autorun, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\9B.exe.vir, Quarantined, [3118ef109ae0ca6cfc541962c140b848], Trojan.Ransom.DF, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\A0.exe.vir, Quarantined, [0e3b20df1e5cf145dd11a1ccd42dde22], Trojan.Agent, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\AB.exe.vir, Quarantined, [90b9cd32a1d9af8797a9299267997b85], Trojan.Ransom.ED, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\adobereader.exe.vir, Quarantined, [da6faa55e298db5bd3761e4e54adf20e], Trojan.Agent, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\AF.exe.vir, Quarantined, [64e5aa552e4cee48df61fbc030d0bb45], Trojan.Agent, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\B7.exe.vir, Quarantined, [a6a39c6386f402349ba50eada55b5da3], Backdoor.Bot, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\C2.exe.vir, Quarantined, [f6532ad5cbafd264c8d5d67b54ad32ce], Trojan.Agent, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\7D.exe.vir, Quarantined, [75d4ff003149d95d013faf0cc838db25], Trojan.Zbot.CXgen, C:\adobe.exe.vir, Quarantined, [67e209f619617eb8de80cf7d50b1718f], Trojan.Agent.ED, C:\googles.exe.vir, Quarantined, [3d0cc93642383cfa925f185129d8fd03], Trojan.Ransom.ED, C:\winupd.exe.vir, Quarantined, [79d0ee11fb7f68ce0e3913591de4b848], PUP.Optional.PCPerformer.A, C:\WINDOWS\system32\roboot.exe, Quarantined, [4405be41b6c48fa7a908244abc4416ea], Trojan.Inject, C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\google546595.exe.vir, Quarantined, [cb7e6c93a5d51a1c4ac8073635ccd729], Spyware.Zbot, C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\bhlhmvmovjatdbs.exe.vir, Quarantined, [b990fe01f6846fc7ce5cfc9fd928a45c], Trojan.FakeMS, C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\BINTYEJS.exe.vir, Quarantined, [b0994fb085f591a570f774c68978669a], Trojan.FakeMS, C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\PVCHOTYD.exe.vir, Quarantined, [4ffac33cb1c912246700fa4006fb8779], Trojan.FakeMS, C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\QVBHMRXC.exe.vir, Quarantined, [b89116e99bdff2445215d06a23deb749], Backdoor.Bot, C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\ocynvouovwsrtqd.exe.vir, Quarantined, [61e84cb3e496cc6af33ef2a9ac558a76], Trojan.FakeMS, C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\google047463.exe.vir, Quarantined, [57f2a55a3f3b2016f572b7831be6b14f], Trojan.Inject, C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\google288966.exe.vir, Quarantined, [3f0ad52afc7ee353769c48f5d32e22de], Trojan.FakeMS, C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\google318262.exe.vir, Quarantined, [e7628d72d3a7df57511694a6827fa759], Trojan.FakeMS, C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\google560900.exe.vir, Quarantined, [fe4b28d7e595c670ec7b3604b44ddd23], Trojan.FakeMS, C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\google787653.exe.vir, Quarantined, [6ddc29d697e38da98dda65d52cd5d12f], Trojan.Inject, C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\google801918.exe.vir, Quarantined, [2425c6399ae0fc3aac6673ca25dcca36], Trojan.FakeMS, C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\google945629.exe.vir, Quarantined, [7ecb906f01793cfa9acdc971b051718f], Trojan.Ransom.ED, C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\google_41843.exe.vir, Quarantined, [282106f9ed8d39fd07404923956c48b8], Trojan.Ransom.ED, C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\google_58405.exe.vir, Quarantined, [3d0c5da27bff81b500473933b34eae52], Backdoor.Bot, C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\sungupzfxmwbhar.exe.vir, Quarantined, [8cbd51ae7ffb71c5da5727748180b44c], Trojan.FakeMS, C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\AFLQWBGL.exe.vir, Quarantined, [98b11ae508721323f0770238966b26da], Trojan.Ransom.ED, C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\derp_84364.exe.vir, Quarantined, [18319a651862f244f2551359649d30d0], Trojan.Ransom.ED, C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\derp_84747.exe.vir, Quarantined, [e26747b883f7d95df84f5715d031837d], Trojan.Inject, C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\wykiotngvxmvknh.exe.vir, Quarantined, [76d38877e397df571013eb54b0512ad6], Trojan.Ransom.ED, C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\derp_15406.exe.vir, Quarantined, [52f74ab5a2d8e254e1661f4d847d0bf5], Trojan.Ransom.ED, C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\derp_18341.exe.vir, Quarantined, [da6f87788befde58182f511bf01140c0], Trojan.Ransom.ED, C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\derp_37305.exe.vir, Quarantined, [67e2d22d5327dc5ac7803f2d18e9fe02], PUP.Optional.Yontoo.A, C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\YontooSetup-S.exe, Quarantined, [a7a2d22d1466c670ebf937370cf40ff1], PUP.Optional.SweetIM, C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\2827278562\chromeupdaterfull.exe, Quarantined, [cd7cb44b92e875c180f7e36ebd477c84], PUP.Optional.SweetIM, C:\Dokumente und Einstellungen\Praktikant\Lokale Einstellungen\Temp\mgsqlite3.7z, Quarantined, [3613e9165327d561fd7ad57c1fe55ca4], PUP.Optional.SweetIM, C:\Dokumente und Einstellungen\Praktikant\Lokale Einstellungen\Temp\mgsqlite3.dll, Quarantined, [6fda1ee1d6a4d462d6a1c78aac5851af], Adware.InstallBrain, C:\Dokumente und Einstellungen\Praktikant\Lokale Einstellungen\Temp\pcp_bandoo_bundle.exe, Quarantined, [45040cf3f3873df986427a4f6997a858], PUP.Optional.SweetIM, C:\Dokumente und Einstellungen\Praktikant\Lokale Einstellungen\Temp\Shortcut_bundlesweetimsetup.exe, Quarantined, [1c2d916eb2c845f1dc9b7bd68b79b44c], PUP.Optional.SweetIM, C:\Dokumente und Einstellungen\Praktikant\Lokale Einstellungen\Temp\Shortcut_sweetimsetup.exe, Quarantined, [1633da255723d95d2b4c9db4bd4756aa], PUP.Optional.SweetIM, C:\Dokumente und Einstellungen\Praktikant\Lokale Einstellungen\Temp\OfferID4\simupdater.exe, Quarantined, [b297b34c3a40072f393eed6449bb18e8], PUP.Optional.SweetIM, C:\Dokumente und Einstellungen\Praktikant\Lokale Einstellungen\Temp\OfferID5\simboapp.exe, Quarantined, [c782b44bfc7e56e0f97e40110df79a66], PUP.Optional.SweetIM, C:\Dokumente und Einstellungen\Praktikant\Lokale Einstellungen\Temp\OfferID9999\bundlesweetimsetup.exe, Quarantined, [f950f8075c1e60d6cdaab79a5ca8e21e], Trojan.Ransom.ED, C:\WINDOWS\Temp\adobe.exe, Quarantined, [90b9827d7a004cea51f6cca06d94cb35], Trojan.Inject.ED, C:\WINDOWS\Temp\apple.exe.vir, Quarantined, [e1681ae5512965d1bcbb5d14847d8080], Spyware.Zbot, C:\WINDOWS\Temp\incore.exe.vir, Quarantined, [98b126d9047637ffcd5d3c5f21e00df3], Trojan.Ransom.ED, C:\WINDOWS\Temp\window222ee525s.exe.vir, Quarantined, [262306f99ae080b6440545279f629c64], Trojan.Inject.ED, C:\WINDOWS\Temp\gtry.exe.vir, Quarantined, [f3561ce3fc7eda5c91e69fd227dad030], Backdoor.Bot, C:\WINDOWS\sms.exe.vir, Quarantined, [b990f10e37430e28cf628a11ff02b24e], PUP.Optional.SweetIM, C:\WINDOWS\Installer\20685.msi, Quarantined, [b990f609ceac181ea8cf262b2adaaf51], PUP.Optional.SweetIM, C:\WINDOWS\Installer\20698.msi, Quarantined, [0643817ebac0e6502d4a0f42d72dc13f], PUP.Optional.SweetIM, C:\WINDOWS\Installer\2884913.msi, Quarantined, [0742f40b06746acc83f484cd61a3c53b], Adware.InstallBrain, C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\IBUpdaterService\repository.xml, Quarantined, [6bde708fc4b6d1659ae9d6aedc2758a8], PUP.Optional.Iminent.A, C:\Programme\Iminent\SearchTheWeb.xml, Quarantined, [9aaf1ce367130f2728ec792f00033bc5], PUP.Optional.Iminent.A, C:\Programme\Iminent\Iminent.WebBooster.InternetExplorer.dll, Quarantined, [9aaf1ce367130f2728ec792f00033bc5], PUP.Optional.Iminent.A, C:\Programme\Iminent\StartWeb.xml, Quarantined, [9aaf1ce367130f2728ec792f00033bc5], PUP.Optional.Iminent.A, C:\Programme\Iminent\USearch.xml, Quarantined, [9aaf1ce367130f2728ec792f00033bc5], PUP.Optional.Iminent.A, C:\Programme\Iminent\WinkHandler.exe, Quarantined, [9aaf1ce367130f2728ec792f00033bc5], PUP.Optional.Iminent.A, C:\Programme\Iminent\inst\main.ico, Quarantined, [9aaf1ce367130f2728ec792f00033bc5], PUP.Optional.Iminent.A, C:\Programme\Iminent\inst\SearchTheWeb.ico, Quarantined, [9aaf1ce367130f2728ec792f00033bc5], PUP.Optional.Iminent.A, C:\Programme\Iminent\inst\Universely.ico, Quarantined, [9aaf1ce367130f2728ec792f00033bc5], PUP.Optional.Iminent.A, C:\Programme\Iminent\inst\Bootstrapper\CustomActionsIminent.dll, Quarantined, [9aaf1ce367130f2728ec792f00033bc5], PUP.Optional.Iminent.A, C:\Programme\Iminent\inst\Bootstrapper\MetroConfig.json, Quarantined, [9aaf1ce367130f2728ec792f00033bc5], PUP.Optional.Iminent.A, C:\Programme\Iminent\inst\Bootstrapper\uninstall.exe, Quarantined, [9aaf1ce367130f2728ec792f00033bc5], PUP.Optional.Iminent.A, C:\Programme\Mozilla Firefox\defaults\pref\all-iminent.js, Quarantined, [00494cb3403a989ee63cc6e239caf709], PUP.Optional.Iminent.A, C:\Programme\IMinent Toolbar\IMinent_Toolbar.crc, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, C:\Programme\IMinent Toolbar\arrow_refresh.png, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, C:\Programme\IMinent Toolbar\basis.xml, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, C:\Programme\IMinent Toolbar\cog.png, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, C:\Programme\IMinent Toolbar\computer_delete.png, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, C:\Programme\IMinent Toolbar\icons.bmp, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, C:\Programme\IMinent Toolbar\IMinent_Toolbar.dll, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, C:\Programme\IMinent Toolbar\info.txt, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, C:\Programme\IMinent Toolbar\TbCommonUtils.dll, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, C:\Programme\IMinent Toolbar\tbhelper.dll, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, C:\Programme\IMinent Toolbar\TbHelper2.exe, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, C:\Programme\IMinent Toolbar\uninstall.exe, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, C:\Programme\IMinent Toolbar\update.exe, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Iminent.A, C:\Programme\IMinent Toolbar\version.txt, Quarantined, [b396cb347604a69050e3d2d7a2616898], PUP.Optional.Searchqu.A, C:\Dokumente und Einstellungen\Praktikant\Anwendungsdaten\Mozilla\Extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}, Quarantined, [1138e6195b1f3204b3886645c53eb54b], PUP.Optional.Datamngr.A, C:\Programme\Searchcore Toolbar\Datamngr\datamngrUI.exe, Delete-on-Reboot, [0f3a2ad57ffba88e8f4db0f7f70c0bf5], Adware.InstallBrain, C:\WINDOWS\system32\dmwu.exe, Delete-on-Reboot, [400942bd374387af285cb6ce46bd50b0], PUP.Optional.Iminent.A, C:\Dokumente und Einstellungen\ds\Anwendungsdaten\Iminent\Mediator\Datas\globalcache.dat, Quarantined, [fb4e9f6096e4f83efa5aef97fd05817f], PUP.Optional.Iminent.A, C:\Dokumente und Einstellungen\ds\Anwendungsdaten\Iminent\Mediator\Datas\user.dat, Quarantined, [fb4e9f6096e4f83efa5aef97fd05817f], PUP.Optional.Iminent.A, C:\Dokumente und Einstellungen\rm\Anwendungsdaten\Iminent\Mediator\Datas\globalcache.dat, Quarantined, [54f5ce31f783c96db89caadc23df5aa6], PUP.Optional.Iminent.A, C:\Dokumente und Einstellungen\rm\Anwendungsdaten\Iminent\Mediator\Datas\user.dat, Quarantined, [54f5ce31f783c96db89caadc23df5aa6], PUP.Optional.Iminent.A, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\Toolbar4\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}\arrow_refresh.png, Quarantined, [61e801fed0aa072f6103394dbd45d52b], PUP.Optional.Iminent.A, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\Toolbar4\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}\basis.xml, Quarantined, [61e801fed0aa072f6103394dbd45d52b], PUP.Optional.Iminent.A, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\Toolbar4\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}\cog.png, Quarantined, [61e801fed0aa072f6103394dbd45d52b], PUP.Optional.Iminent.A, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\Toolbar4\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}\computer_delete.png, Quarantined, [61e801fed0aa072f6103394dbd45d52b], PUP.Optional.Iminent.A, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\Toolbar4\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}\icons.bmp, Quarantined, [61e801fed0aa072f6103394dbd45d52b], PUP.Optional.Iminent.A, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\Toolbar4\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}\IMinent_Toolbar.crc, Quarantined, [61e801fed0aa072f6103394dbd45d52b], PUP.Optional.Iminent.A, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\Toolbar4\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}\info.txt, Quarantined, [61e801fed0aa072f6103394dbd45d52b], PUP.Optional.Iminent.A, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\Toolbar4\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}\TbHelper2.exe, Quarantined, [61e801fed0aa072f6103394dbd45d52b], PUP.Optional.Iminent.A, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\Toolbar4\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}\uninstall.exe, Quarantined, [61e801fed0aa072f6103394dbd45d52b], PUP.Optional.Iminent.A, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\Toolbar4\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}\update.exe, Quarantined, [61e801fed0aa072f6103394dbd45d52b], PUP.Optional.Iminent.A, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\Toolbar4\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}\version.txt, Quarantined, [61e801fed0aa072f6103394dbd45d52b], PUP.Optional.Iminent.A, C:\Programme\IminentToolbar\1.8.28.3\iminentApp.dll, Quarantined, [05440af56515ea4c5a282066b9493fc1], PUP.Optional.Iminent.A, C:\Programme\IminentToolbar\1.8.28.3\iminentEng.dll, Quarantined, [05440af56515ea4c5a282066b9493fc1], PUP.Optional.Iminent.A, C:\Programme\IminentToolbar\1.8.28.3\iminentsrv.exe, Quarantined, [05440af56515ea4c5a282066b9493fc1], PUP.Optional.Iminent.A, C:\Programme\IminentToolbar\1.8.28.3\uninstall.exe, Quarantined, [05440af56515ea4c5a282066b9493fc1], PUP.Optional.Iminent.A, C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\Iminent\Log\IMinentToolbar.msi.log, Quarantined, [ce7bbc43e298d066f3b1c2c43dc526da], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\ClearHist.exe, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\default.xml, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\mgcommon.dll, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\mgconfig.dll, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\mgHelper.dll, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\mghooking.dll, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\mglogger.dll, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\mgsimcommon.dll, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\mgxml_wrapper.dll, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\conf\logger.xml, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT\msvcm90.dll, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT\msvcp90.dll, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT\msvcr90.dll, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\eye_icon.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\logo_32x32.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\about.html, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\affid.dat, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\basis.xml, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\bing.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\clear-history.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\content-notifier-anim-over.gif, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\content-notifier-anim.gif, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\content-notifier.js, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\dating.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\dictionary.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\eye_icon_over.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\e_cards.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\find.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\free_stuff.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\games.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\glitter.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\google.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\help.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\highlight.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\locales.xml, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\logo_16x16.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\logo_21x18.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\logo_about.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\MenuExt.html, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\more-search-providers.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\music.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\news.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\options.html, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\photos.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\search-current-site.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\shopping.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\SmileySmile.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\SmileyWink.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\sweetim_text.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\toolbar.xml, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\video.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\web-search.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\web-toolbar.js, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\yahoo.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_bing.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_current.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_dictionary.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_google.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_hover.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_left.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_photo.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_video.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_web.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_yahoo.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\green\search_button.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_bing.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_current.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_dictionary.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_google.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_hover.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_left.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_photo.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_video.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_web.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_yahoo.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_bing.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_current.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_dictionary.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_google.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_hover.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_left.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_photo.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_video.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_web.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.SweetIM.A, C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_yahoo.png, Quarantined, [83c631cede9c8da950b74d3a32d013ed], PUP.Optional.InstallBrain.A, C:\WINDOWS\system32\WNLT\Installation\SKSetup.exe, Quarantined, [3f0ab946f486f0468bb4483f19e9f60a], PUP.Optional.InstallBrain.A, C:\WINDOWS\system32\WNLT\Installation\uninstaller.exe, Quarantined, [3f0ab946f486f0468bb4483f19e9f60a], Heuristics.Reserved.Word.Exploit, C:\Dokumente und Einstellungen\kp\Anwendungsdaten\lsass.exe.vir, Quarantined, [f85143bc0575f145a276f04037cdee12], Physical Sectors: 0 (No malicious items detected) (end) |
|
05.06.2014, 17:25
| #2 |
| /// the machine /// TB-Ausbilder    | Pop-Ups öffnen automatisch - adserv hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
06.06.2014, 09:10
| #3 |
| | Pop-Ups öffnen automatisch - adserv Hallo Schrauber,
__________________erstmal danke für deine Hilfe!! Hier die beiden geforderten Datein: FRST.txt: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:02-06-2014
Ran by kp (administrator) on SYRAH on 06-06-2014 09:57:15
Running from E:\
Platform: Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Apple Inc.) C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Programme\Bonjour\mDNSResponder.exe
(FRISK Software International) C:\Programme\FRISK Software\F-PROT Antivirus for Windows\FPAVServer.exe
(Oracle Corporation) C:\Programme\Java\jre7\bin\jqs.exe
() C:\Programme\NAVISPORT Training Tool\MySQL\bin\mysqld-nt.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe
(Skype Technologies S.A.) C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
(VIA Technologies, Inc.) C:\Programme\VIA\VIAudioi\HDADeck\HDeck.exe
() C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe
(Apple Inc.) C:\Programme\iTunes\iTunesHelper.exe
(Ask) C:\Programme\Ask.com\Updater\Updater.exe
(Brother Industries, Ltd.) C:\Programme\Browny02\Brother\BrStMonW.exe
(FRISK Software International) C:\Programme\FRISK Software\F-PROT Antivirus for Windows\FProtTray.exe
(Geek Software GmbH) C:\Programme\PDF24\pdf24.exe
(Brother Industries, Ltd.) C:\Programme\ControlCenter4\BrCtrlCntr.exe
(Adobe Systems Incorporated) C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe
(Oracle Corporation) C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe
(Brother Industries, Ltd.) C:\Programme\Browny02\BrYNSvc.exe
(Skype Technologies S.A.) C:\Programme\Skype\Phone\Skype.exe
(Logitech Inc.) C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
(Logitech, Inc.) C:\Programme\Logitech\SetPoint\SetPoint.exe
(Logitech, Inc.) C:\Programme\Gemeinsame Dateien\Logishrd\KHAL2\KHALMNPR.exe
(Apple Inc.) C:\Programme\iPod\bin\iPodService.exe
(Brother Industries, Ltd.) C:\Programme\ControlCenter4\BrCcUxSys.exe
(Oracle Corporation) C:\Programme\Gemeinsame Dateien\Java\Java Update\jucheck.exe
(Mozilla Corporation) C:\Dokumente und Einstellungen\Praktikant\Lokale Einstellungen\Anwendungsdaten\Mozilla Thunderbird\thunderbird.exe
(Mozilla Corporation) C:\Programme\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Programme\Mozilla Firefox\plugin-container.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [HDAudDeck] => C:\Programme\VIA\VIAudioi\HDADeck\HDeck.exe [33587200 2009-01-21] (VIA Technologies, Inc.)
HKLM\...\Run: [Kernel and Hardware Abstraction Layer] => C:\WINDOWS\KHALMNPR.EXE [76304 2008-02-29] (Logitech, Inc.)
HKLM\...\Run: [NvCplDaemon] => C:\WINDOWS\system32\NvCpl.dll [13684736 2009-03-27] (NVIDIA Corporation)
HKLM\...\Run: [nwiz] => nwiz.exe /install
HKLM\...\Run: [NvMediaCenter] => C:\WINDOWS\system32\NvMcTray.dll [86016 2009-03-27] (NVIDIA Corporation)
HKLM\...\Run: [Samsung PanelMgr] => C:\WINDOWS\Samsung\PanelMgr\ssmmgr.exe [606208 2009-12-09] ()
HKLM\...\Run: [QuickTime Task] => C:\Programme\QuickTime\qttask.exe [421888 2010-03-17] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Programme\iTunes\iTunesHelper.exe [142120 2010-03-26] (Apple Inc.)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [ApnUpdater] => C:\Programme\Ask.com\Updater\Updater.exe [395144 2011-05-17] (Ask)
HKLM\...\Run: [ControlCenter4] => C:\Programme\ControlCenter4\BrCcBoot.exe [139264 2011-04-20] (Brother Industries, Ltd.)
HKLM\...\Run: [BrStsMon00] => C:\Programme\Browny02\Brother\BrStMonW.exe [2621440 2010-06-10] (Brother Industries, Ltd.)
HKLM\...\Run: [F-PROT Antivirus Tray application] => C:\Programme\FRISK Software\F-PROT Antivirus for Windows\FProtTray.exe [1674016 2010-11-03] (FRISK Software International)
HKLM\...\Run: [PDFPrint] => C:\Programme\PDF24\pdf24.exe [162856 2013-03-20] (Geek Software GmbH)
HKLM\...\Run: [Adobe Reader Update] => C:\Dokumente und Einstellungen\kp\Anwendungsdaten\Adobe\adbreader.exe
HKLM\...\Run: [Adobe ARM] => C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [Xqitfbrciwktizmo.exe] => "C:\Dokumente und Einstellungen\kp\Anwendungsdaten\Xqitfbrciwktizmo.exe"
HKLM\...\Run: [Adobe Reader XI] => C:\DOKUME~1\kp\LOKALE~1\Temp\AcroRd32.exe <===== ATTENTION
HKLM\...\Run: [SunJavaUpdateSched] => C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [Adobe Driver Update] => C:\Dokumente und Einstellungen\kp\Anwendungsdaten\adobereade.exe
HKLM\...\Run: [Pneuqcckhcncjkwi.exe] => "C:\Dokumente und Einstellungen\kp\Anwendungsdaten\Pneuqcckhcncjkwi.exe"
Winlogon\Notify\LBTWlgn: c:\programme\gemeinsame dateien\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-790525478-1606980848-725345543-1008\...\Run: [Skype] => C:\Programme\Skype\Phone\Skype.exe [20684656 2013-07-25] (Skype Technologies S.A.)
HKU\S-1-5-21-790525478-1606980848-725345543-1008\...\Run: [Adobe Reader Update] => C:\Dokumente und Einstellungen\kp\Anwendungsdaten\Adobe\adbreader.exe
HKU\S-1-5-21-790525478-1606980848-725345543-1008\...\Run: [Sinunm] => C:\Dokumente und Einstellungen\kp\Anwendungsdaten\Sinunm.exe
HKU\S-1-5-21-790525478-1606980848-725345543-1008\...\Run: [Xqitfbrciwktizmo.exe] => "C:\Dokumente und Einstellungen\kp\Anwendungsdaten\Xqitfbrciwktizmo.exe"
HKU\S-1-5-21-790525478-1606980848-725345543-1008\...\Run: [Adobe Reader XI] => C:\DOKUME~1\kp\LOKALE~1\Temp\AcroRd32.exe <===== ATTENTION
HKU\S-1-5-21-790525478-1606980848-725345543-1008\...\Run: [Adobe Driver Update] => C:\Dokumente und Einstellungen\kp\Anwendungsdaten\adobereade.exe
HKU\S-1-5-21-790525478-1606980848-725345543-1008\...\Run: [Pneuqcckhcncjkwi.exe] => "C:\Dokumente und Einstellungen\kp\Anwendungsdaten\Pneuqcckhcncjkwi.exe"
AppInit_DLLs: C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll => C:\Programme\Searchcore Toolbar\Datamngr\datamngr.dll [1234880 2012-03-04] (Discordia, LTD)
AppInit_DLLs: C:\PROGRA~1\SEARCH~1\Datamngr\IEBHO.dll => C:\Programme\Searchcore Toolbar\Datamngr\IEBHO.dll [1233816 2012-03-04] (Discordia, LTD)
Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Logitech Desktop Messenger.lnk
ShortcutTarget: Logitech Desktop Messenger.lnk -> C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe (Logitech Inc.)
Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Logitech SetPoint.lnk
ShortcutTarget: Logitech SetPoint.lnk -> C:\Programme\Logitech\SetPoint\SetPoint.exe (Logitech, Inc.)
Startup: C:\Dokumente und Einstellungen\Kaeter\Startmenü\Programme\Autostart\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Programme\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Dokumente und Einstellungen\Kaeter\Startmenü\Programme\Autostart\OpenOffice.org 3.1.lnk
ShortcutTarget: OpenOffice.org 3.1.lnk -> C:\Programme\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Dokumente und Einstellungen\Praktikant\Startmenü\Programme\Autostart\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Programme\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Dokumente und Einstellungen\sszuper\Startmenü\Programme\Autostart\OpenOffice.org 3.1.lnk
ShortcutTarget: OpenOffice.org 3.1.lnk -> C:\Programme\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF4B78CEA9E80CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://home.sweetim.com/?st=1&crg=3.1010000&barid={C76E0AF5-2659-4ED8-902A-4EE450EA8223}
URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.
SearchScopes: HKLM - DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&crg=3.1010000&st=1&barid={C76E0AF5-2659-4ED8-902A-4EE450EA8223}&q={searchTerms}&barid={C76E0AF5-2659-4ED8-902A-4EE450EA8223}
SearchScopes: HKLM - {BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} URL = hxxp://search.iminent.com/?appId=04E173F5-6422-4EB0-A714-731A3F112E2F&ref=toolbox&q={searchTerms}
SearchScopes: HKLM - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&crg=3.1010000&st=1&barid={C76E0AF5-2659-4ED8-902A-4EE450EA8223}&q={searchTerms}&barid={C76E0AF5-2659-4ED8-902A-4EE450EA8223}
SearchScopes: HKCU - DefaultScope {BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} URL =
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {3476EF82-699F-42A8-9CD3-8AB3C4969442} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL =
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: DataMngr - {7DA17D5A-5718-4130-A605-FC316C827836} - C:\Programme\Searchcore Toolbar\Datamngr\BrowserConnection.dll (Discordia , LTD)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Searchcore Toolbar - {af6ac4f2-9825-4fb6-a600-92bc5361f209} - C:\Programme\Searchcore Toolbar\Datamngr\ToolBar\searchcoredtx.dll ()
BHO: Foxit PDF Creator Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: Yontoo - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Programme\Yontoo\YontooIEClient.dll (Yontoo LLC)
Toolbar: HKLM - Foxit PDF Creator Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask)
Toolbar: HKLM - Searchcore Toolbar - {af6ac4f2-9825-4fb6-a600-92bc5361f209} - C:\Programme\Searchcore Toolbar\Datamngr\ToolBar\searchcoredtx.dll ()
Toolbar: HKCU - Foxit PDF Creator Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (Logitech Inc.)
Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 04 C:\Programme\Bonjour\mdnsNSP.dll [152864] (Apple Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.47.30
Tcpip\..\Interfaces\{73ED647B-7ECA-44FF-AEF8-945D5B063EF5}: [NameServer]8.8.8.8,8.8.8.8
FireFox:
========
FF ProfilePath: C:\Dokumente und Einstellungen\kp\Anwendungsdaten\Mozilla\Firefox\Profiles\4gqmpqrh.default-1401958580984
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Programme\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Programme\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Programme\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Programme\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Programme\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Block site - C:\Dokumente und Einstellungen\kp\Anwendungsdaten\Mozilla\Firefox\Profiles\4gqmpqrh.default-1401958580984\Extensions\{dd3d7613-0246-469d-bc65-2a3cc1668adc} [2014-06-05]
FF Extension: Skype Click to Call - C:\Programme\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2011-11-29]
FF Extension: Java Console - C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2012-09-28]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
FF HKLM\...\Firefox\Extensions: [webbooster@iminent.com] - C:\Programme\Iminent\webbooster@iminent.com
========================== Services (Whitelisted) =================
R2 Apple Mobile Device; C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe [144672 2010-03-19] (Apple Inc.)
R2 Bonjour Service; C:\Programme\Bonjour\mDNSResponder.exe [345376 2010-02-12] (Apple Inc.)
R3 BrYNSvc; C:\Programme\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.)
R2 FPAVServer; C:\Programme\FRISK Software\F-PROT Antivirus for Windows\FPAVServer.exe [84136 2011-10-06] (FRISK Software International)
S3 GHAutoDetection1; C:\Programme\NAVISPORT Training Tool\GHAutoDetection.exe [24576 2008-06-20] (SPA Computers (P) Ltd)
S2 gupdate; C:\Programme\Google\Update\GoogleUpdate.exe [116648 2012-04-17] (Google Inc.)
S3 gupdatem; C:\Programme\Google\Update\GoogleUpdate.exe [116648 2012-04-17] (Google Inc.)
R3 iPod Service; C:\Programme\iPod\bin\iPodService.exe [545576 2010-03-26] (Apple Inc.)
R2 JavaQuickStarterService; C:\Programme\Java\jre7\bin\jqs.exe [182696 2013-10-08] (Oracle Corporation)
S3 LBTServ; C:\Programme\Gemeinsame Dateien\Logishrd\Bluetooth\LBTServ.exe [121360 2008-05-02] (Logitech, Inc.)
S3 MozillaMaintenance; C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [119408 2014-05-12] (Mozilla Foundation)
R2 MySQL1; C:\Programme\NAVISPORT Training Tool\MySQL\my2.ini [2278 2008-04-25] ()
S3 odserv; C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE [440696 2011-07-20] (Microsoft Corporation)
S3 ose; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [145184 2006-10-26] (Microsoft Corporation)
S3 Samsung UPD Service2; C:\WINDOWS\system32\SUPDSvc2.exe [129536 2012-04-06] (Samsung Electronics)
R2 Skype C2C Service; C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.)
S2 SkypeUpdate; C:\Programme\Skype\Updater\Updater.exe [162672 2013-07-25] (Skype Technologies)
S3 SM_clp650_FUService; "C:\Programme\Samsung\Samsung CLP-650 Series\SPanel\ssmsrvc /Service [X]
==================== Drivers (Whitelisted) ====================
S1 AmdPPM; C:\WINDOWS\System32\DRIVERS\AmdPPM.sys [33792 2007-04-16] (Advanced Micro Devices)
R1 BIOS; C:\WINDOWS\system32\drivers\BIOS.sys [13696 2005-03-16] (BIOSTAR Group)
R0 FPAV_RTP; C:\WINDOWS\System32\DRIVERS\FStopW.sys [704800 2011-11-11] (FRISK Software International)
R3 monfilt; C:\WINDOWS\System32\drivers\monfilt.sys [1389056 2008-02-14] (Creative Technology Ltd.)
S3 NPF; C:\WINDOWS\System32\drivers\NPF.sys [50704 2014-05-30] (CACE Technologies, Inc.)
R3 NVENETFD; C:\WINDOWS\System32\DRIVERS\NVENETFD.sys [54784 2008-08-01] (NVIDIA Corporation)
R0 nvgts; C:\WINDOWS\System32\DRIVERS\nvgts.sys [145952 2008-08-18] (NVIDIA Corporation)
R3 nvnetbus; C:\WINDOWS\System32\DRIVERS\nvnetbus.sys [22016 2008-08-01] (NVIDIA Corporation)
S3 silabenm; C:\WINDOWS\System32\DRIVERS\silabenm.sys [47176 2012-11-02] (Silicon Laboratories)
S3 silabser; C:\WINDOWS\System32\DRIVERS\silabser.sys [63104 2012-11-02] (Silicon Laboratories)
R3 VIAHdAudAddService; C:\WINDOWS\System32\drivers\viahduaa.sys [1050112 2009-01-11] (VIA Technologies, Inc.)
S4 IntelIde; No ImagePath
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
S2 SSPORT; \??\C:\WINDOWS\system32\Drivers\SSPORT.sys [X]
U1 WS2IFSL;
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-06-06 09:57 - 2014-06-06 09:57 - 00000000 ____D () C:\FRST
2014-06-05 11:40 - 2014-06-05 16:54 - 00110296 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-06-05 11:40 - 2014-06-05 11:40 - 00000000 ____D () C:\Programme\ Malwarebytes Anti-Malware
2014-06-05 11:40 - 2014-06-05 11:40 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\ Malwarebytes Anti-Malware
2014-06-05 11:40 - 2014-06-05 11:40 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
2014-06-05 11:40 - 2014-05-12 07:26 - 00053208 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-06-05 11:40 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-06-05 11:23 - 2014-06-05 11:23 - 00000000 __SHD () C:\Dokumente und Einstellungen\kp\IECompatCache
2014-05-30 12:21 - 2014-06-05 10:51 - 00000828 _____ () C:\WINDOWS\system32\Drivers\etc\hosts.txt
2014-05-30 12:21 - 2014-05-30 12:21 - 00000761 _____ () C:\WINDOWS\system32\Drivers\etc\hosts.sav.txt
2014-05-30 09:59 - 2014-05-30 09:59 - 00281104 _____ (CACE Technologies, Inc.) C:\WINDOWS\system32\wpcap.dll
2014-05-30 09:59 - 2014-05-30 09:59 - 00100880 _____ (CACE Technologies, Inc.) C:\WINDOWS\system32\Packet.dll
2014-05-30 09:59 - 2014-05-30 09:59 - 00050704 _____ (CACE Technologies, Inc.) C:\WINDOWS\system32\Drivers\npf.sys
2014-05-28 15:57 - 2014-05-28 15:57 - 00089600 ___RH (ASUSTek Computer Inc.) C:\Dokumente und Einstellungen\kp\Anwendungsdaten\Pneuqcckhcncjkwi.exe.vir
2014-05-28 10:02 - 2014-05-28 10:16 - 00000267 _____ () C:\Dokumente und Einstellungen\kp\Anwendungsdaten\sgminer.conf
2014-05-21 09:13 - 2014-05-21 09:13 - 00000104 _____ () C:\Dokumente und Einstellungen\kp\Desktop\Internet.lnk
2014-05-20 09:52 - 2014-05-27 15:09 - 00000000 ____D () C:\Dokumente und Einstellungen\kp\Anwendungsdaten\Kernel
2014-05-20 09:52 - 2014-05-27 15:07 - 00000091 _____ () C:\Dokumente und Einstellungen\kp\Anwendungsdaten\msdtca.bat
2014-05-20 09:52 - 2014-05-27 15:01 - 01704448 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Dokumente und Einstellungen\kp\Anwendungsdaten\libeay32.dll
2014-05-20 09:52 - 2014-05-27 15:01 - 01186318 _____ () C:\Dokumente und Einstellungen\kp\Anwendungsdaten\msdtca.exe
2014-05-20 09:52 - 2014-05-27 15:01 - 00626176 _____ (The cURL library, hxxp://curl.haxx.se/) C:\Dokumente und Einstellungen\kp\Anwendungsdaten\libcurl.dll
2014-05-20 09:52 - 2014-05-27 15:01 - 00364544 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Dokumente und Einstellungen\kp\Anwendungsdaten\ssleay32.dll
2014-05-20 09:52 - 2014-05-27 15:01 - 00279955 _____ () C:\Dokumente und Einstellungen\kp\Anwendungsdaten\libidn-11.dll
2014-05-20 09:52 - 2014-05-27 15:01 - 00148760 _____ () C:\Dokumente und Einstellungen\kp\Anwendungsdaten\libpdcurses.dll
2014-05-20 09:52 - 2014-05-27 15:01 - 00119704 _____ (Open Source Software community LGPL) C:\Dokumente und Einstellungen\kp\Anwendungsdaten\pthreadGC2.dll
2014-05-20 09:52 - 2014-05-27 15:01 - 00113166 _____ () C:\Dokumente und Einstellungen\kp\Anwendungsdaten\zlib1.dll
2014-05-20 09:52 - 2014-05-27 15:01 - 00112142 _____ () C:\Dokumente und Einstellungen\kp\Anwendungsdaten\libgcc_s_dw2-1.dll
2014-05-20 09:52 - 2014-05-19 11:06 - 00765952 _____ () C:\Dokumente und Einstellungen\kp\Anwendungsdaten\msdtc.exe.vir
2014-05-20 09:52 - 2014-05-19 10:48 - 00603763 _____ () C:\Dokumente und Einstellungen\kp\Anwendungsdaten\libcurl-4.dll
2014-05-20 09:52 - 2014-05-19 10:48 - 00042496 _____ (Open Source Software community project) C:\Dokumente und Einstellungen\kp\Anwendungsdaten\pthreadGC2-w64.dll
2014-05-20 09:52 - 2014-02-19 14:08 - 00015748 _____ () C:\Dokumente und Einstellungen\kp\Anwendungsdaten\README.md
2014-05-19 16:12 - 2014-05-19 16:12 - 00004176 _____ () C:\Dokumente und Einstellungen\kp\.recently-used.xbel
2014-05-15 18:46 - 2014-05-15 18:46 - 00026407 _____ () C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Anwendungsdaten\recently-used.xbel
2014-05-12 14:31 - 2014-05-12 14:51 - 02070424 _____ () C:\Dokumente und Einstellungen\kp\Desktop\Dokument-2.sla.autosave
2014-05-09 17:43 - 2014-05-09 17:43 - 00011277 _____ () C:\Dokumente und Einstellungen\kp\Desktop\Dokument-2.sla
2014-05-09 17:41 - 2014-05-09 17:41 - 02064664 _____ () C:\Dokumente und Einstellungen\kp\Desktop\Dokument-1.sla
==================== One Month Modified Files and Folders =======
2014-06-06 09:57 - 2014-06-06 09:57 - 00000000 ____D () C:\FRST
2014-06-06 09:57 - 2012-11-19 16:52 - 00000000 ____D () C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp
2014-06-06 09:41 - 2012-10-23 11:29 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-06-06 09:03 - 2012-04-17 18:01 - 00001098 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-06 09:01 - 2011-07-29 12:53 - 00000228 _____ () C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job
2014-06-06 05:03 - 2009-11-03 19:26 - 00032642 _____ () C:\WINDOWS\SchedLgU.Txt
2014-06-05 16:54 - 2014-06-05 11:40 - 00110296 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-06-05 15:03 - 2012-04-17 18:01 - 00001094 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-05 14:33 - 2009-11-03 19:19 - 01654216 _____ () C:\WINDOWS\WindowsUpdate.log
2014-06-05 14:13 - 2009-11-03 13:03 - 00215715 _____ () C:\WINDOWS\system32\nvapps.xml
2014-06-05 14:12 - 2012-12-05 13:06 - 00000000 ____D () C:\Programme\Gemeinsame Dateien\Umbrella
2014-06-05 14:12 - 2012-05-15 19:36 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2646524$
2014-06-05 14:12 - 2009-11-03 19:26 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-06-05 14:12 - 2009-11-03 19:14 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2014-06-05 14:12 - 2009-11-03 19:14 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2014-06-05 14:11 - 2013-07-01 09:06 - 00000000 ____D () C:\Dokumente und Einstellungen\ds\Anwendungsdaten\Iminent
2014-06-05 14:11 - 2013-07-01 09:02 - 00000000 ____D () C:\Dokumente und Einstellungen\rm\Anwendungsdaten\Iminent
2014-06-05 14:11 - 2013-06-03 10:02 - 00000000 ____D () C:\WINDOWS\system32\WNLT
2014-06-05 14:11 - 2012-12-05 13:07 - 00000000 ____D () C:\Dokumente und Einstellungen\kp\Anwendungsdaten\Toolbar4
2014-06-05 14:11 - 2012-11-19 16:52 - 00000190 ___SH () C:\Dokumente und Einstellungen\kp\ntuser.ini
2014-06-05 14:11 - 2012-06-21 21:18 - 00000000 ____D () C:\Programme\SweetIM
2014-06-05 14:11 - 2010-03-24 19:52 - 00000000 ____D () C:\Dokumente und Einstellungen\Praktikant\Lokale Einstellungen\Temp
2014-06-05 14:11 - 2009-11-03 19:12 - 00000000 ___RD () C:\Programme
2014-06-05 11:40 - 2014-06-05 11:40 - 00000000 ____D () C:\Programme\ Malwarebytes Anti-Malware
2014-06-05 11:40 - 2014-06-05 11:40 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\ Malwarebytes Anti-Malware
2014-06-05 11:40 - 2014-06-05 11:40 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
2014-06-05 11:40 - 2009-11-03 19:11 - 00000000 ___RD () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme
2014-06-05 11:36 - 2009-11-03 19:09 - 00904330 _____ () C:\WINDOWS\setupapi.log
2014-06-05 11:23 - 2014-06-05 11:23 - 00000000 __SHD () C:\Dokumente und Einstellungen\kp\IECompatCache
2014-06-05 11:23 - 2012-11-19 18:07 - 00000000 ____D () C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Anwendungsdaten\AskToolbar
2014-06-05 11:23 - 2012-11-19 16:52 - 00000000 ____D () C:\Dokumente und Einstellungen\kp
2014-06-05 10:51 - 2014-05-30 12:21 - 00000828 _____ () C:\WINDOWS\system32\Drivers\etc\hosts.txt
2014-06-05 10:16 - 2013-03-15 17:08 - 00000000 ____D () C:\Dokumente und Einstellungen\kp\Desktop\ks
2014-06-04 17:30 - 2014-02-13 12:09 - 00000000 ____D () C:\Dokumente und Einstellungen\kp\Anwendungsdaten\x86
2014-06-04 10:02 - 2004-08-04 14:00 - 00013646 _____ () C:\WINDOWS\system32\wpa.dbl
2014-05-30 17:12 - 2012-11-27 14:27 - 00000664 _____ () C:\WINDOWS\system32\d3d9caps.dat
2014-05-30 12:21 - 2014-05-30 12:21 - 00000761 _____ () C:\WINDOWS\system32\Drivers\etc\hosts.sav.txt
2014-05-30 10:21 - 2013-07-01 09:16 - 00000334 _____ () C:\WINDOWS\BRCALIB.INI
2014-05-30 09:59 - 2014-05-30 09:59 - 00281104 _____ (CACE Technologies, Inc.) C:\WINDOWS\system32\wpcap.dll
2014-05-30 09:59 - 2014-05-30 09:59 - 00100880 _____ (CACE Technologies, Inc.) C:\WINDOWS\system32\Packet.dll
2014-05-30 09:59 - 2014-05-30 09:59 - 00050704 _____ (CACE Technologies, Inc.) C:\WINDOWS\system32\Drivers\npf.sys
2014-05-28 15:57 - 2014-05-28 15:57 - 00089600 ___RH (ASUSTek Computer Inc.) C:\Dokumente und Einstellungen\kp\Anwendungsdaten\Pneuqcckhcncjkwi.exe.vir
2014-05-28 10:17 - 2014-02-13 12:09 - 00053248 _____ () C:\Dokumente und Einstellungen\kp\Anwendungsdaten\wrapper.exe
2014-05-28 10:16 - 2014-05-28 10:02 - 00000267 _____ () C:\Dokumente und Einstellungen\kp\Anwendungsdaten\sgminer.conf
2014-05-27 15:09 - 2014-05-20 09:52 - 00000000 ____D () C:\Dokumente und Einstellungen\kp\Anwendungsdaten\Kernel
2014-05-27 15:07 - 2014-05-20 09:52 - 00000091 _____ () C:\Dokumente und Einstellungen\kp\Anwendungsdaten\msdtca.bat
2014-05-27 15:01 - 2014-05-20 09:52 - 01704448 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Dokumente und Einstellungen\kp\Anwendungsdaten\libeay32.dll
2014-05-27 15:01 - 2014-05-20 09:52 - 01186318 _____ () C:\Dokumente und Einstellungen\kp\Anwendungsdaten\msdtca.exe
2014-05-27 15:01 - 2014-05-20 09:52 - 00626176 _____ (The cURL library, hxxp://curl.haxx.se/) C:\Dokumente und Einstellungen\kp\Anwendungsdaten\libcurl.dll
2014-05-27 15:01 - 2014-05-20 09:52 - 00364544 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Dokumente und Einstellungen\kp\Anwendungsdaten\ssleay32.dll
2014-05-27 15:01 - 2014-05-20 09:52 - 00279955 _____ () C:\Dokumente und Einstellungen\kp\Anwendungsdaten\libidn-11.dll
2014-05-27 15:01 - 2014-05-20 09:52 - 00148760 _____ () C:\Dokumente und Einstellungen\kp\Anwendungsdaten\libpdcurses.dll
2014-05-27 15:01 - 2014-05-20 09:52 - 00119704 _____ (Open Source Software community LGPL) C:\Dokumente und Einstellungen\kp\Anwendungsdaten\pthreadGC2.dll
2014-05-27 15:01 - 2014-05-20 09:52 - 00113166 _____ () C:\Dokumente und Einstellungen\kp\Anwendungsdaten\zlib1.dll
2014-05-27 15:01 - 2014-05-20 09:52 - 00112142 _____ () C:\Dokumente und Einstellungen\kp\Anwendungsdaten\libgcc_s_dw2-1.dll
2014-05-21 09:13 - 2014-05-21 09:13 - 00000104 _____ () C:\Dokumente und Einstellungen\kp\Desktop\Internet.lnk
2014-05-20 15:31 - 2012-06-21 21:23 - 00000000 ____D () C:\Programme\ScreenshotCaptor
2014-05-19 16:12 - 2014-05-19 16:12 - 00004176 _____ () C:\Dokumente und Einstellungen\kp\.recently-used.xbel
2014-05-19 11:06 - 2014-05-20 09:52 - 00765952 _____ () C:\Dokumente und Einstellungen\kp\Anwendungsdaten\msdtc.exe.vir
2014-05-19 10:48 - 2014-05-20 09:52 - 00603763 _____ () C:\Dokumente und Einstellungen\kp\Anwendungsdaten\libcurl-4.dll
2014-05-19 10:48 - 2014-05-20 09:52 - 00042496 _____ (Open Source Software community project) C:\Dokumente und Einstellungen\kp\Anwendungsdaten\pthreadGC2-w64.dll
2014-05-15 18:46 - 2014-05-15 18:46 - 00026407 _____ () C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Anwendungsdaten\recently-used.xbel
2014-05-15 18:46 - 2012-12-04 11:28 - 00000000 ____D () C:\Dokumente und Einstellungen\kp\.gimp-2.8
2014-05-14 17:56 - 2010-04-14 13:13 - 00000276 _____ () C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
2014-05-14 12:41 - 2012-10-23 11:29 - 00692400 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2014-05-14 12:41 - 2012-03-19 11:29 - 00070832 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2014-05-13 10:00 - 2012-04-26 09:24 - 00000000 ____D () C:\Programme\Mozilla Maintenance Service
2014-05-12 15:33 - 2009-11-03 12:39 - 00000000 ____D () C:\Programme\Mozilla Firefox
2014-05-12 14:51 - 2014-05-12 14:31 - 02070424 _____ () C:\Dokumente und Einstellungen\kp\Desktop\Dokument-2.sla.autosave
2014-05-12 07:26 - 2014-06-05 11:40 - 00053208 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-05-12 07:25 - 2014-06-05 11:40 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-05-09 17:43 - 2014-05-09 17:43 - 00011277 _____ () C:\Dokumente und Einstellungen\kp\Desktop\Dokument-2.sla
2014-05-09 17:41 - 2014-05-09 17:41 - 02064664 _____ () C:\Dokumente und Einstellungen\kp\Desktop\Dokument-1.sla
Some content of TEMP:
====================
C:\Dokumente und Einstellungen\Kaeter\Lokale Einstellungen\Temp\contentDATs.exe
C:\Dokumente und Einstellungen\Kaeter\Lokale Einstellungen\Temp\FreeMind-Windows-Installer-0.8.1-max.exe
C:\Dokumente und Einstellungen\Kaeter\Lokale Einstellungen\Temp\hpzmsi01.exe
C:\Dokumente und Einstellungen\Kaeter\Lokale Einstellungen\Temp\hpzscr01.exe
C:\Dokumente und Einstellungen\Kaeter\Lokale Einstellungen\Temp\ISSetup.dll
C:\Dokumente und Einstellungen\Kaeter\Lokale Einstellungen\Temp\jre-6u20-windows-i586-iftw-rv.exe
C:\Dokumente und Einstellungen\Kaeter\Lokale Einstellungen\Temp\ose00000.exe
C:\Dokumente und Einstellungen\Kaeter\Lokale Einstellungen\Temp\SecurityScan_Release.exe
C:\Dokumente und Einstellungen\Kaeter\Lokale Einstellungen\Temp\setup.exe
C:\Dokumente und Einstellungen\Kaeter\Lokale Einstellungen\Temp\SkypeSetup.exe
C:\Dokumente und Einstellungen\Kaeter\Lokale Einstellungen\Temp\Softonic_Deutsch.exe
C:\Dokumente und Einstellungen\Kaeter\Lokale Einstellungen\Temp\_isF4.exe
C:\Dokumente und Einstellungen\Kaeter\Lokale Einstellungen\Temp\_setup.dll
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\cudart32_55.dll
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\derp_02020.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\derp_45621.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\derp_54125.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\derp_58113.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\dotNetFx40_Client_setup.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\FLRXDJOU.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\google502640.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\jre-7u25-windows-i586-iftw.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\jre-7u45-windows-i586-iftw.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\jre-7u60-windows-i586-iftw.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\libcurl-4.dll
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\libcurl.dll
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\libeay32.dll
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\libgcc_s_dw2-1.dll
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\libidn-11.dll
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\libpdcurses.dll
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\msdtc64.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\msdtca.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\msdtce.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\pdf24-creator-update.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\pthreadGC2-w64.dll
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\pthreadGC2.dll
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\pthreadVC2.dll
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\RXEJQWAF.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\SkypeSetup.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\ssleay32.dll
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp1023528682.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp1214824603.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp1258280229.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp1301457706.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp1383010223.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp1388973426.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp146469902.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp1660275887.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp1693059242.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp1770890147.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp1780563622.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp1787373068.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp1870188555.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp1877707631.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp1985917724.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp2069976026.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp2129245413.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp2507242703.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp2752079957.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp2780006699.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp2958781712.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp3207116283.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp3209101506.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp3276899502.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp3327848174.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp3525032555.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp3562548784.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp3579539030.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp3744306396.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp3744446342.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp3828056911.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp3966381605.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp4087700165.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp4132874826.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp4152773238.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp4221498519.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp4261270389.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp454313635.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp726020336.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp776979670.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp921861509.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp936017295.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\temp963665745.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\tgjzwmfy.dll
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\wrapper.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\wzd007.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\wzd332.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\wzd584.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\wzd775.exe
C:\Dokumente und Einstellungen\kp\Lokale Einstellungen\Temp\zlib1.dll
C:\Dokumente und Einstellungen\Praktikant\Lokale Einstellungen\Temp\AskSLib.dll
C:\Dokumente und Einstellungen\Praktikant\Lokale Einstellungen\Temp\A~NSISu_.exe
C:\Dokumente und Einstellungen\Praktikant\Lokale Einstellungen\Temp\contentDATs.exe
C:\Dokumente und Einstellungen\Praktikant\Lokale Einstellungen\Temp\installhelper.dll
C:\Dokumente und Einstellungen\Praktikant\Lokale Einstellungen\Temp\jre-6u32-windows-i586-iftw.exe
C:\Dokumente und Einstellungen\Praktikant\Lokale Einstellungen\Temp\jre-6u35-windows-i586-iftw.exe
C:\Dokumente und Einstellungen\Praktikant\Lokale Einstellungen\Temp\NAVILOCK_TMX_271.exe
C:\Dokumente und Einstellungen\Praktikant\Lokale Einstellungen\Temp\pdf24-creator-update.exe
C:\Dokumente und Einstellungen\Praktikant\Lokale Einstellungen\Temp\pen-drive-data-recovery-demo.exe
C:\Dokumente und Einstellungen\Praktikant\Lokale Einstellungen\Temp\SIMEEIInstaller.exe
C:\Dokumente und Einstellungen\Praktikant\Lokale Einstellungen\Temp\SkypeSetup.exe
C:\Dokumente und Einstellungen\Praktikant\Lokale Einstellungen\Temp\SRAssetsHelper.dll
C:\Dokumente und Einstellungen\Praktikant\Lokale Einstellungen\Temp\wcw20822.exe
C:\Dokumente und Einstellungen\Praktikant\Lokale Einstellungen\Temp\xmlUpdater.exe
C:\Dokumente und Einstellungen\sszuper\Lokale Einstellungen\Temp\AskSLib.dll
C:\Dokumente und Einstellungen\sszuper\Lokale Einstellungen\Temp\hpzmsi01.exe
C:\Dokumente und Einstellungen\sszuper\Lokale Einstellungen\Temp\hpzscr01.exe
C:\Dokumente und Einstellungen\sszuper\Lokale Einstellungen\Temp\jre-6u37-windows-i586-iftw.exe
==================== Bamital & volsnap Check =================
C:\WINDOWS\explorer.exe
[2004-08-04 14:00] - [2008-04-14 04:22] - 1036800 ____A (Microsoft Corporation) 418045a93cd87a352098ab7dabe1b53e
C:\WINDOWS\system32\winlogon.exe
[2004-08-04 14:00] - [2008-04-14 04:23] - 0513024 ____A (Microsoft Corporation) f09a527b422e25c478e38caa0e44417a
C:\WINDOWS\system32\svchost.exe
[2004-08-04 14:00] - [2008-04-14 04:23] - 0014336 ____A (Microsoft Corporation) 4fbc75b74479c7a6f829e0ca19df3366
C:\WINDOWS\system32\services.exe
[2004-08-04 14:00] - [2009-02-09 13:21] - 0111104 ____A (Microsoft Corporation) a3edbe9053889fb24ab22492472b39dc
C:\WINDOWS\system32\User32.dll
[2004-08-04 14:00] - [2008-04-14 04:22] - 0580096 ____A (Microsoft Corporation) b0050cc5340e3a0760dd8b417ff7aebd
C:\WINDOWS\system32\userinit.exe
[2004-08-04 14:00] - [2008-04-14 04:23] - 0026624 ____A (Microsoft Corporation) 788f95312e26389d596c0fa55834e106
C:\WINDOWS\system32\rpcss.dll
[2004-08-04 14:00] - [2009-02-09 12:51] - 0401408 ____A (Microsoft Corporation) 3127afbf2c1ed0ab14a1bbb7aaecb85b
ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\WINDOWS\system32\Drivers\volsnap.sys
[2004-08-04 14:00] - [2008-04-14 03:52] - 0053760 ____A (Microsoft Corporation) a5a712f4e880874a477af790b5186e1d
==================== End Of Log ============================
ADDITION.txt: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version:02-06-2014
Ran by kp at 2014-06-06 09:58:09
Running from E:\
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: F-PROT Antivirus for Windows (Disabled - Up to date) {3F8BAFFE-D251-4DC6-ACF9-81FDF61FB9C9}
==================== Installed Programs ======================
Adobe Flash Player 13 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.04) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.04 - Adobe Systems Incorporated)
Altova UModel® 2014 sp1 Enterprise Edition (HKLM\...\{3065DC36-F4D8-4E67-8E98-6EFC3AB625D7}) (Version: 2014.00.01 - Altova)
AMD Processor Driver (HKLM\...\{C151CE54-E7EA-4804-854B-F515368B0798}) (Version: 1.3.2.0053 - AMD)
Apple Application Support (HKLM\...\{553255F3-78FD-40F1-A6F8-6882140265FE}) (Version: 1.2.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{B5C3B892-0849-476C-9F46-B12F84819D57}) (Version: 3.0.0.102 - Apple Inc.)
Apple Software Update (HKLM\...\{C41300B9-185D-475E-BFEC-39EF732F19B1}) (Version: 2.1.2.120 - Apple Inc.)
Ask Toolbar (HKLM\...\{86D4B82A-ABED-442A-BE86-96357B70F4FE}) (Version: 1.12.2.0 - Ask.com) <==== ATTENTION
AV186+ (HKLM\...\{D2AF1F84-4B98-42AD-A39D-B4870F14CDA7}) (Version: 1.00.0000 - Avision)
BizAgi Process Modeler (HKLM\...\InstallShield_{980EC6D7-A345-4489-A915-39CC50F37EC2}) (Version: 2.1.0.1 - BizAgi Limited)
BizAgi Process Modeler (Version: 2.1.0.1 - BizAgi Limited) Hidden
Bonjour (HKLM\...\{76BC2442-0002-47FA-9617-43BAD82BEF4C}) (Version: 2.0.0.34 - Apple Inc.)
Brother MFL-Pro Suite MFC-7460DN (HKLM\...\{3ACCCFB3-7B17-4E9F-ACB0-46868FCD4487}) (Version: 1.0.9.0 - Brother Industries, Ltd.)
CDDRV_Installer (Version: 4.60 - Logitech) Hidden
Enterprise Architect 10 (HKLM\...\{CC98E8B3-FAAA-4D09-A813-A44C9FA1A3EE}) (Version: 10.0.1010.11 - Sparx Systems)
erLT (Version: 1.12.0117 - Logitech, Inc.) Hidden
Foxit Reader 5.0 (HKLM\...\Foxit Reader_is1) (Version: 5.0.2.718 - Foxit Corporation)
F-PROT Antivirus for Windows (HKLM\...\{E58B329B-FB28-4874-90DE-0D7CB2709267}) (Version: 6.0.9.6 - FRISK Software)
FreeMind (HKLM\...\B991B020-2968-11D8-AF23-444553540000_is1) (Version: 0.8.1 - )
GanttProject (HKLM\...\GanttProject) (Version: - )
GIMP 2.8.2 (HKLM\...\GIMP-2_is1) (Version: 2.8.2 - The GIMP Team)
Google Earth Plug-in (HKLM\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (Version: 1.3.24.7 - Google Inc.) Hidden
GPL Ghostscript (HKLM\...\GPL Ghostscript 9.06) (Version: 9.06 - Artifex Software Inc.)
High Definition Audio Driver Package - KB888111 (HKLM\...\KB888111WXPSP2) (Version: 20040219.000000 - Microsoft Corporation)
Hotfix für Windows XP (KB2633952) (HKLM\...\KB2633952) (Version: 1 - Microsoft Corporation)
Hotfix für Windows XP (KB2756822) (HKLM\...\KB2756822) (Version: 1 - Microsoft Corporation)
Hotfix für Windows XP (KB2779562) (HKLM\...\KB2779562) (Version: 1 - Microsoft Corporation)
Hotfix für Windows XP (KB952287) (HKLM\...\KB952287) (Version: 1 - Microsoft Corporation)
Hotfix für Windows XP (KB961118) (HKLM\...\KB961118) (Version: 1 - Microsoft Corporation)
Hotfix für Windows XP (KB981793) (HKLM\...\KB981793) (Version: 1 - Microsoft Corporation)
hpg4370QFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden
Iminent (Version: 5.50.21.0 - Iminent) Hidden <==== ATTENTION
Iminent Toolbar For Internet Explorer (HKLM\...\{A76AA284-E52D-47E6-9E4F-B85DBF8E35C3}) (Version: 3.26.0 - Iminent) <==== ATTENTION
Inkscape 0.48.2 (HKLM\...\Inkscape) (Version: 0.48.2 - )
Internet Explorer Toolbar 4.6 by SweetPacks (HKLM\...\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}) (Version: 4.6.0004 - SweetIM Technologies Ltd.) <==== ATTENTION
IrfanView (remove only) (HKLM\...\IrfanView) (Version: 4.27 - Irfan Skiljan)
iTunes (HKLM\...\{996A2FAA-7514-4628-9D12-A8FC34A0016E}) (Version: 9.1.0.79 - Apple Inc.)
J2SE Runtime Environment 5.0 (HKLM\...\{3248F0A8-6813-11D6-A77B-00B0D0150000}) (Version: 1.5.0 - Sun Microsystems, Inc.)
Java 7 Update 45 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.450 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
KhalInstallWrapper (Version: 4.60.122 - Logitech) Hidden
Logitech Desktop Messenger (HKLM\...\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}) (Version: 2.56.102 - Logitech, Inc.)
Logitech SetPoint (HKLM\...\{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}) (Version: 4.60 - Logitech)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 1.1 (HKLM\...\Microsoft .NET Framework 1.1 (1033)) (Version: - )
Microsoft .NET Framework 1.1 (Version: 1.1.4322 - Microsoft) Hidden
Microsoft .NET Framework 1.1 German Language Pack (HKLM\...\{E78BFA60-5393-4C38-82AB-E8019E464EB4}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 1.1 Security Update (KB2698023) (HKLM\...\M2698023) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB2833941) (HKLM\...\M2833941) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB979906) (HKLM\...\M979906) (Version: - )
Microsoft .NET Framework 2.0 Service Pack 2 (HKLM\...\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}) (Version: 2.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.0 Service Pack 2 (HKLM\...\{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}) (Version: 3.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5 (Version: - Microsoft Corporation) Hidden
Microsoft Kernel-Mode Driver Framework Feature Pack 1.9 (Version: - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs (HKLM\...\{90120000-00B2-0409-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Software Update for Web Folders (German) 12 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Mozilla Firefox 29.0.1 (x86 de) (HKLM\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Mozilla Thunderbird 24.5.0 (x86 de) (HKLM\...\Mozilla Thunderbird 24.5.0 (x86 de)) (Version: 24.5.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 6 Service Pack 2 (KB973686) (HKLM\...\{56EA8BC0-3751-4B93-BC9D-6651CC36E5AA}) (Version: 6.20.2003.0 - Microsoft Corporation)
NAVISPORT Training Tool (HKLM\...\{7CC28478-64D3-41DA-BD79-F97AAD657B29}) (Version: 1.0.0 - )
Nice PDF Compressor 2.0 (HKLM\...\Nice PDF Compressor_is1) (Version: - NicePDF Software, Inc.)
Notepad++ (HKLM\...\Notepad++) (Version: 6.1.3 - )
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.3 - NVIDIA Corporation)
Nvu 1.0 (HKLM\...\Nvu_is1) (Version: 1.0 - Thorsten Fritz)
OpenOffice.org 3.4.1 (HKLM\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation)
OpenProj (HKLM\...\{13702021-43FB-480C-912F-D9B74A538288}) (Version: 1.4.0 - Serena Software Inc.)
PDF24 Creator 5.4.0 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
PL-2303 USB-to-Serial (HKLM\...\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}) (Version: 1.00.000 - Prolific Technology INC)
Platform (Version: 1.27 - VIA Technologies, Inc.) Hidden
Poedit (HKLM\...\{68EB2C37-083A-4303-B5D8-41FA67E50B8F}_is1) (Version: 1.4.6 - Vaclav Slavik)
QuickTime (HKLM\...\{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}) (Version: 7.66.71.0 - Apple Inc.)
Samsung CLP-310 Series (HKLM\...\Samsung CLP-310 Series) (Version: - Samsung Electronics CO.,LTD)
Samsung CLP-650 Series (HKLM\...\Samsung CLP-650 Series) (Version: - )
Samsung Universal Print Driver (HKLM\...\Samsung Universal Print Driver) (Version: 2.03.06.00 - Samsung Electronics Co., Ltd.)
Screenshot Captor 3.07.01 (HKLM\...\ScreenshotCaptor_is1) (Version: - )
Scribus 1.4.0.rc6 (HKLM\...\Scribus 1.4.0) (Version: 1.4.0.rc6 - The Scribus Team)
Scribus 1.4.1 (HKLM\...\Scribus 1.4.1) (Version: 1.4.1 - The Scribus Team)
Searchcore Toolbar (HKLM\...\Windows Searchcore Toolbar) (Version: 3.0.0.122076 - Discordia Limited) <==== ATTENTION
Sicherheitsupdate für Microsoft Windows (KB2564958) (HKLM\...\KB2564958) (Version: - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2510531) (HKLM\...\KB2510531-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2544521) (HKLM\...\KB2544521-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2618444) (HKLM\...\KB2618444-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2722913) (HKLM\...\KB2722913-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2744842) (HKLM\...\KB2744842-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2761465) (HKLM\...\KB2761465-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2792100) (HKLM\...\KB2792100-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2797052) (HKLM\...\KB2797052-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2799329) (HKLM\...\KB2799329-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2809289) (HKLM\...\KB2809289-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2817183) (HKLM\...\KB2817183-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2829530) (HKLM\...\KB2829530-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2838727) (HKLM\...\KB2838727-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2846071) (HKLM\...\KB2846071-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2847204) (HKLM\...\KB2847204-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2862772) (HKLM\...\KB2862772-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2870699) (HKLM\...\KB2870699-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB982381) (HKLM\...\KB982381-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Media Player (KB2378111) (HKLM\...\KB2378111_WM9) (Version: - Microsoft Corporation)
Sicherheitsupdate für Windows Media Player (KB2803821) (HKLM\...\KB2803821_WM9) (Version: - Microsoft Corporation)
Sicherheitsupdate für Windows Media Player (KB2803821-v2) (HKLM\...\KB2803821-v2_WM9) (Version: - Microsoft Corporation)
Sicherheitsupdate für Windows Media Player (KB952069) (HKLM\...\KB952069_WM9) (Version: - Microsoft Corporation)
Sicherheitsupdate für Windows Media Player (KB954155) (HKLM\...\KB954155_WM9) (Version: - Microsoft Corporation)
Sicherheitsupdate für Windows Media Player (KB973540) (HKLM\...\KB973540_WM9) (Version: - Microsoft Corporation)
Sicherheitsupdate für Windows Media Player (KB973540) (HKLM\...\KB973540_WM9L) (Version: - Microsoft Corporation)
Sicherheitsupdate für Windows Media Player (KB975558) (HKLM\...\KB975558_WM8) (Version: - Microsoft Corporation)
Sicherheitsupdate für Windows Media Player (KB978695) (HKLM\...\KB978695_WM9) (Version: - Microsoft Corporation)
Sicherheitsupdate für Windows Media Player (KB979402) (HKLM\...\KB979402_WM9L) (Version: - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2079403) (HKLM\...\KB2079403) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2115168) (HKLM\...\KB2115168) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2229593) (HKLM\...\KB2229593) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2296011) (HKLM\...\KB2296011) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2347290) (HKLM\...\KB2347290) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2360937) (HKLM\...\KB2360937) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2387149) (HKLM\...\KB2387149) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2393802) (HKLM\...\KB2393802) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2419632) (HKLM\...\KB2419632) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2423089) (HKLM\...\KB2423089) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2440591) (HKLM\...\KB2440591) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2443105) (HKLM\...\KB2443105) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2476490) (HKLM\...\KB2476490) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2478960) (HKLM\...\KB2478960) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2478971) (HKLM\...\KB2478971) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2479943) (HKLM\...\KB2479943) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2481109) (HKLM\...\KB2481109) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2483185) (HKLM\...\KB2483185) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2485663) (HKLM\...\KB2485663) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2506212) (HKLM\...\KB2506212) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2507618) (HKLM\...\KB2507618) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2507938) (HKLM\...\KB2507938) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2508429) (HKLM\...\KB2508429) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2509553) (HKLM\...\KB2509553) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2510581) (Version: 1 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows XP (KB2535512) (HKLM\...\KB2535512) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2536276-v2) (HKLM\...\KB2536276-v2) (Version: 2 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2544521) (Version: 1 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows XP (KB2544893-v2) (HKLM\...\KB2544893-v2) (Version: 2 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2566454) (HKLM\...\KB2566454) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2570947) (HKLM\...\KB2570947) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2584146) (HKLM\...\KB2584146) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2585542) (HKLM\...\KB2585542) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2592799) (HKLM\...\KB2592799) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2598479) (HKLM\...\KB2598479) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2603381) (HKLM\...\KB2603381) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2618451) (HKLM\...\KB2618451) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2619339) (HKLM\...\KB2619339) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2620712) (HKLM\...\KB2620712) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2621440) (HKLM\...\KB2621440) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2624667) (HKLM\...\KB2624667) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2631813) (HKLM\...\KB2631813) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2646524) (HKLM\...\KB2646524) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2653956) (HKLM\...\KB2653956) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2655992) (HKLM\...\KB2655992) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2659262) (HKLM\...\KB2659262) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2661637) (HKLM\...\KB2661637) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2675157) (Version: 1 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows XP (KB2676562) (HKLM\...\KB2676562) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2685939) (HKLM\...\KB2685939) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2686509) (HKLM\...\KB2686509) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2691442) (HKLM\...\KB2691442) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2695962) (HKLM\...\KB2695962) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2698365) (HKLM\...\KB2698365) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2705219) (HKLM\...\KB2705219) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2707511) (HKLM\...\KB2707511) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2709162) (HKLM\...\KB2709162) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2712808) (HKLM\...\KB2712808) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2718523) (HKLM\...\KB2718523) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2719985) (HKLM\...\KB2719985) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2723135) (HKLM\...\KB2723135) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2724197) (HKLM\...\KB2724197) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2727528) (HKLM\...\KB2727528) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2731847) (HKLM\...\KB2731847) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2753842) (HKLM\...\KB2753842) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2753842-v2) (HKLM\...\KB2753842-v2) (Version: 2 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2757638) (HKLM\...\KB2757638) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2758857) (HKLM\...\KB2758857) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2761226) (HKLM\...\KB2761226) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2770660) (HKLM\...\KB2770660) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2778344) (HKLM\...\KB2778344) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2779030) (HKLM\...\KB2779030) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2780091) (HKLM\...\KB2780091) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2799494) (HKLM\...\KB2799494) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2802968) (HKLM\...\KB2802968) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2807986) (HKLM\...\KB2807986) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2808735) (HKLM\...\KB2808735) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2813170) (HKLM\...\KB2813170) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2813345) (HKLM\...\KB2813345) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2820197) (HKLM\...\KB2820197) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2820917) (HKLM\...\KB2820917) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2829361) (HKLM\...\KB2829361) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2834886) (HKLM\...\KB2834886) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2839229) (HKLM\...\KB2839229) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2845187) (HKLM\...\KB2845187) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2849470) (HKLM\...\KB2849470) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2850851) (HKLM\...\KB2850851) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2850869) (HKLM\...\KB2850869) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2859537) (HKLM\...\KB2859537) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2864063) (HKLM\...\KB2864063) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2876217) (HKLM\...\KB2876217) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2876315) (HKLM\...\KB2876315) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB923561) (HKLM\...\KB923561) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB923789) (HKLM\...\KB923789) (Version: - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB946648) (HKLM\...\KB946648) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB950760) (HKLM\...\KB950760) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB950762) (HKLM\...\KB950762) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB950974) (HKLM\...\KB950974) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB951376-v2) (HKLM\...\KB951376-v2) (Version: 2 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB951748) (HKLM\...\KB951748) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB952004) (HKLM\...\KB952004) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB952954) (HKLM\...\KB952954) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB955069) (HKLM\...\KB955069) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB956572) (HKLM\...\KB956572) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB956744) (HKLM\...\KB956744) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB956802) (HKLM\...\KB956802) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB956803) (HKLM\...\KB956803) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB956844) (HKLM\...\KB956844) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB958644) (HKLM\...\KB958644) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB958869) (HKLM\...\KB958869) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB959426) (HKLM\...\KB959426) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB960225) (HKLM\...\KB960225) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB960803) (HKLM\...\KB960803) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB960859) (HKLM\...\KB960859) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB961501) (HKLM\...\KB961501) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB969059) (HKLM\...\KB969059) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB970238) (HKLM\...\KB970238) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB970430) (HKLM\...\KB970430) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB971468) (HKLM\...\KB971468) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB971657) (HKLM\...\KB971657) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB972270) (HKLM\...\KB972270) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB973507) (HKLM\...\KB973507) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB973869) (HKLM\...\KB973869) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB973904) (HKLM\...\KB973904) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB974112) (HKLM\...\KB974112) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB974318) (HKLM\...\KB974318) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB974392) (HKLM\...\KB974392) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB974571) (HKLM\...\KB974571) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB975025) (HKLM\...\KB975025) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB975467) (HKLM\...\KB975467) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB975560) (HKLM\...\KB975560) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB975561) (HKLM\...\KB975561) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB975562) (HKLM\...\KB975562) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB975713) (Version: 1 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows XP (KB977816) (HKLM\...\KB977816) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB977914) (HKLM\...\KB977914) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB978037) (HKLM\...\KB978037) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB978338) (HKLM\...\KB978338) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB978542) (HKLM\...\KB978542) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB978601) (HKLM\...\KB978601) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB978706) (HKLM\...\KB978706) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB979309) (HKLM\...\KB979309) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB979482) (HKLM\...\KB979482) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB979559) (HKLM\...\KB979559) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB979683) (HKLM\...\KB979683) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB979687) (HKLM\...\KB979687) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB980195) (HKLM\...\KB980195) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB980218) (HKLM\...\KB980218) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB980232) (HKLM\...\KB980232) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB981322) (HKLM\...\KB981322) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB981997) (HKLM\...\KB981997) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB982132) (HKLM\...\KB982132) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB982381) (Version: 1 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows XP (KB982665) (HKLM\...\KB982665) (Version: 1 - Microsoft Corporation)
Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 6.3.11079 - Skype Technologies S.A.)
Skype™ 6.7 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.7.102 - Skype Technologies S.A.)
SweetIM for Messenger 3.7 (HKLM\...\{7683B745-6060-41FD-AA75-0BBB383FEAD4}) (Version: 3.7.0005 - SweetIM Technologies Ltd.) <==== ATTENTION
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{620E77C0-CDFE-4C14-AAEB-830ABB65864C}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{8153EC80-C988-4336-8DAF-6D99C0D26E0C}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft)
Update für Windows Internet Explorer 8 (KB2598845) (HKLM\...\KB2598845-IE8) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2345886) (HKLM\...\KB2345886) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2467659) (HKLM\...\KB2467659) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2641690) (HKLM\...\KB2641690) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2661254-v2) (HKLM\...\KB2661254-v2) (Version: 2 - Microsoft Corporation)
Update für Windows XP (KB2718704) (HKLM\...\KB2718704) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2736233) (HKLM\...\KB2736233) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2749655) (HKLM\...\KB2749655) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2863058) (HKLM\...\KB2863058) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB951978) (Version: 1 - Microsoft Corporation) Hidden
Update für Windows XP (KB955759) (HKLM\...\KB955759) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB967715) (HKLM\...\KB967715) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB968389) (HKLM\...\KB968389) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB971029) (HKLM\...\KB971029) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB971737) (HKLM\...\KB971737) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB973687) (HKLM\...\KB973687) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB973815) (HKLM\...\KB973815) (Version: 1 - Microsoft Corporation)
Update Manager for SweetPacks 1.1 (HKLM\...\{EA8FA6BE-29BE-4AF2-9352-841F83215EB0}) (Version: 1.1.0008 - SweetIM Technologies Ltd.) <==== ATTENTION
VIA Plattform-Geräte-Manager (HKLM\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.27 - VIA Technologies, Inc.)
VLC media player 1.1.11 (HKLM\...\VLC media player) (Version: 1.1.11 - VideoLAN)
WebFldrs XP (Version: 9.50.7523 - Microsoft Corporation) Hidden
Wieldy 0.3.1.996 (HKLM\...\Wieldy) (Version: 0.3.1.996 - Kevin Erath)
Windows Driver Package - Silicon Laboratories (silabenm) Ports (10/05/2012 6.6.0.0) (HKLM\...\5118100F6945E20FB40C6DEA7D3D348AFD9E43D7) (Version: 10/05/2012 6.6.0.0 - Silicon Laboratories)
Windows Imaging Component (HKLM\...\WIC) (Version: 3.0.0.0 - Microsoft Corporation)
Windows Internet Explorer 8 (HKLM\...\ie8) (Version: 20090308.140743 - Microsoft Corporation)
Windows XP Service Pack 3 (HKLM\...\Windows XP Service Pack) (Version: 20080414.031514 - Microsoft Corporation)
WinRAR 4.20 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
XnView 1.99 (HKLM\...\XnView_is1) (Version: 1.99 - Gougelet Pierre-e)
Yontoo 1.10.03 (HKLM\...\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}) (Version: 1.10.03 - Yontoo LLC) <==== ATTENTION
==================== Restore Points =========================
10-03-2014 12:32:02 Systemprüfpunkt
11-03-2014 12:46:41 Systemprüfpunkt
12-03-2014 16:22:06 Systemprüfpunkt
14-03-2014 12:25:40 Systemprüfpunkt
17-03-2014 12:43:52 Systemprüfpunkt
18-03-2014 14:09:04 Systemprüfpunkt
20-03-2014 12:29:01 Systemprüfpunkt
24-03-2014 12:13:45 Systemprüfpunkt
25-03-2014 11:44:09 Installed Enterprise Architect 10
26-03-2014 16:33:21 Systemprüfpunkt
27-03-2014 17:03:44 Systemprüfpunkt
31-03-2014 09:24:21 Systemprüfpunkt
01-04-2014 11:25:24 Systemprüfpunkt
02-04-2014 11:55:03 Systemprüfpunkt
04-04-2014 09:06:30 Systemprüfpunkt
07-04-2014 11:22:35 Systemprüfpunkt
08-04-2014 14:53:10 Systemprüfpunkt
10-04-2014 11:40:06 Systemprüfpunkt
11-04-2014 11:42:26 Systemprüfpunkt
15-04-2014 08:16:31 Systemprüfpunkt
22-04-2014 11:22:54 Systemprüfpunkt
24-04-2014 10:09:40 Systemprüfpunkt
25-04-2014 11:08:11 Systemprüfpunkt
28-04-2014 12:06:30 Systemprüfpunkt
30-04-2014 11:50:41 Systemprüfpunkt
05-05-2014 14:15:32 Systemprüfpunkt
07-05-2014 13:36:48 Systemprüfpunkt
09-05-2014 09:08:47 Systemprüfpunkt
13-05-2014 08:39:39 Systemprüfpunkt
15-05-2014 11:00:19 Systemprüfpunkt
19-05-2014 08:26:03 Systemprüfpunkt
20-05-2014 10:02:35 Systemprüfpunkt
21-05-2014 11:07:42 Systemprüfpunkt
22-05-2014 14:16:04 Systemprüfpunkt
26-05-2014 11:20:42 Systemprüfpunkt
27-05-2014 11:27:06 Systemprüfpunkt
28-05-2014 12:04:42 Systemprüfpunkt
30-05-2014 11:43:17 Systemprüfpunkt
02-06-2014 11:43:25 Systemprüfpunkt
04-06-2014 11:14:34 Systemprüfpunkt
05-06-2014 11:48:24 Systemprüfpunkt
==================== Hosts content: ==========================
2004-08-04 14:00 - 2014-05-30 12:21 - 00001675 _RASH C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 localhost
94.242.222.115 www.google-analytics.com.
94.242.222.115 google-analytics.com.
94.242.222.115 connect.facebook.net.
94.242.222.115 bing.com.
94.242.222.115 www.bing.com.
94.242.222.115 gb.bing.com.
94.242.222.115 au.bing.com.
94.242.222.115 ca.bing.com.
79.142.66.242 www.google-analytics.com.
79.142.66.242 google-analytics.com.
79.142.66.242 connect.facebook.net.
79.142.66.242 bing.com.
79.142.66.242 www.bing.com.
79.142.66.242 gb.bing.com.
79.142.66.242 au.bing.com.
79.142.66.242 ca.bing.com.
==================== Scheduled Tasks (whitelisted) =============
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\AppleSoftwareUpdate.job => C:\Programme\Apple Software Update\SoftwareUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Programme\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Programme\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job => C:\Programme\Ask.com\UpdateTask.exe
==================== Loaded Modules (whitelisted) =============
2009-11-04 16:38 - 2007-08-13 11:39 - 00022723 ____N () C:\WINDOWS\system32\cl31cl3.dll
2012-09-25 17:53 - 2011-04-11 07:26 - 00024064 _____ () C:\WINDOWS\system32\spd__l.dll
2008-01-18 16:57 - 2008-01-18 16:57 - 05750784 _____ () C:\Programme\NAVISPORT Training Tool\MySQL\bin\mysqld-nt.exe
2012-09-21 13:05 - 2009-02-27 16:38 - 00139264 ____R () C:\Programme\Brother\BrUtilities\BrLogAPI.dll
2011-07-18 23:04 - 2011-07-18 23:04 - 00296448 _____ () C:\Programme\Notepad++\NppShell_04.dll
2009-11-04 16:38 - 2009-12-09 16:01 - 00606208 _____ () C:\WINDOWS\Samsung\PanelMgr\ssmmgr.exe
2010-03-15 16:57 - 2010-03-15 16:57 - 00067872 _____ () C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\zlib1.dll
2004-08-04 14:00 - 2008-04-14 04:22 - 00014336 _____ () C:\WINDOWS\system32\msdmo.dll
2009-11-03 12:49 - 2009-11-03 12:49 - 00064664 _____ () C:\Programme\Logitech\Desktop Messenger\8876480\8.1.1.87-8876480SL\Program\clntutil.dll
2013-11-20 11:44 - 2014-05-05 10:17 - 03019888 _____ () C:\Dokumente und Einstellungen\Praktikant\Lokale Einstellungen\Anwendungsdaten\Mozilla Thunderbird\mozjs.dll
2013-11-20 11:44 - 2014-05-05 10:17 - 00158832 _____ () C:\Dokumente und Einstellungen\Praktikant\Lokale Einstellungen\Anwendungsdaten\Mozilla Thunderbird\NSLDAP32V60.dll
2013-11-20 11:44 - 2014-05-05 10:17 - 00023152 _____ () C:\Dokumente und Einstellungen\Praktikant\Lokale Einstellungen\Anwendungsdaten\Mozilla Thunderbird\NSLDAPPR32V60.dll
2012-01-04 09:48 - 2014-05-12 15:33 - 03839088 _____ () C:\Programme\Mozilla Firefox\mozjs.dll
2014-05-14 12:41 - 2014-05-14 12:41 - 16361136 _____ () C:\WINDOWS\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\FPAVServer => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\FPAVServer => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WdfLoadGroup => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{1a3e09be-1e45-494b-9174-d7385b45bbf5} => ""=""
==================== EXE Association (whitelisted) =============
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (06/04/2014 01:55:09 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2014/06/04 13:55:09.391]: [00000352]: SendSKeySettingToDevice:: Snmp Load Error[-1] To[192.168.33.50]
Error: (06/04/2014 01:55:00 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2014/06/04 13:55:00.328]: [00000352]: SendSKeySettingToDevice:: Snmp Load Error[-1] To[192.168.33.50]
Error: (06/03/2014 05:47:46 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2014/06/03 17:47:46.046]: [00000536]: SendSKeySettingToDevice:: Snmp Load Error[0] To[192.168.33.50]
Error: (06/03/2014 05:10:40 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2014/06/03 17:10:40.421]: [00000536]: SendSKeySettingToDevice:: Snmp Load Error[0] To[192.168.33.50]
Error: (06/03/2014 04:03:32 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2014/06/03 16:03:32.343]: [00000536]: SendSKeySettingToDevice:: Snmp Load Error[0] To[192.168.33.50]
System errors:
=============
Error: (06/05/2014 02:12:49 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "SSPORT" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (06/05/2014 11:15:51 AM) (Source: DCOM) (EventID: 10005) (User: SYRAH)
Description: Bei DCOM ist der Fehler "%%1058" aufgetreten, als der Dienst "wuauserv" mit den Argumenten ""
gestartet wurde, um den folgenden Server zu verwenden:
{E60687F7-01A1-40AA-86AC-DB1CBF673334}
Error: (06/05/2014 11:08:26 AM) (Source: DCOM) (EventID: 10005) (User: SYRAH)
Description: Bei DCOM ist der Fehler "%%1058" aufgetreten, als der Dienst "wuauserv" mit den Argumenten ""
gestartet wurde, um den folgenden Server zu verwenden:
{E60687F7-01A1-40AA-86AC-DB1CBF673334}
Error: (06/05/2014 10:37:54 AM) (Source: DCOM) (EventID: 10005) (User: SYRAH)
Description: Bei DCOM ist der Fehler "%%1058" aufgetreten, als der Dienst "wuauserv" mit den Argumenten ""
gestartet wurde, um den folgenden Server zu verwenden:
{E60687F7-01A1-40AA-86AC-DB1CBF673334}
Error: (06/05/2014 09:21:43 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "SSPORT" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (06/04/2014 02:55:01 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "SSPORT" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (06/04/2014 02:46:05 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "SSPORT" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (06/04/2014 02:44:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "SSPORT" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (06/04/2014 02:39:54 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "SSPORT" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (06/04/2014 02:38:46 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "SSPORT" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Microsoft Office Sessions:
=========================
Error: (03/18/2014 11:15:07 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 18, Application Name: Picture Manager, Application Version: 12.0.6606.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 13 seconds with 0 seconds of active time. This session ended with a crash.
Error: (03/18/2014 11:14:23 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 18, Application Name: Picture Manager, Application Version: 12.0.6606.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 15 seconds with 0 seconds of active time. This session ended with a crash.
Error: (03/18/2014 11:13:39 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 18, Application Name: Picture Manager, Application Version: 12.0.6606.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 12 seconds with 0 seconds of active time. This session ended with a crash.
Error: (03/18/2014 11:11:12 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 18, Application Name: Picture Manager, Application Version: 12.0.6606.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 14 seconds with 0 seconds of active time. This session ended with a crash.
Error: (02/28/2014 05:53:02 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 18, Application Name: Picture Manager, Application Version: 12.0.6606.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 78 seconds with 60 seconds of active time. This session ended with a crash.
Error: (06/21/2011 03:37:49 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 46 seconds with 0 seconds of active time. This session ended with a crash.
Error: (06/21/2011 03:36:10 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 371 seconds with 360 seconds of active time. This session ended with a crash.
Error: (06/21/2011 03:29:42 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 418 seconds with 360 seconds of active time. This session ended with a crash.
Error: (06/21/2011 03:20:38 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 8413 seconds with 4740 seconds of active time. This session ended with a crash.
Error: (03/01/2011 04:15:55 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 3620 seconds with 1440 seconds of active time. This session ended with a crash.
==================== Memory info ===========================
Percentage of memory in use: 40%
Total physical RAM: 3070.42 MB
Available physical RAM: 1823.33 MB
Total Pagefile: 4955.5 MB
Available Pagefile: 3901.35 MB
Total Virtual: 2047.88 MB
Available Virtual: 1957.86 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:465.75 GB) (Free:417.6 GB) NTFS ==>[Drive with boot components (Windows XP)]
Drive e: () (Removable) (Total:3.77 GB) (Free:3.76 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 466 GB) (Disk ID: F528F528)
Partition 1: (Active) - (Size=466 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 4 GB) (Disk ID: C3072E18)
Partition 1: (Not Active) - (Size=4 GB) - (Type=0C)
==================== End Of Log ============================
|
|
07.06.2014, 05:48
| #4 |
| /// the machine /// TB-Ausbilder | Pop-Ups öffnen automatisch - adserv Dass XP tot ist weißt Du`? Adware & Co. deinstallieren
Solltest Du ein Programm nicht finden oder nicht deinstallieren können, mache bitte mit dem nächsten Schritt weiter: Scan mit Combofix
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
Revo Uninstaller herunter.
dann auf 
und dann auf 
.
WARNUNG an die MITLESER: 
Linear-Darstellung
