| |
| |||||||
Log-Analyse und Auswertung: unerwünschte Werbefenster in Firefox (Win7)Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
02.10.2014, 21:53
| #1 |
 |  unerwünschte Werbefenster in Firefox (Win7) Ich nutze Firefox unter Windows 7. Seit einiger Zeit (ca. 4 Wochen) öffnen sich unerwünscht Werbefenster von "My Movies Magnet" im Firefox beim Aufrufen von Webseiten. Ich habe alle erwünschten und unerwünschten Programme deinstalliert, die ich heruntergeladen habe an dem Tag an dem das Problem zum ersten Mal auftauchte. Das Problem bestand weiterhin. Ein Bekannter wollte sich dem Problem annehmen und hat einige Programme heruntergeladen und herumexperimentiert, aber das Problem ist nicht behoben. Welche Programme das im einzelnen waren kann ich leider nicht sagen. Alle Programme wurden wieder deinstalliert. Zwischenzeitlich wurden bestimmte einzelne Worte auf Webseiten verlinkt. Dieses Phänoment scheint aber nicht mehr da zu sein, seit mein Bekannter am Rechner war. Ich nutze Avira AV: Code:
ATTFilter Exportierte Ereignisse:
18.09.2014 19:17 [Echtzeit-Scanner] Malware gefunden
In der Datei
'C:\Users\Sabine\AppData\Local\Temp\wstemp\skypesetup.exe_635466646439651302'
wurde ein Virus oder unerwünschtes Programm 'TR/Crypt.XPACK.Gen' [trojan]
gefunden.
Ausgeführte Aktion: Zugriff verweigern
09.09.2014 18:17 [System-Scanner] Malware gefunden
Die Datei 'C:\ProgramData\XNcajQ\dat\SCfWHZegeSt.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/Adware.Gen' [adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '510ab940.qua'
verschoben!
09.09.2014 18:15 [System-Scanner] Malware gefunden
Die Datei 'C:\ProgramData\XNcajQ\dat\YKqSIxMyDh.dll'
enthielt einen Virus oder unerwünschtes Programm 'Adware/AgentCV.A.16809'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '50c1bbd0.qua'
verschoben!
09.09.2014 18:14 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\ProgramData\XNcajQ\dat\YKqSIxMyDh.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/AgentCV.A.16809' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern
09.09.2014 18:13 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\ProgramData\XNcajQ\dat\SCfWHZegeSt.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/Adware.Gen' [adware]
gefunden.
Ausgeführte Aktion: Übergeben an Scanner
09.09.2014 18:13 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\ProgramData\XNcajQ\dat\SCfWHZegeSt.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/Adware.Gen' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern
09.09.2014 18:13 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\ProgramData\XNcajQ\dat\YKqSIxMyDh.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/AgentCV.A.16809' [adware]
gefunden.
Ausgeführte Aktion: Übergeben an Scanner
09.09.2014 18:13 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\ProgramData\XNcajQ\dat\YKqSIxMyDh.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/AgentCV.A.16809' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern
09.09.2014 18:07 [System-Scanner] Malware gefunden
Die Datei 'C:\ProgramData\XNcajQ\dat\MzqzUP.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/Adware.Gen' [adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26003.
Die Datei konnte nicht gelöscht werden!
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Die Datei konnte nicht gelöscht werden!
Die Datei wurde zum Löschen nach einem Neustart markiert.
Für die abschliessende Reparatur wird ein Neustart des Computers eingeleitet.
09.09.2014 16:51 [Echtzeit-Scanner] Malware gefunden
In der Datei
'C:\Users\Sabine\AppData\Local\Temp\wstemp\skypesetup.exe_635458782964894581'
wurde ein Virus oder unerwünschtes Programm 'TR/Crypt.XPACK.Gen' [trojan]
gefunden.
Ausgeführte Aktion: Zugriff verweigern
09.09.2014 16:51 [Echtzeit-Scanner] Malware gefunden
In der Datei
'C:\Users\Sabine\AppData\Local\Temp\wstemp\skypesetup.exe_635458782964894581'
wurde ein Virus oder unerwünschtes Programm 'TR/Crypt.XPACK.Gen' [trojan]
gefunden.
Ausgeführte Aktion: Übergeben an Scanner
09.09.2014 16:17 [System-Scanner] Malware gefunden
Die Datei 'C:\ProgramData\XNcajQ\dat\MzqzUP.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/Adware.Gen' [adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26003.
Die Datei konnte nicht gelöscht werden!
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Eine Instanz der ARK Library läuft bereits.
09.09.2014 16:16 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\ProgramData\XNcajQ\dat\MzqzUP.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/Adware.Gen' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern
03.09.2014 16:46 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Users\Sabine\Downloads\iLividSetup-r1109-n-bf.exe'
wurde ein Virus oder unerwünschtes Programm 'APPL/Downloader.Gen (Cloud)'
[APPL/Downloader.Gen] gefunden.
Ausgeführte Aktion: Zugriff verweigern
FRST Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-10-2014 01
Ran by Sabine (administrator) on SABINE-PC on 02-10-2014 22:02:32
Running from C:\Users\Sabine\Downloads
Loaded Profile: Sabine (Available profiles: Sabine)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Yahoo! Inc.) C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Yahoo! Inc.) C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Facebook Inc.) C:\Users\Sabine\AppData\Local\Facebook\Update\FacebookUpdate.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Ulead Systems, Inc.) C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\Monitor.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Yahoo! Inc.) C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [BLEServicesCtrl] => C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [177936 2012-02-17] (Intel Corporation)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1156712 2012-04-03] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2885944 2012-09-20] (Synaptics Incorporated)
HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\btvstack.exe [1022592 2012-04-28] (Atheros Communications)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\athbttray.exe [801920 2012-04-28] (Atheros Commnucations)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2012-02-10] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-05-20] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1263952 2013-02-13] ()
HKLM-x32\...\Run: [Ulead AutoDetector v2] => C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\monitor.exe [90112 2004-11-26] (Ulead Systems, Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [190032 2014-07-14] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-1250141173-3139096374-720319810-1000\...\Run: [Messenger (Yahoo!)] => C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe [6595928 2012-05-25] (Yahoo! Inc.)
HKU\S-1-5-21-1250141173-3139096374-720319810-1000\...\Run: [ChicaPasswordManager] => "C:\Program Files (x86)\ChicaLogic\Chica Password Manager\stpass.exe" /autorunned
HKU\S-1-5-21-1250141173-3139096374-720319810-1000\...\Run: [Facebook Update] => C:\Users\Sabine\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-11-21] (Facebook Inc.)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-05-18] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\Sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x23C5B3F4B138CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
URLSearchHook: HKCU - YTNavAssistPlugin Class - {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
BHO: Avira SearchFree Toolbar -> {41564952-412D-5637-00A7-7A786E7484D7} -> "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll" No File
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO-x32: Avira SearchFree Toolbar -> {41564952-412D-5637-00A7-7A786E7484D7} -> "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll" No File
Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default
FF SearchEngineOrder.3: Bing
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.17.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @divx.com/DivX Plus Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 -> C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Sabine\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\searchplugins\nation-secure-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\nation-secure-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: My Movie Magnet - C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\Extensions\admin@mymoviemagnet.com [2013-08-07]
FF Extension: Garmin Communicator - C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2013-04-23]
FF Extension: No Name - C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} [Not Found]
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Profile: C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-04-14]
CHR Extension: (Bazaar Friend) - C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmobdmpfgfimbnmhhnkmmecdboblafdh [2013-09-13]
CHR Extension: (Google Search) - C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-04-14]
CHR Extension: (Foxtab Speed Dial (Beta)) - C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcendgajlhoaiiccpijilcpmgphfflnj [2013-08-09]
CHR Extension: (Google Wallet) - C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-16]
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2013-07-24]
CHR Extension: (Gmail) - C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-04-14]
CHR HKLM\...\Chrome\Extension: [bmobdmpfgfimbnmhhnkmmecdboblafdh] - C:\Users\Sabine\AppData\Local\BazaarFriend.crx [2013-08-13]
CHR HKLM\...\Chrome\Extension: [kcendgajlhoaiiccpijilcpmgphfflnj] - C:\Users\Sabine\AppData\Local\newhb.crx [2013-08-01]
CHR HKCU\...\Chrome\Extension: [bmobdmpfgfimbnmhhnkmmecdboblafdh] - C:\Users\Sabine\AppData\Local\BazaarFriend.crx [2013-08-13]
CHR HKCU\...\Chrome\Extension: [kcendgajlhoaiiccpijilcpmgphfflnj] - C:\Users\Sabine\AppData\Local\newhb.crx [2013-08-01]
CHR HKLM-x32\...\Chrome\Extension: [bmobdmpfgfimbnmhhnkmmecdboblafdh] - C:\Users\Sabine\AppData\Local\BazaarFriend.crx [2013-08-13]
CHR HKLM-x32\...\Chrome\Extension: [kcendgajlhoaiiccpijilcpmgphfflnj] - C:\Users\Sabine\AppData\Local\newhb.crx [2013-08-01]
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2013-05-06]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1021520 2014-08-05] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-14] (Avira Operations GmbH & Co. KG)
R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [File not signed]
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2010-10-22] (Hewlett-Packard Co.) [File not signed]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-04-03] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-04-03] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2011-12-08] ()
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1359408 2013-03-26] (Sony Corporation)
R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [163456 2012-04-28] (Atheros)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [594704 2011-12-08] (Intel® Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-06-24] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [46368 2013-10-04] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-22] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-09-30] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [42040 2014-07-08] (Avira Operations GmbH & Co. KG)
S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 AthBTPort; system32\DRIVERS\btath_flt.sys [X]
S3 BTATH_A2DP; system32\drivers\btath_a2dp.sys [X]
S3 btath_avdt; system32\drivers\btath_avdt.sys [X]
S3 BTATH_BUS; system32\DRIVERS\btath_bus.sys [X]
S3 BTATH_HCRP; system32\DRIVERS\btath_hcrp.sys [X]
S3 BTATH_LWFLT; system32\DRIVERS\btath_lwflt.sys [X]
S3 BTATH_RCP; system32\DRIVERS\btath_rcp.sys [X]
S3 BTATH_VDP; system32\drivers\btath_vdp.sys [X]
S3 BtFilter; system32\DRIVERS\btfilter.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-10-02 22:02 - 2014-10-02 22:03 - 00021476 _____ () C:\Users\Sabine\Downloads\FRST.txt
2014-10-02 22:02 - 2014-10-02 22:02 - 00000000 ____D () C:\FRST
2014-10-02 22:01 - 2014-10-02 22:01 - 02108928 _____ (Farbar) C:\Users\Sabine\Downloads\FRST64.exe
2014-10-02 22:00 - 2014-10-02 22:00 - 00000474 _____ () C:\Users\Sabine\Downloads\defogger_disable.log
2014-10-02 22:00 - 2014-10-02 22:00 - 00000000 _____ () C:\Users\Sabine\defogger_reenable
2014-10-02 21:57 - 2014-10-02 21:57 - 00050477 _____ () C:\Users\Sabine\Downloads\Defogger.exe
2014-10-02 21:50 - 2014-10-02 21:50 - 00009714 _____ () C:\Users\Sabine\Desktop\Ereignisse.txt
2014-10-02 20:58 - 2014-10-02 20:58 - 02347384 _____ (ESET) C:\Users\Sabine\Downloads\esetsmartinstaller_deu.exe
2014-10-02 20:58 - 2014-10-02 20:58 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-10-02 20:27 - 2014-10-02 20:27 - 00000000 ____D () C:\Windows\ERUNT
2014-10-02 20:25 - 2014-10-02 20:25 - 01701755 _____ (Thisisu) C:\Users\Sabine\Downloads\JRT.exe
2014-10-02 20:19 - 2014-10-02 20:19 - 00000000 ___RD () C:\Users\Sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-10-02 20:19 - 2014-10-02 20:19 - 00000000 ____D () C:\Windows\SysWOW64\IPM
2014-10-02 20:14 - 2014-10-02 20:14 - 01375089 _____ () C:\Users\Sabine\Downloads\AdwCleaner_3.311.exe
2014-10-02 20:01 - 2014-10-02 20:02 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Sabine\Downloads\mbam-setup-2.0.2.1012(1).exe
2014-10-01 23:17 - 2014-09-25 04:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-10-01 23:16 - 2014-09-25 03:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-10-01 23:16 - 2014-09-10 00:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-10-01 23:16 - 2014-09-09 23:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-10-01 22:49 - 2014-10-01 23:02 - 00000000 ____D () C:\Windows\Minidump
2014-10-01 19:31 - 2014-10-01 21:30 - 00019990 _____ () C:\Users\Sabine\Desktop\Lebenslauf August 2014.odt
2014-09-26 05:24 - 2014-10-01 22:47 - 00000224 _____ () C:\Windows\system32\.crusader
2014-09-26 05:12 - 2014-09-26 05:12 - 00001905 _____ () C:\Users\Public\Desktop\HitmanPro.lnk
2014-09-26 05:12 - 2014-09-26 05:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
2014-09-26 05:10 - 2014-10-01 23:03 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-09-26 05:09 - 2014-09-26 05:10 - 10280824 _____ (SurfRight B.V.) C:\Users\Sabine\Downloads\HitmanPro.exe
2014-09-25 05:13 - 2014-10-01 23:02 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-09-25 05:12 - 2014-10-01 23:03 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-09-25 05:12 - 2014-10-01 23:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-09-25 05:12 - 2014-10-01 23:03 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-09-25 00:57 - 2014-09-25 00:57 - 00000000 ____D () C:\ProgramData\Emsisoft
2014-09-24 22:02 - 2014-09-26 04:19 - 00000000 ____D () C:\Program Files (x86)\Emsisoft Anti-Malware
2014-09-18 18:43 - 2014-09-20 21:23 - 00000000 ____D () C:\Users\Sabine\AppData\Roaming\Nico Mak Computing
2014-09-18 18:41 - 2014-09-18 18:42 - 04892480 _____ (WinZip International LLC ) C:\Users\Sabine\Downloads\wzmp_8(1).exe
2014-09-16 15:38 - 2014-05-12 15:16 - 00033235 _____ () C:\Users\Sabine\Downloads\reloadevery-28.0.2-fx.xpi
2014-09-16 15:09 - 2014-09-16 15:09 - 00030650 _____ () C:\Users\Sabine\Downloads\reloadevery-28.0.2-fx.zip
2014-09-15 21:30 - 2014-09-15 21:58 - 360886938 _____ () C:\Users\Sabine\Downloads\output.zip
2014-09-14 12:06 - 2014-09-14 12:06 - 01557816 _____ () C:\Users\Sabine\Downloads\14470198.zip
2014-09-13 09:14 - 2014-09-13 09:14 - 00066048 _____ () C:\Users\Sabine\Desktop\Unbenannt - 1.ufo
2014-09-13 08:49 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-09-13 08:49 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-09-12 10:25 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-09-12 10:25 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-09-12 10:25 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-12 10:25 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-12 10:25 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-09-12 10:25 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-09-12 10:25 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-12 10:25 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-12 10:25 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-09-12 10:25 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-09-12 10:25 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-09-12 10:25 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-09-12 10:25 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-09-12 10:25 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-12 10:25 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-09-12 10:25 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-12 10:25 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-09-12 10:25 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-09-12 10:25 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-09-12 10:25 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-09-12 10:25 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-09-12 10:25 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-12 10:25 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-09-12 10:25 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-09-12 10:25 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-09-12 10:25 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-09-12 10:25 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-09-12 10:25 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-09-12 10:25 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-09-12 10:25 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-12 10:25 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-09-12 10:25 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-09-12 10:25 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-12 10:25 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-09-12 10:25 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-09-12 10:25 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-09-12 10:25 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-09-12 10:25 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-12 10:25 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-09-12 10:25 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-12 10:25 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-09-12 10:25 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-09-12 10:25 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-09-12 10:25 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-09-12 10:25 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-09-12 10:25 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-12 10:25 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-09-12 10:25 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-12 10:25 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-09-12 10:25 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-09-12 10:25 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-09-12 10:25 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-12 10:25 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-09-12 10:25 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-09-12 10:25 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-09-12 10:25 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-09-11 22:14 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-11 22:14 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-09-11 22:13 - 2014-09-05 04:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-11 22:13 - 2014-09-05 04:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-11 22:13 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-09-11 22:13 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-11 22:13 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-09-11 22:13 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-09-11 22:13 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-09-11 22:13 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-09-11 22:13 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-09-10 11:46 - 2014-09-10 11:46 - 00000000 ____D () C:\Users\Sabine\AppData\Roaming\Oracle
2014-09-10 11:45 - 2014-07-25 12:55 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-09-10 11:45 - 2014-07-25 12:49 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-09-10 11:45 - 2014-07-25 12:49 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-09-10 11:45 - 2014-07-25 12:49 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-09-10 11:44 - 2014-09-10 11:45 - 00004623 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_67-b01.log
2014-09-10 09:40 - 2014-09-10 09:40 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-10 09:38 - 2014-09-10 09:39 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Sabine\Downloads\mbam-setup-2.0.2.1012.exe
2014-09-10 09:33 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-09-10 09:32 - 2014-10-02 20:18 - 00000000 ____D () C:\AdwCleaner
2014-09-10 09:32 - 2014-09-10 09:32 - 01370467 _____ () C:\Users\Sabine\Downloads\adwcleaner_3.309.exe
2014-09-09 16:09 - 2014-09-09 16:10 - 04892480 _____ (WinZip International LLC ) C:\Users\Sabine\Downloads\wzmp_8.exe
2014-09-02 21:50 - 2014-09-02 21:50 - 07169166 _____ () C:\Users\Sabine\Downloads\ICE.mov
2014-09-02 21:28 - 2014-09-02 21:28 - 01880280 _____ () C:\Users\Sabine\Downloads\ice.avi
2014-09-02 16:55 - 2014-09-02 17:20 - 00000000 ____D () C:\Users\Sabine\Documents\psynetic-gifx
2014-09-02 16:46 - 2014-09-02 16:46 - 00000000 ____D () C:\Users\Sabine\AppData\Local\psynetic-imageconverter
2014-09-02 16:45 - 2014-09-02 16:45 - 00000000 ____D () C:\Program Files (x86)\psynetic
2014-09-02 16:44 - 2014-09-02 16:45 - 04842225 _____ () C:\Users\Sabine\Downloads\gif-x_setup.exe
2014-09-02 02:59 - 2014-09-02 02:59 - 00000000 ____D () C:\Users\Sabine\Documents\MAGIX
2014-09-02 02:58 - 2014-09-02 03:00 - 00000000 ____D () C:\Users\Sabine\AppData\Roaming\MAGIX
2014-09-02 02:57 - 2014-09-02 03:00 - 00000000 ____D () C:\ProgramData\MAGIX
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-10-02 22:00 - 2013-04-14 02:31 - 00000000 ____D () C:\Users\Sabine
2014-10-02 21:41 - 2014-07-02 22:07 - 00000000 ____D () C:\ProgramData\WinZip
2014-10-02 21:26 - 2013-10-20 17:19 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-10-02 21:24 - 2013-04-14 03:28 - 00003938 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{116AEE57-E6F4-4672-B1B3-C8B3101820E4}
2014-10-02 21:16 - 2013-04-14 05:07 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-02 20:53 - 2013-04-14 02:27 - 01927835 _____ () C:\Windows\WindowsUpdate.log
2014-10-02 20:36 - 2013-08-17 10:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-10-02 20:27 - 2009-07-14 06:45 - 00023344 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-02 20:27 - 2009-07-14 06:45 - 00023344 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-02 20:19 - 2013-04-14 11:39 - 00464848 _____ () C:\Windows\PFRO.log
2014-10-02 20:19 - 2013-04-14 05:07 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-02 20:19 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-02 20:19 - 2009-07-14 06:51 - 00038261 _____ () C:\Windows\setupact.log
2014-10-02 11:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-10-02 09:52 - 2013-04-14 05:08 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-10-01 23:26 - 2013-10-20 17:19 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-10-01 23:26 - 2013-04-14 05:05 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-10-01 23:26 - 2013-04-14 05:05 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-10-01 23:13 - 2009-07-14 19:58 - 00699666 _____ () C:\Windows\system32\perfh007.dat
2014-10-01 23:13 - 2009-07-14 19:58 - 00149774 _____ () C:\Windows\system32\perfc007.dat
2014-10-01 23:13 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-01 23:08 - 2013-11-21 16:19 - 00000000 ____D () C:\Users\Sabine\AppData\Local\Facebook
2014-10-01 23:04 - 2013-04-14 05:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-10-01 23:04 - 2013-04-14 05:05 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-10-01 23:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\servicing
2014-10-01 23:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat
2014-10-01 23:03 - 2013-04-21 12:42 - 00000000 ____D () C:\ProgramData\Atheros
2014-10-01 23:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-10-01 21:30 - 2014-08-02 18:28 - 00000000 ____D () C:\Users\Sabine\Desktop\Bewerbungsunterlagen
2014-10-01 10:04 - 2013-04-16 10:16 - 00000000 ____D () C:\Users\Sabine\AppData\Local\CrashDumps
2014-09-26 05:51 - 2014-01-17 15:23 - 00000000 ____D () C:\Users\Sabine\Desktop\Bilder
2014-09-26 04:24 - 2013-08-05 17:20 - 00000000 ____D () C:\Users\Sabine\Desktop\verk
2014-09-13 09:20 - 2014-05-07 09:30 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-09-12 10:24 - 2013-07-12 09:54 - 01594892 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-09-12 10:23 - 2013-08-15 07:54 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-12 09:31 - 2013-04-14 05:23 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-09-10 11:45 - 2013-12-30 22:03 - 00000000 ____D () C:\Program Files (x86)\Java
2014-09-10 11:45 - 2013-12-08 22:45 - 00000000 ____D () C:\ProgramData\Oracle
2014-09-10 11:23 - 2014-07-02 21:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AppsHat
2014-09-10 11:23 - 2013-04-14 04:24 - 00001049 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-10 10:11 - 2014-07-02 21:12 - 00000000 ____D () C:\ProgramData\XNcajQ
2014-09-10 10:11 - 2013-05-16 22:16 - 00000000 ____D () C:\Windows\de
2014-09-06 21:13 - 2014-03-31 15:43 - 00000000 ____D () C:\Users\Sabine\Desktop\ext FP
2014-09-06 21:11 - 2014-07-06 21:50 - 00000000 ____D () C:\Users\Sabine\Desktop\Dokumente
2014-09-04 14:55 - 2014-08-26 14:29 - 00000000 ____D () C:\Users\Sabine\AppData\Local\Microsoft Games
2014-09-03 01:31 - 2014-07-20 16:17 - 00000000 ____D () C:\Users\Sabine\Desktop\Vid
Some content of TEMP:
====================
C:\Users\Sabine\AppData\Local\Temp\APNSetup.exe
C:\Users\Sabine\AppData\Local\Temp\avgnt.exe
C:\Users\Sabine\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Sabine\AppData\Local\Temp\Quarantine.exe
C:\Users\Sabine\AppData\Local\Temp\ug015706.exe
C:\Users\Sabine\AppData\Local\Temp\ug074058.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-09-26 01:18
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-10-2014 01
Ran by Sabine at 2014-10-02 22:04:10
Running from C:\Users\Sabine\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
1400 (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
1400_Help (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden
1400Trb (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.167 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.08) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.2.122 - Adobe Systems, Inc.)
AIO_CDB_ProductContext (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
AIO_CDB_Software (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
AIO_Scan (x32 Version: 130.0.421.000 - Hewlett-Packard) Hidden
AMD APP SDK Runtime (Version: 10.0.851.6 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{EBF1529E-D2D5-47CF-97EC-7D90CEF0FE04}) (Version: 3.0.859.0 - Advanced Micro Devices, Inc.)
Atheros Bluetooth Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.4.0.135 - Atheros)
Audacity 2.0.3 (HKLM-x32\...\Audacity_is1) (Version: 2.0.3 - Audacity Team)
Avira (HKLM-x32\...\{df495620-2ba9-412d-828d-b27f020d9fc8}) (Version: 1.1.18.28431 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.18.28431 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.6.570 - Avira)
Avira SearchFree Toolbar (HKLM-x32\...\{41564952-412D-5637-00A7-A758B70C0A03}) (Version: 12.10.3.4489 - APN, LLC)
BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center (x32 Version: 2012.0209.2326.41882 - Ihr Firmenname) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0209.2326.41882 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2012.0209.2326.41882 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2012.0209.2326.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2012.0209.2326.41882 - Advanced Micro Devices, Inc.) Hidden
Copy (x32 Version: 130.0.428.000 - Hewlett-Packard) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.8 - DivX, LLC)
DocProc (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
Fax (x32 Version: 130.0.418.000 - Hewlett-Packard) Hidden
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 37.0.2062.124 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)
HP Photosmart Officejet and Deskjet All-In-One Driver Software 13.0 Rel. B (HKLM\...\{B61ED343-0B14-4241-999C-490CB1A20DA4}) (Version: 13.0 - HP)
HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden
HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPPhotosmartEssential (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
Intel PROSet Wireless (Version: - ) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.2.1410 - Intel Corporation)
Intel(R) PROSet/Wireless for Bluetooth(R) 3.0 + High Speed (HKLM\...\{2C0E6BD4-65B1-4E82-B2AC-43EFFC8F100C}) (Version: 15.0.0.0059 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{520C4DD4-2BC7-409B-BA48-E1A4F832662D}) (Version: 2.1.0.0140 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.0.0.1032 - Intel Corporation)
Intel® PROSet/Wireless WiFi-Software (HKLM\...\{DF7756DD-656A-45C3-BA71-74673E8259A9}) (Version: 15.00.0000.0642 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{09536BA1-E498-4CC3-B834-D884A67D7E34}) (Version: 1.23.605.1 - Intel Corporation)
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.670 - Oracle)
Java Auto Updater (x32 Version: 2.1.67.1 - Oracle, Inc.) Hidden
Junk Mail filter update (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft SkyDrive (HKCU\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 23.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 23.0.1 (x86 de)) (Version: 23.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 24.5.0 - Mozilla)
Mozilla Thunderbird 24.6.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.6.0 (x86 de)) (Version: 24.6.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Network64 (Version: 130.0.572.000 - Hewlett-Packard) Hidden
Network64 (Version: 140.0.221.000 - Hewlett-Packard) Hidden
OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)
OpenOffice.org 3.4.1 (HKLM-x32\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation)
OpenSource Flash Video Splitter 1.0.0.5 (HKLM-x32\...\OpenSource Flash Video Splitter) (Version: 1.0.0.5 - )
Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Qualcomm Atheros WiFi Driver Installation (HKLM-x32\...\{E727B31A-8B24-4C1C-934A-69634E0D2C0B}) (Version: 3.0 - Qualcomm Atheros)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6564 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7601.91 - Realtek Semiconductor Corp.)
Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden
SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
SSLx64 (Version: 1.0.0 - Sony Corporation ) Hidden
SSLx86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden
Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.0.1.6 - Synaptics Incorporated)
Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden
Ulead COOL 360 1.0 (HKLM-x32\...\{3CEA4CA8-CDD4-451C-B673-E8F17BE01B15}) (Version: - )
Ulead Photo Explorer 8.6 (HKLM-x32\...\{025C3792-E9C6-432A-92C1-661F99D021CA}) (Version: 8.6 - Ulead Systems, Inc.)
Ulead PhotoImpact 12 (HKLM-x32\...\{11AFE21E-B193-430D-B57A-DFF7815BB962}) (Version: 12.0 - Ulead System)
UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden
VAIO Gate (HKLM-x32\...\{A7C30414-2382-4086-B0D6-01A88ABA21C3}) (Version: 2.4.2.02200 - Sony Corporation)
VAIO Update (HKLM-x32\...\{9FF95DA2-7DA1-4228-93B7-DED7EC02B6B2}) (Version: 6.2.1.03260 - Sony Corporation)
VGClientX64 (Version: 1.0.0 - Sony Corporation) Hidden
VGClientX86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VU5x64 (Version: 1.1.0 - Sony Corporation ) Hidden
VU5x86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden
VU5x86 (x32 Version: 1.1.0 - Sony Corporation ) Hidden
WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Family Safety (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Yahoo! Messenger (HKLM-x32\...\Yahoo! Messenger) (Version: - Yahoo! Inc.)
Yahoo! Software Update (HKLM-x32\...\Yahoo! Software Update) (Version: - )
Yahoo! Toolbar (HKLM-x32\...\Yahoo! Companion) (Version: - )
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-1250141173-3139096374-720319810-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Sabine\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910_1\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1250141173-3139096374-720319810-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Sabine\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910_1\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1250141173-3139096374-720319810-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Sabine\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910_1\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1250141173-3139096374-720319810-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Sabine\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910_1\amd64\FileSyncApi64.dll (Microsoft Corporation)
==================== Restore Points =========================
24-09-2014 05:37:54 Windows Update
26-09-2014 02:36:15 WinZip 18.5 wird entfernt
26-09-2014 03:22:26 Prüfpunkt von HitmanPro
26-09-2014 03:23:58 Prüfpunkt von HitmanPro
01-10-2014 17:34:00 Windows Update
01-10-2014 20:47:14 Prüfpunkt von HitmanPro
02-10-2014 07:42:11 Windows Modules Installer
02-10-2014 07:45:12 Windows Modules Installer
02-10-2014 19:40:04 WinZip 18.5 wird entfernt
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {1AEA3F39-EA10-4B10-B3AA-684215F23097} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1250141173-3139096374-720319810-1000Core => C:\Users\Sabine\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-11-21] (Facebook Inc.)
Task: {28863747-1A30-4E81-A0E8-AE267F4454DB} - \AdobeFlashPlayerUpdate No Task File <==== ATTENTION
Task: {341404F5-A1B4-417E-993F-7CB30F9F3365} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {40A5CAF5-0164-476B-A9D0-5A48CB540FC3} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2012-02-20] (Sony Corporation)
Task: {7694C2F5-7F9C-4A0E-9863-0F177E28F6E4} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1250141173-3139096374-720319810-1000UA => C:\Users\Sabine\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-11-21] (Facebook Inc.)
Task: {A7D6B967-C49D-4819-A7CF-C75C89D70DD7} - System32\Tasks\Sony Corporation\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2012-02-20] (Sony Corporation)
Task: {B381A5DF-7120-44A2-8C67-45FABF4A7048} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-14] (Google Inc.)
Task: {C7C3C1E8-678C-49B3-B1F0-CFBD3A250867} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-14] (Google Inc.)
Task: {D5575199-DFDB-4365-825B-784DC29CCF82} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
Task: {E3D46802-7079-4BBF-B02B-8C70F0767A1E} - \AdobeFlashPlayerUpdate 2 No Task File <==== ATTENTION
Task: {E87667A2-71B0-45B6-B2C7-96A8FFA6E010} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-10-01] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1250141173-3139096374-720319810-1000Core.job => C:\Users\Sabine\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1250141173-3139096374-720319810-1000UA.job => C:\Users\Sabine\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-04-14 03:04 - 2012-04-03 22:45 - 00128280 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
2013-02-13 04:37 - 2013-02-13 04:37 - 01263952 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
2011-11-09 09:55 - 2011-11-09 09:55 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2012-02-09 23:19 - 2012-02-09 23:19 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2013-04-14 18:49 - 2012-05-25 04:25 - 00921600 _____ () C:\Program Files (x86)\Yahoo!\Messenger\yui.dll
2013-04-14 18:49 - 2012-05-25 04:25 - 00078336 _____ () C:\Program Files (x86)\Yahoo!\Messenger\pcre.dll
2014-07-14 16:49 - 2014-07-14 16:49 - 00137296 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll
2014-07-14 16:49 - 2014-07-14 16:49 - 00065104 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2013-02-13 04:38 - 2013-02-13 04:38 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2013-06-23 20:13 - 2004-07-26 17:11 - 00028672 _____ () C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\DetMethod.dll
2014-08-05 12:00 - 2014-07-14 16:49 - 00049744 _____ () C:\Users\Sabine\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2014-09-12 11:20 - 2014-09-12 11:20 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\4361e26af57c86003751ac77cce1c827\IsdiInterop.ni.dll
2013-04-14 03:05 - 2011-11-29 20:00 - 00059392 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2013-04-14 03:04 - 2012-04-03 22:46 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-08-17 10:23 - 2013-08-17 10:23 - 03551640 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-09-10 18:27 - 2014-09-10 18:27 - 16825520 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
========================= Accounts: ==========================
Administrator (S-1-5-21-1250141173-3139096374-720319810-500 - Administrator - Disabled)
Gast (S-1-5-21-1250141173-3139096374-720319810-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1250141173-3139096374-720319810-1002 - Limited - Enabled)
Sabine (S-1-5-21-1250141173-3139096374-720319810-1000 - Administrator - Enabled) => C:\Users\Sabine
==================== Faulty Device Manager Devices =============
Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Event log errors: =========================
Application errors:
==================
System errors:
=============
Microsoft Office Sessions:
=========================
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i3-2370M CPU @ 2.40GHz
Percentage of memory in use: 58%
Total physical RAM: 4066.36 MB
Available physical RAM: 1673.58 MB
Total Pagefile: 8130.9 MB
Available Pagefile: 5257.79 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:596.07 GB) (Free:523.04 GB) NTFS
Drive e: () (Fixed) (Total:29.8 GB) (Free:1.41 GB) FAT32
Drive f: () (Removable) (Total:7.5 GB) (Free:3.56 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596.2 GB) (Disk ID: 222AE71D)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=596.1 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 7.5 GB) (Disk ID: 00000000)
Partition: GPT Partition Type.
========================================================
Disk: 2 (Size: 29.8 GB) (Disk ID: E58013FB)
Partition 1: (Not Active) - (Size=29.8 GB) - (Type=0C)
==================== End Of Log ============================
GMER Code:
ATTFilter GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-10-02 22:41:43
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 Hitachi_ rev.JEDO 596,17GB
Running: Gmer-19357.exe; Driver: C:\Users\Sabine\AppData\Local\Temp\awdiqpod.sys
---- Kernel code sections - GMER 2.1 ----
INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 528 fffff80002fb4000 63 bytes [00, 00, 15, 02, 46, 69, 6C, ...]
INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 592 fffff80002fb4040 1 byte [10]
---- User code sections - GMER 2.1 ----
.text C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[2408] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076011465 2 bytes [01, 76]
.text C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[2408] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000760114bb 2 bytes [01, 76]
.text ... * 2
.text C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe[3252] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076011465 2 bytes [01, 76]
.text C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe[3252] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000760114bb 2 bytes [01, 76]
.text ... * 2
.text C:\Users\Sabine\AppData\Local\Facebook\Update\FacebookUpdate.exe[3400] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076011465 2 bytes [01, 76]
.text C:\Users\Sabine\AppData\Local\Facebook\Update\FacebookUpdate.exe[3400] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000760114bb 2 bytes [01, 76]
.text ... * 2
.text C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[3688] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076011465 2 bytes [01, 76]
.text C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[3688] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000760114bb 2 bytes [01, 76]
.text ... * 2
.text C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe[3816] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076011465 2 bytes [01, 76]
.text C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe[3816] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000760114bb 2 bytes [01, 76]
.text ... * 2
.text C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe[4016] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076011465 2 bytes [01, 76]
.text C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe[4016] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000760114bb 2 bytes [01, 76]
.text ... * 2
.text C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe[4048] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69 0000000076011465 2 bytes [01, 76]
.text C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe[4048] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155 00000000760114bb 2 bytes [01, 76]
.text ... * 2
.text C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[3952] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076011465 2 bytes [01, 76]
.text C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[3952] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000760114bb 2 bytes [01, 76]
.text ... * 2
.text C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe[1860] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076011465 2 bytes [01, 76]
.text C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe[1860] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000760114bb 2 bytes [01, 76]
.text ... * 2
---- Processes - GMER 2.1 ----
Library C:\Program Files\WinZip\wzshls64.dll (*** suspicious ***) @ C:\Windows\explorer.exe [5076] 000007fef9150000
---- Registry - GMER 2.1 ----
Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\08edb9b0b676
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\08edb9b0b676 (not active ControlSet)
---- EOF - GMER 2.1 ----
|
|
02.10.2014, 23:01
| #2 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | unerwünschte Werbefenster in Firefox (Win7) Hallo und
__________________ Bitte auch alle Logs von MBAM posten. Dann: Adware/Junkware/Toolbars entfernen (alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!) 1. Schritt: adwCleaner Downloade Dir bitte  AdwCleaner auf deinen Desktop.
2. Schritt: JRT - Junkware Removal Tool Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
3. Schritt: Frisches Log mit FRST Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
03.10.2014, 00:18
| #3 | |
| | unerwünschte Werbefenster in Firefox (Win7)Zitat:
AdwareCleaner: Code:
ATTFilter # AdwCleaner v3.311 - Bericht erstellt am 03/10/2014 um 00:42:01
# Aktualisiert 30/09/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Sabine - SABINE-PC
# Gestartet von : C:\Users\Sabine\Downloads\AdwCleaner_3.311(1).exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
***** [ Tasks ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.17280
-\\ Mozilla Firefox v23.0.1 (de)
[ Datei : C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js ]
-\\ Google Chrome v37.0.2062.124
[ Datei : C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [40679 octets] - [10/09/2014 09:32:41]
AdwCleaner[R1].txt - [40740 octets] - [10/09/2014 09:36:31]
AdwCleaner[R2].txt - [34089 octets] - [10/09/2014 11:15:46]
AdwCleaner[R3].txt - [3382 octets] - [26/09/2014 04:41:40]
AdwCleaner[R4].txt - [1340 octets] - [03/10/2014 00:40:47]
AdwCleaner[S0].txt - [32635 octets] - [10/09/2014 11:22:31]
AdwCleaner[S1].txt - [3444 octets] - [26/09/2014 04:43:45]
AdwCleaner[S2].txt - [1261 octets] - [03/10/2014 00:42:01]
########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1321 octets] ##########
JRT: Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.2.6 (10.02.2014:1)
OS: Windows 7 Home Premium x64
Ran by Sabine on 03.10.2014 at 1:00:03,19
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 03.10.2014 at 1:04:03,24
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2014
Ran by Sabine (administrator) on SABINE-PC on 03-10-2014 01:06:16
Running from C:\Users\Sabine\Downloads
Loaded Profile: Sabine (Available profiles: Sabine)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Yahoo! Inc.) C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Facebook Inc.) C:\Users\Sabine\AppData\Local\Facebook\Update\FacebookUpdate.exe
(Yahoo! Inc.) C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Ulead Systems, Inc.) C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\Monitor.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Yahoo! Inc.) C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [BLEServicesCtrl] => C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [177936 2012-02-17] (Intel Corporation)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1156712 2012-04-03] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2885944 2012-09-20] (Synaptics Incorporated)
HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\btvstack.exe [1022592 2012-04-28] (Atheros Communications)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\athbttray.exe [801920 2012-04-28] (Atheros Commnucations)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2012-02-10] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-05-20] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1263952 2013-02-13] ()
HKLM-x32\...\Run: [Ulead AutoDetector v2] => C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\monitor.exe [90112 2004-11-26] (Ulead Systems, Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [190032 2014-07-14] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-1250141173-3139096374-720319810-1000\...\Run: [Messenger (Yahoo!)] => C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe [6595928 2012-05-25] (Yahoo! Inc.)
HKU\S-1-5-21-1250141173-3139096374-720319810-1000\...\Run: [ChicaPasswordManager] => "C:\Program Files (x86)\ChicaLogic\Chica Password Manager\stpass.exe" /autorunned
HKU\S-1-5-21-1250141173-3139096374-720319810-1000\...\Run: [Facebook Update] => C:\Users\Sabine\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-11-21] (Facebook Inc.)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-05-18] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x23C5B3F4B138CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
URLSearchHook: HKCU - YTNavAssistPlugin Class - {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
BHO: Avira SearchFree Toolbar -> {41564952-412D-5637-00A7-7A786E7484D7} -> "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll" No File
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO-x32: Avira SearchFree Toolbar -> {41564952-412D-5637-00A7-7A786E7484D7} -> "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll" No File
Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default
FF SearchEngineOrder.3: Bing
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.17.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @divx.com/DivX Plus Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 -> C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Sabine\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\searchplugins\nation-secure-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\nation-secure-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: My Movie Magnet - C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\Extensions\admin@mymoviemagnet.com [2013-08-07]
FF Extension: Garmin Communicator - C:\Users\\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2013-04-23]
FF Extension: No Name - C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} [Not Found]
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Profile: C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-04-14]
CHR Extension: (Bazaar Friend) - C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmobdmpfgfimbnmhhnkmmecdboblafdh [2013-09-13]
CHR Extension: (Google Search) - C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-04-14]
CHR Extension: (Foxtab Speed Dial (Beta)) - C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcendgajlhoaiiccpijilcpmgphfflnj [2013-08-09]
CHR Extension: (Google Wallet) - C:\Users\\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-16]
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2013-07-24]
CHR Extension: (Gmail) - C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-04-14]
CHR HKLM\...\Chrome\Extension: [bmobdmpfgfimbnmhhnkmmecdboblafdh] - C:\Users\Sabine\AppData\Local\BazaarFriend.crx [2013-08-13]
CHR HKLM\...\Chrome\Extension: [kcendgajlhoaiiccpijilcpmgphfflnj] - C:\Users\Sabine\AppData\Local\newhb.crx [2013-08-01]
CHR HKCU\...\Chrome\Extension: [bmobdmpfgfimbnmhhnkmmecdboblafdh] - C:\Users\Sabine\AppData\Local\BazaarFriend.crx [2013-08-13]
CHR HKCU\...\Chrome\Extension: [kcendgajlhoaiiccpijilcpmgphfflnj] - C:\Users\Sabine\AppData\Local\newhb.crx [2013-08-01]
CHR HKLM-x32\...\Chrome\Extension: [bmobdmpfgfimbnmhhnkmmecdboblafdh] - C:\Users\Sabine\AppData\Local\BazaarFriend.crx [2013-08-13]
CHR HKLM-x32\...\Chrome\Extension: [kcendgajlhoaiiccpijilcpmgphfflnj] - C:\Users\Sabine\AppData\Local\newhb.crx [2013-08-01]
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2013-05-06]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1021520 2014-08-05] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-14] (Avira Operations GmbH & Co. KG)
R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [File not signed]
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2010-10-22] (Hewlett-Packard Co.) [File not signed]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-04-03] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-04-03] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2011-12-08] ()
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1359408 2013-03-26] (Sony Corporation)
R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [163456 2012-04-28] (Atheros)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [594704 2011-12-08] (Intel® Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-06-24] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [46368 2013-10-04] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-22] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-09-30] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [42040 2014-07-08] (Avira Operations GmbH & Co. KG)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-10-03] (Malwarebytes Corporation)
S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 AthBTPort; system32\DRIVERS\btath_flt.sys [X]
S3 BTATH_A2DP; system32\drivers\btath_a2dp.sys [X]
S3 btath_avdt; system32\drivers\btath_avdt.sys [X]
S3 BTATH_BUS; system32\DRIVERS\btath_bus.sys [X]
S3 BTATH_HCRP; system32\DRIVERS\btath_hcrp.sys [X]
S3 BTATH_LWFLT; system32\DRIVERS\btath_lwflt.sys [X]
S3 BTATH_RCP; system32\DRIVERS\btath_rcp.sys [X]
S3 BTATH_VDP; system32\drivers\btath_vdp.sys [X]
S3 BtFilter; system32\DRIVERS\btfilter.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-10-03 01:06 - 2014-10-03 01:06 - 00021461 _____ () C:\Users\Sabine\Downloads\FRST.txt
2014-10-03 01:06 - 2014-10-03 01:06 - 00000000 ____D () C:\Users\Sabine\Downloads\FRST-OlderVersion
2014-10-03 01:04 - 2014-10-03 01:04 - 00000626 _____ () C:\Users\Sabine\Desktop\JRT.txt
2014-10-03 00:59 - 2014-10-03 00:59 - 01701755 _____ (Thisisu) C:\Users\Sabine\Downloads\JRT(1).exe
2014-10-03 00:56 - 2014-10-03 00:56 - 00001401 _____ () C:\Users\Sabine\Desktop\AdwCleaner[S2].txt
2014-10-03 00:55 - 2014-10-03 00:55 - 00000000 ___RD () C:\Users\Sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-10-03 00:27 - 2014-10-03 00:27 - 01375089 _____ () C:\Users\Sabine\Downloads\AdwCleaner_3.311(1).exe
2014-10-03 00:07 - 2014-10-03 00:08 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-10-03 00:07 - 2014-10-03 00:07 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-10-03 00:07 - 2014-10-03 00:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-10-03 00:07 - 2014-10-03 00:07 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-10-03 00:07 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-10-03 00:07 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-10-03 00:07 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-10-02 22:41 - 2014-10-02 22:41 - 00006405 _____ () C:\Users\Sabine\Desktop\gmerlog.log
2014-10-02 22:12 - 2014-10-02 22:12 - 00380416 _____ () C:\Users\Sabine\Downloads\Gmer-19357.exe
2014-10-02 22:04 - 2014-10-02 22:04 - 00027625 _____ () C:\Users\Sabine\Desktop\Addition.txt
2014-10-02 22:02 - 2014-10-03 01:06 - 00000000 ____D () C:\FRST
2014-10-02 22:02 - 2014-10-02 22:04 - 00041418 _____ () C:\Users\Sabine\Desktop\FRST.txt
2014-10-02 22:01 - 2014-10-03 01:06 - 02109440 _____ (Farbar) C:\Users\Sabine\Downloads\FRST64.exe
2014-10-02 22:00 - 2014-10-02 22:00 - 00000474 _____ () C:\Users\Sabine\Desktop\defogger_disable.log
2014-10-02 22:00 - 2014-10-02 22:00 - 00000000 _____ () C:\Users\Sabine\defogger_reenable
2014-10-02 21:57 - 2014-10-02 21:57 - 00050477 _____ () C:\Users\Sabine\Downloads\Defogger.exe
2014-10-02 21:50 - 2014-10-02 21:50 - 00009714 _____ () C:\Users\Sabine\Desktop\Ereignisse.txt
2014-10-02 20:58 - 2014-10-02 20:58 - 02347384 _____ (ESET) C:\Users\Sabine\Downloads\esetsmartinstaller_deu.exe
2014-10-02 20:27 - 2014-10-02 20:27 - 00000000 ____D () C:\Windows\ERUNT
2014-10-02 20:25 - 2014-10-02 20:25 - 01701755 _____ (Thisisu) C:\Users\Sabine\Downloads\JRT.exe
2014-10-02 20:19 - 2014-10-02 20:19 - 00000000 ____D () C:\Windows\SysWOW64\IPM
2014-10-02 20:14 - 2014-10-02 20:14 - 01375089 _____ () C:\Users\Sabine\Downloads\AdwCleaner_3.311.exe
2014-10-02 20:01 - 2014-10-02 20:02 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Sabine\Downloads\mbam-setup-2.0.2.1012(1).exe
2014-10-01 23:17 - 2014-09-25 04:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-10-01 23:16 - 2014-09-25 03:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-10-01 23:16 - 2014-09-10 00:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-10-01 23:16 - 2014-09-09 23:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-10-01 22:49 - 2014-10-01 23:02 - 00000000 ____D () C:\Windows\Minidump
2014-10-01 19:31 - 2014-10-01 21:30 - 00019990 _____ () C:\Users\Sabine\Desktop\Lebenslauf August 2014.odt
2014-09-26 05:24 - 2014-10-01 22:47 - 00000224 _____ () C:\Windows\system32\.crusader
2014-09-26 05:12 - 2014-09-26 05:12 - 00001905 _____ () C:\Users\Public\Desktop\HitmanPro.lnk
2014-09-26 05:12 - 2014-09-26 05:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
2014-09-26 05:10 - 2014-10-01 23:03 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-09-26 05:09 - 2014-09-26 05:10 - 10280824 _____ (SurfRight B.V.) C:\Users\Sabine\Downloads\HitmanPro.exe
2014-09-25 05:13 - 2014-10-01 23:02 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-09-25 05:12 - 2014-10-01 23:03 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-09-25 05:12 - 2014-10-01 23:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-09-25 05:12 - 2014-10-01 23:03 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-09-25 00:57 - 2014-09-25 00:57 - 00000000 ____D () C:\ProgramData\Emsisoft
2014-09-24 22:02 - 2014-09-26 04:19 - 00000000 ____D () C:\Program Files (x86)\Emsisoft Anti-Malware
2014-09-18 18:43 - 2014-09-20 21:23 - 00000000 ____D () C:\Users\Sabine\AppData\Roaming\Nico Mak Computing
2014-09-18 18:41 - 2014-09-18 18:42 - 04892480 _____ (WinZip International LLC ) C:\Users\Sabine\Downloads\wzmp_8(1).exe
2014-09-16 15:38 - 2014-05-12 15:16 - 00033235 _____ () C:\Users\Sabine\Downloads\reloadevery-28.0.2-fx.xpi
2014-09-16 15:09 - 2014-09-16 15:09 - 00030650 _____ () C:\Users\Sabine\Downloads\reloadevery-28.0.2-fx.zip
2014-09-15 21:30 - 2014-09-15 21:58 - 360886938 _____ () C:\Users\Sabine\Downloads\output.zip
2014-09-14 12:06 - 2014-09-14 12:06 - 01557816 _____ () C:\Users\Sabine\Downloads\14470198.zip
2014-09-13 09:14 - 2014-09-13 09:14 - 00066048 _____ () C:\Users\Sabine\Desktop\Unbenannt - 1.ufo
2014-09-13 08:49 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-09-13 08:49 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-09-12 10:25 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-09-12 10:25 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-09-12 10:25 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-12 10:25 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-12 10:25 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-09-12 10:25 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-09-12 10:25 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-12 10:25 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-12 10:25 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-09-12 10:25 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-09-12 10:25 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-09-12 10:25 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-09-12 10:25 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-09-12 10:25 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-12 10:25 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-09-12 10:25 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-12 10:25 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-09-12 10:25 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-09-12 10:25 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-09-12 10:25 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-09-12 10:25 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-09-12 10:25 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-12 10:25 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-09-12 10:25 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-09-12 10:25 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-09-12 10:25 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-09-12 10:25 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-09-12 10:25 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-09-12 10:25 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-09-12 10:25 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-12 10:25 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-09-12 10:25 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-09-12 10:25 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-12 10:25 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-09-12 10:25 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-09-12 10:25 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-09-12 10:25 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-09-12 10:25 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-12 10:25 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-09-12 10:25 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-12 10:25 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-09-12 10:25 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-09-12 10:25 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-09-12 10:25 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-09-12 10:25 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-09-12 10:25 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-12 10:25 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-09-12 10:25 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-12 10:25 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-09-12 10:25 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-09-12 10:25 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-09-12 10:25 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-12 10:25 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-09-12 10:25 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-09-12 10:25 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-09-12 10:25 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-09-11 22:14 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-11 22:14 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-09-11 22:13 - 2014-09-05 04:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-11 22:13 - 2014-09-05 04:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-11 22:13 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-09-11 22:13 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-11 22:13 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-09-11 22:13 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-09-11 22:13 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-09-11 22:13 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-09-11 22:13 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-09-10 11:46 - 2014-09-10 11:46 - 00000000 ____D () C:\Users\Sabine\AppData\Roaming\Oracle
2014-09-10 11:45 - 2014-07-25 12:55 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-09-10 11:45 - 2014-07-25 12:49 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-09-10 11:45 - 2014-07-25 12:49 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-09-10 11:45 - 2014-07-25 12:49 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-09-10 11:44 - 2014-09-10 11:45 - 00004623 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_67-b01.log
2014-09-10 09:40 - 2014-09-10 09:40 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-10 09:38 - 2014-09-10 09:39 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Sabine\Downloads\mbam-setup-2.0.2.1012.exe
2014-09-10 09:33 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-09-10 09:32 - 2014-10-03 00:42 - 00000000 ____D () C:\AdwCleaner
2014-09-10 09:32 - 2014-09-10 09:32 - 01370467 _____ () C:\Users\Sabine\Downloads\adwcleaner_3.309.exe
2014-09-09 16:09 - 2014-09-09 16:10 - 04892480 _____ (WinZip International LLC ) C:\Users\Sabine\Downloads\wzmp_8.exe
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-10-03 01:04 - 2009-07-14 06:45 - 00023344 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-03 01:04 - 2009-07-14 06:45 - 00023344 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-03 01:00 - 2013-04-14 02:27 - 01931916 _____ () C:\Windows\WindowsUpdate.log
2014-10-03 00:55 - 2013-04-14 05:07 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-03 00:54 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-03 00:54 - 2009-07-14 06:51 - 00038317 _____ () C:\Windows\setupact.log
2014-10-03 00:52 - 2013-04-14 11:39 - 00465158 _____ () C:\Windows\PFRO.log
2014-10-03 00:26 - 2013-10-20 17:19 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-10-03 00:15 - 2013-04-14 05:07 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-02 22:00 - 2013-04-14 02:31 - 00000000 ____D () C:\Users\Sabine
2014-10-02 21:41 - 2014-07-02 22:07 - 00000000 ____D () C:\ProgramData\WinZip
2014-10-02 21:24 - 2013-04-14 03:28 - 00003938 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{116AEE57-E6F4-4672-B1B3-C8B3101820E4}
2014-10-02 20:36 - 2013-08-17 10:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-10-02 11:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-10-02 09:52 - 2013-04-14 05:08 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-10-01 23:26 - 2013-10-20 17:19 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-10-01 23:26 - 2013-04-14 05:05 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-10-01 23:26 - 2013-04-14 05:05 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-10-01 23:13 - 2009-07-14 19:58 - 00699666 _____ () C:\Windows\system32\perfh007.dat
2014-10-01 23:13 - 2009-07-14 19:58 - 00149774 _____ () C:\Windows\system32\perfc007.dat
2014-10-01 23:13 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-01 23:08 - 2013-11-21 16:19 - 00000000 ____D () C:\Users\Sabine\AppData\Local\Facebook
2014-10-01 23:04 - 2013-04-14 05:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-10-01 23:04 - 2013-04-14 05:05 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-10-01 23:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\servicing
2014-10-01 23:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat
2014-10-01 23:03 - 2013-04-21 12:42 - 00000000 ____D () C:\ProgramData\Atheros
2014-10-01 23:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-10-01 21:30 - 2014-08-02 18:28 - 00000000 ____D () C:\Users\Sabine\Desktop\Bewerbungsunterlagen
2014-10-01 10:04 - 2013-04-16 10:16 - 00000000 ____D () C:\Users\Sabine\AppData\Local\CrashDumps
2014-09-26 05:51 - 2014-01-17 15:23 - 00000000 ____D () C:\Users\Sabine\Desktop\Bilder
2014-09-26 04:24 - 2013-08-05 17:20 - 00000000 ____D () C:\Users\Sabine\Desktop\verk
2014-09-13 09:20 - 2014-05-07 09:30 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-09-12 10:24 - 2013-07-12 09:54 - 01594892 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-09-12 10:23 - 2013-08-15 07:54 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-12 09:31 - 2013-04-14 05:23 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-09-10 11:45 - 2013-12-30 22:03 - 00000000 ____D () C:\Program Files (x86)\Java
2014-09-10 11:45 - 2013-12-08 22:45 - 00000000 ____D () C:\ProgramData\Oracle
2014-09-10 11:23 - 2014-07-02 21:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AppsHat
2014-09-10 11:23 - 2013-04-14 04:24 - 00001049 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-10 10:11 - 2014-07-02 21:12 - 00000000 ____D () C:\ProgramData\XNcajQ
2014-09-10 10:11 - 2013-05-16 22:16 - 00000000 ____D () C:\Windows\de
2014-09-06 21:13 - 2014-03-31 15:43 - 00000000 ____D () C:\Users\Sabine\Desktop\ext FP
2014-09-06 21:11 - 2014-07-06 21:50 - 00000000 ____D () C:\Users\Sabine\Desktop\Dokumente
2014-09-04 14:55 - 2014-08-26 14:29 - 00000000 ____D () C:\Users\Sabine\AppData\Local\Microsoft Games
2014-09-03 01:31 - 2014-07-20 16:17 - 00000000 ____D () C:\Users\Sabine\Desktop\Vid
Some content of TEMP:
====================
C:\Users\Sabine\AppData\Local\Temp\APNSetup.exe
C:\Users\Sabine\AppData\Local\Temp\avgnt.exe
C:\Users\Sabine\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Sabine\AppData\Local\Temp\Quarantine.exe
C:\Users\Sabine\AppData\Local\Temp\ug015706.exe
C:\Users\Sabine\AppData\Local\Temp\ug074058.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-09-26 01:18
==================== End Of Log ============================
|
|
03.10.2014, 00:21
| #4 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | unerwünschte Werbefenster in Firefox (Win7) Logs von MBAM sind im Verlauf zu finden. Alle aktuellen Suchlauf-Protokolle bitte posten.
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
03.10.2014, 10:28
| #5 |
| | unerwünschte Werbefenster in Firefox (Win7) Ich bin mir nicht sicher, ob ich jetzt das richtige habe. Da gibt es Suchlauf-Protokolle und Schutzprotokolle. Bei den Suchlauf-Protokollen steht nur in einem etwas drin. Alle anderen sind 'leer', also so wie ich das interpretiere 'ohne Funde'. Das Suchlauf-Protokoll in dem etwas zu sehen war hab ich im Anhang (zu viele Zeichen, um es als Code hier einzufügen) Reicht das oder muss ich die 'leeren' Protokolle auch posten? Und werden die Schutzprotokolle auch benötigt? *ich hoffe ich habe im richtigen Format angehängt* |
|
03.10.2014, 14:06
| #6 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | unerwünschte Werbefenster in Firefox (Win7) Nur das Suchlauf-Protokoll mit Funden posten. Und bitte in CODE-Tags.  Lesestoff:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ --> unerwünschte Werbefenster in Firefox (Win7) |
|
03.10.2014, 16:30
| #7 |
| | unerwünschte Werbefenster in Firefox (Win7) Der sagt das sind zu viele Zeichen, also hab ich es geteilt: Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 10.09.2014 Suchlauf-Zeit: 09:44:50 Logdatei: 1.txt Administrator: Ja Version: 2.00.2.1012 Malware Datenbank: v2014.09.10.03 Rootkit Datenbank: v2014.08.21.01 Lizenz: Testversion Malware Schutz: Aktiviert Bösartiger Webseiten Schutz: Aktiviert Self-protection: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Sabine Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 310314 Verstrichene Zeit: 15 Min, 13 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristics: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 1 Adware.MovieMode, C:\ProgramData\XNcajQ\YTYbWanC.exe, 2928, Löschen bei Neustart, [986323c88cefe35323ac373aa45d8080] Module: 0 (No malicious items detected) Registrierungsschlüssel: 39 Adware.MovieMode, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\YTYbWanC, In Quarantäne, [986323c88cefe35323ac373aa45d8080], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, In Quarantäne, [39c27477ef8c46f07eb06d4c966c4fb1], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, In Quarantäne, [39c27477ef8c46f07eb06d4c966c4fb1], PUP.Optional.Wajam.A, HKLM\SOFTWARE\CLASSES\APPID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}, In Quarantäne, [11ea68836a1190a62add16a49e649f61], PUP.Optional.Wajam.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}, In Quarantäne, [11ea68836a1190a62add16a49e649f61], PUP.Optional.WebSteroids.A, HKLM\SOFTWARE\CLASSES\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}, In Quarantäne, [06f57f6c0c6f2d0954b5661fda2841bf], PUP.Optional.WebSteroids.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}, In Quarantäne, [06f57f6c0c6f2d0954b5661fda2841bf], PUP.Optional.DynConIE.A, HKLM\SOFTWARE\CLASSES\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}, In Quarantäne, [ee0d2dbeaccffe38e2f68bf9986a936d], PUP.Optional.DynConIE.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}, In Quarantäne, [ee0d2dbeaccffe38e2f68bf9986a936d], PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B}, In Quarantäne, [18e37f6ca8d38da9e159f6c3ca3842be], PUP.Optional.SearchProtect.A, HKU\S-1-5-21-1250141173-3139096374-720319810-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}, In Quarantäne, [986307e46b10c076ac439be4a35fca36], PUP.Optional.Babylon.A, HKU\S-1-5-21-1250141173-3139096374-720319810-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, In Quarantäne, [2ccfa04bf78470c63789f58a43bf1fe1], PUP.Optional.MySearchDial.A, HKU\S-1-5-21-1250141173-3139096374-720319810-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}, In Quarantäne, [26d59259bcbf53e3915fbbc47e84a65a], PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68B81CCD-A80C-4060-8947-5AE69ED01199}, In Quarantäne, [2fccd4175328053190e4dadfb84a28d8], PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}, In Quarantäne, [619a21ca2c4fef47532241788f7311ef], PUP.Optional.DigitalSites.A, HKU\S-1-5-21-1250141173-3139096374-720319810-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\DSite, In Quarantäne, [5e9d0be086f5f93d3283a39d936e8d73], PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{78b17104-363a-4bd9-b49c-77419f14b0d0}w64, In Quarantäne, [06f54f9c007b191db8f7bba6c93b59a7], PUP.Optional.DomaIQ.A, HKLM\SOFTWARE\DomaIQ, In Quarantäne, [20dbd41797e4d85e670f200e56ad20e0], PUP.Optional.BargainWorkbench.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\gebcpofjimbbchggpnfcaiieolloeodp, In Quarantäne, [00fb87643b40ab8bc87028e9fa09d12f], PUP.Optional.MyMovieMagnet.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\hpljfflibaokjcndmchkfjalpjjblioc, In Quarantäne, [f902618a1665b185261545ccc1428f71], PUP.Optional.DataMangr.A, HKLM\SOFTWARE\WOW6432NODE\DataMngr, In Quarantäne, [27d402e9df9c9b9b3191719dc63d0ef2], PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\Iminent, In Quarantäne, [d8235992512aa39348313deff50e9b65], PUP.Optional.qvo6.A, HKLM\SOFTWARE\WOW6432NODE\qvo6Software, In Quarantäne, [fefd4c9fa5d688aef932e65efe06e719], PUP.Optional.BargainWorkbench.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\gebcpofjimbbchggpnfcaiieolloeodp, In Quarantäne, [f00ba04b97e45adcf246d8394fb49769], PUP.Optional.MyMovieMagnet.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\hpljfflibaokjcndmchkfjalpjjblioc, In Quarantäne, [c4378962a2d981b5c873090810f349b7], PUP.Optional.SystemSpeedup, HKLM\SOFTWARE\WOW6432NODE\SYSTWEAK\ssd, In Quarantäne, [02f976752e4d06308ca649bd689b17e9], PUP.Optional.DataMngr.A, HKU\S-1-5-21-1250141173-3139096374-720319810-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr_Toolbar, In Quarantäne, [41ba6d7edd9e0135378554ed5da7867a], PUP.Optional.Iminent.A, HKU\S-1-5-21-1250141173-3139096374-720319810-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Iminent, In Quarantäne, [c93232b9c9b26ec8c5b51d0f847f3fc1], PUP.Optional.CrossRider.A, HKU\S-1-5-21-1250141173-3139096374-720319810-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, In Quarantäne, [54a7df0c344738fef0352630e51f6b95], PUP.Optional.MultiIE.A, HKU\S-1-5-21-1250141173-3139096374-720319810-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\DynConIE, In Quarantäne, [8c6fb33888f356e04906df809470da26], PUP.Optional.PriceGong.A, HKU\S-1-5-21-1250141173-3139096374-720319810-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, In Quarantäne, [10ebffece6950f2711ea68bd49ba936d], PUP.Optional.Babylon.A, HKU\S-1-5-21-1250141173-3139096374-720319810-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\BABSOLUTION\Updater, In Quarantäne, [7c7f01eae09ba2945967d86a6e9604fc], PUP.Optional.Conduit.A, HKU\S-1-5-21-1250141173-3139096374-720319810-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CONDUIT\FF, In Quarantäne, [d3285695accf3204213370d735cf34cc], PUP.Optional.BargainWorkbench.A, HKU\S-1-5-21-1250141173-3139096374-720319810-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\gebcpofjimbbchggpnfcaiieolloeodp, In Quarantäne, [718ac823d3a83df987b2b25f768d8e72], PUP.Optional.MyMovieMagnet.A, HKU\S-1-5-21-1250141173-3139096374-720319810-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\hpljfflibaokjcndmchkfjalpjjblioc, In Quarantäne, [f506c12a7efdea4cd468b55c857eba46], PUP.Optional.InstallCore.A, HKU\S-1-5-21-1250141173-3139096374-720319810-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, In Quarantäne, [d526d7144f2cbf77f78dc962ab58b050], PUP.Optional.InstallCore.A, HKU\S-1-5-21-1250141173-3139096374-720319810-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, In Quarantäne, [b74438b3700b59dd00e09ba6c53f58a8], PUP.Optional.Qone8, HKU\S-1-5-21-1250141173-3139096374-720319810-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [50ab9d4e02792b0bed8e074648bcbc44], PUP.Optional.SystemSpeedup, HKU\S-1-5-21-1250141173-3139096374-720319810-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SYSTWEAK\ssd, In Quarantäne, [0eedf2f973080531151c2bdbb350ff01], Registrierungswerte: 6 PUP.Optional.OptimizePro.A, HKU\S-1-5-21-1250141173-3139096374-720319810-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Optimizer Pro, C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe, In Quarantäne, [966503e86318261045233ae428d89b65] PUP.Optional.VBates, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}, In Quarantäne, [8c6f7c6f9fdc1f178537166f689a6898], PUP.Optional.VBates, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{21EAF666-26B3-4A3C-ABD0-CA2F5A326744}, C:\Program Files\V-bates\Firefox, In Quarantäne, [8c6f7c6f9fdc1f178537166f689a6898] PUP.Optional.VBates, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{21EAF666-26B3-4A3C-ABD0-CA2F5A326744}, C:\Program Files\V-bates\Firefox, In Quarantäne, [8c6f7c6f9fdc1f178537166f689a6898] PUP.Optional.VBates, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}, In Quarantäne, [37c4e5066a1196a0813baadbdb27ec14], PUP.Optional.InstallCore.A, HKU\S-1-5-21-1250141173-3139096374-720319810-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0R0DtO0U1C1S1U1StR0J1Q2P1J1K1I2R, In Quarantäne, [b74438b3700b59dd00e09ba6c53f58a8] Registrierungsdaten: 4 PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[19e25f8c2b50e2547421e214ce364eb2] PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[6596bc2f730850e64b4a579f13f1a15f] PUP.Optional.Trovi.A, HKU\S-1-5-21-1250141173-3139096374-720319810-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.trovi.com/?gd=&ctid=CT3320691&octid=EB_ORIGINAL_CTID&ISID=M8DC2E326-15EB-46C4-98D6-2AE3AE0F9094&SearchSource=55&CUI=&UM=6&UP=SP407B9C82-EDAF-444F-A5FB-FF57FA2F79F3&SSPV=, Gut: (www.google.com), Schlecht: (hxxp://www.trovi.com/?gd=&ctid=CT3320691&octid=EB_ORIGINAL_CTID&ISID=M8DC2E326-15EB-46C4-98D6-2AE3AE0F9094&SearchSource=55&CUI=&UM=6&UP=SP407B9C82-EDAF-444F-A5FB-FF57FA2F79F3&SSPV=),Ersetzt,[19e2f3f85a21cb6bcf0797544db715eb] Hijack.StartPage, HKU\S-1-5-21-1250141173-3139096374-720319810-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.qvo6.com/?utm_source=b&utm_medium=adk&from=adk&uid=HitachiXHTS547564A9E384_J2180053J8BRNCJ8BRNCX&ts=1366099902, Gut: (www.google.com), Schlecht: (hxxp://www.qvo6.com/?utm_source=b&utm_medium=adk&from=adk&uid=HitachiXHTS547564A9E384_J2180053J8BRNCJ8BRNCX&ts=1366099902),Ersetzt,[28d3effc017af24457e02bcb49bb0cf4] Ordner: 63 PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c], PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\app, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c], PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\app\config, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c], PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\app\config\1, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c], PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\app\config\3, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c], PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\app\config\35, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c], PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\app\config\36, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c], PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\app\config\39, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c], PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\app\config\4, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c], PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\app\config\41, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c], PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\app\config\42, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c], PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\desk_bkg, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c], PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c], PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\promote, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c], PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\sysicons, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c], PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\wp, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c], PUP.Optional.Desk365.A, C:\Program Files (x86)\Desk 365, In Quarantäne, [41baa14a1962ef474d6885bab05404fc], PUP.Optional.Delta.A, C:\Users\Sabine\AppData\Roaming\BabSolution\Shared, In Quarantäne, [f50622c9017a7eb85d714c1331d30ef2], PUP.Optional.DealPly.A, C:\Users\Sabine\AppData\Roaming\DealPly, In Quarantäne, [48b340abe39885b1b5a6527af30f748c], PUP.Optional.DealPly.A, C:\Users\Sabine\AppData\Roaming\DealPly\UpdateProc, In Quarantäne, [48b340abe39885b1b5a6527af30f748c], PUP.Optional.OpenCandy, C:\Users\Sabine\AppData\Roaming\OpenCandy, In Quarantäne, [5f9ca14a433860d67f12577546bc1fe1], PUP.Optional.OpenCandy, C:\Users\Sabine\AppData\Roaming\OpenCandy\91B34D77027D4A38AA358681785B2EF2, In Quarantäne, [5f9ca14a433860d67f12577546bc1fe1], PUP.Optional.OpenCandy, C:\Users\Sabine\AppData\Roaming\OpenCandy\ECCA67B024534A72AC4A5ED9168B96B1, In Quarantäne, [5f9ca14a433860d67f12577546bc1fe1], PUP.Optional.Conduit.A, C:\Users\Sabine\AppData\Local\Temp\CT3314932, In Quarantäne, [db2010db2853d462769116b7a75b6e92], PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b], PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b], PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\browser, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b], PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\data, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b], PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\external, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b], PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\newtab, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b], PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\defaults, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b], PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\defaults\preferences, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b], PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b], PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\external, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b], PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\gallery, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b], PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\icons, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b], PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b], PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\css, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b], PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b], PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\patterns, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b], PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\resources, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b], PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b], PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\css, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b], PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b], PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\chrome, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b], PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\favorites, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b], PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\info, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b], PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\resources, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b], PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\_locales, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b], PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\_locales\en-US, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b], PUP.Optional.BargainWorkbench.A, C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\gebcpofjimbbchggpnfcaiieolloeodp, In Quarantäne, [50aba546d1aa44f244c2fedf738f16ea], PUP.Optional.BargainWorkbench.A, C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\gebcpofjimbbchggpnfcaiieolloeodp\1.4.1.0_0, In Quarantäne, [50aba546d1aa44f244c2fedf738f16ea], PUP.Optional.BargainWorkbench.A, C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\gebcpofjimbbchggpnfcaiieolloeodp\1.4.1.0_0\images, In Quarantäne, [50aba546d1aa44f244c2fedf738f16ea], PUP.Optional.MyMovieMagnet.A, C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpljfflibaokjcndmchkfjalpjjblioc, In Quarantäne, [e417727982f9ee48f61111cc3ec45fa1], PUP.Optional.MyMovieMagnet.A, C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpljfflibaokjcndmchkfjalpjjblioc\4.0.0.0_0, In Quarantäne, [e417727982f9ee48f61111cc3ec45fa1], PUP.Optional.MyMovieMagnet.A, C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpljfflibaokjcndmchkfjalpjjblioc\4.0.0.0_0\images, In Quarantäne, [e417727982f9ee48f61111cc3ec45fa1], PUP.Optional.BabSolution.A, C:\Users\Sabine\AppData\Roaming\BabSolution\CR, In Quarantäne, [38c317d4d5a6211539394e96f30f4db3], PUP.Optional.SystemSpeedup, C:\Users\Sabine\AppData\Roaming\systweak\ssd, In Quarantäne, [6695d714fa81f04696c7d3122fd340c0], PUP.Optional.Vbates.A, C:\Program Files\V-bates, In Quarantäne, [da21a74489f2f83ee142e6002cd6dc24], PUP.Optional.IBUpdater.A, C:\ProgramData\IBUpdaterService, In Quarantäne, [3cbfc625b9c266d0ee98dc0d50b21ae6], PUP.Optional.Updater.A, C:\Users\Sabine\AppData\Roaming\DigitalSites\UpdateProc, In Quarantäne, [c33811daa8d300364a09ea0014ee10f0], PUP.Optional.Updater.A, C:\Users\Sabine\AppData\Roaming\DSite\UpdateProc, In Quarantäne, [bc3f5893b0cb2a0cd085d713ff0358a8], PUP.Optional.GenesisOffers, C:\Users\Sabine\AppData\Local\Genesis_07021907, In Quarantäne, [fa0176752259d660423cf4fba75b6997], |
|
03.10.2014, 16:31
| #8 |
| | unerwünschte Werbefenster in Firefox (Win7)Code:
ATTFilter Dateien: 358
Adware.MovieMode, C:\ProgramData\XNcajQ\YTYbWanC.exe, Löschen bei Neustart, [986323c88cefe35323ac373aa45d8080],
PUP.Optional.OptimizePro.A, C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe, In Quarantäne, [966503e86318261045233ae428d89b65],
Adware.MovieMode, C:\ProgramData\XNcajQ\dat\jttZUrjqxb.exe, Löschen bei Neustart, [46b56d7e116aa096ad22f9785ba6f907],
Adware.MovieMode, C:\ProgramData\XNcajQ\dat\LrmBzARToWw.exe, Löschen bei Neustart, [2ccf0ae1067559dd8748353cdc258d73],
PUP.Optional.DigitalSites.A, C:\Users\Sabine\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe, In Quarantäne, [5e9d0be086f5f93d3283a39d936e8d73],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Omiga Plus\wallpaper_components.exe, In Quarantäne, [b7446487f388d264c4ccd943cb3a42be],
PUP.Optional.OpenCandy.A, C:\Users\Sabine\AppData\Roaming\OpenCandy\91B34D77027D4A38AA358681785B2EF2\Setupsft_chr_p1v7.exe, In Quarantäne, [c6355b904a312a0c1a61f3e0c63ee51b],
PUP.Optional.OptimizePro.A, C:\Program Files (x86)\Optimizer Pro\OptimizerPro.exe, In Quarantäne, [f803bd2e4437989ea2c6c15dd12f9f61],
PUP.Optional.OptimizerPro, C:\Program Files (x86)\Optimizer Pro\OptProGuard.exe, In Quarantäne, [e516a14ac6b56ccaa94f5ed822df2dd3],
PUP.Optional.OptimizerPro, C:\Program Files (x86)\Optimizer Pro\OptProReminder.exe, In Quarantäne, [5d9e02e99cdfaf87698f8da9a160f20e],
PUP.Optional.OptimizerPro, C:\Program Files (x86)\Optimizer Pro\OptProSchedule.exe, In Quarantäne, [44b78f5c6c0f9d999b5eb77f778a9f61],
PUP.Optional.OptimizerPro, C:\Program Files (x86)\Optimizer Pro\OptProSmartScan.exe, In Quarantäne, [4fac5299c9b2d95d58a263d317ea23dd],
PUP.Optional.Bandoo, C:\Users\Sabine\Downloads\iLividSetup-r1109-n-bf.exe, In Quarantäne, [b14a33b85e1dc96d9e19d04829d83fc1],
PUP.Optional.Downloader, C:\Users\Sabine\Downloads\Setup.exe, In Quarantäne, [be3d8f5caad1b77f47271ac7f410cf31],
PUP.Optional.Conduit, C:\Users\Sabine\Downloads\slideshow_maker_2_de-de.exe, In Quarantäne, [fdfe52995427003627d46442de230cf4],
PUP.Optional.DomaIQ, C:\Users\Sabine\Downloads\New_Player.exe, In Quarantäne, [9269f5f6720937ffe3d6dd7507f96e92],
PUP.Optional.VBates, C:\Windows\System32\Tasks\FF Watcher {0E9AC2E1-8E1C-488C-AA7B-83F4C5635759}, In Quarantäne, [7c7f3dae7803ac8aff7e42bca9598878],
PUP.Optional.VBates, C:\Windows\Tasks\FF Watcher {0E9AC2E1-8E1C-488C-AA7B-83F4C5635759}.job, In Quarantäne, [fffcfeed1f5c7cba1668926c0ef4eb15],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\aaf96e16-f214-45a3-b486-e7fa3b31e94a-4, In Quarantäne, [f10aab4004777fb70701f113d82bb34d],
PUP.Optional.DealPly.A, C:\Windows\System32\Tasks\DealPly, In Quarantäne, [d7248467700b51e581466b9d877c857b],
PUP.Optional.HolaSearch.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\searchplugins\holasearch.xml, In Quarantäne, [ac4f6289aecdac8a5c30d53a897a9b65],
PUP.Optional.BargainWorkbench.A, C:\Users\Sabine\AppData\Local\BargainWorkbench.crx, In Quarantäne, [718a5299007baa8c64d368a9c73ca15f],
PUP.Optional.MyMovieMagnet.A, C:\Users\Sabine\AppData\Local\MyMovieMagnet.crx, In Quarantäne, [718aaf3c5e1dbb7b86b4e22f9271c33d],
PUP.Optional.Trovi.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\searchplugins\trovi-search.xml, In Quarantäne, [e01bd9121b604fe77a15040f3cc76c94],
PUP.Optional.Superfish.A, C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage, In Quarantäne, [38c35695d0ab87afc0d2bb5893706799],
PUP.Optional.Superfish.A, C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage-journal, In Quarantäne, [3cbf8f5cc0bb0d295a3851c2be4517e9],
PUP.Optional.Iminent.A, C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage, In Quarantäne, [7c7fa348116a41f596ab3cd9798a3bc5],
PUP.Optional.CrossRider.A, C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_omfoidjpeklpjhlhabhcomekbkclkbec_0.localstorage, In Quarantäne, [42b96c7fb8c3a98d385061bba3608b75],
PUP.Optional.CrossRider.A, C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_omfoidjpeklpjhlhabhcomekbkclkbec_0.localstorage-journal, In Quarantäne, [0deeda114a31999dbccc33e9659ed927],
PUP.Optional.Softonic.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\searchplugins\softonic.xml, In Quarantäne, [f10a2ebd433890a6288af924748fd22e],
PUP.Optional.Babylon.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\searchplugins\babylon.xml, In Quarantäne, [4dae509be497f640affaae729b68966a],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\searchplugins\Mysearchdial.xml, In Quarantäne, [fdfe52992d4efe3894ba38e949ba6c94],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\promote.xml, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\accelerate, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\desk_bkg_list.xml, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\desk_list.xml, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\desk_settings.ini, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\process_mgr.xml, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\recent.xml, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\app\config\1\angrybirds.db, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\app\config\1\angrybirds.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\app\config\3\BigFarm.db, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\app\config\3\BigFarm.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\app\config\35\Gmail.db, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\app\config\35\Gmail.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\app\config\36\Outlook.db, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\app\config\36\Outlook.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\app\config\39\ESPN.db, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\app\config\39\ESPN.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\app\config\4\Empire.db, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\app\config\4\Empire.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\app\config\41\gcalendar.db, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\app\config\41\gcalendar.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\app\config\42\pulse.db, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\app\config\42\pulse.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_1.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_2.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_3.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_4.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_5.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_default.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\337_7c9140b13c049fd26989f7fa25b77cb1.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\337_7c9140b13c049fd26989f7fa25b77cb1_48_48.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\angrybirds_00ff92c12703baaf0130d6aec427d047.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\angrybirds_00ff92c12703baaf0130d6aec427d047_48_48.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\Barbie_00a67ff4ef657679a6c88553135d62ad.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\Barbie_00a67ff4ef657679a6c88553135d62ad_48_48.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\BigFarm_de933b0e5218a4db24bebe3d55ed3558.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\firefox_190eeabc0f521e7424e2f050d952b578.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\firefox_190eeabc0f521e7424e2f050d952b578_48_48.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\gcalendar_50b3e3c5fc202f0cfcae8032b2465c1b_48_48.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\Gmail_731b6d011bd9f67463a916a496775935.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\Gmail_731b6d011bd9f67463a916a496775935_48_48.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\Google_60d75cb277f0c452fa60dba8350caf65_48_48.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\iexplore_97a94c231cb62536586a5897aa3699fe.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\iexplore_97a94c231cb62536586a5897aa3699fe_48_48.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\Mario_52934d81761dc31187a93a3a0be7fecc_48_48.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\Outlook_6f817b67fa6af1a9c8abfa3813a8595c.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\Outlook_6f817b67fa6af1a9c8abfa3813a8595c_48_48.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\pulse_b5a242da04cc06eacd02b1ca41e3583c_48_48.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\stpass_c3bea3298ce8da9046e9a6a7e1cac462.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\stpass_c3bea3298ce8da9046e9a6a7e1cac462_48_48.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\sump_ec7366a79355db1ffdfee1a9210acc5a.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\sump_ec7366a79355db1ffdfee1a9210acc5a_48_48.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\chrome_1da37a02e412dbdb6c2392f85ed86555.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\chrome_1da37a02e412dbdb6c2392f85ed86555_48_48.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\Empire_22b42f57d1c467841280810e218d5510.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\Empire_22b42f57d1c467841280810e218d5510_48_48.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\ESPN_a7b078f5f5f5b87efcef66ab5783cf9d_48_48.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\Facebook_aab07bc79cf599b25c0110f32d46a3ef.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\Facebook_aab07bc79cf599b25c0110f32d46a3ef_48_48.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\sys_computer_20_20.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\sys_computer_48_48.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\sys_control_panel_20_20.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\sys_downloads_20_20.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\sys_my_documents_20_20.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\Twitter_ebddd85ec04b7b94a2b2e97b73a90a4a.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\Twitter_ebddd85ec04b7b94a2b2e97b73a90a4a_48_48.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\Youtube_bf18fdfc4aefd6417a8bacae4be5b415_48_48.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\_843A66D2881567AF273463_c3e4a04c2f7a7dc735c97f868f34ece4_48_48.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\BigFarm_de933b0e5218a4db24bebe3d55ed3558_48_48.png, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\icons\Mario_52934d81761dc31187a93a3a0be7fecc.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\promote\337.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\promote\337_7c9140b13c049fd26989f7fa25b77cb1.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\promote\barbie.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\promote\Barbie_00a67ff4ef657679a6c88553135d62ad.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\promote\facebook.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\promote\Facebook_aab07bc79cf599b25c0110f32d46a3ef.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\promote\GameCenter.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\promote\google.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\promote\Google_60d75cb277f0c452fa60dba8350caf65.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\promote\mario.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\promote\Mario_52934d81761dc31187a93a3a0be7fecc.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\promote\twitter.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\promote\Twitter_ebddd85ec04b7b94a2b2e97b73a90a4a.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\promote\v9.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\promote\youtube.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\promote\Youtube_bf18fdfc4aefd6417a8bacae4be5b415.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\sysicons\imageres.dll_104.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\sysicons\imageres.dll_107.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\sysicons\imageres.dll_175.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\sysicons\shell32.dll_21.ico, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\wp\r0.jpg, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\wp\r1.jpg, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\wp\r2.jpg, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\wp\r3.jpg, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\wp\r4.jpg, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\wp\r5.jpg, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\wp\r6.jpg, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\wp\r7.jpg, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\wp\r8.jpg, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Users\Sabine\AppData\Roaming\Desk 365\wp\r9.jpg, In Quarantäne, [c03b1ecde596fe38b8fcce71d92ba45c],
PUP.Optional.Desk365.A, C:\Program Files (x86)\Desk 365\promote.xml, In Quarantäne, [41baa14a1962ef474d6885bab05404fc],
PUP.Optional.Desk365.A, C:\Program Files (x86)\Desk 365\desk_bkg_list.xml, In Quarantäne, [41baa14a1962ef474d6885bab05404fc],
PUP.Optional.Desk365.A, C:\Program Files (x86)\Desk 365\desk_list.xml, In Quarantäne, [41baa14a1962ef474d6885bab05404fc],
PUP.Optional.Desk365.A, C:\Program Files (x86)\Desk 365\desk_settings.ini, In Quarantäne, [41baa14a1962ef474d6885bab05404fc],
PUP.Optional.Desk365.A, C:\Program Files (x86)\Desk 365\process_mgr.xml, In Quarantäne, [41baa14a1962ef474d6885bab05404fc],
PUP.Optional.Desk365.A, C:\Program Files (x86)\Desk 365\recent.xml, In Quarantäne, [41baa14a1962ef474d6885bab05404fc],
PUP.Optional.BrowserDefender.A, C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eooncjejnppfjjklapaamhcdmjbilmde_0.localstorage, In Quarantäne, [a358f8f3710af73f12fc8eb7c14319e7],
PUP.Optional.MySpeedDial.A, C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pflphaooapbgpeakohlggbpidpppgdff_0.localstorage, In Quarantäne, [ce2d509b4d2e6fc7d833db833aca9e62],
PUP.Optional.Delta.A, C:\Users\Sabine\AppData\Roaming\BabSolution\Shared\Delta.ico, In Quarantäne, [f50622c9017a7eb85d714c1331d30ef2],
PUP.Optional.Delta.A, C:\Users\Sabine\AppData\Roaming\BabSolution\Shared\BabMaint.exe, In Quarantäne, [f50622c9017a7eb85d714c1331d30ef2],
PUP.Optional.Delta.A, C:\Users\Sabine\AppData\Roaming\BabSolution\Shared\BUSolution.dll, In Quarantäne, [f50622c9017a7eb85d714c1331d30ef2],
PUP.Optional.Delta.A, C:\Users\Sabine\AppData\Roaming\BabSolution\Shared\chu.js, In Quarantäne, [f50622c9017a7eb85d714c1331d30ef2],
PUP.Optional.Delta.A, C:\Users\Sabine\AppData\Roaming\BabSolution\Shared\GUninstaller.exe, In Quarantäne, [f50622c9017a7eb85d714c1331d30ef2],
PUP.Optional.Delta.A, C:\Users\Sabine\AppData\Roaming\BabSolution\Shared\SetupParams.ini, In Quarantäne, [f50622c9017a7eb85d714c1331d30ef2],
PUP.Optional.Delta.A, C:\Users\Sabine\AppData\Roaming\BabSolution\Shared\sqlite3.dll, In Quarantäne, [f50622c9017a7eb85d714c1331d30ef2],
PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{78b17104-363a-4bd9-b49c-77419f14b0d0}w64.sys, In Quarantäne, [06f54f9c007b191db8f7bba6c93b59a7],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\aaf96e16-f214-45a3-b486-e7fa3b31e94a-4.job, In Quarantäne, [e912f1faea914beba2ee19498a7adb25],
PUP.Optional.DealPly.A, C:\Users\Sabine\AppData\Roaming\DealPly\UpdateProc\config.dat, In Quarantäne, [48b340abe39885b1b5a6527af30f748c],
PUP.Optional.OpenCandy, C:\Users\Sabine\AppData\Roaming\OpenCandy\ECCA67B024534A72AC4A5ED9168B96B1\Trial-14.0.1000.89_de-DE_1004733_DE-2.exe, In Quarantäne, [5f9ca14a433860d67f12577546bc1fe1],
PUP.Optional.Conduit.A, C:\Users\Sabine\AppData\Local\Temp\CT3314932\ddt.csf, In Quarantäne, [db2010db2853d462769116b7a75b6e92],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\chrome.manifest, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\install.rdf, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\.DS_Store, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\browser\.background.jsm.swp, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\browser\background.jsm, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\browser\bg.js, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\browser\browser.js, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\browser\browser.xul, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\browser\timer.jsm, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\data\favorites_de.json, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\data\favorites_en-gb.json, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\data\favorites_en_us.json, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\data\favorites_fr.json, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\data\favorites_he.json, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\data\favorites_it.json, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\data\favorites_pt-br.json, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\data\favorites_ru.json, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\data\favorites_tr.json, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\external\crypto-js.js, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\external\jquery-2.0.2.min.js, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\external\jquery.autocomplete.min.js, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\external\jquery.balloon.min.js, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\external\jquery.fittext.js, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\external\jquery.Jcrop.min.js, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\external\jquery.simplecolorpicker.min.js, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\external\mustache.min.js, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\external\string.min.js, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\external\underscore-min.js, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\newtab\gallery.html, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\newtab\gallery.min.js, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\newtab\newtab.html, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\newtab\newtab.min.js, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\newtab\search.html, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\newtab\search.min.js, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\defaults\preferences\prefs-sys.js, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\defaults\preferences\prefs.js, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\external\foundation.min.css, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\external\indicator.gif, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\external\Jcrop.gif, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\external\jquery.autocomplete.css, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\external\jquery.Jcrop.min.css, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\external\jquery.simplecolorpicker.css, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\external\normalize.css, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\gallery\arrow-gallery-cat-selected.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\gallery\arrow.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\gallery\emptyArea.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\gallery\gallery.css, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\gallery\gallery_templates.html, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\gallery\icon-gallery-search.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\gallery\not_available_32.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\gallery\plus.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\gallery\Thumbs.db, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\gallery\X.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\icons\128.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\icons\16.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\icons\48.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\icons\Thumbs.db, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\css\buttons.css, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\css\footer.css, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\css\header.css, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\css\list.css, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\css\newtab.css, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\css\search.css, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\css\themes.css, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\ajax-loader-2.gif, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\ajax-loader-bar.gif, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\ajax-loader-medium.gif, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\ajax-loader-small.gif, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\ajax-loader.gif, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\arrow-footer.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\arrow-header.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\attachment.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\close.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\edit-button.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\icon-chrome.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\icon-edit.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\icon-layout.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\icon-plus.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\icon-theme.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\menu_v.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\provider.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\Thumbs.db, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\x-button.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\patterns\arab_tile.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\patterns\batthern_@2X.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\patterns\bo_play_pattern_@2X.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\patterns\dark_wood_@2X.jpg, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\patterns\diagonal_striped_brick.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\patterns\escheresque_ste_@2X.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\patterns\gold_scale.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\patterns\purty_wood_@2X.jpg, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\patterns\readme.txt, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\patterns\starring_@2X.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\patterns\tileable_wood_texture_@2X.jpg, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\patterns\weave_@2X.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\patterns\wild_oliva_@2X.jpg, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\patterns\woven.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\resources\list.html, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\resources\menu.html, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\css\activetabs.css, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\css\favorites.css, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\css\layout.css, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\css\modal-fav-add.css, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\css\modal-fav-edit.css, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\css\modal-fav-group.css, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\css\recentlyclosed.css, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\css\theme.css, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\chrome\bookmarks.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\chrome\download.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\chrome\downloads.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\chrome\downloas.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\chrome\extensions.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\chrome\history.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\chrome\settings.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\chrome\trash.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\favorites\empty.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\favorites\error.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\favorites\shadow.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\info\contactus.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\info\facebook.ico, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\info\rateus.png, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\info\twitter.ico, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\resources\activetabs.html, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\resources\favorites.html, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\resources\layout.html, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\resources\modal-fav-add.html, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\resources\modal-fav-edit.html, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\resources\modal-fav-group.html, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\resources\recentlyclosed.html, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\resources\theme.html, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\_locales\en-US\translations.dtd, In Quarantäne, [1be0b03bdf9ca492d66c607203ff659b],
PUP.Optional.BargainWorkbench.A, C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\gebcpofjimbbchggpnfcaiieolloeodp\1.4.1.0_0\background.js, In Quarantäne, [50aba546d1aa44f244c2fedf738f16ea],
PUP.Optional.BargainWorkbench.A, C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\gebcpofjimbbchggpnfcaiieolloeodp\1.4.1.0_0\manifest.json, In Quarantäne, [50aba546d1aa44f244c2fedf738f16ea],
PUP.Optional.BargainWorkbench.A, C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\gebcpofjimbbchggpnfcaiieolloeodp\1.4.1.0_0\images\128.png, In Quarantäne, [50aba546d1aa44f244c2fedf738f16ea],
PUP.Optional.BargainWorkbench.A, C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\gebcpofjimbbchggpnfcaiieolloeodp\1.4.1.0_0\images\16.png, In Quarantäne, [50aba546d1aa44f244c2fedf738f16ea],
PUP.Optional.BargainWorkbench.A, C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\gebcpofjimbbchggpnfcaiieolloeodp\1.4.1.0_0\images\48.png, In Quarantäne, [50aba546d1aa44f244c2fedf738f16ea],
PUP.Optional.MyMovieMagnet.A, C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpljfflibaokjcndmchkfjalpjjblioc\4.0.0.0_0\background.js, In Quarantäne, [e417727982f9ee48f61111cc3ec45fa1],
PUP.Optional.MyMovieMagnet.A, C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpljfflibaokjcndmchkfjalpjjblioc\4.0.0.0_0\manifest.json, In Quarantäne, [e417727982f9ee48f61111cc3ec45fa1],
PUP.Optional.MyMovieMagnet.A, C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpljfflibaokjcndmchkfjalpjjblioc\4.0.0.0_0\images\128.png, In Quarantäne, [e417727982f9ee48f61111cc3ec45fa1],
PUP.Optional.MyMovieMagnet.A, C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpljfflibaokjcndmchkfjalpjjblioc\4.0.0.0_0\images\16.png, In Quarantäne, [e417727982f9ee48f61111cc3ec45fa1],
PUP.Optional.MyMovieMagnet.A, C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpljfflibaokjcndmchkfjalpjjblioc\4.0.0.0_0\images\48.png, In Quarantäne, [e417727982f9ee48f61111cc3ec45fa1],
PUP.Optional.SystemSpeedup, C:\Users\Sabine\AppData\Roaming\systweak\ssd\SSDPTstub.exe, In Quarantäne, [6695d714fa81f04696c7d3122fd340c0],
PUP.Optional.Vbates.A, C:\Program Files\V-bates\libwinhook.dll, In Quarantäne, [da21a74489f2f83ee142e6002cd6dc24],
PUP.Optional.IBUpdater.A, C:\ProgramData\IBUpdaterService\repository.xml, In Quarantäne, [3cbfc625b9c266d0ee98dc0d50b21ae6],
PUP.Optional.Updater.A, C:\Users\Sabine\AppData\Roaming\DigitalSites\UpdateProc\config.dat, In Quarantäne, [c33811daa8d300364a09ea0014ee10f0],
PUP.Optional.Updater.A, C:\Users\Sabine\AppData\Roaming\DigitalSites\UpdateProc\info.dat, In Quarantäne, [c33811daa8d300364a09ea0014ee10f0],
PUP.Optional.Updater.A, C:\Users\Sabine\AppData\Roaming\DigitalSites\UpdateProc\prod.dat, In Quarantäne, [c33811daa8d300364a09ea0014ee10f0],
PUP.Optional.Updater.A, C:\Users\Sabine\AppData\Roaming\DigitalSites\UpdateProc\STTL.DAT, In Quarantäne, [c33811daa8d300364a09ea0014ee10f0],
PUP.Optional.Updater.A, C:\Users\Sabine\AppData\Roaming\DigitalSites\UpdateProc\TTL.DAT, In Quarantäne, [c33811daa8d300364a09ea0014ee10f0],
PUP.Optional.Updater.A, C:\Users\Sabine\AppData\Roaming\DSite\UpdateProc\config.dat, In Quarantäne, [bc3f5893b0cb2a0cd085d713ff0358a8],
PUP.Optional.Updater.A, C:\Users\Sabine\AppData\Roaming\DSite\UpdateProc\info.dat, In Quarantäne, [bc3f5893b0cb2a0cd085d713ff0358a8],
PUP.Optional.Updater.A, C:\Users\Sabine\AppData\Roaming\DSite\UpdateProc\TTL.DAT, In Quarantäne, [bc3f5893b0cb2a0cd085d713ff0358a8],
PUP.Optional.Trovi.A, C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Preferences, Gut: (), Schlecht: ({"apps":{"shortcuts_have_been_created":true},"browser":{"last_known_google_url":"https://www.google.de/","last_prompted_google_url":"https://www.google.de/","show_home_button":true,"window_placement":{"bottom":718,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":728,"work_area_left":0,"work_area_right":1366,"work_area_top":0}},"countryid_at_install":17477,"default_apps_install_state":3,"default_search_provider":{"id":"9","name":"Mysearchdial"},"distribution":{"create_all_shortcuts":true,"do_not_launch_chrome":true,"import_history":false,"import_search_engine":false,"make_chrome_default":false,"ping_delay":-60,"skip_first_run_ui":false,"verbose_logging":false},"download":{"directory_upgrade":true},"extensions":{"alerts":{"initialized":true},"autoupdate":{"last_check":"13049531680830043","next_check":"13050339990446271"},"blacklistupdate":{"lastpingday":"13023788397822453","version":"0.0.0.149"},"chrome_url_overrides":{"bookmarks":["chrome-extension://eemcgdkfndhakfknompkggombfjjjeno/main.html"],"newtab":["chrome-extension://kcendgajlhoaiiccpijilcpmgphfflnj/content/newtab/newtab.html"]},"install_signature":{"expire_date":"2014-10-12","ids":["aaaaacalgebmfelllfiaoknifldpngjh","kcendgajlhoaiiccpijilcpmgphfflnj"],"invalid_ids":["nneajnkjbffgblleaoojgaacokifdkhm"],"salt":"JGujTvFp9bp8cir9pmac+OqZih2bnEF8wS55cuQIXZc=","signature":"Zu72ECHj5S4pu8q4Qg/K60re3QdJRAfjwi2/4SH9nPrg0vVeC4pj9wqr4U6OzhW6zRRDWsEHvaufhrIiiWAPj1MXRLQci0enghy5vMbiUmT8/Lw5gwaOXIFQstD8tWAo3Li8z+CsePATVKbcc41LguEr0jOVm+Gqtuub30z9lFJOJRrm0yfHow45be4HCqn+mBLY/vmdZTwuF13Xvf0n3VEECIkGrHbQavebpY8SFMHgGRH5+WV1WR6JUGAbwZAkCfn78EHo8OMjB8qX2LXMJoUYK1dQTBro2CXfVPZgnvyDoJ5rshpC77W3h/hvtRD3i2HD1TwVtzn/GBXAuCJF+A==","signature_format_version":2,"timestamp":"13050337986772526"},"known_disabled":["aaaaacalgebmfelllfiaoknifldpngjh","blpcfgokakmgnkcojhhkbfbldkacnbeo","bmobdmpfgfimbnmhhnkmmecdboblafdh","coobgpohoikkiipiblmjeljniedjpjpf","gebcpofjimbbchggpnfcaiieolloeodp","hpljfflibaokjcndmchkfjalpjjblioc","icanoneicgaahjbilcgdmnhoocddknbl","kcendgajlhoaiiccpijilcpmgphfflnj","nmmhkkegccagdldgiimedpiccmgmieda","nneajnkjbffgblleaoojgaacokifdkhm","pjkljhegncpnkpknbcohdijeoejaedia"],"last_chrome_version":"36.0.1985.125","settings":{"Temp":{"disable_reasons":1,"manifest":null,"state":0},"aaaaacalgebmfelllfiaoknifldpngjh":{"ack_external":true,"active_permissions":{"api":["bookmarks","contentSettings","contextMenus","cookies","geolocation","history","idle","management","nativeMessaging","notifications","storage","tabs","unlimitedStorage","webRequest","webRequestBlocking"],"explicit_host":["chrome://favicon/*","hxxp://*/*","https://*/*"],"manifest_permissions":[],"scriptable_host":["*://*.ask.com/","*://*.bagsbuy.com/*","*://*.childrenschorus.org/*","*://*.csaa.com/*","*://*.facebook.com/*","*://*.mercurynews.com/*","*://*.usnews.com/*","*://*.wikipedia.org/*","*://*/*"]},"content_settings":[],"creation_flags":9,"disable_reasons":1,"events":[],"from_bookmark":false,"from_webstore":true,"incognito_content_settings":[],"incognito_preferences":{},"initial_keybindings_set":true,"install_time":"13049531688352479","lastpingday":"13049449182251043","location":3,"manifest":{"background":{"page":"background/background.html"},"browser_action":{"default_icon":"config/skin/images/logo/logo_19x.png","default_popup":"config/skin/chrome-options.html","default_title":"Control the Avira SearchFree Toolbar"},"chrome_url_overrides":{"newtab":"config/skin/new-tab-page.html"},"content_scripts":[{"all_frames":true,"js":["lib/constant.js","lib/default-config.js","config/tb-config.js","lib/protocol.js","lib/tb-message.js","lib/widget-messaging.js","content_script/inline-html.js"],"matches":["*://*/*"],"run_at":"document_end"},{"js":["lib/jquery.js","lib/constant.js","lib/default-config.js","config/tb-config.js","config/widget-config.js","lib/protocol.js","lib/tb-message.js","lib/state-machine.js","lib/async-gate.js","lib/window-position.js","lib/DataStore.js","lib/logger.js","lib/tb-config-update.js","content_script/positioning.js","content_script/toolbar.js","content_script/widget.js","content_script/injector.js"],"matches":["*://*/*"],"run_at":"document_start"},{"css":["content_script/hack/facebook.css"],"matches":["*://*.facebook.com/*"]},{"css":["content_script/hack/relative.css"],"matches":["*://*.ask.com/","*://*.bagsbuy.com/*","*://*.csaa.com/*","*://*.childrenschorus.org/*","*://*.wikipedia.org/*","*://*.mercurynews.com/*","*://*.usnews.com/*"],"run_at":"document_start"}],"description":"Convenient tools and links to make your browsing more enjoyable","icons":{"128":"config/skin/images/logo/logo_128x.png","24":"config/skin/images/logo/logo_24x.png","32":"config/skin/images/logo/logo_32x.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbM5MplJHhMMjoBDXypb8IzKcuYt+sISdqFzUsvqHBoB5d3/JMn4RmGiueAkoVFtHyDQ1H5VPKL6Ryt+SabpX/dpx9MaKkqXuiYYsComQYGQ4/tRFD4D9hNRk2RupgJu15UsWXU35gc6LGhW50cjQ9yfH5gih2Pd7RKDyAd+hLiwIDAQAB","manifest_version":2,"name":"Avira SearchFree Toolbar plus Web Protection","permissions":["management","nativeMessaging","tabs","storage","hxxp://*/*","https://*/*","bookmarks","contextMenus","contentSettings","cookies","geolocation","history","idle","management","notifications","tabs","unlimitedStorage","hxxp://*/*","https://*/*","chrome://favicon/*","webRequest","webRequestBlocking"],"update_url":"https://clients2.google.com/service/update2/crx","version":"42.12","web_accessible_resources":["config/skin/css/containers.css","config/skin/toolbar.html","widgets/search-suggestion/search-suggestion.html","widgets/options/options.html","widgets/templates/feed.html","widgets/templates/menu.html","config/skin/widgets/com.avira.dnt/widget/background.html","config/skin/widgets/com.avira.dnt/widget/button.html","config/skin/widgets/com.avira.dnt/widget/window.html","config/skin/widgets/com.avira.dnt/widget/blank.html","config/skin/widgets/com.avira.dnt/widget/blank.gif","config/skin/widgets/toolbar-options/options.html"]},"path":"aaaaacalgebmfelllfiaoknifldpngjh\\42.12_0","preferences":{},"regular_only_preferences":{},"state":0,"was_installed_by_default":false,"was_installed_by_oem":false},"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","webstorePrivate"],"manifest_permissions":[]},"app_launcher_ordinal":"n","creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"install_time":"13019171325941689","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Chrome Web Store","icons":{"128":"webstore_icon_128.png","16":"webstore_icon_16.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB","name":"Store","permissions":["webstorePrivate","management"],"version":"0.2"},"page_ordinal":"n","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\28.0.1500.72\\resources\\web_store","was_installed_by_default":false},"bepbmhgboaologfdajaanbcjmnhjmhfn":{"disable_reasons":1,"state":0},"blpcfgokakmgnkcojhhkbfbldkacnbeo":{"ack_external":true,"active_permissions":{"api":[],"manifest_permissions":[]},"app_launcher_ordinal":"x","creation_flags":153,"disable_reasons":1,"events":[],"exclude_from_sideload_wipeout":true,"from_bookmark":true,"from_webstore":true,"granted_permissions":{"api":[],"manifest_permissions":[]},"has_declarative_rules":false,"install_time":"13023798680582453","lastpingday":"13049449182251043","location":1,"manifest":{"app":{"launch":{"container":"tab","web_url":"hxxp://www.youtube.com/?feature=ytca"},"web_content":{"enabled":true,"origin":"hxxp://www.youtube.com"}},"current_locale":"de","default_locale":"en","description":"Die beliebteste Online-Video-Community der Welt","icons":{"128":"128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDC/HotmFlyuz5FaHaIbVBhhL4BwbcUtsfWwzgUMpZt5ZsLB2nW/Y5xwNkkPANYGdVsJkT2GPpRRIKBO5QiJ7jPMa3EZtcZHpkygBlQLSjMhdrAKevpKgIl6YTkwzNvExY6rzVDzeE9zqnIs33eppY4S5QcoALMxuSWlMKqgFQjHQIDAQAB","manifest_version":2,"name":"YouTube","permissions":["appNotifications"],"update_url":"hxxp://clients2.google.com/service/update2/crx","version":"4.2.6"},"page_ordinal":"n","path":"blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.6_0","state":0,"was_installed_by_default":true},"bmobdmpfgfimbnmhhnkmmecdboblafdh":{"ack_external":true,"active_permissions":{"api":["bookmarks","notifications","tabs"],"explicit_host":["hxxp://*/*","https://*/*"],"manifest_permissions":[]},"creation_flags":1,"disable_reasons":1,"events":[],"exclude_from_sideload_wipeout":true,"from_bookmark":false,"from_webstore":false,"initial_keybindings_set":true,"install_time":"13023579261585146","install_warning_on_enable":false,"location":3,"manifest":{"background":{"persistent":true,"scripts":["background.js"]},"content_security_policy":"script-src 'self' 'unsafe-eval'; object-src 'self'","description":"The internet is your bazaar - enjoy the best it has to offer!","icons":{"128":"images/128.png","16":"images/16.png","48":"images/48.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDVpE4aaXC125PK+GO5+CMPGy1kD5X4b7BSyuUGrD39uoSz7lO3/RPjqhOBzdqv27VKf0orHJh0vKG6XHGDoKisl76eoqi4NWsE6ViECNvbUo07tK5WjnRWd5WrUdBKPlsYofJ47AUOWyRVFz8GoJYM7FZgKrc/Lrc//ea8cBM5twIDAQAB","manifest_version":2,"name":"Bazaar Friend","permissions":["notifications","tabs","bookmarks","hxxp://*/","https://*/"],"update_url":"hxxp://update.bazaarfriend.com/chrome/","version":"2.0.0.0"},"path":"bmobdmpfgfimbnmhhnkmmecdboblafdh\\2.0.0.0_0","state":0,"update_url_data":"bazaarfriend@US_1380021087689_88530151175","was_installed_by_default":false},"coobgpohoikkiipiblmjeljniedjpjpf":{"ack_external":true,"active_permissions":{"api":[],"manifest_permissions":[]},"app_launcher_ordinal":"w","creation_flags":153,"disable_reasons":1,"events":[],"exclude_from_sideload_wipeout":true,"from_bookmark":true,"from_webstore":true,"granted_permissions":{"api":[],"manifest_permissions":[]},"has_declarative_rules":false,"install_time":"13023798680090453","lastpingday":"13049449182251043","location":1,"manifest":{"app":{"launch":{"web_url":"hxxp://www.google.com/webhp?source=search_app"},"urls":["*://www.google.com/search","*://www.google.com/webhp","*://www.google.com/imgres"]},"current_locale":"de","default_locale":"en","description":"Die schnellste Suche im Web.","icons":{"128":"128.png","16":"16.png","32":"32.png","48":"48.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIiso3Loy5VJHL40shGhUl6it5ZG55XB9q/2EX6aa88jAxwPutbCgy5d9bm1YmBzLfSgpX4xcpgTU08ydWbd7b50fbkLsqWl1mRhxoqnN01kuNfv9Hbz9dWWYd+O4ZfD3L2XZs0wQqo0y6k64n+qeLkUMd1MIhf6MR8Xz1SOA8pwIDAQAB","manifest_version":2,"name":"Google-Suche","update_url":"hxxp://clients2.google.com/service/update2/crx","version":"0.0.0.20"},"page_ordinal":"n","path":"coobgpohoikkiipiblmjeljniedjpjpf\\0.0.0.20_0","state":0,"was_installed_by_default":true},"eemcgdkfndhakfknompkggombfjjjeno":{"active_permissions":{"api":["bookmarks","bookmarkManagerPrivate","metricsPrivate","systemPrivate","tabs"],"explicit_host":["chrome://favicon/*","chrome://resources/*"],"manifest_permissions":[]},"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"install_time":"13010383507568251","location":5,"manifest":{"chrome_url_overrides":{"bookmarks":"main.html"},"content_security_policy":"object-src 'none'; script-src chrome://resources 'self'","description":"Bookmark Manager","incognito":"split","key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQcByy+eN9jzazWF/DPn7NW47sW7lgmpk6eKc0BQM18q8hvEM3zNm2n7HkJv/R6fU+X5mtqkDuKvq5skF6qqUF4oEyaleWDFhd1xFwV7JV+/DU7bZ00w2+6gzqsabkerFpoP33ZRIw7OviJenP0c0uWqDWF8EGSyMhB3txqhOtiQIDAQAB","manifest_version":2,"name":"Bookmark Manager","permissions":["bookmarks","bookmarkManagerPrivate","metricsPrivate","systemPrivate","tabs","chrome://favicon/","chrome://resources/"],"version":"0.1"},"path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\26.0.1410.64\\resources\\bookmark_manager","was_installed_by_default":false},"ennkphjdgehloodpbhlhldgbnhmacadg":{"active_permissions":{"api":[],"explicit_host":["chrome://settings-frame/*"],"manifest_permissions":[]},"app_launcher_ordinal":"yn","creation_flags":1,"events":["app.runtime.onLaunched"],"from_bookmark":false,"from_webstore":false,"install_time":"13019171325942689","location":5,"manifest":{"app":{"background":{"scripts":["settings_app.js"]}},"description":"Settings","display_in_launcher":false,"icons":{"128":"settings_app_icon_128.png","16":"settings_app_icon_16.png","32":"settings_app_icon_32.png","48":"settings_app_icon_48.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDoVDPGX6fvKPVVgc+gnkYlGqHuuapgFDyKhsy4z7UzRLO/95zXPv8h8e5EacqbAQJLUbP6DERH5jowyNEYVxq9GJyntJMwP1ejvoz/52hnY3CCGGCmttmKzzpp5zwLuq3iZf8bslwywfflNUYtaCFSDa0TtrBZz0aOPrAAd/AhNwIDAQAB","manifest_version":2,"name":"Settings","permissions":["chrome://settings-frame/"],"version":"0.2"},"page_ordinal":"n","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\28.0.1500.72\\resources\\settings_app","running":true,"was_installed_by_default":false},"eooncjejnppfjjklapaamhcdmjbilmde":{"ack_external":true,"exclude_from_sideload_wipeout":true,"install_warning_on_enable":false},"gebcpofjimbbchggpnfcaiieolloeodp":{"ack_external":true,"active_permissions":{"api":["bookmarks","management","notifications","tabs"],"explicit_host":["hxxp://*/*","https://*/*"],"manifest_permissions":[]},"creation_flags":1,"disable_reasons":1,"events":[],"exclude_from_sideload_wipeout":true,"from_bookmark":false,"from_webstore":false,"initial_keybindings_set":true,"install_time":"13023579262885146","install_warning_on_enable":false,"location":3,"manifest":{"background":{"persistent":true,"scripts":["background.js"]},"content_security_policy":"script-src 'self' 'unsafe-eval'; object-src 'self'","description":"Bargain Workbench","icons":{"128":"images/128.png","16":"images/16.png","48":"images/48.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCLvbb3dqeDkyrKQUCYToMWvxi90pxv6aPgICwZ/vigUxHhoXLq1KVemswIXOdZQN43Pzw+CLV4BIi/E8Qkwc11MTDt3OIgcwJ6QeTFfe6ySeaX+/Vmdwx4SxPEB/qQLV9vK6FYWuT8CN/xvOdVbHJsTg52uTzgHxVBE02uaY6BEQIDAQAB","manifest_version":2,"name":"Bargain Workbench","permissions":["notifications","tabs","bookmarks","management","hxxp://*/","https://*/"],"update_url":"hxxp://update.bargainworkbench.com/chrome/","version":"1.4.1.0"},"path":"gebcpofjimbbchggpnfcaiieolloeodp\\1.4.1.0_0","state":0,"update_url_data":"bargainworkbench@US_1380021087694_989503102221","was_installed_by_default":false},"gfdkimpbcpahaombhbimeihdjnejgicl":{"active_permissions":{"api":["feedbackPrivate"],"explicit_host":["chrome://resources/*"],"manifest_permissions":[]},"creation_flags":1,"events":["feedbackPrivate.onFeedbackRequested"],"from_bookmark":false,"from_webstore":false,"initial_keybindings_set":true,"install_time":"13031421621334179","location":5,"manifest":{"app":{"background":{"scripts":["js/event_handler.js"]},"content_security_policy":"default-src 'none'; script-src 'self' chrome://resources; style-src 'unsafe-inline' *; img-src *; media-src 'self'"},"description":"User feedback extension","display_in_launcher":false,"display_in_new_tab_page":false,"icons":{"32":"images/icon32.png","64":"images/icon64.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDMZElzFX2J1g1nRQ/8S3rg/1CjFyDltWOxQg+9M8aVgNVxbutEWFQz+oQzIP9BB67mJifULgiv12ToFKsae4NpEUR8sPZjiKDIHumc6pUdixOm8SJ5Rs16SMR6+VYxFUjlVW+5CA3IILptmNBxgpfyqoK0qRpBDIhGk1KDEZ4zqQIDAQAB","manifest_version":2,"name":"Feedback","permissions":["feedbackPrivate","chrome://resources/"],"version":"1.0"},"path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\32.0.1700.41\\resources\\feedback","running":true,"was_installed_by_default":false},"hpljfflibaokjcndmchkfjalpjjblioc":{"ack_external":true,"active_permissions":{"api":["bookmarks","notifications","tabs"],"explicit_host":["hxxp://*/*","https://*/*"],"manifest_permissions":[]},"creation_flags":1,"disable_reasons":1,"events":[],"exclude_from_sideload_wipeout":true,"from_bookmark":false,"from_webstore":false,"initial_keybindings_set":true,"install_time":"13023579262650146","install_warning_on_enable":false,"location":3,"manifest":{"background":{"persistent":true,"scripts":["background.js"]},"content_security_policy":"script-src 'self' 'unsafe-eval'; object-src 'self'","description":"Your favorite movies, right at your fingertips!","icons":{"128":"images/128.png","16":"images/16.png","48":"images/48.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC8cTTvm6FtwmbGLZ2DmROa2qIdnd00WK9UzsuUkKnbYpkVKjQUlmTCCXHr1puwdfU1aHlQGNAxchgoaBIo8B0BOCl3gy3Gkx1RWBEseDFCbtXslwn1iCIzXSx1B9XyR99BOBKarMWtOqzrSOS/k+5SgYhKEbWbKM1fnehgvJxILwIDAQAB","manifest_version":2,"name":"My Movie Magnet","permissions":["notifications","tabs","bookmarks","hxxp://*/","https://*/"],"update_url":"hxxp://update.mymoviemagnet.com/chrome/","version":"4.0.0.0"},"path":"hpljfflibaokjcndmchkfjalpjjblioc\\4.0.0.0_0","state":0,"update_url_data":"mymoviemagnet@US_1380021087694_18356535035","was_installed_by_default":false},"icanoneicgaahjbilcgdmnhoocddknbl":{"ack_external":true,"active_permissions":{"api":["bookmarks","notifications","tabs"],"explicit_host":["hxxp://*/*","https://*/*"],"manifest_permissions":[]},"creation_flags":1,"disable_reasons":1,"events":[],"exclude_from_sideload_wipeout":true,"from_bookmark":false,"from_webstore":false,"install_time":"13020541138647744","install_warning_on_enable":false,"location":3,"manifest":{"background":{"persistent":true,"scripts":["background.js"]},"content_security_policy":"script-src 'self' 'unsafe-eval'; object-src 'self'","description":"Stay up-to-date with the latest domestic and world news.","icons":{"128":"images/128.png","16":"images/16.png","48":"images/48.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDqgHA/r82a7UviPy5BhlH0NPZKUk14BWU8wg00adwmmh/V2QZSiVBrJotJFdNvvtGtRwYIXZUpnWsnqIk861MtObe/CvSf6HHmk8n0tzklbS7njulH/7J/aNhx4kyU0mvTW+qNL9xCYmA9SmYvWm6uSmbNHh6uHDPbfmiondDp5wIDAQAB","manifest_version":2,"name":"InfoBird Pro","permissions":["notifications","tabs","bookmarks","hxxp://*/","https://*/"],"update_url":"hxxp://update.infobirdpro.com/chrome/","version":"3.0.0.0"},"path":"icanoneicgaahjbilcgdmnhoocddknbl\\3.0.0.0_0","state":0,"update_url_data":"infobirdpro@US_1380021364649_204407126007","was_installed_by_default":false},"kcendgajlhoaiiccpijilcpmgphfflnj":{"ack_external":true,"active_permissions":{"api":["bookmarks","contextMenus","history","management","storage","tabs","topSites","unlimitedStorage","webNavigation"],"explicit_host":["chrome://favicon/*","hxxp://*/*","https://*/*"],"manifest_permissions":[]},"content_settings":[],"creation_flags":9,"disable_reasons":1,"events":[],"exclude_from_sideload_wipeout":true,"from_bookmark":false,"from_webstore":true,"has_declarative_rules":{"declarativeContent":{"onPageChanged":false},"declarativeWebRequest":{"onRequest":false}},"incognito_content_settings":[],"incognito_preferences":{},"initial_keybindings_set":true,"install_time":"13049531689311479","install_warning_on_enable":false,"lastpingday":"13049449182251043","location":3,"manifest":{"background":{"page":"/content/browser/background.html","persistent":true},"chrome_url_overrides":{"newtab":"/content/newtab/newtab.html"},"content_security_policy":"script-src 'self' https://s3.amazonaws.com https://ssl.google-analytics.com; object-src 'self'","current_locale":"de","default_locale":"en","description":"A great, easy and intuitive way to customize your new tab page with your own favorite sites","icons":{"128":"/skin/icons/128.png","16":"/skin/icons/16.png","48":"/skin/icons/48.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC4pZQjF6u6CaLRhcdRW8p3kimeaOfGqofkq1GswCnPubRRxoUF0a5Dov0XL4TnIbpSUJRSnffw5DEqlrHZ0Ukr3crhAKnc9vB1vZ9zr93jCKunEUJSsOaWV4bEit1daq9MP6LIiamrUdH4jVemEDIly0DsIHpJnD+o2om3+onC+QIDAQAB","manifest_version":2,"minimum_chrome_version":"23","name":"Foxtab Speed Dial (Beta)","optional_permissions":["\u003Call_urls>","webRequest","webRequestBlocking"],"permissions":["storage","unlimitedStorage","contextMenus","webNavigation","history","bookmarks","tabs","management","topSites","chrome://favicon/","hxxp://*/*","https://*/*"],"sandbox":{"pages":[]},"short_name":"Foxtab Speed Dial","update_url":"https://clients2.google.com/service/update2/crx","version":"9.4.24","web_accessible_resources":["/skin/icons/16.png"]},"path":"kcendgajlhoaiiccpijilcpmgphfflnj\\9.4.24_0","preferences":{},"regular_only_preferences":{},"state":0,"update_url_data":"","was_installed_by_default":false,"was_installed_by_oem":false},"kmendfapggjehodndflmmgagdbamhnfd":{"active_permissions":{"api":["hid","usb",{"usbDevices":[{"interfaceId":-1,"productId":512,"vendorId":4176},{"interfaceId":-1,"productId":529,"vendorId":4176}]},"webConnectable"],"explicit_host":["https://www.gstatic.com/*"],"manifest_permissions":[]},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"initial_keybindings_set":true,"install_time":"13050337984120271","location":5,"manifest":{"background":{"persistent":false,"scripts":["util.js","b64.js","closeable.js","countdown.js","sha256.js","llgnubby.js","llhidgnubby.js","llusbgnubby.js","gnubbies.js","gnubby.js","gnubby-u2f.js","gnubbycodetypes.js","gnubbyfactory.js","gnubbymsgtypes.js","usbgnubbyfactory.js","devicestatuscodes.js","enroller.js","enrollhelper.js","usbenrollhelper.js","requestqueue.js","signer.js","signhelper.js","singlesigner.js","multiplesigner.js","usbsignhelper.js","webrequest.js","background.js"]},"description":"CryptoToken Component Extension","externally_connectable":{"accepts_tls_channel_id":true,"matches":["https://login.corp.google.com/*","https://accounts.google.com/*","https://security.google.com/*"]},"key":"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7zRobvA+AVlvNqkHSSVhh1sEWsHSqz4oR/XptkDe/Cz3+gW9ZGumZ20NCHjaac8j1iiesdigp8B1LJsd/2WWv2Dbnto4f8GrQ5MVphKyQ9WJHwejEHN2K4vzrTcwaXqv5BSTXwxlxS/mXCmXskTfryKTLuYrcHEWK8fCHb+0gvr8b/kvsi75A1aMmb6nUnFJvETmCkOCPNX5CHTdy634Ts/x0fLhRuPlahk63rdf7agxQv5viVjQFk+tbgv6aa9kdSd11Js/RZ9yZjrFgHOBWgP4jTBqud4+HUglrzu8qynFipyNRLCZsaxhm+NItTyNgesxLdxZcwOz56KD1Q4IQIDAQAB","manifest_version":2,"name":"CryptoTokenExtension","permissions":["hid","usb",{"usbDevices":[{"productId":512,"vendorId":4176},{"productId":529,"vendorId":4176}]},"https://www.gstatic.com/"],"version":"0.0.1"},"path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\36.0.1985.125\\resources\\cryptotoken","preferences":{},"regular_only_preferences":{},"was_installed_by_default":false,"was_installed_by_oem":false},"mfehgcgbbipciphmccgaenjidiccnmng":{"active_permissions":{"api":["cloudPrintPrivate"],"manifest_permissions":[]},"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"install_time":"13010383507568251","location":5,"manifest":{"app":{"launch":{"web_url":"https://www.google.com/cloudprint"},"urls":["https://www.google.com/cloudprint/enable_chrome_connector"]},"description":"Cloud Print","display_in_launcher":false,"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDqOhnwk4+HXVfGyaNsAQdU/js1Na56diW08oF1MhZiwzSnJsEaeuMN9od9q9N4ZdK3o1xXOSARrYdE+syV7Dl31nf6qz3A6K+D5NHe6sSB9yvYlIiN37jdWdrfxxE0pRYEVYZNTe3bzq3NkcYJlOdt1UPcpJB+isXpAGUKUvt7EQIDAQAB","name":"Cloud Print","permissions":["cloudPrintPrivate"],"version":"0.1"},"path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\26.0.1410.64\\resources\\cloud_print","was_installed_by_default":false},"mgndgikekgjfcpckkfioiadnlibdjbkf":{"active_permissions":{"api":[],"manifest_permissions":[]},"app_launcher_ordinal":"y","creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"install_time":"13010383507568251","location":5,"manifest":{"app":{"launch":{"web_url":"hxxp://THIS-WILL-BE-REPLACED"}},"description":"Chrome as an app","display_in_launcher":true,"display_in_new_tab_page":false,"icons":{"128":"product_logo_128.png","16":"product_logo_16.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNuYLEQ1QPMcc5HfWI/9jiEf6FdJWqEtgRmIeI7qtjPLBM5oje+Ny2E2mTAhou5qdJiO2CHWdU1DQXY2F7Zu2gZaKZgHLfK4WimHxUT5Xd9/aro/R9PCzjguM1BLusiWYc9xlj1IsZpyiN1hcjU7SCnBhv1feQlv2WSB5KRiXwhQIDAQAB","name":"Chrome","version":"0.1"},"page_ordinal":"n","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\26.0.1410.64\\resources\\chrome_app","was_installed_by_default":false},"neajdppkdcdipfabeoofebfddakdcjhd":{"active_permissions":{"api":["systemPrivate","ttsEngine"],"explicit_host":["https://www.google.com/*"],"manifest_permissions":[]},"content_settings":[],"creation_flags":1,"events":["ttsEngine.onPause","ttsEngine.onResume","ttsEngine.onSpeak","ttsEngine.onStop"],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"initial_keybindings_set":true,"install_time":"13037747591248957","location":5,"manifest":{"background":{"persistent":false,"scripts":["tts_extension.js"]},"description":"Component extension providing speech via the Google network text-to-speech service.","key":"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GSbNUMGygqQTNDMFGIjZNcwXsHLzkNkHjWbuY37PbNdSDZ4VqlVjzbWqODSe+MjELdv5Keb51IdytnoGYXBMyqKmWpUrg+RnKvQ5ibWr4MW9pyIceOIdp9GrzC1WZGgTmZismYR3AjaIpufZ7xDdQQv+XrghPWCkdVqLN+qZDA1HU+DURznkMICiDDSH2sU0egm9UbWfS218bZqzKeQDiC3OnTPlaxcbJtKUuupIm5knjze3Wo9Ae9poTDMzKgchg0VlFCv3uqox+wlD8sjXBoyBCCK9HpImdVAF1a7jpdgiUHpPeV/26oYzM9/grltwNR3bzECQgSpyXp0eyoegwIDAQAB","manifest_version":2,"name":"Google Network Speech","permissions":["systemPrivate","ttsEngine","https://www.google.com/"],"tts_engine":{"voices":[{"event_types":["start","end","error"],"gender":"female","lang":"en-US","remote":true,"voice_name":"Google US English"},{"event_types":["start","end","error"],"gender":"male","lang":"en-GB","remote":true,"voice_name":"Google UK English Male"},{"event_types":["start","end","error"],"gender":"female","lang":"en-GB","remote":true,"voice_name":"Google UK English Female"},{"event_types":["start","end","error"],"gender":"female","lang":"es-ES","remote":true,"voice_name":"Google Español"},{"event_types":["start","end","error"],"gender":"female","lang":"fr-FR","remote":true,"voice_name":"Google Français"},{"event_types":["start","end","error"],"gender":"female","lang":"it-IT","remote":true,"voice_name":"Google Italiano"},{"event_types":["start","end","error"],"gender":"female","lang":"de-DE","remote":true,"voice_name":"Google Deutsch"},{"event_types":["start","end","error"],"gender":"female","lang":"ja-JP","remote":true,"voice_name":"Google æ?¥æ?¬äºº"},{"event_types":["start","end","error"],"gender":"female","lang":"ko-KR","remote":true,"voice_name":"Google í??êµ*ì?"},{"event_types":["start","end","error"],"gender":"female","lang":"zh-CN","remote":true,"voice_name":"Google ä¸*å?½ç??"}]},"version":"1.0"},"path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\33.0.1750.117\\resources\\network_speech_synthesis","preferences":{},"regular_only_preferences":{},"was_installed_by_default":false},"niapdbllcanepiiimjjndipklodoedlc":{"ack_external":true,"ack_prompt_count":1,"creation_flags":1,"exclude_from_sideload_wipeout":true,"from_bookmark":false,"from_webstore":false,"state":1,"was_installed_by_default":false},"nkeimhogjdpnpccoofpliimaahmaaome":{"active_permissions":{"api":["alarms","desktopCapture","processes","webConnectable","webrtcAudioPrivate","webrtcLoggingPrivate","system.cpu"],"manifest_permissions":[]},"creation_flags":1,"events":["alarms.onAlarm","runtime.onStartup"],"from_bookmark":false,"from_webstore":false,"initial_keybindings_set":true,"install_time":"13031421621332179","location":5,"manifest":{"background":{"page":"background.html","persistent":false},"externally_connectable":{"matches":["https://*.google.com/hangouts*","*://localhost/*"]},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDAQt2ZDdPfoSe/JI6ID5bgLHRCnCu9T36aYczmhw/tnv6QZB2I6WnOCMZXJZlRdqWc7w9jo4BWhYS50Vb4weMfh/I0On7VcRwJUgfAxW2cHB+EkmtI1v4v/OU24OqIa1Nmv9uRVeX0GjhQukdLNhAE6ACWooaf5kqKlCeK+1GOkQIDAQAB","manifest_version":2,"name":"Hangout Services","permissions":["desktopCapture","system.cpu","webrtcAudioPrivate","webrtcLoggingPrivate"],"version":"1.0"},"path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\32.0.1700.41\\resources\\hangout_services","was_installed_by_default":false},"nmmhkkegccagdldgiimedpiccmgmieda":{"ack_external":true,"active_permissions":{"api":["identity","webview"],"explicit_host":["https://checkout.google.com/*","https://sandbox.google.com/*","https://www.google.com/*","https://www.googleapis.com/*"],"manifest_permissions":[]},"content_settings":[],"creation_flags":137,"disable_reasons":1,"events":["app.runtime.onLaunched"],"from_bookmark":false,"from_webstore":true,"has_declarative_rules":{"declarativeContent":{"onPageChanged":false},"declarativeWebRequest":{"onRequest":false}},"incognito_content_settings":[],"incognito_preferences":{},"initial_keybindings_set":true,"install_time":"13037748115842742","lastpingday":"13049449182251043","location":10,"manifest":{"app":{"background":{"scripts":["craw_background.js"]}},"current_locale":"de","default_locale":"en","description":"Google Wallet für digitale Produkte","display_in_launcher":false,"display_in_new_tab_page":false,"icons":{"128":"images/icon_128.png","16":"images/icon_16.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrKfMnLqViEyokd1wk57FxJtW2XXpGXzIHBzv9vQI/01UsuP0IV5/lj0wx7zJ/xcibUgDeIxobvv9XD+zO1MdjMWuqJFcKuSS4Suqkje6u+pMrTSGOSHq1bmBVh0kpToN8YoJs/P/yrRd7FEtAXTaFTGxQL4C385MeXSjaQfiRiQIDAQAB","manifest_version":2,"minimum_chrome_version":"29","name":"Google Wallet","oauth2":{"auto_approve":true,"client_id":"203784468217.apps.googleusercontent.com","scopes":["https://www.googleapis.com/auth/sierra","https://www.googleapis.com/auth/sierrasandbox","https://www.googleapis.com/auth/chromewebstore","https://www.googleapis.com/auth/chromewebstore.readonly"]},"permissions":["identity","webview","https://checkout.google.com/","https://sandbox.google.com/checkout/","https://www.google.com/","https://www.googleapis.com/*"],"update_url":"https://clients2.google.com/service/update2/crx","version":"0.0.6.1"},"path":"nmmhkkegccagdldgiimedpiccmgmieda\\0.0.6.1_0","preferences":{},"regular_only_preferences":{},"running":false,"state":0,"was_installed_by_default":true},"nneajnkjbffgblleaoojgaacokifdkhm":{"ack_external":true,"active_permissions":{"api":["tabs"],"explicit_host":["hxxp://*/*"],"manifest_permissions":[],"scriptable_host":["hxxp://*/*"]},"creation_flags":1,"disable_reasons":1,"external_first_run":true,"from_bookmark":false,"from_webstore":false,"install_time":"13019171335596818","lastpingday":"13049449182251043","location":3,"manifest":{"content_scripts":[{"js":["script.js"],"matches":["hxxp://*/*"],"run_at":"document_end"}],"current_locale":"de","default_locale":"en","description":"Mehr Leistung und Videoformate für dein HTML5 \u003Cvideo>","icons":{"128":"DivXHTML5.128.png","48":"DivXHTML5.48.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCgKGj4sjJKwOs1NkcicEV4Rkq2kpG7jM+u/UGvcCzxtLTjUIbJ80v6eoI33XmcwiKILCymnIX591nlTXDOI+eHeHUAY42f3SIeh/bDlea9T6MMJXW1Fh7ZuG30QKivxtzwKSSgrspwbBTauN6Rq3FGoDrv2L9rNwmYBrUPA8Z4awIDAQAB","manifest_version":2,"name":"Mehr Leistung und Videoformate für dein HTML5 \u003Cvideo>","permissions":["tabs","hxxp://*/*"],"version":"2.1.2.172"},"path":"nneajnkjbffgblleaoojgaacokifdkhm\\2.1.2.172_0","state":0,"was_installed_by_default":false},"pafkbggdmjlpgkdkcbjmhmfcdpncadgh":{"active_permissions":{"api":["alarms","identity","metricsPrivate","notifications","pushMessaging","storage","tabs","webstorePrivate"],"explicit_host":["\u003Call_urls>","chrome://favicon/*"],"manifest_permissions":[]},"content_settings":[],"creation_flags":1,"events":["alarms.onAlarm","identity.onSignInChanged","notifications.onButtonClicked","notifications.onClicked","notifications.onClosed","notifications.onPermissionLevelChanged","notifications.onShowSettings","pushMessaging.onMessage","runtime.onInstalled","runtime.onStartup","runtime.onSuspend","storage.onChanged"],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"initial_keybindings_set":true,"install_time":"13050337984034271","location":5,"manifest":{"background":{"persistent":false,"scripts":["utility.js","cards.js","background.js"]},"description":"Integrates Google Now into Chrome.","icons":{"128":"images/icon128.png","16":"images/icon16.png","48":"images/icon48.png"},"key":"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhqJr32OFD/bMXW4Md7jMfd7LbwHXVc6x5bBQG5U+dloofoxrICDR20yur/40mQ8O//0sS1b8srvbab1CRlSrxoNCr9T80NAkfzx0gHyVS+p1Zow+1FzLMu9PiGwwFyN80HIB7GI/dIa0wC9K/2OrrzcHEhVH96DacTtWQqjfDVtZPjT7Xwv23dgoWcpbkRC86jMJot3dmX9xnn0KzoVc9gDOHSIkBLbkkr6Sp3LGXCCM4L0DJgxdFwaLr5WBzgC3y5x0/wwPIwN4PtIaK3BhH6njlksfnKwwIJ9iRT41V4BqbWu4mszO/7VJ3HJyw2DBpIc2grU9ZRRxrV3fRQG4wIDAQAB","manifest_version":2,"name":"Google Now","oauth2":{"auto_approve":true,"scopes":["https://www.googleapis.com/auth/googlenow"]},"optional_permissions":["background"],"permissions":["alarms","identity","metricsPrivate","notifications","pushMessaging","storage","tabs","webstorePrivate","\u003Call_urls>"],"version":"1.2.0.1"},"path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\36.0.1985.125\\resources\\google_now","preferences":{},"regular_only_preferences":{},"was_installed_by_default":false,"was_installed_by_oem":false},"pjkljhegncpnkpknbcohdijeoejaedia":{"ack_external":true,"active_permissions":{"api":["notifications"],"manifest_permissions":[]},"app_launcher_ordinal":"t","creation_flags":137,"disable_reasons":1,"events":[],"exclude_from_sideload_wipeout":true,"from_bookmark":false,"from_webstore":true,"granted_permissions":{"api":["notifications"],"manifest_permissions":[]},"install_time":"13010383510555272","lastpingday":"13049449182251043","location":1,"manifest":{"app":{"launch":{"container":"tab","web_url":"https://mail.google.com/mail/ca"},"urls":["*://mail.google.com/mail/ca"]},"current_locale":"de","default_locale":"en","description":"Schneller E-Mail-Dienst mit Suchfunktion und wenig Spam.","icons":{"128":"128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCuGglK43iAz3J9BEYK/Mz6ZhloIMMDqQSAaf3vJt4eHbTbSDsu4WdQ9dQDRcKlg8nwQdePBt0C3PSUBtiSNSS37Z3qEGfS7LCju3h6pI1Yr9MQtxw+jUa7kXXIS09VV73pEFUT/F7c6Qe8L5ZxgAcBvXBh1Fie63qb02I9XQ/CQIDAQAB","name":"Google Mail","options_page":"https://mail.google.com/mail/ca/#settings","permissions":["notifications"],"update_url":"hxxp://clients2.google.com/service/update2/crx","version":"7"},"page_ordinal":"n","path":"pjkljhegncpnkpknbcohdijeoejaedia\\7_1","state":0,"was_installed_by_default":true}}},"first_run_tabs":["hxxp://www.google.com/","hxxp://welcome_page"],"google":{"services":{"signin":{"LSID":"","SID":""}}},"homepage":"hxxp://www.trovi.com/?gd=&ctid=CT3320691&octid=EB_ORIGINAL_CTID&ISID=M8DC2E326-15EB-46C4-98D6-2AE3AE0F9094&SearchSource=55&CUI=&UM=6&UP=SP407B9C82-EDAF-444F-A5FB-FF57FA2F79F3&SSPV=","homepage_is_newtabpage":false,"intl":{"accept_languages":"de-DE,de,en-US,en"},"invalidator":{"client_id":"J+DhqncDjPsRDL/M0vlaWQ=="},"media":{"device_id_salt":"ws0uRFitOOBwqCjbKwNZAg=="},"net":{"http_server_properties":{"servers":{"ad.doubleclick.net:80":{"alternate_protocol":{"port":80,"protocol_str":"quic"},"supports_spdy":false},"ad.es.doubleclick.net:80":{"alternate_protocol":{"port":80,"protocol_str":"quic"},"supports_spdy":false},"ajax.googleapis.com:80":{"alternate_protocol":{"port":80,"protocol_str":"quic"},"supports_spdy":false},"apis.google.com:443":{"supports_spdy":true},"clients2.google.com:443":{"alternate_protocol":{"port":443,"protocol_str":"quic"},"settings":{"4":100,"5":32,"6":0},"supports_spdy":true},"clients2.googleusercontent.com:443":{"alternate_protocol":{"port":443,"protocol_str":"quic"},"settings":{"4":100,"5":92,"6":0},"supports_spdy":true},"fls.doubleclick.net:443":{"supports_spdy":true},"fonts.googleapis.com:443":{"supports_spdy":true},"googleads.g.doubleclick.net:443":{"supports_spdy":true},"pagead2.googlesyndication.com:80":{"alternate_protocol":{"port":80,"protocol_str":"quic"},"supports_spdy":false},"partner.googleadservices.com:80":{"alternate_protocol":{"port":80,"protocol_str":"quic"},"supports_spdy":false},"pubads.g.doubleclick.net:80":{"alternate_protocol":{"port":80,"protocol_str":"quic"},"supports_spdy":false},"ssl.google-analytics.com:443":{"alternate_protocol":{"port":443,"protocol_str":"quic"},"supports_spdy":true},"ssl.gstatic.com:443":{"supports_spdy":true},"themes.googleusercontent.com:443":{"supports_spdy":true},"www.google-analytics.com:80":{"alternate_protocol":{"port":80,"protocol_str":"quic"},"supports_spdy":false},"www.google.com:443":{"alternate_protocol":{"port":443,"protocol_str":"quic"},"settings":{"4":100,"5":32,"6":0},"supports_spdy":true},"www.google.de:443":{"supports_spdy":true},"www.googleadservices.com:443":{"supports_spdy":true},"www.googletagservices.com:80":{"alternate_protocol":{"port":80,"protocol_str":"quic"},"supports_spdy":false}},"version":2}},"ntp":{"app_page_names":["Apps"]},"pinned_tabs":[],"plugins":{"enabled_internal_pdf3":true,"enabled_nacl":true,"last_internal_directory":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\36.0.1985.125","migrated_to_pepper_flash":true,"plugins_list":[{"enabled":true,"name":"Shockwave Flash","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\36.0.1985.125\\PepperFlash\\pepflashplayer.dll","version":"11.4.31.110"},{"enabled":true,"name":"Shockwave Flash","path":"C:\\Windows\\SysWOW64\\Macromed\\Flash\\NPSWF32_11_7_700_169.dll","version":"11,7,700,169"},{"enabled":true,"name":"Flash"},{"enabled":true,"name":"Chrome Remote Desktop Viewer","path":"internal-remoting-viewer","version":""},{"enabled":true,"name":"Chrome Remote Desktop Viewer"},{"enabled":true,"name":"Native Client","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\36.0.1985.125\\ppGoogleNaClPluginChrome.dll","version":""},{"enabled":true,"name":"Native Client"},{"enabled":true,"name":"Chrome PDF Viewer","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\36.0.1985.125\\pdf.dll","version":""},{"enabled":true,"name":"Chrome PDF Viewer"},{"enabled":true,"name":"Google Update","path":"C:\\Program Files (x86)\\Google\\Update\\1.3.21.115\\npGoogleUpdate3.dll","version":"1.3.21.115"},{"enabled":true,"name":"Google Update"},{"enabled":true,"name":"IntelÃ?® Identity Protection Technology","path":"C:\\Program Files (x86)\\Intel\\Intel(R) Management Engine Components\\IPT\\npIntelWebAPIIPT.dll","version":"2.0.59.0"},{"enabled":true,"name":"IntelÃ?® Identity Protection Technology","path":"C:\\Program Files (x86)\\Intel\\Intel(R) Management Engine Components\\IPT\\npIntelWebAPIUpdater.dll","version":"2.0.59.0"},{"enabled":true,"name":"IntelÃ?® Identity Protection Technology"},{"enabled":true,"name":"Shockwave for Director","path":"C:\\Windows\\SysWOW64\\Adobe\\Director\\np32dsw_1202122.dll","version":"12.0.2r122"},{"enabled":true,"name":"Shockwave"}],"removed_old_component_pepper_flash_settings":true},"profile":{"avatar_index":0,"content_settings":{"clear_on_exit_migrated":true,"pattern_pairs":{},"pref_version":1},"exit_type":"Normal","exited_cleanly":true,"icon_version":2,"managed_user_id":"","name":"Erster Nutzer","per_host_zoom_levels":{}},"session":{"restore_on_startup":4,"restore_on_startup_migrated":true,"startup_urls":["hxxp://www.trovi.com/?gd=&ctid=CT3320691&octid=EB_ORIGINAL_CTID&ISID=M8DC2E326-15EB-46C4-98D6-2AE3AE0F9094&SearchSource=55&CUI=&UM=6&UP=SP407B9C82-EDAF-444F-A5FB-FF57FA2F79F3&SSPV="],"startup_urls_migration_time":"13031421621060179"},"sync_promo":{"show_on_first_run_allowed":false},"translate_blocked_languages":["de"],"translate_whitelists":{}}), Ersetzt,[c03b7576d1aa53e39409949459ac37c9]
PUP.Optional.Trovi.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("browser.startup.homepage", "hxxp://www.trovi.com/?gd=&ctid=CT3314932&octid=EB_ORIGINAL_CTID&ISID=9692611C-ECD7-41DD-8576-0071B99A1E65&SearchSource=55&CUI=&UM=6&UP=SP86973CBE-4F18-4474-833D-435FE9A00370&SSPV=");), Ersetzt,[c833f7f424575dd9a1f945e3cb3a748c]
PUP.Optional.CrossRider.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.crossrider.bic", "14006a51a6bcb068f4d125e4b439f992");), Ersetzt,[e9121ad16d0e2d09cd2e46e24eb7cb35]
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.mysearchdial.AL", 2);), Ersetzt,[53a86388cdae9a9ccc3600290df8857b]
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.mysearchdial.aflt", "ir_14_10_FF");), Ersetzt,[45b6b4377407f73f788a70b939cc5aa6]
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}");), Ersetzt,[a457c427c9b290a6f50d44e5778e04fc]
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1QzutDzz0E0D0Bzy0BtD0ByCyByCyCtAyByEtN0D0Tzu0SyBzyzztN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StD0EzztD0F0A0CtDtGyEyB0AzztG0D0ByBzytG0A0B0CtBtGyDtByE0FyEyEyEyD0AtC0Ezz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtBtA0DyBtD0EyEtGyDzytB0AtGyD0CyCyCtGtC0EyD0CtGyDtCzz0E0CyEzy0AyC0CtD0B2Q");), Ersetzt,[7685fdee700b60d6c43ec861db2af10f]
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.mysearchdial.cr", "256944653");), Ersetzt,[24d77d6e6318ff37a95959d009fca65a]
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.mysearchdial.dfltLng", "");), Ersetzt,[ab5010db8cef92a4de242cfde4218080]
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.mysearchdial.dfltSrch", true);), Ersetzt,[b546f1faea9169cd9b67ed3c25e0cb35]
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.mysearchdial.dnsErr", true);), Ersetzt,[9e5ddb10fa81b18547bb2cfd65a0837d]
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.mysearchdial.excTlbr", false);), Ersetzt,[16e536b58af1cf679a68b376d332966a]
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.mysearchdial.hmpg", true);), Ersetzt,[e21916d50675ea4c35cdca5f41c46b95]
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.mysearchdial.hmpgUrl", "hxxp://start.mysearchdial.com/?f=1&a=ir_14_10_FF&cd=2XzuyEtN2Y1L1QzutDzz0E0D0Bzy0BtD0ByCyByCyCtAyByEtN0D0Tzu0SyBzyzztN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StD0EzztD0F0A0CtDtGyEyB0AzztG0D0ByBzytG0A0B0CtBtGyDtByE0FyEyEyEyD0AtC0Ezz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtBtA0DyBtD0EyEtGyDzytB0AtGyD0CyCyCtGtC0EyD0CtGyDtCzz0E0CyEzy0AyC0CtD0B2Q&cr=256944653&ir=");), Ersetzt,[03f829c2e4972f077989002958ad40c0]
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.mysearchdial.id", "08EDB9B0B6766374");), Ersetzt,[cb301fcc7dfec47207fbfb2e93724eb2]
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.mysearchdial.instlDay", "16138");), Ersetzt,[fefdaa4198e3a5918e74bc6d9273bd43]
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.mysearchdial.instlRef", "140305_a");), Ersetzt,[8e6d8d5e3843dc5a818182a783829967]
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.mysearchdial.newTabUrl", "hxxp://start.mysearchdial.com/?f=2&a=ir_14_10_FF&cd=2XzuyEtN2Y1L1QzutDzz0E0D0Bzy0BtD0ByCyByCyCtAyByEtN0D0Tzu0SyBzyzztN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StD0EzztD0F0A0CtDtGyEyB0AzztG0D0ByBzytG0A0B0CtBtGyDtByE0FyEyEyEyD0AtC0Ezz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtBtA0DyBtD0EyEtGyDzytB0AtGyD0CyCyCtGtC0EyD0CtGyDtCzz0E0CyEzy0AyC0CtD0B2Q&cr=256944653&ir=");), Ersetzt,[c338e90243384de9748e7caddb2a6b95]
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.mysearchdial.prdct", "mysearchdial");), Ersetzt,[59a254976f0caf8747bb9297887d7789]
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.mysearchdial.prtnrId", "mysearchdial");), Ersetzt,[31ca34b7bdbe67cf12f0191019ec36ca]
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial");), Ersetzt,[0fec68837a01af8736cc8e9b58ad4eb2]
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.mysearchdial.tlbrId", "base");), Ersetzt,[fefd48a365165cda04feed3c05006c94]
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.mysearchdial.tlbrSrchUrl", "hxxp://start.mysearchdial.com/?f=3&a=ir_14_10_FF&cd=2XzuyEtN2Y1L1QzutDzz0E0D0Bzy0BtD0ByCyByCyCtAyByEtN0D0Tzu0SyBzyzztN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StD0EzztD0F0A0CtDtGyEyB0AzztG0D0ByBzytG0A0B0CtBtGyDtByE0FyEyEyEyD0AtC0Ezz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtBtA0DyBtD0EyEtGyDzytB0AtGyD0CyCyCtGtC0EyD0CtGyDtCzz0E0CyEzy0AyC0CtD0B2Q&cr=256944653&ir=&q=");), Ersetzt,[b7447e6d9ae180b6bf436cbdda2b55ab]
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.mysearchdial.vrsn", "1.8.29.0");), Ersetzt,[30cb1ccf3942191d788a1c0d3acbc838]
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.mysearchdial.vrsni", "1.8.29.0");), Ersetzt,[cd2e2fbc215a64d2877b2603b055ad53]
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.mysearchdial_i.newTab", false);), Ersetzt,[9566b03b7a0167cf07fba089e91c31cf]
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.mysearchdial_i.smplGrp", "none");), Ersetzt,[c734c3287efd261005fdc76245c00ef2]
PUP.Optional.MySearchDial.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.mysearchdial_i.vrsnTs", "1.8.29.00:51:36");), Ersetzt,[e912b6353942270fc042ed3c8580629e]
PUP.Optional.Softonic.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.admin", false);), Ersetzt,[5c9f2bc08af165d1907c6bbed62f0af6]
PUP.Optional.Softonic.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.aflt", "OC");), Ersetzt,[a9521ad132498aacfb11b871a4618e72]
PUP.Optional.Softonic.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.appId", "{7ABBFE1C-E485-44AA-8F36-353751B4124D}");), Ersetzt,[956641aabebda6909c70df4a21e40af6]
PUP.Optional.Softonic.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.autoRvrt", "false");), Ersetzt,[8f6c19d226551e187597c960c441e719]
PUP.Optional.Softonic.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.dfltLng", "de");), Ersetzt,[fefd4aa126559a9ca3691910af565ea2]
PUP.Optional.Softonic.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.dfltSrch", true);), Ersetzt,[6f8c15d63d3e8fa79577cb5ece379d63]
PUP.Optional.Softonic.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.dnsErr", true);), Ersetzt,[aa5145a694e76cca3bd182a791741fe1]
PUP.Optional.Softonic.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.excTlbr", false);), Ersetzt,[11eaa04b9ae164d260acb178af567a86]
PUP.Optional.Softonic.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.ffxUnstlRst", false);), Ersetzt,[f00b39b2f08b7bbb37d5f237e71e58a8]
PUP.Optional.Softonic.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.hmpg", true);), Ersetzt,[b843f3f8e695e94d0705b772dc296c94]
PUP.Optional.Softonic.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.hmpgUrl", "hxxp://search.softonic.com/MOY00621/tb_v1?SearchSource=13&cc=&mi=f2cc637400000000000008edb9b0b676");), Ersetzt,[6a9142a9d7a4d75f719b230637ce02fe]
PUP.Optional.Softonic.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.id", "f2cc637400000000000008edb9b0b676");), Ersetzt,[1ae15c8f027996a011fb3cedcc39db25]
PUP.Optional.Softonic.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.instlDay", "16043");), Ersetzt,[2ecd688395e681b5818b34f5ae570bf5]
PUP.Optional.Softonic.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.instlRef", "MOY00621");), Ersetzt,[57a4d813611aab8b10fc0a1f52b347b9]
PUP.Optional.Softonic.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.newTab", true);), Ersetzt,[a655b7341c5fca6cb656fa2f40c5ac54]
PUP.Optional.Softonic.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.newTabUrl", "hxxp://search.softonic.com/MOY00621/tb_v1/?SearchSource=15&cc=&mi=f2cc637400000000000008edb9b0b676");), Ersetzt,[b447e704d5a6a4924fbd79b0fc09bd43]
PUP.Optional.Softonic.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.prdct", "Softonic");), Ersetzt,[c734ba31ea91b48238d4bd6c867fba46]
PUP.Optional.Softonic.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.prtnrId", "softonic");), Ersetzt,[56a507e485f6999de824f8319570956b]
PUP.Optional.Softonic.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.rvrt", "false");), Ersetzt,[c6355d8e601b58de5eaec66353b2e917]
PUP.Optional.Softonic.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.smplGrp", "none");), Ersetzt,[10eb5b90116a1f1753b98c9d8b7a46ba]
PUP.Optional.Softonic.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.srchPrvdr", "Search the web (Softonic)");), Ersetzt,[03f8cd1ed2a9cf6760acd15842c3857b]
PUP.Optional.Softonic.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.tlbrId", "opencandy2013");), Ersetzt,[df1ca2492259092d10fc969319ec5aa6]
PUP.Optional.Softonic.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.tlbrSrchUrl", "hxxp://search.softonic.com/MOY00621/tb_v1?SearchSource=1&cc=&mi=f2cc637400000000000008edb9b0b676&q=");), Ersetzt,[9368d2196615d16516f676b333d2fa06]
PUP.Optional.Softonic.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.vrsn", "1.8.21.14");), Ersetzt,[02f95398fb8089adc3497bae8382d12f]
PUP.Optional.Softonic.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.vrsnTs", "1.8.21.1414:30:33");), Ersetzt,[7c7f1ecdee8d9b9bfe0e4edb85801fe1]
PUP.Optional.Softonic.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.vrsni", "1.8.21.14");), Ersetzt,[bb403face8930c2a9a72a28719ec39c7]
Physische Sektoren: 0
(No malicious items detected)
(end)
|
|
03.10.2014, 18:18
| #9 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | unerwünschte Werbefenster in Firefox (Win7) Beim letzten Suchlauf wurde nix gefunden? Bitte das auch mal posten.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
03.10.2014, 19:08
| #10 |
| | unerwünschte Werbefenster in Firefox (Win7) Das war von mir gestern: Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 03.10.2014 Suchlauf-Zeit: 00:13:51 Logdatei: 13.txt Administrator: Ja Version: 2.00.2.1012 Malware Datenbank: v2014.10.02.09 Rootkit Datenbank: v2014.09.19.01 Lizenz: Kostenlos Malware Schutz: Deaktiviert Bösartiger Webseiten Schutz: Deaktiviert Self-protection: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Sabine Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 311422 Verstrichene Zeit: 15 Min, 7 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristics: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registrierungsschlüssel: 0 (No malicious items detected) Registrierungswerte: 0 (No malicious items detected) Registrierungsdaten: 0 (No malicious items detected) Ordner: 0 (No malicious items detected) Dateien: 0 (No malicious items detected) Physische Sektoren: 0 (No malicious items detected) (end) |
|
03.10.2014, 23:21
| #11 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | unerwünschte Werbefenster in Firefox (Win7) Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter BHO: Avira SearchFree Toolbar -> {41564952-412D-5637-00A7-7A786E7484D7} -> "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll" No File
BHO-x32: Avira SearchFree Toolbar -> {41564952-412D-5637-00A7-7A786E7484D7} -> "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll" No File
Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File
CHR Extension: (Bazaar Friend) - C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmobdmpfgfimbnmhhnkmmecdboblafdh [2013-09-13]
CHR HKLM\...\Chrome\Extension: [bmobdmpfgfimbnmhhnkmmecdboblafdh] - C:\Users\Sabine\AppData\Local\BazaarFriend.crx [2013-08-13]
CHR HKLM\...\Chrome\Extension: [kcendgajlhoaiiccpijilcpmgphfflnj] - C:\Users\Sabine\AppData\Local\newhb.crx [2013-08-01]
CHR HKCU\...\Chrome\Extension: [bmobdmpfgfimbnmhhnkmmecdboblafdh] - C:\Users\Sabine\AppData\Local\BazaarFriend.crx [2013-08-13]
CHR HKCU\...\Chrome\Extension: [kcendgajlhoaiiccpijilcpmgphfflnj] - C:\Users\Sabine\AppData\Local\newhb.crx [2013-08-01]
CHR HKLM-x32\...\Chrome\Extension: [bmobdmpfgfimbnmhhnkmmecdboblafdh] - C:\Users\Sabine\AppData\Local\BazaarFriend.crx [2013-08-13]
CHR HKLM-x32\...\Chrome\Extension: [kcendgajlhoaiiccpijilcpmgphfflnj] - C:\Users\Sabine\AppData\Local\newhb.crx [2013-08-01]
Task: {28863747-1A30-4E81-A0E8-AE267F4454DB} - \AdobeFlashPlayerUpdate No Task File <==== ATTENTION
Task: {E3D46802-7079-4BBF-B02B-8C70F0767A1E} - \AdobeFlashPlayerUpdate 2 No Task File <==== ATTENTION
Task: {341404F5-A1B4-417E-993F-7CB30F9F3365} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {D5575199-DFDB-4365-825B-784DC29CCF82} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
C:\Windows\System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2
C:\Windows\System32\Tasks\Microsoft\Windows\Maintenance\SMupdate3
C:\Program Files (x86)\AskPartnerNetwork
C:\ProgramData\XNcajQ
Hosts:
EmptyTemp:
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ Logfiles bitte immer in CODE-Tags posten |
|
04.10.2014, 11:58
| #12 |
| | unerwünschte Werbefenster in Firefox (Win7)Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-10-2014
Ran by Sabine at 2014-10-04 11:14:18 Run:1
Running from C:\Users\Sabine\Desktop
Loaded Profile: Sabine (Available profiles: Sabine)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
BHO: Avira SearchFree Toolbar -> {41564952-412D-5637-00A7-7A786E7484D7} -> "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll" No File
BHO-x32: Avira SearchFree Toolbar -> {41564952-412D-5637-00A7-7A786E7484D7} -> "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll" No File
Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File
CHR Extension: (Bazaar Friend) - C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmobdmpfgfimbnmhhnkmmecdboblafdh [2013-09-13]
CHR HKLM\...\Chrome\Extension: [bmobdmpfgfimbnmhhnkmmecdboblafdh] - C:\Users\Sabine\AppData\Local\BazaarFriend.crx [2013-08-13]
CHR HKLM\...\Chrome\Extension: [kcendgajlhoaiiccpijilcpmgphfflnj] - C:\Users\Sabine\AppData\Local\newhb.crx [2013-08-01]
CHR HKCU\...\Chrome\Extension: [bmobdmpfgfimbnmhhnkmmecdboblafdh] - C:\Users\Sabine\AppData\Local\BazaarFriend.crx [2013-08-13]
CHR HKCU\...\Chrome\Extension: [kcendgajlhoaiiccpijilcpmgphfflnj] - C:\Users\Sabine\AppData\Local\newhb.crx [2013-08-01]
CHR HKLM-x32\...\Chrome\Extension: [bmobdmpfgfimbnmhhnkmmecdboblafdh] - C:\Users\Sabine\AppData\Local\BazaarFriend.crx [2013-08-13]
CHR HKLM-x32\...\Chrome\Extension: [kcendgajlhoaiiccpijilcpmgphfflnj] - C:\Users\Sabine\AppData\Local\newhb.crx [2013-08-01]
Task: {28863747-1A30-4E81-A0E8-AE267F4454DB} - \AdobeFlashPlayerUpdate No Task File <==== ATTENTION
Task: {E3D46802-7079-4BBF-B02B-8C70F0767A1E} - \AdobeFlashPlayerUpdate 2 No Task File <==== ATTENTION
Task: {341404F5-A1B4-417E-993F-7CB30F9F3365} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {D5575199-DFDB-4365-825B-784DC29CCF82} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
C:\Windows\System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2
C:\Windows\System32\Tasks\Microsoft\Windows\Maintenance\SMupdate3
C:\Program Files (x86)\AskPartnerNetwork
C:\ProgramData\XNcajQ
Hosts:
EmptyTemp:
*****************
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7}" => Key deleted successfully.
"HKCR\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}" => Key deleted successfully.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7}" => Key deleted successfully.
"HKCR\Wow6432Node\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}" => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{41564952-412D-5637-00A7-7A786E7484D7} => value deleted successfully.
"HKCR\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}" => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{41564952-412D-5637-00A7-7A786E7484D7} => value deleted successfully.
"HKCR\Wow6432Node\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}" => Key not found.
C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmobdmpfgfimbnmhhnkmmecdboblafdh => Moved successfully.
"HKLM\SOFTWARE\Google\Chrome\Extensions\bmobdmpfgfimbnmhhnkmmecdboblafdh" => Key deleted successfully.
C:\Users\Sabine\AppData\Local\BazaarFriend.crx => Moved successfully.
"HKLM\SOFTWARE\Google\Chrome\Extensions\kcendgajlhoaiiccpijilcpmgphfflnj" => Key deleted successfully.
C:\Users\Sabine\AppData\Local\newhb.crx => Moved successfully.
"HKCU\SOFTWARE\Google\Chrome\Extensions\bmobdmpfgfimbnmhhnkmmecdboblafdh" => Key deleted successfully.
"C:\Users\Sabine\AppData\Local\BazaarFriend.crx" => File/Directory not found.
"HKCU\SOFTWARE\Google\Chrome\Extensions\kcendgajlhoaiiccpijilcpmgphfflnj" => Key deleted successfully.
"C:\Users\Sabine\AppData\Local\newhb.crx" => File/Directory not found.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\bmobdmpfgfimbnmhhnkmmecdboblafdh" => Key deleted successfully.
"C:\Users\Sabine\AppData\Local\BazaarFriend.crx" => File/Directory not found.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\kcendgajlhoaiiccpijilcpmgphfflnj" => Key deleted successfully.
"C:\Users\Sabine\AppData\Local\newhb.crx" => File/Directory not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{28863747-1A30-4E81-A0E8-AE267F4454DB}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{28863747-1A30-4E81-A0E8-AE267F4454DB}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AdobeFlashPlayerUpdate" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{E3D46802-7079-4BBF-B02B-8C70F0767A1E}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E3D46802-7079-4BBF-B02B-8C70F0767A1E}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AdobeFlashPlayerUpdate 2" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{341404F5-A1B4-417E-993F-7CB30F9F3365}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{341404F5-A1B4-417E-993F-7CB30F9F3365}" => Key deleted successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Multimedia\SMupdate3" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D5575199-DFDB-4365-825B-784DC29CCF82}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D5575199-DFDB-4365-825B-784DC29CCF82}" => Key deleted successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Maintenance\SMupdate2" => Key deleted successfully.
"C:\Windows\System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2" => File/Directory not found.
"C:\Windows\System32\Tasks\Microsoft\Windows\Maintenance\SMupdate3" => File/Directory not found.
"C:\Program Files (x86)\AskPartnerNetwork" => File/Directory not found.
C:\ProgramData\XNcajQ => Moved successfully.
"C:\Windows\System32\Drivers\etc\hosts" => Could not move.
Could not reset Hosts.
EmptyTemp: => Removed 20.9 GB temporary data.
The system needed a reboot.
==== End of Fixlog ====
|
|
04.10.2014, 12:03
| #13 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | unerwünschte Werbefenster in Firefox (Win7) Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Scan klicken 
__________________ Logfiles bitte immer in CODE-Tags posten |
|
04.10.2014, 12:25
| #14 |
| | unerwünschte Werbefenster in Firefox (Win7) FRST FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2014
Ran by Sabine (administrator) on SABINE-PC on 04-10-2014 13:21:06
Running from C:\Users\Sabine\Desktop
Loaded Profile: Sabine (Available profiles: Sabine)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Yahoo! Inc.) C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
(Facebook Inc.) C:\Users\Sabine\AppData\Local\Facebook\Update\FacebookUpdate.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Ulead Systems, Inc.) C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\Monitor.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Yahoo! Inc.) C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Yahoo! Inc.) C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [BLEServicesCtrl] => C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [177936 2012-02-17] (Intel Corporation)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1156712 2012-04-03] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2885944 2012-09-20] (Synaptics Incorporated)
HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\btvstack.exe [1022592 2012-04-28] (Atheros Communications)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\athbttray.exe [801920 2012-04-28] (Atheros Commnucations)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2012-02-10] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-05-20] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1263952 2013-02-13] ()
HKLM-x32\...\Run: [Ulead AutoDetector v2] => C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\monitor.exe [90112 2004-11-26] (Ulead Systems, Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [190032 2014-07-14] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-1250141173-3139096374-720319810-1000\...\Run: [Messenger (Yahoo!)] => C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe [6595928 2012-05-25] (Yahoo! Inc.)
HKU\S-1-5-21-1250141173-3139096374-720319810-1000\...\Run: [ChicaPasswordManager] => "C:\Program Files (x86)\ChicaLogic\Chica Password Manager\stpass.exe" /autorunned
HKU\S-1-5-21-1250141173-3139096374-720319810-1000\...\Run: [Facebook Update] => C:\Users\Sabine\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-11-21] (Facebook Inc.)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-05-18] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\Sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x23C5B3F4B138CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
URLSearchHook: HKCU - YTNavAssistPlugin Class - {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default
FF SearchEngineOrder.3: Bing
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.17.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll (Adobe Systems, Inc.)
FF Plugin-x32: @divx.com/DivX Plus Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 -> C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Sabine\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\searchplugins\nation-secure-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\nation-secure-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: My Movie Magnet - C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\Extensions\admin@mymoviemagnet.com [2013-08-07]
FF Extension: Garmin Communicator - C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\9qaxx5pp.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2013-04-23]
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Profile: C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-04-14]
CHR Extension: (Google Search) - C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-04-14]
CHR Extension: (Foxtab Speed Dial (Beta)) - C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcendgajlhoaiiccpijilcpmgphfflnj [2013-08-09]
CHR Extension: (Google Wallet) - C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-16]
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2013-07-24]
CHR Extension: (Gmail) - C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-04-14]
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2013-05-06]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1021520 2014-08-05] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-14] (Avira Operations GmbH & Co. KG)
R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [File not signed]
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2010-10-22] (Hewlett-Packard Co.) [File not signed]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-04-03] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-04-03] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2011-12-08] ()
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
S3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1359408 2013-03-26] (Sony Corporation)
R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [163456 2012-04-28] (Atheros)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [594704 2011-12-08] (Intel® Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-06-24] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [46368 2013-10-04] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-22] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-09-30] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [42040 2014-07-08] (Avira Operations GmbH & Co. KG)
S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 AthBTPort; system32\DRIVERS\btath_flt.sys [X]
S3 BTATH_A2DP; system32\drivers\btath_a2dp.sys [X]
S3 btath_avdt; system32\drivers\btath_avdt.sys [X]
S3 BTATH_BUS; system32\DRIVERS\btath_bus.sys [X]
S3 BTATH_HCRP; system32\DRIVERS\btath_hcrp.sys [X]
S3 BTATH_LWFLT; system32\DRIVERS\btath_lwflt.sys [X]
S3 BTATH_RCP; system32\DRIVERS\btath_rcp.sys [X]
S3 BTATH_VDP; system32\drivers\btath_vdp.sys [X]
S3 BtFilter; system32\DRIVERS\btfilter.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-10-04 12:54 - 2014-10-04 12:54 - 00000000 ___RD () C:\Users\Sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-10-03 20:52 - 2014-10-03 20:52 - 04991400 _____ (Adobe Systems Inc.) C:\Users\Sabine\Downloads\Shockwave_Installer_Slim(1).exe
2014-10-03 11:15 - 2014-10-03 11:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2014-10-03 11:15 - 2014-10-03 11:15 - 00000000 ____D () C:\Program Files (x86)\7-Zip
2014-10-03 11:14 - 2014-10-03 11:14 - 01110476 _____ () C:\Users\Sabine\Downloads\7z920.exe
2014-10-03 10:52 - 2014-10-03 11:02 - 00134566 _____ () C:\Users\Sabine\Desktop\1.txt
2014-10-03 10:51 - 2014-10-03 11:23 - 00000000 ____D () C:\Users\Sabine\Desktop\MBAM
2014-10-03 01:06 - 2014-10-03 01:15 - 00042174 _____ () C:\Users\Sabine\Downloads\FRST.txt
2014-10-03 01:06 - 2014-10-03 01:06 - 00000000 ____D () C:\Users\Sabine\Downloads\FRST-OlderVersion
2014-10-03 01:04 - 2014-10-03 01:04 - 00000626 _____ () C:\Users\Sabine\Desktop\JRT.txt
2014-10-03 00:59 - 2014-10-03 00:59 - 01701755 _____ (Thisisu) C:\Users\Sabine\Downloads\JRT(1).exe
2014-10-03 00:56 - 2014-10-03 00:56 - 00001401 _____ () C:\Users\Sabine\Desktop\AdwCleaner[S2].txt
2014-10-03 00:27 - 2014-10-03 00:27 - 01375089 _____ () C:\Users\Sabine\Downloads\AdwCleaner_3.311(1).exe
2014-10-03 00:07 - 2014-10-03 11:16 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-10-03 00:07 - 2014-10-03 00:07 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-10-03 00:07 - 2014-10-03 00:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-10-03 00:07 - 2014-10-03 00:07 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-10-03 00:07 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-10-03 00:07 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-10-03 00:07 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-10-02 22:41 - 2014-10-02 22:41 - 00006405 _____ () C:\Users\Sabine\Desktop\gmerlog.log
2014-10-02 22:12 - 2014-10-02 22:12 - 00380416 _____ () C:\Users\Sabine\Downloads\Gmer-19357.exe
2014-10-02 22:04 - 2014-10-02 22:04 - 00027625 _____ () C:\Users\Sabine\Desktop\Addition.txt
2014-10-02 22:02 - 2014-10-04 13:22 - 00019764 _____ () C:\Users\Sabine\Desktop\FRST.txt
2014-10-02 22:02 - 2014-10-04 13:21 - 00000000 ____D () C:\FRST
2014-10-02 22:01 - 2014-10-03 01:06 - 02109440 _____ (Farbar) C:\Users\Sabine\Desktop\FRST64.exe
2014-10-02 22:00 - 2014-10-02 22:00 - 00000474 _____ () C:\Users\Sabine\Desktop\defogger_disable.log
2014-10-02 22:00 - 2014-10-02 22:00 - 00000000 _____ () C:\Users\Sabine\defogger_reenable
2014-10-02 21:57 - 2014-10-02 21:57 - 00050477 _____ () C:\Users\Sabine\Downloads\Defogger.exe
2014-10-02 21:50 - 2014-10-02 21:50 - 00009714 _____ () C:\Users\Sabine\Desktop\Ereignisse.txt
2014-10-02 20:58 - 2014-10-02 20:58 - 02347384 _____ (ESET) C:\Users\Sabine\Downloads\esetsmartinstaller_deu.exe
2014-10-02 20:27 - 2014-10-02 20:27 - 00000000 ____D () C:\Windows\ERUNT
2014-10-02 20:25 - 2014-10-02 20:25 - 01701755 _____ (Thisisu) C:\Users\Sabine\Downloads\JRT.exe
2014-10-02 20:19 - 2014-10-02 20:19 - 00000000 ____D () C:\Windows\SysWOW64\IPM
2014-10-02 20:14 - 2014-10-02 20:14 - 01375089 _____ () C:\Users\Sabine\Downloads\AdwCleaner_3.311.exe
2014-10-02 20:01 - 2014-10-02 20:02 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Sabine\Downloads\mbam-setup-2.0.2.1012(1).exe
2014-10-01 23:17 - 2014-09-25 04:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-10-01 23:16 - 2014-09-25 03:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-10-01 23:16 - 2014-09-10 00:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-10-01 23:16 - 2014-09-09 23:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-10-01 22:49 - 2014-10-01 23:02 - 00000000 ____D () C:\Windows\Minidump
2014-10-01 19:31 - 2014-10-01 21:30 - 00019990 _____ () C:\Users\Sabine\Desktop\Lebenslauf August 2014.odt
2014-09-26 05:24 - 2014-10-01 22:47 - 00000224 _____ () C:\Windows\system32\.crusader
2014-09-26 05:12 - 2014-09-26 05:12 - 00001905 _____ () C:\Users\Public\Desktop\HitmanPro.lnk
2014-09-26 05:12 - 2014-09-26 05:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
2014-09-26 05:10 - 2014-10-01 23:03 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-09-26 05:09 - 2014-09-26 05:10 - 10280824 _____ (SurfRight B.V.) C:\Users\Sabine\Downloads\HitmanPro.exe
2014-09-25 05:13 - 2014-10-01 23:02 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-09-25 05:12 - 2014-10-01 23:03 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-09-25 05:12 - 2014-10-01 23:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-09-25 05:12 - 2014-10-01 23:03 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-09-25 00:57 - 2014-09-25 00:57 - 00000000 ____D () C:\ProgramData\Emsisoft
2014-09-24 22:02 - 2014-09-26 04:19 - 00000000 ____D () C:\Program Files (x86)\Emsisoft Anti-Malware
2014-09-18 18:43 - 2014-09-20 21:23 - 00000000 ____D () C:\Users\Sabine\AppData\Roaming\Nico Mak Computing
2014-09-18 18:41 - 2014-09-18 18:42 - 04892480 _____ (WinZip International LLC ) C:\Users\Sabine\Downloads\wzmp_8(1).exe
2014-09-16 15:38 - 2014-05-12 15:16 - 00033235 _____ () C:\Users\Sabine\Downloads\reloadevery-28.0.2-fx.xpi
2014-09-16 15:09 - 2014-09-16 15:09 - 00030650 _____ () C:\Users\Sabine\Downloads\reloadevery-28.0.2-fx.zip
2014-09-15 21:30 - 2014-09-15 21:58 - 360886938 _____ () C:\Users\Sabine\Downloads\output.zip
2014-09-14 12:06 - 2014-09-14 12:06 - 01557816 _____ () C:\Users\Sabine\Downloads\14470198.zip
2014-09-13 09:14 - 2014-09-13 09:14 - 00066048 _____ () C:\Users\Sabine\Desktop\Unbenannt - 1.ufo
2014-09-13 08:49 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-09-13 08:49 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-09-12 10:25 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-09-12 10:25 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-09-12 10:25 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-12 10:25 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-12 10:25 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-09-12 10:25 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-09-12 10:25 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-12 10:25 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-12 10:25 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-09-12 10:25 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-09-12 10:25 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-09-12 10:25 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-09-12 10:25 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-09-12 10:25 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-12 10:25 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-09-12 10:25 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-12 10:25 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-09-12 10:25 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-09-12 10:25 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-09-12 10:25 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-09-12 10:25 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-09-12 10:25 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-12 10:25 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-09-12 10:25 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-09-12 10:25 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-09-12 10:25 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-09-12 10:25 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-09-12 10:25 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-09-12 10:25 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-09-12 10:25 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-12 10:25 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-09-12 10:25 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-09-12 10:25 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-12 10:25 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-09-12 10:25 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-09-12 10:25 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-09-12 10:25 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-09-12 10:25 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-12 10:25 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-09-12 10:25 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-12 10:25 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-09-12 10:25 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-09-12 10:25 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-09-12 10:25 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-09-12 10:25 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-09-12 10:25 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-12 10:25 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-09-12 10:25 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-12 10:25 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-09-12 10:25 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-09-12 10:25 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-09-12 10:25 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-12 10:25 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-09-12 10:25 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-09-12 10:25 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-09-12 10:25 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-09-11 22:14 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-11 22:14 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-09-11 22:13 - 2014-09-05 04:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-11 22:13 - 2014-09-05 04:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-11 22:13 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-09-11 22:13 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-11 22:13 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-09-11 22:13 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-09-11 22:13 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-09-11 22:13 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-09-11 22:13 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-09-10 11:46 - 2014-09-10 11:46 - 00000000 ____D () C:\Users\Sabine\AppData\Roaming\Oracle
2014-09-10 11:45 - 2014-07-25 12:55 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-09-10 11:45 - 2014-07-25 12:49 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-09-10 11:45 - 2014-07-25 12:49 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-09-10 11:45 - 2014-07-25 12:49 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-09-10 11:44 - 2014-09-10 11:45 - 00004623 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_67-b01.log
2014-09-10 09:40 - 2014-09-10 09:40 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-10 09:38 - 2014-09-10 09:39 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Sabine\Downloads\mbam-setup-2.0.2.1012.exe
2014-09-10 09:33 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-09-10 09:32 - 2014-10-03 00:42 - 00000000 ____D () C:\AdwCleaner
2014-09-10 09:32 - 2014-09-10 09:32 - 01370467 _____ () C:\Users\Sabine\Downloads\adwcleaner_3.309.exe
2014-09-09 16:09 - 2014-09-09 16:10 - 04892480 _____ (WinZip International LLC ) C:\Users\Sabine\Downloads\wzmp_8.exe
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-10-04 13:15 - 2013-04-14 05:07 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-04 13:02 - 2009-07-14 06:45 - 00023344 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-04 13:02 - 2009-07-14 06:45 - 00023344 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-04 12:58 - 2013-04-14 02:27 - 01957135 _____ () C:\Windows\WindowsUpdate.log
2014-10-04 12:57 - 2014-01-17 21:36 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-10-04 12:53 - 2013-04-14 11:39 - 00538428 _____ () C:\Windows\PFRO.log
2014-10-04 12:53 - 2013-04-14 05:07 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-04 12:53 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-04 12:53 - 2009-07-14 06:51 - 00038373 _____ () C:\Windows\setupact.log
2014-10-04 12:52 - 2013-10-20 17:19 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-10-04 11:24 - 2013-04-16 10:16 - 00000000 ____D () C:\Users\Sabine\AppData\Local\CrashDumps
2014-10-04 09:26 - 2013-04-14 03:28 - 00003938 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{116AEE57-E6F4-4672-B1B3-C8B3101820E4}
2014-10-03 11:41 - 2013-08-17 10:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-10-02 22:00 - 2013-04-14 02:31 - 00000000 ____D () C:\Users\Sabine
2014-10-02 21:41 - 2014-07-02 22:07 - 00000000 ____D () C:\ProgramData\WinZip
2014-10-02 11:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-10-02 09:52 - 2013-04-14 05:08 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-10-01 23:26 - 2013-10-20 17:19 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-10-01 23:26 - 2013-04-14 05:05 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-10-01 23:26 - 2013-04-14 05:05 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-10-01 23:13 - 2009-07-14 19:58 - 00699666 _____ () C:\Windows\system32\perfh007.dat
2014-10-01 23:13 - 2009-07-14 19:58 - 00149774 _____ () C:\Windows\system32\perfc007.dat
2014-10-01 23:13 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-01 23:08 - 2013-11-21 16:19 - 00000000 ____D () C:\Users\Sabine\AppData\Local\Facebook
2014-10-01 23:04 - 2013-04-14 05:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-10-01 23:04 - 2013-04-14 05:05 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-10-01 23:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\servicing
2014-10-01 23:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat
2014-10-01 23:03 - 2013-04-21 12:42 - 00000000 ____D () C:\ProgramData\Atheros
2014-10-01 23:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-10-01 21:30 - 2014-08-02 18:28 - 00000000 ____D () C:\Users\Sabine\Desktop\Bewerbungsunterlagen
2014-09-26 05:51 - 2014-01-17 15:23 - 00000000 ____D () C:\Users\Sabine\Desktop\Bilder
2014-09-26 04:24 - 2013-08-05 17:20 - 00000000 ____D () C:\Users\Sabine\Desktop\verk
2014-09-13 09:20 - 2014-05-07 09:30 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-09-12 10:24 - 2013-07-12 09:54 - 01594892 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-09-12 10:23 - 2013-08-15 07:54 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-12 09:31 - 2013-04-14 05:23 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-09-10 11:45 - 2013-12-30 22:03 - 00000000 ____D () C:\Program Files (x86)\Java
2014-09-10 11:45 - 2013-12-08 22:45 - 00000000 ____D () C:\ProgramData\Oracle
2014-09-10 11:23 - 2014-07-02 21:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AppsHat
2014-09-10 11:23 - 2013-04-14 04:24 - 00001049 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-10 10:11 - 2013-05-16 22:16 - 00000000 ____D () C:\Windows\de
2014-09-06 21:13 - 2014-03-31 15:43 - 00000000 ____D () C:\Users\Sabine\Desktop\ext FP
2014-09-06 21:11 - 2014-07-06 21:50 - 00000000 ____D () C:\Users\Sabine\Desktop\Dokumente
2014-09-04 14:55 - 2014-08-26 14:29 - 00000000 ____D () C:\Users\Sabine\AppData\Local\Microsoft Games
Some content of TEMP:
====================
C:\Users\Sabine\AppData\Local\Temp\avgnt.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-09-26 01:18
==================== End Of Log ============================
--- --- --- Additional Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2014
Ran by Sabine at 2014-10-04 13:22:33
Running from C:\Users\Sabine\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
1400 (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
1400_Help (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden
1400Trb (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - )
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.167 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.)
AIO_CDB_ProductContext (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
AIO_CDB_Software (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
AIO_Scan (x32 Version: 130.0.421.000 - Hewlett-Packard) Hidden
AMD APP SDK Runtime (Version: 10.0.851.6 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{EBF1529E-D2D5-47CF-97EC-7D90CEF0FE04}) (Version: 3.0.859.0 - Advanced Micro Devices, Inc.)
Atheros Bluetooth Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.4.0.135 - Atheros)
Audacity 2.0.3 (HKLM-x32\...\Audacity_is1) (Version: 2.0.3 - Audacity Team)
Avira (HKLM-x32\...\{df495620-2ba9-412d-828d-b27f020d9fc8}) (Version: 1.1.18.28431 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.18.28431 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.6.570 - Avira)
Avira SearchFree Toolbar (HKLM-x32\...\{41564952-412D-5637-00A7-A758B70C0A03}) (Version: 12.10.3.4489 - APN, LLC)
BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center (x32 Version: 2012.0209.2326.41882 - Ihr Firmenname) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0209.2326.41882 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2012.0209.2326.41882 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2012.0209.2326.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2012.0209.2325.41882 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2012.0209.2326.41882 - Advanced Micro Devices, Inc.) Hidden
Copy (x32 Version: 130.0.428.000 - Hewlett-Packard) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.8 - DivX, LLC)
DocProc (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
Fax (x32 Version: 130.0.418.000 - Hewlett-Packard) Hidden
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 37.0.2062.124 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)
HP Photosmart Officejet and Deskjet All-In-One Driver Software 13.0 Rel. B (HKLM\...\{B61ED343-0B14-4241-999C-490CB1A20DA4}) (Version: 13.0 - HP)
HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden
HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPPhotosmartEssential (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
Intel PROSet Wireless (Version: - ) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.2.1410 - Intel Corporation)
Intel(R) PROSet/Wireless for Bluetooth(R) 3.0 + High Speed (HKLM\...\{2C0E6BD4-65B1-4E82-B2AC-43EFFC8F100C}) (Version: 15.0.0.0059 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{520C4DD4-2BC7-409B-BA48-E1A4F832662D}) (Version: 2.1.0.0140 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.0.0.1032 - Intel Corporation)
Intel® PROSet/Wireless WiFi-Software (HKLM\...\{DF7756DD-656A-45C3-BA71-74673E8259A9}) (Version: 15.00.0000.0642 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{09536BA1-E498-4CC3-B834-D884A67D7E34}) (Version: 1.23.605.1 - Intel Corporation)
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.670 - Oracle)
Java Auto Updater (x32 Version: 2.1.67.1 - Oracle, Inc.) Hidden
Junk Mail filter update (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft SkyDrive (HKCU\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 23.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 23.0.1 (x86 de)) (Version: 23.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 24.5.0 - Mozilla)
Mozilla Thunderbird 24.6.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.6.0 (x86 de)) (Version: 24.6.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Network64 (Version: 130.0.572.000 - Hewlett-Packard) Hidden
Network64 (Version: 140.0.221.000 - Hewlett-Packard) Hidden
OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)
OpenOffice.org 3.4.1 (HKLM-x32\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation)
OpenSource Flash Video Splitter 1.0.0.5 (HKLM-x32\...\OpenSource Flash Video Splitter) (Version: 1.0.0.5 - )
Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Qualcomm Atheros WiFi Driver Installation (HKLM-x32\...\{E727B31A-8B24-4C1C-934A-69634E0D2C0B}) (Version: 3.0 - Qualcomm Atheros)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6564 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7601.91 - Realtek Semiconductor Corp.)
Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden
SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
SSLx64 (Version: 1.0.0 - Sony Corporation ) Hidden
SSLx86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden
Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.0.1.6 - Synaptics Incorporated)
Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden
Ulead COOL 360 1.0 (HKLM-x32\...\{3CEA4CA8-CDD4-451C-B673-E8F17BE01B15}) (Version: - )
Ulead Photo Explorer 8.6 (HKLM-x32\...\{025C3792-E9C6-432A-92C1-661F99D021CA}) (Version: 8.6 - Ulead Systems, Inc.)
Ulead PhotoImpact 12 (HKLM-x32\...\{11AFE21E-B193-430D-B57A-DFF7815BB962}) (Version: 12.0 - Ulead System)
UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden
VAIO Gate (HKLM-x32\...\{A7C30414-2382-4086-B0D6-01A88ABA21C3}) (Version: 2.4.2.02200 - Sony Corporation)
VAIO Update (HKLM-x32\...\{9FF95DA2-7DA1-4228-93B7-DED7EC02B6B2}) (Version: 6.2.1.03260 - Sony Corporation)
VGClientX64 (Version: 1.0.0 - Sony Corporation) Hidden
VGClientX86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VU5x64 (Version: 1.1.0 - Sony Corporation ) Hidden
VU5x86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden
VU5x86 (x32 Version: 1.1.0 - Sony Corporation ) Hidden
WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Family Safety (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Yahoo! Messenger (HKLM-x32\...\Yahoo! Messenger) (Version: - Yahoo! Inc.)
Yahoo! Software Update (HKLM-x32\...\Yahoo! Software Update) (Version: - )
Yahoo! Toolbar (HKLM-x32\...\Yahoo! Companion) (Version: - )
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-1250141173-3139096374-720319810-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Sabine\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910_1\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1250141173-3139096374-720319810-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Sabine\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910_1\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1250141173-3139096374-720319810-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Sabine\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910_1\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1250141173-3139096374-720319810-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Sabine\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910_1\amd64\FileSyncApi64.dll (Microsoft Corporation)
==================== Restore Points =========================
24-09-2014 05:37:54 Windows Update
26-09-2014 02:36:15 WinZip 18.5 wird entfernt
26-09-2014 03:22:26 Prüfpunkt von HitmanPro
26-09-2014 03:23:58 Prüfpunkt von HitmanPro
01-10-2014 17:34:00 Windows Update
01-10-2014 20:47:14 Prüfpunkt von HitmanPro
02-10-2014 07:42:11 Windows Modules Installer
02-10-2014 07:45:12 Windows Modules Installer
02-10-2014 19:40:04 WinZip 18.5 wird entfernt
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {1AEA3F39-EA10-4B10-B3AA-684215F23097} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1250141173-3139096374-720319810-1000Core => C:\Users\Sabine\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-11-21] (Facebook Inc.)
Task: {40A5CAF5-0164-476B-A9D0-5A48CB540FC3} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2012-02-20] (Sony Corporation)
Task: {7694C2F5-7F9C-4A0E-9863-0F177E28F6E4} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1250141173-3139096374-720319810-1000UA => C:\Users\Sabine\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-11-21] (Facebook Inc.)
Task: {A7D6B967-C49D-4819-A7CF-C75C89D70DD7} - System32\Tasks\Sony Corporation\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2012-02-20] (Sony Corporation)
Task: {B381A5DF-7120-44A2-8C67-45FABF4A7048} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-14] (Google Inc.)
Task: {C7C3C1E8-678C-49B3-B1F0-CFBD3A250867} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-14] (Google Inc.)
Task: {E87667A2-71B0-45B6-B2C7-96A8FFA6E010} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-10-01] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1250141173-3139096374-720319810-1000Core.job => C:\Users\Sabine\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1250141173-3139096374-720319810-1000UA.job => C:\Users\Sabine\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-02-13 04:37 - 2013-02-13 04:37 - 01263952 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
2013-04-14 03:04 - 2012-04-03 22:45 - 00128280 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
2011-11-09 09:55 - 2011-11-09 09:55 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2012-02-09 23:19 - 2012-02-09 23:19 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2013-04-14 18:49 - 2012-05-25 04:25 - 00921600 _____ () C:\Program Files (x86)\Yahoo!\Messenger\yui.dll
2013-04-14 18:49 - 2012-05-25 04:25 - 00078336 _____ () C:\Program Files (x86)\Yahoo!\Messenger\pcre.dll
2013-02-13 04:38 - 2013-02-13 04:38 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2013-06-23 20:13 - 2004-07-26 17:11 - 00028672 _____ () C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\DetMethod.dll
2014-10-04 12:54 - 2014-07-14 16:49 - 00049744 _____ () C:\Users\Sabine\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2014-07-14 16:49 - 2014-07-14 16:49 - 00137296 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2014-07-14 16:49 - 2014-07-14 16:49 - 00065104 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2013-08-17 10:23 - 2013-08-17 10:23 - 03551640 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-09-12 11:20 - 2014-09-12 11:20 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\4361e26af57c86003751ac77cce1c827\IsdiInterop.ni.dll
2013-04-14 03:05 - 2011-11-29 20:00 - 00059392 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2013-04-14 03:04 - 2012-04-03 22:46 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2014-06-11 14:06 - 2014-06-11 14:06 - 03022960 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
2014-06-11 14:06 - 2014-06-11 14:06 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2014-06-11 14:06 - 2014-06-11 14:06 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll
2014-09-10 18:27 - 2014-09-10 18:27 - 16825520 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
========================= Accounts: ==========================
Administrator (S-1-5-21-1250141173-3139096374-720319810-500 - Administrator - Disabled)
Gast (S-1-5-21-1250141173-3139096374-720319810-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1250141173-3139096374-720319810-1002 - Limited - Enabled)
Sabine (S-1-5-21-1250141173-3139096374-720319810-1000 - Administrator - Enabled) => C:\Users\Sabine
==================== Faulty Device Manager Devices =============
Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (10/04/2014 00:56:13 PM) (Source: MsiInstaller) (EventID: 1024) (User: Sabine-PC)
Description: Produkt: Adobe Reader XI (11.0.08) - Deutsch - Update "{AC76BA86-7AD7-0000-2550-7A8C40011009}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127
Error: (10/04/2014 11:24:19 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ipmGui.exe, Version: 14.0.6.522, Zeitstempel: 0x53bec647
Name des fehlerhaften Moduls: ipmGui.exe, Version: 14.0.6.522, Zeitstempel: 0x53bec647
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000795b
ID des fehlerhaften Prozesses: 0x11a0
Startzeit der fehlerhaften Anwendung: 0xipmGui.exe0
Pfad der fehlerhaften Anwendung: ipmGui.exe1
Pfad des fehlerhaften Moduls: ipmGui.exe2
Berichtskennung: ipmGui.exe3
System errors:
=============
Error: (10/04/2014 00:54:18 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Intel(R) PROSet/Wireless Event Log" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (10/04/2014 00:54:18 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Intel(R) PROSet/Wireless Event Log erreicht.
Error: (10/04/2014 00:52:25 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}
Error: (10/04/2014 09:24:17 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}
Error: (10/03/2014 10:30:37 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {4EB61BAC-A3B6-4760-9581-655041EF4D69}
Error: (10/03/2014 07:24:33 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}
Microsoft Office Sessions:
=========================
Error: (10/04/2014 00:56:13 PM) (Source: MsiInstaller) (EventID: 1024) (User: Sabine-PC)
Description: Adobe Reader XI (11.0.08) - Deutsch{AC76BA86-7AD7-0000-2550-7A8C40011009}1625(NULL)(NULL)(NULL)
Error: (10/04/2014 11:24:19 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: ipmGui.exe14.0.6.52253bec647ipmGui.exe14.0.6.52253bec647c00000050000795b11a001cfdfa435221b62C:\program files (x86)\avira\antivir desktop\ipmGui.exeC:\program files (x86)\avira\antivir desktop\ipmGui.exe37a23d04-4ba8-11e4-ad14-08edb9b0b676
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i3-2370M CPU @ 2.40GHz
Percentage of memory in use: 49%
Total physical RAM: 4066.36 MB
Available physical RAM: 2071.53 MB
Total Pagefile: 8130.9 MB
Available Pagefile: 5640.48 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:596.07 GB) (Free:542.89 GB) NTFS
Drive e: () (Fixed) (Total:29.8 GB) (Free:1.41 GB) FAT32
Drive f: () (Removable) (Total:7.5 GB) (Free:3.56 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596.2 GB) (Disk ID: 222AE71D)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=596.1 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 7.5 GB) (Disk ID: 00000000)
Partition: GPT Partition Type.
========================================================
Disk: 2 (Size: 29.8 GB) (Disk ID: E58013FB)
Partition 1: (Not Active) - (Size=29.8 GB) - (Type=0C)
==================== End Of Log ============================
|
|
04.10.2014, 12:30
| #15 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | unerwünschte Werbefenster in Firefox (Win7) Okay, dann Kontrollscans mit MBAM und ESET bitte: Downloade Dir bitte  Malwarebytes Anti-Malware
ESET Online Scanner
__________________ Logfiles bitte immer in CODE-Tags posten |
|
Linear-Darstellung
