Hallo mein intel centrino2 windows vista ist immer augelastet obwohl nur teamspeak läuft.
kann mir da jemand helfen die ganze sache zu verbessern ?

Der laptop hat keine CD fach. ich poste hier mal die log.fiels die ich gemacht habe.

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 06-10-2014
Ran by BurkiTrade (administrator) on BURKITRADE-MSI on 06-10-2014 10:45:12
Running from C:\Users\BurkiTrade\Downloads
Loaded Profile: BurkiTrade (Available profiles: BurkiTrade & Gast)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Micro-Star International Co., Ltd.) C:\Program Files\System Control Manager\MSIService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Micro-Star International Co., Ltd.) C:\Program Files\System Control Manager\MGSysCtrl.exe
(Micro-Star Int’l Co., Ltd.) C:\Program Files\MSI\MSI S-Bar Utilities\S-Bar.exe
() C:\Program Files\MSI\EasyFace Logon\KillAutoAP.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
() C:\Program Files\EDGE CARD\EDGE MODEM\EdgeRst.exe
() C:\Program Files\EDGE CARD\EDGE MODEM\EdgeRun.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Bandoo Media, inc) C:\Program Files\SearchCore for Browsers\SearchCore for Browsers\datamngrUI.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Windows Live\Messenger\msnmsgr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(TOSHIBA CORPORATION) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosHdpProc.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosOBEX.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtProc.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win32.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-07-10] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [ETDWare] => \Elantech\ETDCtrl.exe
HKLM\...\Run: [ITSecMng] => C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [83336 2009-07-22] (TOSHIBA CORPORATION)
HKLM\...\Run: [MGSysCtrl] => C:\Program Files\System Control Manager\MGSysCtrl.exe [2068480 2009-07-24] (Micro-Star International Co., Ltd.)
HKLM\...\Run: [MSI S-Bar Utilities] => C:\Program Files\MSI\MSI S-Bar Utilities\S-Bar.exe [331264 2009-07-30] (Micro-Star Int’l Co., Ltd.)
HKLM\...\Run: [EasyFace Agent] => C:\Program Files\MSI\EasyFace Logon\KillAutoAP.exe [348160 2009-07-16] ()
HKLM\...\Run: [IAAnotif] => C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-05] (Intel Corporation)
HKLM\...\Run: [BEWINTERNET-CHSessionManager] => "C:\Program Files\Internet Everywhere\IEWCH_8.0\SessionManager\SessionManager.exe"
HKLM\...\Run: [Wireless] => C:\Program Files\EDGE CARD\EDGE MODEM\EdgeRst.exe [81920 2008-07-01] ()
HKLM\...\Run: [WirelessZeroTouch] => C:\Program Files\EDGE CARD\EDGE MODEM\EdgeRun.exe [184320 2008-07-16] ()
HKLM\...\Run: [DATAMNGR] => C:\Program Files\SearchCore for Browsers\SearchCore for Browsers\datamngrUI.exe [1700752 2011-09-27] (Bandoo Media, inc)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [751184 2014-09-05] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [164656 2014-08-27] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKU\S-1-5-21-2746290780-1698468266-31462175-1000\...\Run: [msnmsgr] => C:\Program Files\Windows Live\Messenger\msnmsgr.exe [4280184 2012-03-08] (Microsoft Corporation)
HKU\S-1-5-21-2746290780-1698468266-31462175-1000\...\Run: [TU] => C:\Users\BurkiTrade\AppData\Roaming\SDIV 2.0\Prot\tu\tu.exe [133536 2012-10-28] ()
HKU\S-1-5-21-2746290780-1698468266-31462175-1000\...\Run: [DataMgr] => C:\Users\BurkiTrade\AppData\Roaming\DataMgr\DataMgr.exe [168264 2012-10-14] (HTTO Group, Ltd.)
HKU\S-1-5-21-2746290780-1698468266-31462175-1000\...\Run: [SSync] => C:\Users\BurkiTrade\AppData\Roaming\SSync\SSync.exe [36864 2013-04-10] ()
HKU\S-1-5-21-2746290780-1698468266-31462175-1000\...\Run: [OMESupervisor] => C:\Users\BurkiTrade\AppData\Local\omesuperv.exe [2239256 2013-12-24] ()
HKU\S-1-5-21-2746290780-1698468266-31462175-1000\...\Run: [SCheck] => C:\Users\BurkiTrade\AppData\Roaming\SCheck\SCheck.exe [37376 2013-12-09] ()
HKU\S-1-5-21-2746290780-1698468266-31462175-1000\...\Run: [Snoozer] => C:\Users\BurkiTrade\AppData\Roaming\Snz\Snz.exe [1209626 2013-12-24] ()
HKU\S-1-5-21-2746290780-1698468266-31462175-1000\...\Run: [Intermediate] => C:\Users\BurkiTrade\AppData\Roaming\Intermediate\Intermediate.exe [37376 2013-12-09] ()
HKU\S-1-5-21-2746290780-1698468266-31462175-1000\...\MountPoints2: E - E:\AutoRun.exe
HKU\S-1-5-21-2746290780-1698468266-31462175-1000\...\MountPoints2: {233c5f4f-507d-11e0-8f18-006073e5fbb4} - E:\AutoRun.exe
HKU\S-1-5-21-2746290780-1698468266-31462175-1000\...\MountPoints2: {233c5f55-507d-11e0-8f18-006073e5fbb4} - E:\AutoRun.exe
HKU\S-1-5-21-2746290780-1698468266-31462175-1000\...\MountPoints2: {66d0a495-1970-11e0-b691-006073e5fbb4} - E:\MicroLauncher.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth Manager.lnk
ShortcutTarget: Bluetooth Manager.lnk -> C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (TOSHIBA CORPORATION.)
Startup: C:\Users\BurkiTrade\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk
ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://search.fbdownloader.com/?channel=sfch203fbdgy18
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Restore = hxxp://search.imesh.com
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://ch.msn.com/default.aspx?pc=UP97&ocid=UP97DHP
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://search.fbdownloader.com/?channel=sfch203fbdgy18
URLSearchHook: HKCU - (No Name) - {64ead72b-ffd4-4e01-aa3a-4c71665d73e4} -  No File
SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://www.searchqu.com/web?src=ieb&appid=102&systemid=406&sr=0&q={searchTerms}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://www.searchqu.com/web?src=ieb&appid=102&systemid=406&sr=0&q={searchTerms}
SearchScopes: HKCU - DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://search.fbdownloader.com/search.php?channel=sfch203fbdgy18&q={searchTerms}
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3320133&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SP32495356-B7E6-45B7-809A-17AABCAE45DC&q={searchTerms}&SSPV=
SearchScopes: HKCU - {0388404D-6072-4CEB-B521-8F090FEAEE57} URL = hxxp://klit.startnow.com/s/?q={searchTerms}&src=defsearch&provider=&provider_name=yahoo&provider_code=&partner_id=693&product_id=741&affiliate_id=&channel=&toolbar_id=200&toolbar_version=2.4.0&install_country=CH&install_date=20120101&user_guid=31B0D4465B51463AA3D11A8731B2D68C&machine_id=92dc6dcbf91ff356b22601dbdd4e5ae7&browser=IE&os=win&os_version=6.1-x86-SP1&iesrc={referrer:source}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
SearchScopes: HKCU - {30750DD1-EADD-4cf1-A485-C736C96936AB} URL = hxxp://search.etoolkit.com/search?q={searchTerms}&id=02613bcdbc6a3b8c9375d79b61553d10d95&s=p
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://search.fbdownloader.com/search.php?channel=sfch203fbdgy18&q={searchTerms}
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://www.searchqu.com/web?src=ieb&appid=102&systemid=406&sr=0&q={searchTerms}
SearchScopes: HKCU - {C04B7D22-5AEC-4561-8F49-27F6269208F6} URL = hxxp://www2.inbox.com/search/dispatcher.aspx?tp=bs&qkw={searchTerms}&tbid=80772&lng=de
SearchScopes: HKCU - {D1F8D3AB-2E64-497A-BA0F-92E8387FAEE3} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=IMH6&o=2467&src=kw&q={searchTerms}&locale=&apn_ptnrs=^A45&apn_dtid=^YYYYYY^YY^CH&apn_uid=92c7f1b6-ccfc-4bd0-8ae9-6fafd43e410c&apn_sauid=E16E9033-A3F5-406C-AB9F-6ECC9D71A15B&atb=sysid%3D406%3Aappid%3D102%3Auc
BHO: No Name -> {11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5} -> C:\PROGRA~1\SITERA~1\SiteRank.dll No File
BHO: Babylon toolbar helper -> {2EECD738-5844-4a99-B4B6-146BF802613B} -> C:\Program Files\BabylonToolbar\BabylonToolbar\1.8.4.9\bh\BabylonToolbar.dll No File
BHO: FBDownloader -> {553318DA-D010-469E-84B1-496563CAE1BF} ->  No File
BHO: ToolKit IE Helper -> {70EA269E-56DF-49C2-86B2-1A1924ED88B4} ->  No File
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: SearchCore for Browsers -> {9D717F81-9148-4f12-8568-69135F087DB0} -> C:\Program Files\SearchCore for Browsers\SearchCore for Browsers\BrowserConnection.dll (Bandoo Media, inc)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - eToolKit Toolbar - {D3B22A92-87A2-47b6-B3E6-A64877B5C242} -  No File
Toolbar: HKLM - Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} -  No File
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF32_14_0_0_125.dll ()
FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll No File
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @citrixonline.com/appdetectorplugin -> C:\Users\BurkiTrade\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF HKLM\...\Firefox\Extensions: [siteranker@siteranker.com] - C:\Program Files\SiteRanker\firefox

Chrome: 
=======
CHR HomePage: Default -> 79BA29CF5EC39E5FB46EB199EAD1DA3B9EA9926C7DA6EF75B8BEEDE06952720E
CHR DefaultSearchKeyword: Default -> BC829658E8E930604DF175AFC290D4043E0C25E3C5E91A6E6DAA6948D79AC892
CHR DefaultSearchURL: Default -> 9248845E9E4B5881C2E4C04D3D1DA6C0D87DEA9B1A10F5A4CC6494DD39E431FE
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\37.0.2062.124\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\37.0.2062.124\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\37.0.2062.124\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll No File
CHR Plugin: (PDF-XChange Viewer) - C:\Program Files\Mozilla Firefox\plugins\npPDFXCviewNPPlugin.dll No File
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File
CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll No File
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Citrix Online Web Deployment Plugin 1.0.0.104) - C:\Users\BurkiTrade\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
CHR Plugin: (Shockwave Flash) - C:\windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\windows\system32\npDeployJava1.dll No File
CHR CustomProfile: C:\Users\BurkiTrade\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\BurkiTrade\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-08-07]
CHR Extension: (Google Drive) - C:\Users\BurkiTrade\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-07]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\BurkiTrade\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-05]
CHR Extension: (YouTube) - C:\Users\BurkiTrade\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-07]
CHR Extension: (Google-Suche) - C:\Users\BurkiTrade\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-07]
CHR Extension: (OfferMosquito) - C:\Users\BurkiTrade\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk [2013-03-29]
CHR Extension: (AdBlock) - C:\Users\BurkiTrade\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-06-30]
CHR Extension: (Google Wallet) - C:\Users\BurkiTrade\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-25]
CHR Extension: (Google Mail) - C:\Users\BurkiTrade\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-07]
CHR HKLM\...\Chrome\Extension: [cljghnkcnkhedlnhdgbcbefjoapionoc] - C:\Users\BurkiTrade\AppData\Local\eToolKit\Beemp3.crx []
CHR HKLM\...\Chrome\Extension: [dnlhamhiejpiajljicfphhpiahoojipl] - C:\Users\BurkiTrade\AppData\Local\eToolKit\FacebookShare.crx []
CHR HKLM\...\Chrome\Extension: [dnnajmlhehgnkclpdlggknanmcplloej] - C:\Program Files\PutLockerDownloader\PutLockerDownloader10.crx []
CHR HKLM\...\Chrome\Extension: [dpmoonohndgmmnlcnjajheaahmnjlbmj] - C:\Users\BurkiTrade\AppData\Local\eToolKit\FacebookStatus.crx []
CHR HKLM\...\Chrome\Extension: [eelchhiiipbeleiimmhpdfbagkcjdmdm] - C:\Users\BurkiTrade\AppData\Local\eToolKit\FacebookChat.crx []
CHR HKLM\...\Chrome\Extension: [fppahmlkambbejgkiidklamcmhealjag] - C:\Users\BurkiTrade\AppData\Local\eToolKit\FacebookLike.crx []
CHR HKLM\...\Chrome\Extension: [hempmfkijmahkaddljkmchcmjbojoedl] - C:\Users\BURKIT~1\AppData\Local\Temp\ccex.crx []
CHR HKLM\...\Chrome\Extension: [iaagjcfjefodfnlpnmopkkbpgclipnpn] - C:\Users\BurkiTrade\AppData\Local\eToolKit\eOffers.crx []
CHR HKLM\...\Chrome\Extension: [jchankggehakkafdlalgmfbodgfilnbg] - C:\Users\BurkiTrade\AppData\Local\eToolKit\FacebookMain.crx []
CHR HKLM\...\Chrome\Extension: [jedcimnjemkbmkkngncfgfpjgfcapimk] - C:\Users\BurkiTrade\AppData\Local\eToolKit\Extmanager.crx []
CHR HKLM\...\Chrome\Extension: [koalekbhpbggkcfhkkbolikjoaobbppi] - C:\Program Files\PutLockerDownloader\PutLockerDownloader10.crx []
CHR HKCU\...\Chrome\Extension: [gbmdkmlcnbapgegninelmjbfibaghdmk] - C:\Users\BurkiTrade\AppData\Local\Google\Chrome\User Data\Default\ext_offermosquito\ext_offermosquito.crx [2013-12-19]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-09-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-09-05] (Avira Operations GmbH & Co. KG)
S2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [160048 2014-08-27] (Avira Operations GmbH & Co. KG)
S2 FTRTSVC; C:\Program Files\Common Files\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe [90112 2009-11-12] (France Telecom SA) [File not signed]
R2 Micro Star SCM; C:\Program Files\System Control Manager\MSIService.exe [160768 2009-07-10] (Micro-Star International Co., Ltd.) [File not signed]
S3 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [X]
S2 SystemStoreService; "C:\Program Files\SoftwareUpdater\SystemStore.exe"  -displayname "System Store" -servicename "SystemStoreService" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\windows\System32\DRIVERS\avgntflt.sys [97648 2014-07-04] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\windows\System32\DRIVERS\avipbb.sys [136216 2014-06-13] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\windows\System32\DRIVERS\avkmgr.sys [37352 2013-12-22] (Avira Operations GmbH & Co. KG)
S4 DNE; C:\windows\System32\DRIVERS\dne2000.sys [125584 2008-08-25] (Deterministic Networks, Inc.)
R3 ETD; C:\windows\system32\DRIVERS\ETD.sys [91136 2009-06-18] (ELAN Microelectronic Corp.)
S3 GTUHSBUS; C:\windows\System32\DRIVERS\gtuhsbus.sys [66560 2009-08-04] (Option N.V.) [File not signed]
S3 GTUHSNDISIPXP; C:\windows\System32\DRIVERS\gtuhs51.sys [107520 2009-08-04] (Option N.V.) [File not signed]
S3 GTUHSSER; C:\windows\System32\DRIVERS\gtuhsser.sys [8064 2009-08-04] (Option N.V.)
R3 HBtnKey; C:\windows\System32\DRIVERS\tkbtnpn.sys [7463 2007-10-30] (Lenovo)
R3 NETwNs32; C:\windows\System32\DRIVERS\NETwNs32.sys [7523840 2012-01-23] (Intel Corporation)
S3 RTHDMIAzAudService; C:\windows\System32\drivers\RtHDMIV.sys [159776 2009-06-24] (Realtek Semiconductor Corp.)
R1 ssmdrv; C:\windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
S3 usbser; C:\windows\System32\DRIVERS\usbmdm.sys [28160 2008-07-16] (Microsoft Corporation) [File not signed]
S3 rcvpn; system32\DRIVERS\rcvpn.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-06 10:45 - 2014-10-06 10:45 - 00022583 _____ () C:\Users\BurkiTrade\Downloads\FRST.txt
2014-10-06 10:45 - 2014-10-06 10:45 - 00000000 ____D () C:\FRST
2014-10-06 10:43 - 2014-10-06 10:43 - 00380416 _____ () C:\Users\BurkiTrade\Downloads\Gmer-19357.exe
2014-10-06 10:42 - 2014-10-06 10:42 - 01101312 _____ (Farbar) C:\Users\BurkiTrade\Downloads\FRST.exe
2014-10-06 10:41 - 2014-10-06 10:44 - 00000456 _____ () C:\Users\BurkiTrade\Downloads\defogger_disable.log
2014-10-06 10:41 - 2014-10-06 10:41 - 00000000 _____ () C:\Users\BurkiTrade\defogger_reenable
2014-10-06 10:40 - 2014-10-06 10:40 - 00050477 _____ () C:\Users\BurkiTrade\Downloads\Defogger.exe
2014-10-06 08:40 - 2014-10-06 08:41 - 00000000 ____D () C:\Users\BurkiTrade\AppData\Local\{149D8DFD-B027-4749-BEA5-67C627A81852}
2014-10-02 08:04 - 2014-10-02 08:05 - 00000000 ____D () C:\Users\BurkiTrade\AppData\Local\{28CFAF03-49DB-49A7-84DA-58367ADBAEFC}
2014-10-01 08:29 - 2014-09-25 03:40 - 00519680 _____ (Microsoft Corporation) C:\windows\system32\qdvd.dll
2014-10-01 08:22 - 2014-10-01 08:22 - 00000000 ____D () C:\Users\BurkiTrade\AppData\Local\{1DE28EE0-DE16-432A-A523-6DA1C4A2DDAF}
2014-09-30 10:14 - 2014-09-30 10:14 - 00000000 ____D () C:\Users\BurkiTrade\AppData\Local\{7C099144-F807-49B8-AE42-00140ACEA1E4}
2014-09-29 09:09 - 2014-09-29 09:10 - 00000000 ____D () C:\Users\BurkiTrade\AppData\Local\{320ECFB9-5BC8-4DB9-ABEE-B37EE2C12036}
2014-09-25 08:19 - 2014-09-25 08:20 - 00000000 ____D () C:\Users\BurkiTrade\AppData\Local\{12D30914-B34D-44D5-BD03-A6376FAA8A48}
2014-09-24 08:27 - 2014-09-09 23:47 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2014-09-24 08:20 - 2014-09-24 08:20 - 00000000 ____D () C:\Users\BurkiTrade\AppData\Local\{8BEAB795-2D90-4C5A-958B-6A00A8233E6C}
2014-09-23 07:57 - 2014-09-23 07:57 - 00000000 ____D () C:\Users\BurkiTrade\AppData\Local\{3B433542-8A6A-4555-A379-3D883AC3AB7F}
2014-09-22 08:49 - 2014-09-22 08:49 - 00000000 ____D () C:\Users\BurkiTrade\AppData\Local\{ECCE258C-4EEA-41E3-8378-426D3B230E97}
2014-09-19 08:36 - 2014-09-19 08:36 - 00000000 ____D () C:\Users\BurkiTrade\AppData\Local\{8F6D11EA-9304-42DE-AC49-07C5A53F9095}
2014-09-18 08:40 - 2014-09-18 08:40 - 00000000 ____D () C:\Users\BurkiTrade\AppData\Local\{B6F86167-9EF5-4701-803B-59B32E4DCEF9}
2014-09-17 08:05 - 2014-09-17 08:05 - 00000000 ____D () C:\Users\BurkiTrade\AppData\Local\{C4A39528-663D-4563-A231-55720F4B00D6}
2014-09-16 08:06 - 2014-09-16 08:06 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-09-16 07:56 - 2014-09-16 07:57 - 00000000 ____D () C:\Users\BurkiTrade\AppData\Local\{15E6BD40-FA21-446B-8E09-F2AF98A099B4}
2014-09-15 08:43 - 2014-09-15 08:44 - 00000000 ____D () C:\Users\BurkiTrade\AppData\Local\{8396ABC6-0001-4FD7-A448-55D11A00271C}
2014-09-15 08:15 - 2014-09-15 08:15 - 00000000 ____D () C:\Users\BurkiTrade\AppData\Local\{EC851C0C-CD87-490F-B460-884679BF9DA9}
2014-09-12 07:57 - 2014-09-12 07:57 - 00000000 ____D () C:\Users\BurkiTrade\AppData\Local\{C88BF637-087E-49B4-B6AB-ADD1F326A867}
2014-09-11 17:55 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-09-11 17:55 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-09-11 17:54 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2014-09-11 17:54 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-09-11 17:54 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-09-11 17:54 - 2014-08-18 23:57 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-09-11 17:54 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2014-09-11 17:54 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2014-09-11 17:54 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-09-11 17:54 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-09-11 17:54 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-09-11 17:54 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-09-11 17:54 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-09-11 17:54 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-09-11 17:54 - 2014-08-18 23:36 - 00108032 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-09-11 17:54 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-09-11 17:54 - 2014-08-18 23:30 - 00646144 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2014-09-11 17:54 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-09-11 17:54 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2014-09-11 17:54 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-09-11 17:54 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2014-09-11 17:54 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-09-11 17:54 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-09-11 17:54 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-09-11 17:54 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-09-11 17:54 - 2014-08-18 23:08 - 00673792 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-09-11 17:54 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2014-09-11 17:54 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-09-11 17:54 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-09-11 17:54 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-09-11 17:53 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\windows\system32\msmpeg2vdec.dll
2014-09-11 07:48 - 2014-07-07 03:40 - 01059840 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2014-09-11 07:48 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2014-09-11 07:47 - 2014-09-05 03:52 - 00445952 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-09-11 07:47 - 2014-09-05 03:47 - 00302592 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-09-11 07:47 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\windows\system32\TSWorkspace.dll
2014-09-11 07:47 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll
2014-09-11 07:38 - 2014-09-11 07:39 - 00000000 ____D () C:\Users\BurkiTrade\AppData\Local\{A6A107C8-1F45-419E-8F0B-06C3D6D19C55}
2014-09-10 14:17 - 2014-09-10 14:17 - 00272808 _____ (Oracle Corporation) C:\windows\system32\javaws.exe
2014-09-10 14:17 - 2014-09-10 14:17 - 00096680 _____ (Oracle Corporation) C:\windows\system32\WindowsAccessBridge.dll
2014-09-10 14:17 - 2014-09-10 14:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-09-10 14:17 - 2014-09-10 14:17 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-09-10 14:17 - 2014-09-10 14:16 - 00175528 _____ (Oracle Corporation) C:\windows\system32\javaw.exe
2014-09-10 14:17 - 2014-09-10 14:16 - 00175528 _____ (Oracle Corporation) C:\windows\system32\java.exe
2014-09-10 14:16 - 2014-09-10 14:16 - 00000000 ____D () C:\Program Files\Java
2014-09-10 07:53 - 2014-09-10 07:54 - 00000000 ____D () C:\Users\BurkiTrade\AppData\Local\{41B8D33D-5C02-47DB-9B46-E1D2F3111422}
2014-09-09 08:53 - 2014-10-06 08:42 - 00000000 ____D () C:\Users\BurkiTrade\AppData\Roaming\TS3Client
2014-09-09 08:53 - 2014-09-09 08:53 - 00001130 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2014-09-09 08:53 - 2014-09-09 08:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2014-09-09 08:53 - 2014-09-09 08:53 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2014-09-09 08:52 - 2014-09-09 08:52 - 28115400 _____ (TeamSpeak Systems GmbH) C:\Users\BurkiTrade\Downloads\TeamSpeak3-Client-win32-3.0.16 (1).exe
2014-09-09 08:37 - 2014-09-09 08:37 - 00000000 ____D () C:\Users\BurkiTrade\AppData\Local\{4781B00F-63C1-4431-A22E-337EDA9B0E2B}
2014-09-07 18:51 - 2014-09-07 18:51 - 00000000 ____D () C:\Users\BurkiTrade\AppData\Local\{1246A81C-0C17-43AF-875F-97896EEC291A}

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-06 10:41 - 2010-08-28 14:21 - 00000000 ____D () C:\Users\BurkiTrade
2014-10-06 10:38 - 2010-08-28 14:18 - 01575124 _____ () C:\windows\WindowsUpdate.log
2014-10-06 10:07 - 2011-09-24 16:07 - 00000298 _____ () C:\windows\Tasks\Updater.job
2014-10-06 10:06 - 2013-08-07 13:04 - 00001106 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-06 08:46 - 2009-07-14 06:34 - 00025824 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-06 08:46 - 2009-07-14 06:34 - 00025824 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-06 08:43 - 2009-09-26 20:48 - 01649420 _____ () C:\windows\system32\PerfStringBackup.INI
2014-10-06 08:40 - 2014-07-01 06:23 - 00003696 _____ () C:\windows\setupact.log
2014-10-06 08:40 - 2013-08-07 13:04 - 00001102 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-06 08:40 - 2011-09-20 18:34 - 00000000 ____D () C:\Users\BurkiTrade\Tracing
2014-10-06 08:40 - 2010-08-28 14:57 - 00000441 _____ () C:\windows\system32\Drivers\etc\hosts.ics
2014-10-06 08:40 - 2009-07-14 06:53 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-09-25 09:13 - 2013-08-07 13:04 - 00002131 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-09-24 14:42 - 2009-07-14 04:37 - 00000000 ____D () C:\windows\rescache
2014-09-24 13:05 - 2009-07-14 04:37 - 00000000 ____D () C:\windows\system32\de-DE
2014-09-22 08:55 - 2013-02-04 19:47 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-09-16 12:06 - 2011-09-23 16:06 - 00000000 ____D () C:\Users\BurkiTrade\AppData\Roaming\Skype
2014-09-16 08:06 - 2011-09-23 16:06 - 00000000 ____D () C:\ProgramData\Skype
2014-09-15 09:06 - 2010-08-28 15:41 - 00231568 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2014-09-12 08:18 - 2009-07-14 04:37 - 00000000 ____D () C:\windows\Microsoft.NET
2014-09-11 17:53 - 2013-07-15 10:51 - 00000000 ____D () C:\windows\system32\MRT
2014-09-11 17:47 - 2014-05-13 23:08 - 00000000 ___SD () C:\windows\system32\CompatTel
2014-09-11 17:47 - 2010-08-28 17:07 - 98758480 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-09-10 15:00 - 2014-07-14 05:29 - 00000000 ____D () C:\ProgramData\Oracle
2014-09-10 14:12 - 2014-09-05 15:29 - 00001105 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-09-10 14:12 - 2014-09-05 15:22 - 00000000 ____D () C:\ProgramData\Package Cache
2014-09-10 14:12 - 2012-12-20 21:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-09-10 14:12 - 2012-12-20 21:25 - 00000000 ____D () C:\Program Files\Avira
2014-09-07 16:14 - 2009-07-14 06:33 - 00356608 _____ () C:\windows\system32\FNTCACHE.DAT

Some content of TEMP:
====================
C:\Users\BurkiTrade\AppData\Local\Temp\avgnt.exe
C:\Users\BurkiTrade\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\BurkiTrade\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Gast\AppData\Local\Temp\AskSLib.dll
C:\Users\Gast\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\windows\explorer.exe => File is digitally signed
C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-29 09:48

==================== End Of Log ============================

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 06-10-2014
Ran by BurkiTrade at 2014-10-06 10:46:59
Running from C:\Users\BurkiTrade\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 14 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 14.0.0.125 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
ATI Catalyst Install Manager (HKLM\...\{5C1E13D7-496E-59E9-822D-C9D09964AD46}) (Version: 3.0.732.0 - ATI Technologies, Inc.)
Avira (HKLM\...\{70e83cd8-4bd5-4039-ab5a-6b94a8abb641}) (Version: 1.1.21.25162 - Avira Operations GmbH & Co. KG)
Avira (Version: 1.1.21.25162 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.6.570 - Avira)
Bluetooth Stack for Windows by Toshiba (HKLM\...\{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}) (Version: v7.00.05 - TOSHIBA CORPORATION)
BurnRecovery (HKLM\...\{2892E1B7-E24D-4CCB-B8A7-B63D4B66F89F}) (Version: 3.0.908.2201 - Micro-Star International Co., Ltd.)
Catalyst Control Center Core Implementation (Version: 2009.0710.1127.18698 - ATI) Hidden
Catalyst Control Center Graphics Full Existing (Version: 2009.0710.1127.18698 - ATI) Hidden
Catalyst Control Center Graphics Full New (Version: 2009.0710.1127.18698 - ATI) Hidden
Catalyst Control Center Graphics Light (Version: 2009.0710.1127.18698 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (Version: 2009.0710.1127.18698 - ATI) Hidden
Catalyst Control Center InstallProxy (Version: 2009.0710.1127.18698 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (Version: 2009.0710.1127.18698 - ATI) Hidden
CCC Help Chinese Standard (Version: 2009.0710.1126.18698 - ATI) Hidden
CCC Help Chinese Traditional (Version: 2009.0710.1126.18698 - ATI) Hidden
CCC Help Czech (Version: 2009.0710.1126.18698 - ATI) Hidden
CCC Help English (Version: 2009.0710.1126.18698 - ATI) Hidden
CCC Help French (Version: 2009.0710.1126.18698 - ATI) Hidden
CCC Help German (Version: 2009.0710.1126.18698 - ATI) Hidden
CCC Help Hungarian (Version: 2009.0710.1126.18698 - ATI) Hidden
CCC Help Italian (Version: 2009.0710.1126.18698 - ATI) Hidden
CCC Help Korean (Version: 2009.0710.1126.18698 - ATI) Hidden
CCC Help Polish (Version: 2009.0710.1126.18698 - ATI) Hidden
CCC Help Portuguese (Version: 2009.0710.1126.18698 - ATI) Hidden
CCC Help Russian (Version: 2009.0710.1126.18698 - ATI) Hidden
CCC Help Spanish (Version: 2009.0710.1126.18698 - ATI) Hidden
CCC Help Turkish (Version: 2009.0710.1126.18698 - ATI) Hidden
ccc-core-static (Version: 2009.0710.1127.18698 - ATI) Hidden
ccc-utility (Version: 2009.0710.1127.18698 - ATI) Hidden
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
EasyFace Logon (HKLM\...\{0A960933-4D39-4495-A3F5-E5149943D761}) (Version: 1.1.0.24 - MSI)
EDGE MODEM 3.2.0.4 (HKLM\...\HSYVDFNSISinstallID) (Version: 3.2.0.4 -  )
ETDWare PS/2-x86 7.0.5.5_WHQL (HKLM\...\Elantech) (Version:  - )
Google Chrome (HKLM\...\Google Chrome) (Version: 37.0.2062.124 - Google Inc.)
Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden
home box office Screen Saver (HKLM\...\home box office) (Version:  - )
Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - Intel Corporation)
Java 7 Update 67 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle)
Java Auto Updater (Version: 2.1.67.1 - Oracle, Inc.) Hidden
Junk Mail filter update (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Maxis Broadband (HKLM\...\Maxis Broadband) (Version: 11.030.01.10.99 - Huawei Technologies Co.,Ltd)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.2.173.0 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (Version: 2.2.173.0 - Microsoft Corporation) Hidden
MSI EasyViewer (HKLM\...\InstallShield_{EECD7B96-1416-4D3A-B12D-0D2512120C36}) (Version: 1.2 - MSI)
MSI EasyViewer (Version: 1.2 - MSI) Hidden
MSI S-Bar Utilities (HKLM\...\{754A1DBC-3DFA-4DB8-BC50-6A3B073AD1F4}) (Version: 1.0.0907.3060 - MSI)
MSI Software Install (HKLM\...\{07690F1C-04B1-4060-9691-6748ED1826B9}) (Version: 3.0.908.2001 - MSI)
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
OpenOffice.org 3.2 (HKLM\...\{DFFC0648-BC4B-47D1-93D2-6CA6B9457641}) (Version: 3.2.9502 - OpenOffice.org)
Realtek 8136 8168 8169 Ethernet Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0005 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7026 - Realtek Semiconductor Corp.)
SearchCore for Browsers (HKLM\...\SearchCore for Browsers) (Version: 3.0.0.114772 - iMesh Inc.)
SENSUS MT4 Client Terminal (HKLM\...\SENSUS MT4 Client Terminal) (Version: 4.00 - MetaQuotes Software Corp.)
SiteRanker (HKLM\...\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}_is1) (Version: 1.0.0.29 - Crawler, LLC)
Skype™ 6.18 (HKLM\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.)
SweetPacks Toolbar For Firefox 1.13.0.0 (Version: 1.13.0.0 - ) Hidden <==== ATTENTION
System Control Manager (HKLM\...\{ED9C5D25-55DF-48D8-9328-2AC0D75DE5D8}) (Version: 2.209.0724.004.10 - Micro-Star International Co., Ltd.)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TeamViewer 7 (HKLM\...\TeamViewer 7) (Version: 7.0.13989 - TeamViewer)
Thread Manager 2.6.0.0 (HKLM\...\{78F4E027-355C-45C0-90DC-F89DFC618761}_is1) (Version: 2.6.0.0 - Digital Generation)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
VIS (HKLM\...\VIS) (Version:  - ) <==== ATTENTION
Visual C++ 2008 x86 Runtime - (v9.0.30729) (Version: 9.0.30729 - Microsoft Corporation) Hidden
Visual C++ 2008 x86 Runtime - v9.0.30729.01 (HKLM\...\{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01) (Version: 9.0.30729.01 - Microsoft Corporation)
Windows Live Communications Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Essentials (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mail (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation)
Windows Live UX Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-2746290780-1698468266-31462175-1000_Classes\CLSID\{45C6AFA5-2C13-402f-BC5D-45CC8172EF6B}\InprocServer32 -> C:\Program Files\Toshiba\Bluetooth Toshiba Stack\sys\TosBtExt.dll (TOSHIBA)

==================== Restore Points  =========================

29-09-2014 09:26:48 Windows Update
01-10-2014 17:17:01 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0A6AD7A2-AA68-4036-BFC1-ACC94D0AE96E} - System32\Tasks\DriverBoost-RTMScan => C:\Program Files\DriverBoost\DriverBoost\DriverBoost.exe
Task: {1BA1C70B-F9A4-4BBF-ACE1-7F6832B8023B} - System32\Tasks\Updater => C:\ProgramData\WombatUpdater\WombatUpdater.exe
Task: {280A8173-E94B-463F-A0DD-40ED9F32F064} - System32\Tasks\VisualBeeRecovery => C:\Users\BurkiTrade\AppData\Local\VisualBeeExe\VisualBeeRecovery.exe <==== ATTENTION
Task: {295ED808-F2B9-43BD-9DA9-F13269D29007} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {3084C42F-8B2C-49CD-86CD-8AEF15E51833} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-07-30] (Google Inc.)
Task: {415294FF-05BF-4E19-B80C-B1D85F8C426A} - System32\Tasks\{37690710-AEB8-4EC2-B01B-43DF4C798EF7} => Firefox.exe hxxp://ui.skype.com/ui/0/6.6.59.106/de/abandoninstall?page=tsProgressBar
Task: {4BCEE561-CAAC-4B62-9E88-DEAF81BE27B8} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {67933113-E0C9-4635-9B84-6B03ABF25B7C} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {718EB548-7CA8-46E1-B59A-9D1483BA8361} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {7BE72DC3-45B7-4A57-86E2-255D7ADB7189} - System32\Tasks\Software Updater Ui => C:\Program Files\SoftwareUpdater\SoftwareUpdater.Ui.exe
Task: {A00C9AB6-B522-41BB-9884-251BBEFE9C3F} - System32\Tasks\FreeDriverScout => C:\Program Files\Covus Freemium\Free Driver Scout\1Click.exe
Task: {A66DBE8A-FAAF-4650-B2B9-333129BCE82D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-07-30] (Google Inc.)
Task: {C4A39652-1E12-48B5-85E2-678DA6376976} - System32\Tasks\Software Updater => C:\Program Files\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe
Task: {CD825641-87F1-454D-9409-D4906345463D} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-05-13] (Microsoft)
Task: {E0030C34-A267-4811-A0F3-CDC0FA387491} - System32\Tasks\DriverBoost-RTMUpdater => C:\Program Files\DriverBoost\DriverBoost\DriverBoost.exe
Task: {FB2431F4-7354-4CED-9ED4-0451BE23D8E7} - System32\Tasks\Ad-Aware Update (Weekly) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe
Task: {FF4A7206-19FE-4AC5-AD41-4BF3A449E494} - System32\Tasks\DriverBoost-RTMRules => C:\Program Files\DriverBoost\DriverBoost\DriverBoost.exe

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\windows\Tasks\Ad-Aware Update (Weekly).job => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\Updater.job => C:\ProgramData\WombatUpdater\WombatUpdater.exe

==================== Loaded Modules (whitelisted) =============

2009-09-26 21:13 - 2009-07-16 00:02 - 00348160 _____ () C:\Program Files\MSI\EasyFace Logon\KillAutoAP.exe
2008-07-01 04:19 - 2008-07-01 04:19 - 00081920 _____ () C:\Program Files\EDGE CARD\EDGE MODEM\EdgeRst.exe
2008-07-16 14:13 - 2008-07-16 14:13 - 00184320 _____ () C:\Program Files\EDGE CARD\EDGE MODEM\EdgeRun.exe
2014-09-05 15:23 - 2014-08-27 15:00 - 00052472 _____ () C:\Users\BurkiTrade\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2010-05-04 15:36 - 2010-05-04 15:36 - 00970752 _____ () C:\Program Files\OpenOffice.org 3\program\libxml2.dll
2009-09-26 20:59 - 2009-09-26 20:59 - 00270336 _____ () C:\windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2014-02-28 15:33 - 2014-02-28 15:33 - 00148480 _____ () C:\Program Files\TeamSpeak 3 Client\quazip.dll
2014-02-27 15:46 - 2014-02-27 15:46 - 00864768 _____ () C:\Program Files\TeamSpeak 3 Client\platforms\qwindows.dll
2014-02-27 15:45 - 2014-02-27 15:45 - 00677376 _____ () C:\Program Files\TeamSpeak 3 Client\sqldrivers\qsqlite.dll
2014-08-04 15:43 - 2014-08-04 15:43 - 00092104 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win32.dll
2014-08-04 15:43 - 2014-08-04 15:43 - 00105416 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win32.dll
2014-02-27 15:46 - 2014-02-27 15:46 - 00025600 _____ () C:\Program Files\TeamSpeak 3 Client\imageformats\qgif.dll
2014-02-27 15:46 - 2014-02-27 15:46 - 00242688 _____ () C:\Program Files\TeamSpeak 3 Client\imageformats\qjpeg.dll
2014-08-04 15:45 - 2014-08-04 15:45 - 00477128 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
2014-08-04 15:45 - 2014-08-04 15:45 - 00484808 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
2014-02-27 15:46 - 2014-02-27 15:46 - 00123904 _____ () C:\Program Files\TeamSpeak 3 Client\accessible\qtaccessiblewidgets.dll
2014-09-25 09:13 - 2014-09-23 06:06 - 01098056 _____ () C:\Program Files\Google\Chrome\Application\37.0.2062.124\libglesv2.dll
2014-09-25 09:13 - 2014-09-23 06:06 - 00174408 _____ () C:\Program Files\Google\Chrome\Application\37.0.2062.124\libegl.dll
2014-09-25 09:13 - 2014-09-23 06:07 - 08577864 _____ () C:\Program Files\Google\Chrome\Application\37.0.2062.124\pdf.dll
2014-09-25 09:13 - 2014-09-23 06:07 - 00331592 _____ () C:\Program Files\Google\Chrome\Application\37.0.2062.124\ppGoogleNaClPluginChrome.dll
2014-09-25 09:13 - 2014-09-23 06:06 - 01660232 _____ () C:\Program Files\Google\Chrome\Application\37.0.2062.124\ffmpegsumo.dll
2014-09-25 09:13 - 2014-09-23 06:07 - 14891848 _____ () C:\Program Files\Google\Chrome\Application\37.0.2062.124\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:85CAD85C
AlternateDataStreams: C:\ProgramData\TEMP:AD022376

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-2746290780-1698468266-31462175-500 - Administrator - Disabled)
ASPNET (S-1-5-21-2746290780-1698468266-31462175-1004 - Limited - Enabled)
BurkiTrade (S-1-5-21-2746290780-1698468266-31462175-1000 - Administrator - Enabled) => C:\Users\BurkiTrade
Gast (S-1-5-21-2746290780-1698468266-31462175-501 - Limited - Disabled) => C:\Users\Gast
HomeGroupUser$ (S-1-5-21-2746290780-1698468266-31462175-1002 - Limited - Enabled)

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (09/18/2014 00:40:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ipmGui.exe, Version: 14.0.6.522, Zeitstempel: 0x53bec647
Name des fehlerhaften Moduls: ipmGui.exe, Version: 14.0.6.522, Zeitstempel: 0x53bec647
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000795b
ID des fehlerhaften Prozesses: 0x16a8
Startzeit der fehlerhaften Anwendung: 0xipmGui.exe0
Pfad der fehlerhaften Anwendung: ipmGui.exe1
Pfad des fehlerhaften Moduls: ipmGui.exe2
Berichtskennung: ipmGui.exe3

Error: (09/18/2014 10:40:45 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ipmGui.exe, Version: 14.0.6.522, Zeitstempel: 0x53bec647
Name des fehlerhaften Moduls: ipmGui.exe, Version: 14.0.6.522, Zeitstempel: 0x53bec647
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000795b
ID des fehlerhaften Prozesses: 0x150c
Startzeit der fehlerhaften Anwendung: 0xipmGui.exe0
Pfad der fehlerhaften Anwendung: ipmGui.exe1
Pfad des fehlerhaften Moduls: ipmGui.exe2
Berichtskennung: ipmGui.exe3

Error: (09/11/2014 03:16:52 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: GoogleUpdate.exe, Version: 1.3.21.103, Zeitstempel: 0x4f3c6d6c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea91c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00034d60
ID des fehlerhaften Prozesses: 0xdb4
Startzeit der fehlerhaften Anwendung: 0xGoogleUpdate.exe0
Pfad der fehlerhaften Anwendung: GoogleUpdate.exe1
Pfad des fehlerhaften Moduls: GoogleUpdate.exe2
Berichtskennung: GoogleUpdate.exe3

Error: (09/10/2014 08:05:32 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Skype.exe, Version: 6.16.0.105, Zeitstempel: 0x536b4342
Name des fehlerhaften Moduls: Skype.exe, Version: 6.16.0.105, Zeitstempel: 0x536b4342
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002535f7
ID des fehlerhaften Prozesses: 0xc40
Startzeit der fehlerhaften Anwendung: 0xSkype.exe0
Pfad der fehlerhaften Anwendung: Skype.exe1
Pfad des fehlerhaften Moduls: Skype.exe2
Berichtskennung: Skype.exe3

Error: (07/26/2014 04:18:36 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1533) (User: BurkiTrade-msi)
Description: Das Profilverzeichnis kann nicht gelöscht werden C:\Users\STV. Dies liegt u. U. daran, dass Dateien in diesem Verzeichnis von einem anderen Programm verwendet werden. 

 DETAIL - Das Verzeichnis ist nicht leer.

Error: (07/18/2014 01:52:08 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="AMD64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="AMD64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (07/18/2014 01:52:07 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="AMD64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="AMD64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (07/15/2014 07:14:07 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="AMD64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="AMD64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (07/15/2014 07:14:07 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="AMD64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="AMD64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (07/13/2014 03:11:31 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="AMD64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="AMD64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".


System errors:
=============
Error: (10/06/2014 08:40:41 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
cdrom

Error: (10/06/2014 08:40:37 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Service Host erreicht.

Error: (10/06/2014 08:40:06 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "System Store" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (10/06/2014 08:40:06 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst France Telecom Routing Table Service erreicht.

Error: (10/06/2014 08:40:02 AM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active

Error: (10/06/2014 08:40:02 AM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter

Error: (10/02/2014 08:05:04 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
cdrom

Error: (10/02/2014 08:03:48 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "System Store" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (10/02/2014 08:03:48 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst France Telecom Routing Table Service erreicht.

Error: (10/02/2014 08:03:44 AM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active


Microsoft Office Sessions:
=========================
Error: (09/18/2014 00:40:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: ipmGui.exe14.0.6.52253bec647ipmGui.exe14.0.6.52253bec647c00000050000795b16a801cfd31c3c4f5e2fC:\program files\avira\antivir desktop\ipmGui.exeC:\program files\avira\antivir desktop\ipmGui.exe3f640263-3f20-11e4-9418-0024216fef05

Error: (09/18/2014 10:40:45 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: ipmGui.exe14.0.6.52253bec647ipmGui.exe14.0.6.52253bec647c00000050000795b150c01cfd30b784eb4a3C:\program files\avira\antivir desktop\ipmGui.exeC:\program files\avira\antivir desktop\ipmGui.exe7ab0d1a4-3f0f-11e4-9418-0024216fef05

Error: (09/11/2014 03:16:52 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: GoogleUpdate.exe1.3.21.1034f3c6d6cntdll.dll6.1.7601.18247521ea91cc000000500034d60db401cfcdc1221fe3fcC:\Program Files\Google\Update\GoogleUpdate.exeC:\windows\SYSTEM32\ntdll.dlle4c0afee-39b5-11e4-9434-0024216fef05

Error: (09/10/2014 08:05:32 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Skype.exe6.16.0.105536b4342Skype.exe6.16.0.105536b4342c0000005002535f7c4001cfccbcded4a1b6C:\Program Files\Skype\Phone\Skype.exeC:\Program Files\Skype\Phone\Skype.exe7872ae51-38b0-11e4-a752-0024216fef05

Error: (07/26/2014 04:18:36 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1533) (User: BurkiTrade-msi)
Description: C:\Users\STVDas Verzeichnis ist nicht leer.

Error: (07/18/2014 01:52:08 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="AMD64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\internet everywhere\IEWCH_8.0\installation\Core\setupApiWrapper64.exe

Error: (07/18/2014 01:52:07 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="AMD64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\internet everywhere\IEWCH_8.0\installation\Core\InstallDevice64.exe

Error: (07/15/2014 07:14:07 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="AMD64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\internet everywhere\IEWCH_8.0\installation\Core\setupApiWrapper64.exe

Error: (07/15/2014 07:14:07 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="AMD64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\internet everywhere\IEWCH_8.0\installation\Core\InstallDevice64.exe

Error: (07/13/2014 03:11:31 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="AMD64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\internet everywhere\IEWCH_8.0\installation\Core\setupApiWrapper64.exe


CodeIntegrity Errors:
===================================
  Date: 2014-10-06 08:42:31.144
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-10-02 08:50:37.311
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-10-01 08:26:07.307
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-09-30 10:49:31.744
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-09-29 13:38:55.353
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-09-29 10:18:11.137
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-09-25 08:28:16.344
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-09-24 15:14:23.889
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-09-24 08:26:03.237
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-09-23 09:12:45.445
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM)2 Duo CPU U9600 @ 1.60GHz
Percentage of memory in use: 39%
Total physical RAM: 3071.16 MB
Available physical RAM: 1869.6 MB
Total Pagefile: 6140.61 MB
Available Pagefile: 4372.96 MB
Total Virtual: 2047.88 MB
Available Virtual: 1896.13 MB

==================== Drives ================================

Drive c: (OS_Install) (Fixed) (Total:60 GB) (Free:28.21 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Data) (Fixed) (Total:395.66 GB) (Free:384.97 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: CC203E8C)
Partition 1: (Not Active) - (Size=10 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=27)
Partition 3: (Not Active) - (Size=60 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=395.7 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Hallo picton



Mein Name ist Timo und ich werde Dir bei deinem Problem behilflich sein.

• Bitte arbeite alle Schritte der Reihe nach ab.
• Lese die Anleitungen sorgfältig. Sollte es Probleme geben, bitte stoppen und hier so gut es geht beschreiben.
• Nur Scans durchführen zu denen Du von einem Helfer aufgefordert wirst.
• Bitte kein Crossposting ( posten in mehreren Foren).
• Installiere oder Deinstalliere während der Bereinigung keine Software ausser Du wurdest dazu aufgefordert.
• Lese Dir die Anleitung zuerst vollständig durch. Sollte etwas unklar sein, frage bevor Du beginnst.
• Poste die Logfiles direkt in deinen Thread. Nicht anhängen ausser ich fordere Dich dazu auf.

Hinweis:
Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist immer der sicherste Weg.

Wir "arbeiten" hier alle freiwillig und in unserer Freizeit *hust*. Daher kann es bei Antworten zu Verzögerungen kommen.
Solltest du innerhalb 48 Std keine Antwort von mir erhalten, dann schreib mit eine PM
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis ich oder jemand vom Team sagt, dass Du clean bist.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Adware & Co. deinstallieren

• Lade Dir bitte von hier Revo Uninstaller herunter.
• Installiere und starte das Programm.
• Suche im Uninstallerfeld nach den Programmen, die unter:
  
  diesen Zusatz haben:
  
• Wähle die Programme nacheinander aus und klicke jedesmal auf Uninstall.
• Wähle anschließend den Modus "Moderat" aus.
  
• Reste löschen:
  Klicke auf dann auf und dann auf .

Solltest Du ein Programm nicht finden oder nicht deinstallieren können, mache bitte mit dem nächsten Schritt weiter:

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Starte noch einmal FRST.

• Ändere keine der Voreinstellungen und drücke auf Scan.
• Wenn der Scan abgeschlossen ist, werden ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
• Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.

Resultat von adware cleaner

AdwCleaner Logfile:
AdwCleaner Logfile:

# AdwCleaner v3.311 - Bericht erstellt am 06/10/2014 um 12:47:14
# Aktualisiert 30/09/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (32 bits)
# Benutzername : BurkiTrade - BURKITRADE-MSI
# Gestartet von : C:\Users\BurkiTrade\Downloads\AdwCleaner_3.311.exe
# Option : Suchen

***** [ Dienste ] *****

Dienst Gefunden : SystemStoreService

***** [ Dateien / Ordner ] *****

Datei Gefunden : C:\Users\BurkiTrade\AppData\Local\omesuperv.exe
Datei Gefunden : C:\Users\BurkiTrade\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\iLivid.lnk
Datei Gefunden : C:\Users\BurkiTrade\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iLivid.lnk
Datei Gefunden : C:\windows\system32\roboot.exe
Ordner Gefunden : C:\Program Files\Conduit
Ordner Gefunden : C:\Program Files\iMesh Applications
Ordner Gefunden : C:\Program Files\iMesh Applications\Mediabar
Ordner Gefunden : C:\Program Files\SearchCore for Browsers
Ordner Gefunden : C:\Program Files\WebEnhance
Ordner Gefunden : C:\ProgramData\Babylon
Ordner Gefunden : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SiteRanker
Ordner Gefunden : C:\ProgramData\Tarma Installer
Ordner Gefunden : C:\ProgramData\VisualBee
Ordner Gefunden : C:\Users\BurkiTrade\AppData\Local\Conduit
Ordner Gefunden : C:\Users\BurkiTrade\AppData\Local\DownloadGuide
Ordner Gefunden : C:\Users\BurkiTrade\AppData\Local\Google\Chrome\User Data\Default\ext_offermosquito
Ordner Gefunden : C:\Users\BurkiTrade\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk
Ordner Gefunden : C:\Users\BurkiTrade\AppData\Local\iLivid
Ordner Gefunden : C:\Users\BurkiTrade\AppData\Local\Ilivid Player
Ordner Gefunden : C:\Users\BurkiTrade\AppData\Local\PackageAware
Ordner Gefunden : C:\Users\BurkiTrade\AppData\Local\PutLockerDownloader
Ordner Gefunden : C:\Users\BurkiTrade\AppData\Local\Savings Vault
Ordner Gefunden : C:\Users\BurkiTrade\AppData\Local\Software_Updater
Ordner Gefunden : C:\Users\BurkiTrade\AppData\Local\SoftwareUpdater
Ordner Gefunden : C:\Users\BurkiTrade\AppData\Local\VisualBeeExe
Ordner Gefunden : C:\Users\BurkiTrade\AppData\LocalLow\AskToolbar
Ordner Gefunden : C:\Users\BurkiTrade\AppData\LocalLow\Bandoo
Ordner Gefunden : C:\Users\BurkiTrade\AppData\LocalLow\Conduit
Ordner Gefunden : C:\Users\BurkiTrade\AppData\LocalLow\DataMngr
Ordner Gefunden : C:\Users\BurkiTrade\AppData\LocalLow\searchquband
Ordner Gefunden : C:\Users\BurkiTrade\AppData\LocalLow\SiteRanker
Ordner Gefunden : C:\Users\BurkiTrade\AppData\Roaming\Babylon
Ordner Gefunden : C:\Users\BurkiTrade\AppData\Roaming\Bandoo
Ordner Gefunden : C:\Users\BurkiTrade\AppData\Roaming\Common\LuaRT
Ordner Gefunden : C:\Users\BurkiTrade\AppData\Roaming\DataMgr
Ordner Gefunden : C:\Users\BurkiTrade\AppData\Roaming\DesktopIconForAmazon
Ordner Gefunden : C:\Users\BurkiTrade\AppData\Roaming\fbDownloader
Ordner Gefunden : C:\Users\BurkiTrade\AppData\Roaming\HMN
Ordner Gefunden : C:\Users\BurkiTrade\AppData\Roaming\Intermediate
Ordner Gefunden : C:\Users\BurkiTrade\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PutLockerDownloader.com
Ordner Gefunden : C:\Users\BurkiTrade\AppData\Roaming\OCS
Ordner Gefunden : C:\Users\BurkiTrade\AppData\Roaming\OpenCandy
Ordner Gefunden : C:\Users\BurkiTrade\AppData\Roaming\SCheck
Ordner Gefunden : C:\Users\BurkiTrade\AppData\Roaming\SDIV 2.0
Ordner Gefunden : C:\Users\BurkiTrade\AppData\Roaming\Snz
Ordner Gefunden : C:\Users\BurkiTrade\AppData\Roaming\SSync
Ordner Gefunden : C:\Users\BurkiTrade\AppData\Roaming\Systweak
Ordner Gefunden : C:\Users\BurkiTrade\AppData\Roaming\Windows Net Data
Ordner Gefunden : C:\Users\BurkiTrade\Documents\PC Speed Maximizer
Ordner Gefunden : C:\windows\system32\SearchProtect

***** [ Tasks ] *****

Task Gefunden : FreeDriverScout
Task Gefunden : Software Updater Ui
Task Gefunden : Software Updater
Task Gefunden : VisualBeeRecovery

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : HKCU\Software\1ClickDownload
Schlüssel Gefunden : HKCU\Software\5b578ad9b23feb10
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\searchqutoolbar
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\SmartBar
Schlüssel Gefunden : HKCU\Software\BabylonToolbar
Schlüssel Gefunden : HKCU\Software\Classes\iLivid.torrent
Schlüssel Gefunden : HKCU\Software\Conduit
Schlüssel Gefunden : HKCU\Software\Cr_Installer
Schlüssel Gefunden : HKCU\Software\DataMngr
Schlüssel Gefunden : HKCU\Software\DataMngr_Toolbar
Schlüssel Gefunden : HKCU\Software\Google\Chrome\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk
Schlüssel Gefunden : HKCU\Software\ilivid
Schlüssel Gefunden : HKCU\Software\IM
Schlüssel Gefunden : HKCU\Software\Imesh
Schlüssel Gefunden : HKCU\Software\ImInstaller
Schlüssel Gefunden : HKCU\Software\InstallCore
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0388404D-6072-4CEB-B521-8F090FEAEE57}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{C04B7D22-5AEC-4561-8F49-27F6269208F6}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9D717F81-9148-4F12-8568-69135F087DB0}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CA9B9C89-4662-4ADC-9C23-A452BECD5D19}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D0F4A166-B8D4-48B8-9D63-80849FE137CB}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EB5CEE80-030A-4ED8-8E20-454E9C68380F}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{28387537-E3F9-4ED7-860C-11E69AF4A8A0}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D717F81-9148-4F12-8568-69135F087DB0}
Schlüssel Gefunden : HKCU\Software\OCS
Schlüssel Gefunden : HKCU\Software\OfferMosquito
Schlüssel Gefunden : HKCU\Software\Protector
Schlüssel Gefunden : HKCU\Software\SearchCore for Browsers
Schlüssel Gefunden : HKCU\Software\SiteRanker
Schlüssel Gefunden : HKCU\Software\SmartBar
Schlüssel Gefunden : HKCU\Software\Softonic
Schlüssel Gefunden : HKCU\Software\SweetIM
Schlüssel Gefunden : HKCU\Software\visualbee
Schlüssel Gefunden : HKCU\Software\YahooPartnerToolbar
Schlüssel Gefunden : HKCU\Software\Zugo
Schlüssel Gefunden : HKLM\SOFTWARE\5b578ad9b23feb10
Schlüssel Gefunden : HKLM\SOFTWARE\Babylon
Schlüssel Gefunden : HKLM\SOFTWARE\BabylonToolbar
Schlüssel Gefunden : HKLM\SOFTWARE\Bandoo
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{1301A8A5-3DFB-4731-A162-B357D00C9644}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{A2773ED4-83BD-488A-A186-73590706C916}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{AC662AF2-4601-4A68-84DF-A3FE83F1A5F9}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{D97A8234-F2A2-4AD4-91D5-FECDB2C553AF}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\BandooCore.EXE
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\BrowserConnection.dll
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\DNSBHO.dll
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Applications\iMesh_V11_en_Setup.exe
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Applications\iMeshV11.exe
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\b
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Babylon.dskBnd
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\BandooCore.BandooCore
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\BandooCore.BandooCore.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\BandooCore.ResourcesMngr
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\BandooCore.ResourcesMngr.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\BandooCore.SettingsMngr
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\BandooCore.SettingsMngr.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\BandooCore.StatisticMngr
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\BandooCore.StatisticMngr.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\bbylnApp.appCore
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\BrowserConnection.Loader
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\BrowserConnection.Loader.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{00B11DA2-75ED-4364-ABA5-9A95B1F5E946}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{27F69C85-64E1-43CE-98B5-3C9F22FB408E}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{28387537-E3F9-4ED7-860C-11E69AF4A8A0}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{553318DA-D010-469E-84B1-496563CAE1BF}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{598B7D72-2C44-4351-BBC8-3DACE2A10CB6}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{9D717F81-9148-4F12-8568-69135F087DB0}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{B543EF05-9758-464E-9F37-4C28525B4A4C}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{BB76A90B-2B4C-4378-8506-9A2B6E16943C}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{C3AB94A4-BFD0-4BBA-A331-DE504F07D2DB}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{FEFD3AF5-A346-4451-AA23-A3AD54915515}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\DnsBHO.BHO
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\DnsBHO.BHO.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\FBDownloader.BHO
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\FBDownloader.BHO.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\FBDownloader.DownloadPhoto
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\FBDownloader.DownloadPhoto.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{44B619BC-3D2B-4990-AA4F-9AA366921792}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{477F210A-2A86-4666-9C4B-1189634D2C84}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{6F43FA77-C18F-4D0C-9C7E-958876FE2061}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{95B92D92-8B7D-4A19-A3F1-43113B4DBCAF}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{DF948646-8BF4-450E-A059-CF8A4E0FE2BE}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{E96B49B0-E11F-48FC-984A-EEC29A4F57E1}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{FD8F79A0-D2E2-4FA2-AEAF-393EAC8064F7}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{FF871E51-2655-4D06-AED5-745962A96B32}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\PutLockerDownloader
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\speedupmypc
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\ToolBand.ToolBandObj
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\ToolBand.ToolBandObj.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Toolbar.CT2736476
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Toolbar.CT2849855
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Toolbar.CT3284023
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{5297E905-1DFB-4A9C-9871-A4F95FD58945}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{5B4144E1-B61D-495A-9A50-CD1A95D86D15}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{671F1846-80F2-4ED8-B183-A921E6A4D5D4}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{841D5A49-E48D-413C-9C28-EB3D9081D705}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{8F5F1CB6-EA9E-40AF-A5CA-C7FD63CC1971}
Schlüssel Gefunden : HKLM\SOFTWARE\Conduit
Schlüssel Gefunden : HKLM\SOFTWARE\DataMngr
Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\dnnajmlhehgnkclpdlggknanmcplloej
Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\hempmfkijmahkaddljkmchcmjbojoedl
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B6}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624F4-C5DD-4E1D-BDD0-1E9C9B7799CC}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F000001-DB8E-F89C-2FEC-49BF726F8C12}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9C8A3CA5-889E-4554-BEEC-EC0876E4E96A}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F9189560-573A-4FDE-B055-AE7B0F4CF080}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\App24x7Help_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\App24x7Help_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\biclient_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\biclient_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\dmwu_rasapi32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\dmwu_rasmancs
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\iMesh_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\iMesh_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\iMesh_V11_en_Setup_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\iMesh_V11_en_Setup_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\mconduitinstaller_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\mconduitinstaller_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\PutlockerDownloader_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\PutlockerDownloader_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\Searchqu Toolbar uninstall_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\Searchqu Toolbar uninstall_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_codec-pack-all-in-one_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_codec-pack-all-in-one_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_sweepi_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_sweepi_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftwareUpdater_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftwareUpdater_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\startnow_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\startnow_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasapi32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasmancs
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{553318DA-D010-469E-84B1-496563CAE1BF}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4F12-8568-69135F087DB0}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{553318DA-D010-469E-84B1-496563CAE1BF}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6087829B-114F-42A1-A72B-B4AEDCEA4E5B}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}_is1
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{EEE6C374-6118-11DC-9C72-001320C79847}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchCore for Browsers
Schlüssel Gefunden : HKLM\SOFTWARE\SearchCore for Browsers
Schlüssel Gefunden : HKLM\SOFTWARE\SweetIM
Schlüssel Gefunden : HKLM\SOFTWARE\systweak
Schlüssel Gefunden : HKLM\SOFTWARE\Tarma Installer
Schlüssel Gefunden : HKLM\SOFTWARE\Uniblue
Schlüssel Gefunden : HKLM\SOFTWARE\Uniblue\DriverScanner
Schlüssel Gefunden : HKLM\SOFTWARE\VBMZ
Schlüssel Gefunden : HKLM\SOFTWARE\visualbee
Wert Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [DataMgr]
Wert Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Intermediate]
Wert Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [OMESupervisor]
Wert Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [scheck]
Wert Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Snoozer]
Wert Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ssync]
Wert Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [TU]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [DataMngr]
Wert Gefunden : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [siteranker@siteranker.com]

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17280

Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://search.fbdownloader.com/?channel=sfch203fbdgy18
Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page Restore] - hxxp://search.imesh.com
Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [Secondary Start Pages] - hxxp://search.fbdownloader.com/?channel=sfch203fbdgy18

-\\ Google Chrome v37.0.2062.124

[ Datei : C:\Users\BurkiTrade\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [24601 octets] - [06/10/2014 12:47:14]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [24662 octets] ##########
         

--- --- ---


AdwCleaner Logfile:

# AdwCleaner v3.311 - Bericht erstellt am 06/10/2014 um 13:42:04
# Aktualisiert 30/09/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (32 bits)
# Benutzername : BurkiTrade - BURKITRADE-MSI
# Gestartet von : C:\Users\BurkiTrade\Downloads\AdwCleaner_3.311.exe
# Option : Löschen

***** [ Dienste ] *****

[#] Dienst Gelöscht : SystemStoreService

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\Tarma Installer
Ordner Gelöscht : C:\ProgramData\VisualBee
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SiteRanker
Ordner Gelöscht : C:\Program Files\Conduit
Ordner Gelöscht : C:\Program Files\iMesh Applications
Ordner Gelöscht : C:\Program Files\SearchCore for Browsers
Ordner Gelöscht : C:\Program Files\WebEnhance
Ordner Gelöscht : C:\windows\system32\SearchProtect
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\Local\Conduit
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\Local\DownloadGuide
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\Local\Google\Chrome\User Data\Default\ext_offermosquito
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\Local\Ilivid Player
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\Local\iLivid
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\Local\PackageAware
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\Local\PutLockerDownloader
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\Local\Savings Vault
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\Local\Software_Updater
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\Local\SoftwareUpdater
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\Local\VisualBeeExe
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\LocalLow\AskToolbar
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\LocalLow\Bandoo
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\LocalLow\DataMngr
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\LocalLow\searchquband
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\LocalLow\SiteRanker
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\Roaming\Bandoo
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\Roaming\Common\LuaRT
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\Roaming\DataMgr
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\Roaming\DesktopIconForAmazon
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\Roaming\fbDownloader
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\Roaming\HMN
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\Roaming\Intermediate
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\Roaming\OCS
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\Roaming\OpenCandy
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\Roaming\SCheck
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\Roaming\SDIV 2.0
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\Roaming\Snz
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\Roaming\SSync
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\Roaming\Windows Net Data
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PutLockerDownloader.com
Ordner Gelöscht : C:\Users\BurkiTrade\Documents\PC Speed Maximizer
Ordner Gelöscht : C:\Users\BurkiTrade\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk
Datei Gelöscht : C:\windows\system32\roboot.exe
Datei Gelöscht : C:\Users\BurkiTrade\AppData\Local\omesuperv.exe
Datei Gelöscht : C:\Users\BurkiTrade\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\iLivid.lnk
Datei Gelöscht : C:\Users\BurkiTrade\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iLivid.lnk

***** [ Tasks ] *****

Task Gelöscht : FreeDriverScout
Task Gelöscht : Software Updater Ui
Task Gelöscht : Software Updater
Task Gelöscht : VisualBeeRecovery

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [siteranker@siteranker.com]
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\dnnajmlhehgnkclpdlggknanmcplloej
Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\hempmfkijmahkaddljkmchcmjbojoedl
Schlüssel Gelöscht : HKCU\Software\Classes\iLivid.torrent
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [DataMgr]
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Intermediate]
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [OMESupervisor]
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [scheck]
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Snoozer]
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ssync]
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [TU]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\BandooCore.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\BrowserConnection.dll
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\DNSBHO.dll
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Applications\iMesh_V11_en_Setup.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Applications\iMeshV11.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\b
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Babylon.dskBnd
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BandooCore.BandooCore
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BandooCore.BandooCore.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BandooCore.ResourcesMngr
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BandooCore.ResourcesMngr.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BandooCore.SettingsMngr
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BandooCore.SettingsMngr.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BandooCore.StatisticMngr
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BandooCore.StatisticMngr.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylnApp.appCore
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BrowserConnection.Loader
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BrowserConnection.Loader.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\DnsBHO.BHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\DnsBHO.BHO.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\FBDownloader.BHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\FBDownloader.BHO.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\FBDownloader.DownloadPhoto
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\FBDownloader.DownloadPhoto.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\PutLockerDownloader
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\speedupmypc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ToolBand.ToolBandObj
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ToolBand.ToolBandObj.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\App24x7Help_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\App24x7Help_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\biclient_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\biclient_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\dmwu_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\dmwu_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\iMesh_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\iMesh_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\iMesh_V11_en_Setup_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\iMesh_V11_en_Setup_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\mconduitinstaller_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\mconduitinstaller_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\PutlockerDownloader_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\PutlockerDownloader_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Searchqu Toolbar uninstall_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Searchqu Toolbar uninstall_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftwareUpdater_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftwareUpdater_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\startnow_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\startnow_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [DataMngr]
Schlüssel Gelöscht : HKCU\Software\5b578ad9b23feb10
Schlüssel Gelöscht : HKLM\SOFTWARE\5b578ad9b23feb10
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT2736476
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT2849855
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT3284023
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_codec-pack-all-in-one_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_codec-pack-all-in-one_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_sweepi_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_sweepi_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{1301A8A5-3DFB-4731-A162-B357D00C9644}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{A2773ED4-83BD-488A-A186-73590706C916}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{AC662AF2-4601-4A68-84DF-A3FE83F1A5F9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D97A8234-F2A2-4AD4-91D5-FECDB2C553AF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00B11DA2-75ED-4364-ABA5-9A95B1F5E946}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{27F69C85-64E1-43CE-98B5-3C9F22FB408E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{28387537-E3F9-4ED7-860C-11E69AF4A8A0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{553318DA-D010-469E-84B1-496563CAE1BF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{598B7D72-2C44-4351-BBC8-3DACE2A10CB6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{9D717F81-9148-4F12-8568-69135F087DB0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B543EF05-9758-464E-9F37-4C28525B4A4C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{BB76A90B-2B4C-4378-8506-9A2B6E16943C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C3AB94A4-BFD0-4BBA-A331-DE504F07D2DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FEFD3AF5-A346-4451-AA23-A3AD54915515}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{44B619BC-3D2B-4990-AA4F-9AA366921792}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{477F210A-2A86-4666-9C4B-1189634D2C84}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6F43FA77-C18F-4D0C-9C7E-958876FE2061}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{95B92D92-8B7D-4A19-A3F1-43113B4DBCAF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DF948646-8BF4-450E-A059-CF8A4E0FE2BE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E96B49B0-E11F-48FC-984A-EEC29A4F57E1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FD8F79A0-D2E2-4FA2-AEAF-393EAC8064F7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FF871E51-2655-4D06-AED5-745962A96B32}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{5297E905-1DFB-4A9C-9871-A4F95FD58945}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{5B4144E1-B61D-495A-9A50-CD1A95D86D15}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{671F1846-80F2-4ED8-B183-A921E6A4D5D4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{841D5A49-E48D-413C-9C28-EB3D9081D705}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{8F5F1CB6-EA9E-40AF-A5CA-C7FD63CC1971}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{553318DA-D010-469E-84B1-496563CAE1BF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4F12-8568-69135F087DB0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{28387537-E3F9-4ED7-860C-11E69AF4A8A0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D717F81-9148-4F12-8568-69135F087DB0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9D717F81-9148-4F12-8568-69135F087DB0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CA9B9C89-4662-4ADC-9C23-A452BECD5D19}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D0F4A166-B8D4-48B8-9D63-80849FE137CB}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EB5CEE80-030A-4ED8-8E20-454E9C68380F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{553318DA-D010-469E-84B1-496563CAE1BF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6087829B-114F-42A1-A72B-B4AEDCEA4E5B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624F4-C5DD-4E1D-BDD0-1E9C9B7799CC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F000001-DB8E-F89C-2FEC-49BF726F8C12}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9C8A3CA5-889E-4554-BEEC-EC0876E4E96A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F9189560-573A-4FDE-B055-AE7B0F4CF080}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0388404D-6072-4CEB-B521-8F090FEAEE57}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{C04B7D22-5AEC-4561-8F49-27F6269208F6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlüssel Gelöscht : HKCU\Software\1ClickDownload
Schlüssel Gelöscht : HKCU\Software\BabylonToolbar
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\Cr_Installer
Schlüssel Gelöscht : HKCU\Software\DataMngr
[#] Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar
Schlüssel Gelöscht : HKCU\Software\ilivid
Schlüssel Gelöscht : HKCU\Software\IM
Schlüssel Gelöscht : HKCU\Software\Imesh
Schlüssel Gelöscht : HKCU\Software\ImInstaller
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\OfferMosquito
Schlüssel Gelöscht : HKCU\Software\Protector
Schlüssel Gelöscht : HKCU\Software\SearchCore for Browsers
Schlüssel Gelöscht : HKCU\Software\SiteRanker
Schlüssel Gelöscht : HKCU\Software\SmartBar
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\SweetIM
Schlüssel Gelöscht : HKCU\Software\visualbee
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKCU\Software\Zugo
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\searchqutoolbar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar
Schlüssel Gelöscht : HKLM\SOFTWARE\Babylon
Schlüssel Gelöscht : HKLM\SOFTWARE\BabylonToolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Bandoo
Schlüssel Gelöscht : HKLM\SOFTWARE\Conduit
Schlüssel Gelöscht : HKLM\SOFTWARE\DataMngr
Schlüssel Gelöscht : HKLM\SOFTWARE\SearchCore for Browsers
Schlüssel Gelöscht : HKLM\SOFTWARE\SweetIM
Schlüssel Gelöscht : HKLM\SOFTWARE\systweak
Schlüssel Gelöscht : HKLM\SOFTWARE\Tarma Installer
Schlüssel Gelöscht : HKLM\SOFTWARE\Uniblue
Schlüssel Gelöscht : HKLM\SOFTWARE\VBMZ
Schlüssel Gelöscht : HKLM\SOFTWARE\visualbee
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}_is1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{EEE6C374-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchCore for Browsers
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17280

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page Restore]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Secondary Start Pages]

-\\ Google Chrome v37.0.2062.124

[ Datei : C:\Users\BurkiTrade\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht [Search Provider] : hxxp://native-search.com/search.php?channel=en&q={searchTerms}
Gelöscht [Search Provider] : hxxp://native-search.com/search.php?channel=en&q={searchTerms}

*************************

AdwCleaner[R0].txt - [24743 octets] - [06/10/2014 12:47:14]
AdwCleaner[S0].txt - [24622 octets] - [06/10/2014 13:42:04]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [24683 octets] ##########
         

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.3.1 (10.06.2014:1)
OS: Windows 7 Home Premium x86
Ran by BurkiTrade on 06.10.2014 at 15:45:14.06
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110211391186}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\iLividSetup-r362-n-bf_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\iLividSetup-r362-n-bf_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110211391186}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{30750DD1-EADD-4cf1-A485-C736C96936AB}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{D1F8D3AB-2E64-497A-BA0F-92E8387FAEE3}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{70EA269E-56DF-49C2-86B2-1A1924ED88B4}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{70EA269E-56DF-49C2-86B2-1A1924ED88B4}



~~~ Files

Successfully deleted: [File] C:\windows\System32\Tasks\DriverBoost-RTMRules
Successfully deleted: [File] C:\windows\System32\Tasks\DriverBoost-RTMScan
Successfully deleted: [File] C:\windows\System32\Tasks\DriverBoost-RTMUpdater



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{01C84DBA-A63F-4673-9AC6-F14B525EA671}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{022724E0-0BFF-4BE0-BCF8-58437850727C}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{03557C29-0B63-49DD-B3B5-336E5C8434DA}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{03E3965B-2F7D-4DA9-9759-1C4673EC064F}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{03FD99F0-C401-4C21-9818-8D983A7DEF59}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{041FC8DE-3708-40D1-B4F8-A42793318D0E}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{0569E300-C50C-470E-9A5C-C69999431E3A}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{05C1E34B-8AB8-4F02-8D93-30B4C0F2576A}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{06C48E64-1503-45A9-BE24-C49BE5EA6B51}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{07632874-D126-4C14-B780-E4BCD07C8BA9}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{0790A4C8-7685-49F6-9321-CDE82DC2C547}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{090E5228-028D-425C-8638-D31300500CAA}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{09C3247C-DE7D-463F-A49B-E7A9B27BCACD}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{0A43E2CE-F0AE-4413-BC57-FAD47304DBA7}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{0B558146-4A84-447B-BDA5-A0ABAEAF07D0}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{0B82055D-37E8-499A-AD77-879CFD6C07EC}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{0C5DF288-E5C6-4F5E-9B16-4BC591B1E560}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{0DC072E5-5B90-4402-8F0E-FD6D798B3AE0}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{0EAAFFE0-CEBC-406D-A3EC-FB915C06907F}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{0EBF6AE6-D45B-4F33-9C39-5637768310D4}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{0F1A22C0-76AF-4051-A13F-1C23DDEC3AF0}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{100C7320-C3E8-46FD-9F74-D5407F198B48}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{11A0BF46-B9BA-47EF-8F26-E1C71D219E29}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{1246A81C-0C17-43AF-875F-97896EEC291A}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{12D30914-B34D-44D5-BD03-A6376FAA8A48}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{13458C1D-88D9-4CFC-AF51-ADFA3C6941BE}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{13529270-C714-40B9-8375-000252F7D778}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{13F09110-22E9-4373-A045-E2E2A621A85A}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{149D8DFD-B027-4749-BEA5-67C627A81852}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{15E6BD40-FA21-446B-8E09-F2AF98A099B4}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{17EF94F8-E508-44E6-8E76-C5E932F7D25F}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{191A9DC3-F7E5-4635-B5C0-9150C43727B2}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{1AE04F5D-2DA4-4792-826F-90191065B3C4}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{1BD6809D-831A-4ED6-AC59-4FB895E7545C}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{1DE28EE0-DE16-432A-A523-6DA1C4A2DDAF}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{1E47740A-29EF-41BF-A671-ACC9907CAEE6}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{1EC0AD85-CE90-4C9E-8B5C-5DE0E6B26D1D}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{1F77630F-60F3-44BE-9B61-E75634842DF9}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{1F7A68AE-638E-4D43-8216-83CE0629D58C}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{20A14286-AA56-4FD8-A67D-FE70CD30370C}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{219A3EA3-89F6-4E68-AF68-CBAEBD340365}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{21D818A4-2454-4A4A-AC01-304B866188A5}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{22486685-EFBA-4D1C-972A-7EF7731EEA8C}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{233EC0E2-0C29-49AB-ADDE-F7B752250369}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{2389EDE4-5F40-4934-A527-66C6DCB39D70}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{248DEB5C-0BCF-4D83-ABCE-D219A27D725F}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{24BE24E1-CD4A-4812-8672-3F2FAD64270C}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{24C464DD-DD8A-49E1-AD47-6D0A158C4CB1}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{2541502B-B166-4675-B952-9E014C2AD697}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{25D817C6-118B-47AF-847C-A99C90AA6C47}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{268A6089-EBCF-4AA3-BFD1-4DBA08F36DB3}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{2752D6EF-8B34-4698-A6A8-6FF19B01B607}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{280D0584-1F74-47F0-ACFA-D51E4555140F}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{287C30A6-3BB8-4B25-A0DF-6C0084F35584}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{28CFAF03-49DB-49A7-84DA-58367ADBAEFC}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{2916CD70-B13C-4781-8DB2-D7322480D512}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{2949238E-D9ED-4E5A-A621-D1FFB97272E8}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{29E414E7-08BE-48CD-9D64-CE0306DEC862}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{2A1FCDC7-65F1-4F87-8FD6-6F3AB7378056}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{2A3E3406-0FDB-41B2-881D-34F5CC83A96E}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{2BF2181B-0B04-401F-A311-C7659ED61BA2}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{2C1B51A7-3641-4C99-9D45-8A50D411EB73}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{2C8AAB8E-19BA-4468-A53C-E5910C347E15}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{2D4A0E3F-9485-4AE5-A66E-BF1DB47FD840}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{2D5B4C94-8CDF-4FBB-86FA-580C41609FA0}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{2E8480E8-74CF-46E3-8E09-867226507A54}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{2F662817-CB53-468D-8A52-3B0D02E20C38}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{2F7DFD14-E92F-476A-B1F8-157F54F458C3}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{2FB682D7-99D2-49B5-9CB0-981733746E3E}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{2FD74DEC-7279-4F7D-B55C-EA47F956F93C}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{30E11027-AF0E-4E1F-AFF1-D557108D5112}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{320ECFB9-5BC8-4DB9-ABEE-B37EE2C12036}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{326BE95C-84E3-423E-9F32-3F8E633546DE}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{3341F2AD-1FF9-46AC-9080-6E8A06843F93}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{33A3B7E4-35C5-4617-8059-2B754E745D76}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{33A4DCC0-4943-4231-98AF-5F055FE96A44}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{3472889B-6CB7-426F-921A-010127F4A797}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{351C5A46-6524-4A96-8102-C105FC78DF4D}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{35603E60-7FC4-42FA-BD28-FB2E6785FD69}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{3614EAED-0145-4E8D-B825-49A46D7D46C1}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{36BF6652-5C6F-4397-A98A-AF72EBD0CFDE}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{36C86DEF-3047-494A-BF3B-E452061A488D}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{38FD7C23-F68E-4621-B956-6F180433BADD}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{3A65CACF-8074-4362-8DC3-404EB22BC331}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{3AAB011A-F51D-4253-A767-88F6E7C52CC2}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{3AEE3CCE-43B7-4BA3-B582-95660E60C63A}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{3B1238FB-F2A2-4471-947C-E54948D80ED3}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{3B25F966-3910-43E1-9DBA-6CB805FCC4D0}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{3B433542-8A6A-4555-A379-3D883AC3AB7F}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{3B75F039-48FB-4EBA-B87B-737197FFA3C5}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{3C6EAA84-592D-4034-AEF7-887AF08B5F48}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{3EAC9C6D-0424-4F4F-A85C-506C164F5D2A}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{3FECDD29-C7CE-4055-80A3-26D0B9B8FC37}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{4138FE8A-AC1D-4ADC-ABC1-F430AA579EFE}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{41B8D33D-5C02-47DB-9B46-E1D2F3111422}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{41DF5EAA-AE3F-4510-9690-A52437C4A26A}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{4227197B-8AF7-4D16-91C1-5CFF930D9C8B}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{4244DB4D-4E01-47A8-8BFA-4503C38DB220}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{42E4B48C-B5A8-4DC1-9578-38499C4A63B8}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{436D5305-97B9-4132-AFAC-5A2A5650AB79}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{44F2149E-C438-4FA5-B1B0-071D000AD356}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{452BFB15-01FC-40AB-8EDD-2C4E28F5F75C}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{45B928FC-7409-4119-9306-0EBF1D517FAD}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{45FD24DA-A7B9-4FD2-A783-476C5313425E}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{46DE1FCA-30C6-45E7-8CF0-DA9E08FF45C4}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{4716300E-309A-4D2F-8576-AEE6FDAE2BCB}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{4781B00F-63C1-4431-A22E-337EDA9B0E2B}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{47CD685C-44CC-4E96-8CF9-6839E836FC01}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{48214FC4-52BF-4C01-8171-B50A0CDD6EFB}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{48813F3C-9979-4EA8-A832-519D40EA07C0}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{49268D4F-FAC3-4DCD-B6E7-C341F750FBC9}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{49488AB3-061C-49C1-8C44-FCEBECB12ECF}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{4A6139E7-6C11-4A11-BA03-F389107DD93C}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{4B465644-6DAE-4FE3-A69A-2BCF7967011C}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{4B7565CC-C226-43E4-A79A-2309B12C9E68}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{4CA991BF-13F6-43A4-9974-479E4BE50D45}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{4D55CA2E-F182-415A-BDD3-F0EBD3A67448}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{4E032AE4-13E6-43BD-8558-41A59D64FA37}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{4F260A3F-4731-41AE-90F5-0CA29F4798EE}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{4FC664C7-6EE3-4AB6-A664-F3D0678D568E}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{4FEC3F60-B5F6-4162-B81A-24DAFF87ED29}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{50C15F28-18DB-4977-AF91-9FCC8A3BAFB7}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{52DEA524-DA9A-487F-8567-7A375EDB5416}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{54143362-198E-4967-ADF6-B4546B7F1163}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{5430965E-B488-4BC4-AB4D-81550709BA4D}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{55189563-5674-45D0-ACDE-13CB72E14B68}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{55ACBC67-E75B-4236-A65C-A299C0FDC9A4}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{561CB0C5-53B3-480C-AFE3-7F2E56ED9506}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{561F469B-5382-47E5-B3B2-BFB1F8B02B3E}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{570FDAC4-AE16-497E-AEE3-E815B38BAC66}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{571FB60A-7C06-4A3B-AC3E-026D95D906BE}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{57605EBE-1E9C-44FB-990A-CA28E85BF530}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{58620D20-3349-4AA1-BB51-EF3B4BE65A8A}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{58657B9B-D79D-4C14-8658-5E0C40C67823}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{5992739C-D6CC-4736-AC44-CF4EBF682517}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{5AA824AE-5CD3-41CD-BFE1-08F343141AB7}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{5B48B2B0-B546-467C-A242-56662C3190B9}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{5C410D05-4F30-4FAB-8B96-AE74E0F613C4}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{5D1587BA-3EFE-4516-869A-D3BA0D8062E3}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{5D6241D4-1653-4ADE-9A70-7C9F92B20024}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{5DD07DDF-27D8-4E4B-B2A4-3AF79156C9C9}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{5E1953CC-2CEB-4BE6-8DA9-FF3E5E606522}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{5EFA6B91-184D-494C-8401-B9999082B476}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{5F340DEE-1449-42DB-A284-2AF22EFEF479}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{5F80ECEF-AA6B-4730-99A6-976F28713477}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{60B35A00-03D0-405C-96B3-749FE81DD121}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{627E2010-181B-4CBB-8A04-14EDC939CD84}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{6304A4EE-5066-4C41-BFC1-DD056179EE58}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{66641368-2B3D-43CD-A5DD-E3B7E5D114A8}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{66DFB8A9-4D76-4468-81D9-000D96BBB13C}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{68DE90BE-AAE4-4B34-AA3F-CD8D0F24266E}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{68E970CA-5CC3-4B6F-9EBA-68FD58DCF78B}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{69124AA6-C51B-493F-A26A-0E0D317A0875}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{69280C0A-02CA-4A81-AF6D-AAB261A6D1F8}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{696DC0FA-18EA-4141-A6D1-6298A35D931A}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{69D08389-5523-48F8-95B5-C8F0434B9DEE}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{6BB98749-1B75-4A40-BEAD-716C2ED7DAB7}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{6BD54FCE-0FDB-4F60-91AC-FCFAD1B16A40}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{6CCC6C26-9023-49A5-9E3A-C8B84FD008A9}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{6CD63D8F-A070-44C6-A782-16B2ECCF5228}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{6DD9F8BF-0416-4F08-914C-AC1B1138462B}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{6EC2A2EA-C7C5-4B71-BF66-D84C41F15EFD}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{7107B7A9-1EA9-43B5-9700-5DD3045FFC85}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{7117E347-E5EE-4348-8361-C3F7F0996A74}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{7189E3D3-111F-48CD-BFC8-D9FCEA008165}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{71F11C8C-0F14-48B5-9FA9-1D8FCD0C3C34}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{729123FE-C9D0-4B99-BBCC-843560C7077E}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{73C2892E-24B0-46C2-8145-FA890846683E}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{760C2EA4-4E32-444F-BFCC-0F00A3DFF455}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{77765B11-BE0F-4CFA-B91C-302634B32547}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{7780E7C5-B422-4F64-9464-C812D924D19E}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{785D4533-7A68-481B-B7EA-33E47E84AEF3}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{79B0FDA8-E9D7-4D4B-AAC8-B3D2BC96A0C4}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{7B833C09-90EB-4175-A7FD-B985946A1706}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{7B95F54A-9BB4-4480-A290-D2EA43B425B7}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{7BEA4954-2A3B-4110-A6BD-0CA4DD080C1D}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{7C099144-F807-49B8-AE42-00140ACEA1E4}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{7CAFE946-4336-4D5A-9890-748CD3587008}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{7D222C03-D353-4F0F-94F4-714F15F13C73}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{7EA188D1-DECD-4B1E-B297-18E8316C1753}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{7EAFDD9B-E00F-4B13-B19B-B4A46BD7F24F}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{7F2412C4-B7BE-4A3A-A27E-75F239915BA5}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{7FE8739D-A954-421D-B752-3C8026095403}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{82757DE4-59ED-4039-BB38-E499ECC90AA1}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{82B9D3E3-BDB9-4A39-84F1-192DB02597C2}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{8396ABC6-0001-4FD7-A448-55D11A00271C}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{84BA9DEA-C0A9-4E18-93AA-20467F487224}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{851FDC80-22C8-4186-9F82-F6F24F429D19}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{853E28A5-4081-4678-B278-2D94FAFE4F27}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{8554A9CA-6840-40CD-9C9C-57766F7FAC3F}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{864E1C7D-83F0-498E-A3E9-0BA16450CDCF}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{870A5181-977B-4E5D-BCBB-CCC13A8EE2C1}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{87B84F40-7F33-4C9B-89C1-F0552E8BCF11}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{88C4EC8F-E82F-430E-A023-6E29DDFEF8BC}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{89F14527-F138-4F6B-83ED-07A0582182C4}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{8A5F7703-657C-48DA-B878-D64EC1A12127}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{8B21169A-1357-4B1F-A047-6F69CE53D219}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{8BAF6BF2-9C95-497B-9D60-257F6646EDE6}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{8BEAB795-2D90-4C5A-958B-6A00A8233E6C}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{8C07FDBC-1C69-42E5-BF88-DF062149FE94}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{8DAFE74E-FC88-4DBD-B11C-6DEABBE674B2}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{8DF28BD1-32E3-4150-9CB7-A561EFC04D3C}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{8E90CDF4-FA6E-4D44-81BE-2EE2023DD553}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{8F3FF996-D71D-411F-ABEF-4C9A61644ACD}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{8F6D11EA-9304-42DE-AC49-07C5A53F9095}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{900123A6-2A8A-406B-BC46-2878D3E3CE27}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{903047DD-5CC7-40BF-95D8-4A2F2FB17095}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{914F410D-6FFF-4EC2-97E8-09A2E4D51BDA}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{96EEE350-D9B3-4B1C-9537-0DF583615028}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{97294FB1-34A9-4DB7-9795-2B23CC084434}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{97B814E6-E4F0-45C3-96E4-1546F7D30704}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{9A87811E-98AA-4EE8-B857-145C691F39F0}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{9C44874D-1AF7-4C6B-B578-262796D7A6C2}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{9DF1B17F-EC5D-4B02-8590-B55D56CE5E14}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{9E841F11-4C26-4B0D-A19D-648A4D9FE36F}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{9ECACDA9-ACF1-4E22-A5FB-15C88F57DA2D}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{9F77A731-426E-4F47-ADB7-1C822BFDFB97}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{9F908800-BEB6-48DC-AF66-3A7891A80E12}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{9FB0D085-C4C6-4AB5-8058-92C2B284DB03}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{9FC156F2-45EC-4E9D-9724-046976164731}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{A0C55178-B0AB-490B-8951-D1B6F35A1E15}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{A4DC75FB-1B72-4934-AF3B-7579E2059720}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{A549222A-0636-409B-953A-182D67AEA16C}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{A62AB374-80ED-4D88-99D6-050AA75EC067}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{A6A107C8-1F45-419E-8F0B-06C3D6D19C55}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{A6E0A021-79F1-4842-986C-AF42D4D5FE9E}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{A740B65E-DADA-4F5E-AFDF-CCA6A2C78077}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{A7C1886B-0805-4475-8C21-AA86683BC223}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{A9B8FA8A-871F-48E2-B7C0-4A0DD0FF26F1}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{A9DA6F75-4FCB-495A-A503-62D9C86FE902}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{AA5640D8-D4F7-4D36-8A43-07142254B7FD}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{AA8A1B87-639E-4DB6-BF5C-05E3DF9698EC}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{ABDC4C61-DEEF-4BB9-82AF-0F1043F61955}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{AC516A21-1085-4DB1-BBF8-28D2187E24F8}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{AC58D29A-C5DA-41C3-885C-152EBB460FEF}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{ACB6EA32-FE68-450B-A087-EFEFEEFAA239}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{ADC1400D-4779-4981-B6AA-7116523693EC}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{AE858A59-12DC-4C51-AA86-B66D9379511E}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{AF0EDAA3-A80F-4FBB-8A1E-A191A80E9580}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{AF8E3467-4060-4A76-865B-74450081758B}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{AF93F852-BAAC-4423-B5B0-B2E414F13D5D}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{B0608942-F6A0-481C-8C2C-D7E888D070A2}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{B2062334-E037-460F-BD86-FE7314FAAAF1}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{B23DC124-C7DB-4890-8BBB-BCD36170D15B}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{B28A6257-C5DE-4102-ACB5-95FCBE73F876}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{B33FBE46-0135-4D61-A8D0-BB2395B29876}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{B4505407-FB2F-4B53-9506-2B8FF60EC624}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{B4D8DDA1-8305-4EFA-86B0-450145890894}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{B525D33C-6247-4073-B888-7547FC1EB36F}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{B5F5AEE6-E48C-48FA-A2C4-45A55C09BB28}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{B6284A5B-92D4-4A0D-973F-5676F46F801A}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{B6F86167-9EF5-4701-803B-59B32E4DCEF9}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{B8480EC9-DD68-43EB-9F2F-9C875CAF653C}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{B912ED94-C70C-4F87-A417-2BCAC0F142C8}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{B915B1E2-17F5-4540-9857-E28BC1991484}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{B933086D-62DE-41DF-B019-A196977A7346}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{B964C9D2-4E55-46DE-B1E7-494082D9834D}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{B9C48D65-A9E4-4B9C-BC53-ABA0C5B11FF3}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{BB0704D8-27C8-4D78-8303-DF9C8F124805}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{BBD2DEB9-295B-47C6-908D-E810D6E3F1CF}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{BBE4C6D5-0905-4D6D-8BB3-3D3E1B32E7A6}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{BC222D81-953C-4F33-9A6F-9419E06AEFCB}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{BC4A34ED-3414-44D6-9249-02D25CDCF25C}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{BC84C5C8-1270-4C96-BF3D-A923C2BEF90B}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{BDB7E8E5-3F5D-468A-AD83-ACADF0C706E2}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{C06D93E3-D815-4103-9F5E-A2265DA26DC9}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{C1E5EE4C-8E09-4065-A10A-BA7876B17859}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{C32368F5-3CDE-41EE-AAE0-BD80A3083BC3}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{C4116BD0-D464-4CDE-A192-2D5E1C934CE3}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{C4A39528-663D-4563-A231-55720F4B00D6}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{C601734B-5FE2-46AD-A169-80A782B641A1}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{C6F27A00-9560-468E-B05A-52B653BDCD29}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{C6F27C24-6306-46E4-A0DA-7A1AAC0CF616}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{C88BF637-087E-49B4-B6AB-ADD1F326A867}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{C8B3A82A-5222-4759-A74C-365D99135D0D}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{C8D557CE-4018-4086-80C6-B06DA0B3D11B}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{C8D6CB9C-F9DF-41F4-B8E5-CFB6C3DBC09C}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{C8E244F6-ED74-482D-A3D4-2777B122EFC3}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{C9DC3051-3FC7-4C0B-84A6-F5A101617EC1}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{CC0EC259-98DF-4676-B18F-0B9FB074E58B}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{CC776E03-62D5-4CEE-9614-22E514D9D34C}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{CCBBDDD4-86A1-4F76-A3A4-DEB705315518}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{CCBDC432-7704-49D2-8EC7-5D7EB5A804A5}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{CD1097E1-DFF2-48AB-A74E-C0B7FE6B32CF}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{CD13EEEB-9393-491B-800C-0DC7018522CD}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{CD6163A1-A1EE-4AE7-A865-EFF580E56032}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{CDB2B390-7E37-4B97-ADFA-E66D3AFA6FA2}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{CE471949-AC78-439E-92F8-A6220B72E199}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{CE8E415C-DB94-4E7C-A6F2-447B8133D311}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{D0511690-2B7A-4A6B-AAD7-D515D9FB70F8}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{D0A7BEFF-67D8-4433-86A1-31FC5532230F}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{D0AC19FC-A608-4B23-8099-C56140796303}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{D177C780-8941-40D0-9192-D868C70B2177}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{D251B17A-28D1-4966-ABF2-CC0BD7E2BFE8}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{D3B01DDA-93DB-44DB-9945-6F4A73F7CD85}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{D460972E-5C5E-44D3-A87E-13EBE781B621}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{D4681403-0203-449D-A556-089B2F8BC71C}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{D4AB631B-B330-4730-8851-C80F9606BDBF}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{D4BB8DA4-0977-48BA-B11C-B8B01DF25EED}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{D53749BB-77F5-4E4D-8A66-ECDB019A19FF}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{D6472AC9-ED0B-41DA-9077-81AA33130A61}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{D7AB44B3-B85E-4543-8B46-0F0C32C8EB3D}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{D8D822AA-3802-459C-B34E-3BBDD8147014}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{D94C32C4-A163-4A14-9A1B-F85B84E22A23}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{D9AD9E5F-0996-40D1-8C30-E66A6B0C3476}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{DA221EC5-9BA8-4210-912F-900841F9CFBD}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{DA41FF53-5B1D-4BC4-A7E8-E45E3961A972}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{DA4F1A4A-29A5-4BAD-9DEC-1A3F2EEEB54C}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{DAD6F404-87FC-4E94-973B-EBBCFED38AE9}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{DB9F46AA-2BF9-4B8B-867D-CAFB42636148}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{DC31A45F-ECD0-42FC-9792-ADA233D2FC0B}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{DCE1EB49-D81B-47C7-B209-C301FF690678}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{DF2A5A80-086D-4029-9423-970EE05E2C83}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{DFA26AD8-3985-4728-8A33-1F8AD60F1AA5}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{DFAE3C1C-AF14-4FA6-B44C-637AC30005D6}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{E01EBABA-7A1A-46D9-AEBA-99F9E5193C29}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{E1C7A7DD-1DE9-450C-A6D9-03D16477C785}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{E272905D-5344-468D-B0B7-F8213327B189}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{E2D907B6-2556-4844-A278-8ABE0AAF8CE5}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{E3AC9939-A06B-4611-B9DE-07B84208BF0E}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{E41FAAE7-E9A9-45FE-ABAD-5B7986A25911}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{E44BF20E-88B1-40BB-AB86-98DB1BF90D67}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{E4EC1DFD-3768-4F18-86C6-8E1C0B462EC3}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{E5DEB096-4087-4EA8-89D9-85F3B728FBCC}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{E5F837C9-B031-4C7D-9C18-B5A885ECD09A}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{E73AFD57-A55A-41D1-9399-38ADBAD01003}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{E8AA278F-540A-4F49-A656-F4B3DCA1BB2F}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{E8D48764-4CB0-4DF7-AE50-7F92EEF46031}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{E9EAA331-35B0-4F95-BDFC-C461FD57E578}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{EA34493A-7537-4BAE-AA6F-B6B3096BC1EC}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{EA5EC92B-DFC1-4651-8368-16FE59B6D655}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{EA760CCA-7325-4B9F-A01B-0232264E6D8A}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{EADC4C0D-769A-42B9-8D32-4FEAC7ECE7CB}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{EC851C0C-CD87-490F-B460-884679BF9DA9}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{ECCE258C-4EEA-41E3-8378-426D3B230E97}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{ECFBB60E-ABC2-4E7E-8813-47086CF9B110}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{ED2E96AC-D4DD-4A72-A303-689D9B60174C}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{ED3C5F08-1707-4C66-A44A-D1E7AC204131}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{EDEDEF9A-BD00-4AB4-A835-42B5A7FE7289}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{EE1E2429-D383-4C5C-AD24-E078F24EF092}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{EEF7C621-784C-4451-856C-9C864CAA4309}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{F1881FA5-5CA9-4084-8572-7E3A7F99A9B0}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{F1EBE945-D0CA-4ED0-909F-CD04576B495C}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{F1FA12C3-F9A2-4FCC-92F0-EB35D4C17D6A}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{F2EEDD8A-29B5-46D0-9D7A-4520E608C838}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{F33EBB4E-CE0F-47FC-9865-A7A16F523418}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{F3B6E6B0-5051-4BC2-93C3-FF44CBD43F94}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{F4D5FFF5-257B-4E70-A500-0774B8C8B898}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{F585B1B2-AE10-4B8A-B3D7-D1D856807A21}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{F6125A77-6CF4-43DE-B1C3-E4FEF5CED0C8}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{F647E5F5-D352-4C33-93F4-3D539750D781}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{F7F645C4-4D08-4DDF-9E40-A0818AA047FA}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{FADFC5B1-B6C4-495D-B57A-888E8DBCBE89}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{FC4098C8-D9D9-4DF6-9DEA-11A9FE0C1361}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{FCEB64BD-955C-44D7-B35A-58DC1BC5BA67}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{FD139928-6BC6-4436-B5F6-6263B5952E68}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{FDFC6007-D01F-46F5-9ABA-72E14D48F584}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{FE8D1B57-1AF5-44EA-9FE6-B22553731F87}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{FE8F1C50-2A24-4C8B-8DE1-8E0B0ACEDCA3}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{FEC6B7AE-9498-4A61-AFEB-ACC2D3EEA54F}
Successfully deleted: [Empty Folder] C:\Users\BurkiTrade\appdata\local\{FFE0CE39-BD82-4FF3-BC4B-CE62EE1FF3DD}



~~~ Chrome

Successfully deleted: [Folder] C:\Users\BurkiTrade\appdata\local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 06.10.2014 at 15:48:21.44
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Resultat von Mbam

 Malwarebytes Anti-Malware 
www.malwarebytes.org


Update, 06.10.2014 16:17:33, SYSTEM, BURKITRADE-MSI, Manual, Rootkit Database, 2014.2.20.1, 2014.9.19.1, 
Update, 06.10.2014 16:17:37, SYSTEM, BURKITRADE-MSI, Manual, Malware Database, 2014.3.4.9, 2014.10.6.5, 

(end)

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 06-10-2014
Ran by BurkiTrade (administrator) on BURKITRADE-MSI on 06-10-2014 16:57:43
Running from C:\Users\BurkiTrade\Downloads
Loaded Profiles: BurkiTrade &  (Available profiles: BurkiTrade & Gast)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Micro-Star International Co., Ltd.) C:\Program Files\System Control Manager\MSIService.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Micro-Star International Co., Ltd.) C:\Program Files\System Control Manager\MGSysCtrl.exe
(Micro-Star Int’l Co., Ltd.) C:\Program Files\MSI\MSI S-Bar Utilities\S-Bar.exe
() C:\Program Files\MSI\EasyFace Logon\KillAutoAP.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
() C:\Program Files\EDGE CARD\EDGE MODEM\EdgeRst.exe
() C:\Program Files\EDGE CARD\EDGE MODEM\EdgeRun.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Windows Live\Messenger\msnmsgr.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(TOSHIBA CORPORATION) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosHdpProc.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosOBEX.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtProc.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-07-10] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [ETDWare] => \Elantech\ETDCtrl.exe
HKLM\...\Run: [ITSecMng] => C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [83336 2009-07-22] (TOSHIBA CORPORATION)
HKLM\...\Run: [MGSysCtrl] => C:\Program Files\System Control Manager\MGSysCtrl.exe [2068480 2009-07-24] (Micro-Star International Co., Ltd.)
HKLM\...\Run: [MSI S-Bar Utilities] => C:\Program Files\MSI\MSI S-Bar Utilities\S-Bar.exe [331264 2009-07-30] (Micro-Star Int’l Co., Ltd.)
HKLM\...\Run: [EasyFace Agent] => C:\Program Files\MSI\EasyFace Logon\KillAutoAP.exe [348160 2009-07-16] ()
HKLM\...\Run: [IAAnotif] => C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-05] (Intel Corporation)
HKLM\...\Run: [BEWINTERNET-CHSessionManager] => "C:\Program Files\Internet Everywhere\IEWCH_8.0\SessionManager\SessionManager.exe"
HKLM\...\Run: [Wireless] => C:\Program Files\EDGE CARD\EDGE MODEM\EdgeRst.exe [81920 2008-07-01] ()
HKLM\...\Run: [WirelessZeroTouch] => C:\Program Files\EDGE CARD\EDGE MODEM\EdgeRun.exe [184320 2008-07-16] ()
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [751184 2014-09-05] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [164656 2014-08-27] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM\...\RunOnce: [ Malwarebytes Anti-Malware  (cleanup)] => C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware \mbamdor.exe [54072 2014-05-12] (Malwarebytes Corporation)
HKU\S-1-5-21-2746290780-1698468266-31462175-1000\...\Run: [msnmsgr] => C:\Program Files\Windows Live\Messenger\msnmsgr.exe [4280184 2012-03-08] (Microsoft Corporation)
HKU\S-1-5-21-2746290780-1698468266-31462175-1000\...\MountPoints2: E - E:\AutoRun.exe
HKU\S-1-5-21-2746290780-1698468266-31462175-1000\...\MountPoints2: {233c5f4f-507d-11e0-8f18-006073e5fbb4} - E:\AutoRun.exe
HKU\S-1-5-21-2746290780-1698468266-31462175-1000\...\MountPoints2: {233c5f55-507d-11e0-8f18-006073e5fbb4} - E:\AutoRun.exe
HKU\S-1-5-21-2746290780-1698468266-31462175-1000\...\MountPoints2: {66d0a495-1970-11e0-b691-006073e5fbb4} - E:\MicroLauncher.exe
HKU\S-1-5-21-2746290780-1698468266-31462175-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [msnmsgr] => C:\Program Files\Windows Live\Messenger\msnmsgr.exe [4280184 2012-03-08] (Microsoft Corporation)
HKU\S-1-5-21-2746290780-1698468266-31462175-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: E - E:\AutoRun.exe
HKU\S-1-5-21-2746290780-1698468266-31462175-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {233c5f4f-507d-11e0-8f18-006073e5fbb4} - E:\AutoRun.exe
HKU\S-1-5-21-2746290780-1698468266-31462175-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {233c5f55-507d-11e0-8f18-006073e5fbb4} - E:\AutoRun.exe
HKU\S-1-5-21-2746290780-1698468266-31462175-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {66d0a495-1970-11e0-b691-006073e5fbb4} - E:\MicroLauncher.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth Manager.lnk
ShortcutTarget: Bluetooth Manager.lnk -> C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (TOSHIBA CORPORATION.)
Startup: C:\Users\BurkiTrade\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk
ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://ch.msn.com/default.aspx?pc=UP97&ocid=UP97DHP
URLSearchHook: HKCU - (No Name) - {64ead72b-ffd4-4e01-aa3a-4c71665d73e4} -  No File
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - eToolKit Toolbar - {D3B22A92-87A2-47b6-B3E6-A64877B5C242} -  No File
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF32_14_0_0_125.dll ()
FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll No File
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @citrixonline.com/appdetectorplugin -> C:\Users\BurkiTrade\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)

Chrome: 
=======
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\37.0.2062.124\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\37.0.2062.124\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\37.0.2062.124\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll No File
CHR Plugin: (PDF-XChange Viewer) - C:\Program Files\Mozilla Firefox\plugins\npPDFXCviewNPPlugin.dll No File
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File
CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll No File
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Citrix Online Web Deployment Plugin 1.0.0.104) - C:\Users\BurkiTrade\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
CHR Plugin: (Shockwave Flash) - C:\windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\windows\system32\npDeployJava1.dll No File
CHR CustomProfile: C:\Users\BurkiTrade\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\BurkiTrade\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-08-07]
CHR Extension: (Google Drive) - C:\Users\BurkiTrade\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-07]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\BurkiTrade\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-05]
CHR Extension: (YouTube) - C:\Users\BurkiTrade\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-07]
CHR Extension: (Google-Suche) - C:\Users\BurkiTrade\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-07]
CHR Extension: (AdBlock) - C:\Users\BurkiTrade\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-06-30]
CHR Extension: (Google Wallet) - C:\Users\BurkiTrade\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-25]
CHR Extension: (Google Mail) - C:\Users\BurkiTrade\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-07]
CHR HKLM\...\Chrome\Extension: [cljghnkcnkhedlnhdgbcbefjoapionoc] - C:\Users\BurkiTrade\AppData\Local\eToolKit\Beemp3.crx []
CHR HKLM\...\Chrome\Extension: [dnlhamhiejpiajljicfphhpiahoojipl] - C:\Users\BurkiTrade\AppData\Local\eToolKit\FacebookShare.crx []
CHR HKLM\...\Chrome\Extension: [dpmoonohndgmmnlcnjajheaahmnjlbmj] - C:\Users\BurkiTrade\AppData\Local\eToolKit\FacebookStatus.crx []
CHR HKLM\...\Chrome\Extension: [eelchhiiipbeleiimmhpdfbagkcjdmdm] - C:\Users\BurkiTrade\AppData\Local\eToolKit\FacebookChat.crx []
CHR HKLM\...\Chrome\Extension: [fppahmlkambbejgkiidklamcmhealjag] - C:\Users\BurkiTrade\AppData\Local\eToolKit\FacebookLike.crx []
CHR HKLM\...\Chrome\Extension: [iaagjcfjefodfnlpnmopkkbpgclipnpn] - C:\Users\BurkiTrade\AppData\Local\eToolKit\eOffers.crx []
CHR HKLM\...\Chrome\Extension: [jchankggehakkafdlalgmfbodgfilnbg] - C:\Users\BurkiTrade\AppData\Local\eToolKit\FacebookMain.crx []
CHR HKLM\...\Chrome\Extension: [jedcimnjemkbmkkngncfgfpjgfcapimk] - C:\Users\BurkiTrade\AppData\Local\eToolKit\Extmanager.crx []
CHR HKLM\...\Chrome\Extension: [koalekbhpbggkcfhkkbolikjoaobbppi] - C:\Program Files\PutLockerDownloader\PutLockerDownloader10.crx []

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-09-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-09-05] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [160048 2014-08-27] (Avira Operations GmbH & Co. KG)
S2 FTRTSVC; C:\Program Files\Common Files\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe [90112 2009-11-12] (France Telecom SA) [File not signed]
R2 Micro Star SCM; C:\Program Files\System Control Manager\MSIService.exe [160768 2009-07-10] (Micro-Star International Co., Ltd.) [File not signed]
S3 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\windows\System32\DRIVERS\avgntflt.sys [97648 2014-07-04] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\windows\System32\DRIVERS\avipbb.sys [136216 2014-06-13] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\windows\System32\DRIVERS\avkmgr.sys [37352 2013-12-22] (Avira Operations GmbH & Co. KG)
U0 bxjjac; C:\windows\System32\drivers\tfhvvl.sys [52440 2014-10-06] (Malwarebytes Corporation)
S4 DNE; C:\windows\System32\DRIVERS\dne2000.sys [125584 2008-08-25] (Deterministic Networks, Inc.)
R3 ETD; C:\windows\system32\DRIVERS\ETD.sys [91136 2009-06-18] (ELAN Microelectronic Corp.)
S3 GTUHSBUS; C:\windows\System32\DRIVERS\gtuhsbus.sys [66560 2009-08-04] (Option N.V.) [File not signed]
S3 GTUHSNDISIPXP; C:\windows\System32\DRIVERS\gtuhs51.sys [107520 2009-08-04] (Option N.V.) [File not signed]
S3 GTUHSSER; C:\windows\System32\DRIVERS\gtuhsser.sys [8064 2009-08-04] (Option N.V.)
R3 HBtnKey; C:\windows\System32\DRIVERS\tkbtnpn.sys [7463 2007-10-30] (Lenovo)
R3 NETwNs32; C:\windows\System32\DRIVERS\NETwNs32.sys [7523840 2012-01-23] (Intel Corporation)
S3 RTHDMIAzAudService; C:\windows\System32\drivers\RtHDMIV.sys [159776 2009-06-24] (Realtek Semiconductor Corp.)
R1 ssmdrv; C:\windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
S3 usbser; C:\windows\System32\DRIVERS\usbmdm.sys [28160 2008-07-16] (Microsoft Corporation) [File not signed]
S3 rcvpn; system32\DRIVERS\rcvpn.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-06 16:53 - 2014-10-06 16:53 - 00000273 _____ () C:\mbam.txt
2014-10-06 16:49 - 2014-10-06 16:49 - 00052440 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\tfhvvl.sys
2014-10-06 16:17 - 2014-10-06 16:56 - 00110296 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-10-06 16:17 - 2014-10-06 16:17 - 00001070 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-10-06 16:17 - 2014-10-06 16:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-10-06 16:17 - 2014-10-06 16:17 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-10-06 16:17 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2014-10-06 16:17 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2014-10-06 16:17 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-10-06 16:15 - 2014-10-06 16:16 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\BurkiTrade\Downloads\mbam-setup-2.0.2.1012.exe
2014-10-06 15:48 - 2014-10-06 15:48 - 00042224 _____ () C:\Users\BurkiTrade\Desktop\JRT.txt
2014-10-06 15:45 - 2014-10-06 15:45 - 00000000 ____D () C:\windows\ERUNT
2014-10-06 15:43 - 2014-10-06 15:43 - 01705141 _____ (Thisisu) C:\Users\BurkiTrade\Downloads\JRT.exe
2014-10-06 12:48 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\windows\system32\sqlite3.dll
2014-10-06 12:47 - 2014-10-06 13:43 - 00000000 ____D () C:\AdwCleaner
2014-10-06 12:46 - 2014-10-06 12:46 - 01375089 _____ () C:\Users\BurkiTrade\Downloads\AdwCleaner_3.311.exe
2014-10-06 12:36 - 2014-10-06 12:36 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\BurkiTrade\Downloads\revosetup95.exe
2014-10-06 12:36 - 2014-10-06 12:36 - 00001232 _____ () C:\Users\BurkiTrade\Desktop\Revo Uninstaller.lnk
2014-10-06 12:36 - 2014-10-06 12:36 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-10-06 10:46 - 2014-10-06 10:49 - 00032844 _____ () C:\Users\BurkiTrade\Downloads\Addition.txt
2014-10-06 10:45 - 2014-10-06 16:57 - 00018065 _____ () C:\Users\BurkiTrade\Downloads\FRST.txt
2014-10-06 10:45 - 2014-10-06 16:57 - 00000000 ____D () C:\FRST
2014-10-06 10:43 - 2014-10-06 10:43 - 00380416 _____ () C:\Users\BurkiTrade\Downloads\Gmer-19357.exe
2014-10-06 10:42 - 2014-10-06 10:42 - 01101312 _____ (Farbar) C:\Users\BurkiTrade\Downloads\FRST.exe
2014-10-06 10:41 - 2014-10-06 10:44 - 00000456 _____ () C:\Users\BurkiTrade\Downloads\defogger_disable.log
2014-10-06 10:41 - 2014-10-06 10:41 - 00000000 _____ () C:\Users\BurkiTrade\defogger_reenable
2014-10-06 10:40 - 2014-10-06 10:40 - 00050477 _____ () C:\Users\BurkiTrade\Downloads\Defogger.exe
2014-10-01 08:29 - 2014-09-25 03:40 - 00519680 _____ (Microsoft Corporation) C:\windows\system32\qdvd.dll
2014-09-24 08:27 - 2014-09-09 23:47 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2014-09-16 08:06 - 2014-09-16 08:06 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-09-11 17:55 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-09-11 17:55 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-09-11 17:54 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2014-09-11 17:54 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-09-11 17:54 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-09-11 17:54 - 2014-08-18 23:57 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-09-11 17:54 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2014-09-11 17:54 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2014-09-11 17:54 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-09-11 17:54 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-09-11 17:54 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-09-11 17:54 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-09-11 17:54 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-09-11 17:54 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-09-11 17:54 - 2014-08-18 23:36 - 00108032 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-09-11 17:54 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-09-11 17:54 - 2014-08-18 23:30 - 00646144 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2014-09-11 17:54 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-09-11 17:54 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2014-09-11 17:54 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-09-11 17:54 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2014-09-11 17:54 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-09-11 17:54 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-09-11 17:54 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-09-11 17:54 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-09-11 17:54 - 2014-08-18 23:08 - 00673792 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-09-11 17:54 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2014-09-11 17:54 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-09-11 17:54 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-09-11 17:54 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-09-11 17:53 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\windows\system32\msmpeg2vdec.dll
2014-09-11 07:48 - 2014-07-07 03:40 - 01059840 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2014-09-11 07:48 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2014-09-11 07:47 - 2014-09-05 03:52 - 00445952 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-09-11 07:47 - 2014-09-05 03:47 - 00302592 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-09-11 07:47 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\windows\system32\TSWorkspace.dll
2014-09-11 07:47 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll
2014-09-10 14:17 - 2014-09-10 14:17 - 00272808 _____ (Oracle Corporation) C:\windows\system32\javaws.exe
2014-09-10 14:17 - 2014-09-10 14:17 - 00096680 _____ (Oracle Corporation) C:\windows\system32\WindowsAccessBridge.dll
2014-09-10 14:17 - 2014-09-10 14:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-09-10 14:17 - 2014-09-10 14:17 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-09-10 14:17 - 2014-09-10 14:16 - 00175528 _____ (Oracle Corporation) C:\windows\system32\javaw.exe
2014-09-10 14:17 - 2014-09-10 14:16 - 00175528 _____ (Oracle Corporation) C:\windows\system32\java.exe
2014-09-10 14:16 - 2014-09-10 14:16 - 00000000 ____D () C:\Program Files\Java
2014-09-09 08:53 - 2014-10-06 13:39 - 00000000 ____D () C:\Users\BurkiTrade\AppData\Roaming\TS3Client
2014-09-09 08:53 - 2014-09-09 08:53 - 00001130 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2014-09-09 08:53 - 2014-09-09 08:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2014-09-09 08:53 - 2014-09-09 08:53 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2014-09-09 08:52 - 2014-09-09 08:52 - 28115400 _____ (TeamSpeak Systems GmbH) C:\Users\BurkiTrade\Downloads\TeamSpeak3-Client-win32-3.0.16 (1).exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-06 16:49 - 2009-07-14 04:37 - 00000000 ____D () C:\windows\Resources
2014-10-06 16:17 - 2010-08-28 19:25 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-10-06 16:07 - 2011-09-24 16:07 - 00000298 _____ () C:\windows\Tasks\Updater.job
2014-10-06 16:06 - 2013-08-07 13:04 - 00001106 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-06 15:06 - 2013-08-07 13:04 - 00001102 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-06 14:01 - 2009-07-14 06:34 - 00025824 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-06 14:01 - 2009-07-14 06:34 - 00025824 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-06 13:57 - 2010-08-28 14:18 - 01584684 _____ () C:\windows\WindowsUpdate.log
2014-10-06 13:57 - 2009-09-26 20:48 - 01649420 _____ () C:\windows\system32\PerfStringBackup.INI
2014-10-06 13:54 - 2010-08-28 14:57 - 00000441 _____ () C:\windows\system32\Drivers\etc\hosts.ics
2014-10-06 13:53 - 2011-09-20 18:34 - 00000000 ____D () C:\Users\BurkiTrade\Tracing
2014-10-06 13:52 - 2014-07-01 06:23 - 00003752 _____ () C:\windows\setupact.log
2014-10-06 13:52 - 2012-12-07 19:03 - 00049720 _____ () C:\windows\PFRO.log
2014-10-06 13:52 - 2009-07-14 06:53 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-10-06 13:42 - 2013-03-25 22:45 - 00000000 ____D () C:\Users\BurkiTrade\AppData\Roaming\Common
2014-10-06 10:41 - 2010-08-28 14:21 - 00000000 ____D () C:\Users\BurkiTrade
2014-09-25 09:13 - 2013-08-07 13:04 - 00002131 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-09-24 14:42 - 2009-07-14 04:37 - 00000000 ____D () C:\windows\rescache
2014-09-24 13:05 - 2009-07-14 04:37 - 00000000 ____D () C:\windows\system32\de-DE
2014-09-22 08:55 - 2013-02-04 19:47 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-09-16 12:06 - 2011-09-23 16:06 - 00000000 ____D () C:\Users\BurkiTrade\AppData\Roaming\Skype
2014-09-16 08:06 - 2011-09-23 16:06 - 00000000 ____D () C:\ProgramData\Skype
2014-09-15 09:06 - 2010-08-28 15:41 - 00231568 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2014-09-12 08:18 - 2009-07-14 04:37 - 00000000 ____D () C:\windows\Microsoft.NET
2014-09-11 17:53 - 2013-07-15 10:51 - 00000000 ____D () C:\windows\system32\MRT
2014-09-11 17:47 - 2014-05-13 23:08 - 00000000 ___SD () C:\windows\system32\CompatTel
2014-09-11 17:47 - 2010-08-28 17:07 - 98758480 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-09-10 15:00 - 2014-07-14 05:29 - 00000000 ____D () C:\ProgramData\Oracle
2014-09-10 14:12 - 2014-09-05 15:29 - 00001105 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-09-10 14:12 - 2014-09-05 15:22 - 00000000 ____D () C:\ProgramData\Package Cache
2014-09-10 14:12 - 2012-12-20 21:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-09-10 14:12 - 2012-12-20 21:25 - 00000000 ____D () C:\Program Files\Avira
2014-09-07 16:14 - 2009-07-14 06:33 - 00356608 _____ () C:\windows\system32\FNTCACHE.DAT

Some content of TEMP:
====================
C:\Users\BurkiTrade\AppData\Local\Temp\avgnt.exe
C:\Users\BurkiTrade\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\BurkiTrade\AppData\Local\Temp\Quarantine.exe
C:\Users\BurkiTrade\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Gast\AppData\Local\Temp\AskSLib.dll
C:\Users\Gast\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\windows\explorer.exe => File is digitally signed
C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-10-06 14:22

==================== End Of Log ============================
         

--- --- ---

Bitte schau noch mal im Malwarebytes, das ist leider das Update-Log, nicht das Suchlauf-Log.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

CHR HKLM\...\Chrome\Extension: [koalekbhpbggkcfhkkbolikjoaobbppi] - C:\Program Files\PutLockerDownloader\PutLockerDownloader10.crx []
emptytemp:
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Eset Scan dauert länger:


ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 06-10-2014
Ran by BurkiTrade at 2014-10-06 19:00:51 Run:1
Running from C:\Users\BurkiTrade\Downloads
Loaded Profiles: BurkiTrade &  (Available profiles: BurkiTrade & Gast)
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
CHR HKLM\...\Chrome\Extension: [koalekbhpbggkcfhkkbolikjoaobbppi] - C:\Program Files\PutLockerDownloader\PutLockerDownloader10.crx []
emptytemp:
*****************

"HKLM\SOFTWARE\Google\Chrome\Extensions\koalekbhpbggkcfhkkbolikjoaobbppi" => Key deleted successfully.
"C:\Program Files\PutLockerDownloader\PutLockerDownloader10.crx" => File/Directory not found.
EmptyTemp: => Removed 1.5 GB temporary data.


The system needed a reboot. 

==== End of Fixlog ====

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=8c17c65a9918fb4886ea06a9c4114907
# engine=20466
# end=finished
# remove_checked=false
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=false
# utc_time=2014-10-06 06:01:46
# local_time=2014-10-06 08:01:46 (+0100, Mitteleuropäische Sommerzeit)
# country="Switzerland"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1810 16777213 100 100 3293 278041796 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 3326 164249697 0 0
# scanned=97548
# found=11
# cleaned=0
# scan_time=2009
sh=97BCCD25561F44E9B13F05F6EEF083C9CE9BA529 ft=1 fh=641f1fb3d2e699c4 vn="Win32/Toolbar.Conduit.Y evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Conduit\Community Alerts\Alert.dll.vir"
sh=C00E9F639D923BD13F89EC2F3C73BAF70F68424D ft=1 fh=26ff1c23ecb0eda3 vn="Variante von Win32/Toolbar.SearchSuite.C evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SearchCore for Browsers\SearchCore for Browsers\datamngr.dll.vir"
sh=BFE889A783769402F1029C1CDBFEC9B701D963B9 ft=1 fh=0c70733717aa9dde vn="Win32/Toolbar.SearchSuite.R evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SearchCore for Browsers\SearchCore for Browsers\DnsBHO.dll.vir"
sh=DB7443E84D223B0924EFFE7FDA41D419A152B76F ft=1 fh=df82bdeae5a92cc4 vn="Variante von Win32/Toolbar.Babylon.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\VisualBee\VisualBeeSoftware.exe.vir"
sh=D93DFB48F135DD4DE95CB82544C3EDA3BAD2C753 ft=1 fh=d1199f70f2992f69 vn="Win32/Packed.ScrambleWrapper.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\BurkiTrade\AppData\Local\DownloadGuide\Offers\plus-hd-3-8.exe.vir"
sh=B8327B48CD9453BA2BBF8762EA9D13CB23170F36 ft=1 fh=10d8d035eed22a53 vn="Variante von Win32/Toolbar.SearchSuite.P evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\BurkiTrade\AppData\Local\iLivid\Helper.dll.vir"
sh=4D7990298B46CADEC12EA404ADA251E5B49438C6 ft=1 fh=1bb944f06bb54d45 vn="Variante von Win32/Toolbar.SearchSuite.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\BurkiTrade\AppData\Local\iLivid\Uninstall.exe.vir"
sh=DA0495E198662B8A02D6F00DFC9F9E992B6D7F5A ft=1 fh=aca0caa08b102199 vn="Variante von Win32/Systweak.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\windows\system32\roboot.exe.vir"
sh=64AC7AAD1FF357D84BA287892B7E95099CC43F40 ft=1 fh=710ded7bacb8d5d1 vn="Variante von Win32/Conduit.SearchProtect.N evtl. unerwünschte Anwendung" ac=I fn="C:\Users\BurkiTrade\Desktop\Alte Firefox-Daten\extensions\{7e111a5c-3d11-4f56-9463-5310c3c69025}\Plugins\npConduitFirefoxPlugin.dll"
sh=0116F40DC34D5AB2C75C0B401FE97D456D40549C ft=1 fh=afb7d727b9774474 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\BurkiTrade\Downloads\areca-7.2.18-windows-jre32-setup-Downloader.exe"
sh=8963CBD7CFBE288C62BAE26C6C4B6D2313E12C9A ft=1 fh=258bce262f68e0f8 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\BurkiTrade\Downloads\video_downloader.exe"

Was macht die CPU Auslastung ?


Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

"C:\Users\BurkiTrade\Desktop\Alte Firefox-Daten\extensions\{7e111a5c-3d11-4f56-9463-5310c3c69025}\Plugins\npConduitFirefoxPlugin.dll"
="C:\Users\BurkiTrade\Downloads\areca-7.2.18-windows-jre32-setup-Downloader.exe"
"C:\Users\BurkiTrade\Downloads\video_downloader.exe"
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Das wars auch schon.

Die Logs schauen jetzt sauber aus.

Aber gib mir noch ein kurzes Feedback zur CPU Auslastung, bevor wir hier offiziell beenden.

Hallo hier das letzte Logfiel

und ja die cpu ist runter gekommen. liegt evt. an google chrome das sie so hoch war.
aber danke

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 06-10-2014
Ran by BurkiTrade at 2014-10-07 12:58:13 Run:2
Running from C:\Users\BurkiTrade\Downloads
Loaded Profile: BurkiTrade (Available profiles: BurkiTrade & Gast)
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
"C:\Users\BurkiTrade\Desktop\Alte Firefox-Daten\extensions\{7e111a5c-3d11-4f56-9463-5310c3c69025}\Plugins\npConduitFirefoxPlugin.dll"
="C:\Users\BurkiTrade\Downloads\areca-7.2.18-windows-jre32-setup-Downloader.exe"
"C:\Users\BurkiTrade\Downloads\video_downloader.exe"
*****************

C:\Users\BurkiTrade\Desktop\Alte Firefox-Daten\extensions\{7e111a5c-3d11-4f56-9463-5310c3c69025}\Plugins\npConduitFirefoxPlugin.dll => Moved successfully.
="C:\Users\BurkiTrade\Downloads\areca-7.2.18-windows-jre32-setup-Downloader.exe" => Error: No automatic fix found for this entry.
C:\Users\BurkiTrade\Downloads\video_downloader.exe => Moved successfully.

==== End of Fixlog ====

Supi !

Die Logs sind soweit auch Sauber !

http://www.trojaner-board.de/71631-p...tml#post425616

Die Reihenfolge ist hier entscheidend.

1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
   • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
   • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
   • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
3. Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
   • Schließe alle offenen Programme.
   • Starte die delfix.exe mit einem Doppelklick.
   • Setze vor jede Funktion ein Häkchen.
   • Klicke auf Start.
   • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
   • Starte deinen Rechner abschließend neu.
4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Abschließend habe ich noch ein paar Tipps zur Absicherung deines Systems.

Ändere regelmäßig alle deine Passwörter, jetzt, nach der Bereinigung ist ein idealer Zeitpunkt dafür

• verwende für jede Anwendung und jeden Account ein anderes Passwort
• ändere regelmäßig dein Passwort, vor allem bei Onlinebanking oder deinem Emailpostfach ist dieses sehr wichtig
• speichere keine Passwörter auf deinem PC, gib diese nicht an dritte weiter
• ein sicheres Passwort besteht aus mindestens 8 Zeichen und beinhaltet Groß- und Kleinbuchstaben, Zahlen und Sonderzeichen
• benutze keine Zahlen- oder Buchstabenkombinationen, ( zB 12345678, qwertzui) auch keine Zahlen oder Buchstabenmuster
• verwende keine Passwörter die einen Bezug zu dir, deinem Wohnort, Familienmitglied oder Haustier (Geburtsdatum, Postleitzahl, Adresse, Name) haben

Ich kann gar nicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

• Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
• Windows Updates
  • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
  • Windows Vista / 7 / 8 : Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
• Gehe sicher das die automatischen Updates aktiviert sind.
• Software Updates
  Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
  Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti-Viren-Programm und zusätzlicher Schutz

• Gehe sicher, dass du immer nur eine Anti-Viren Software installiert hast und dass diese auch up to date ist!
• MalwareBytes Anti Malware
  Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
  Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion bietet zudem noch einen Hintergrundwächter.
  Ein Tutorial zur Verwendung findest Du hier.
• AdwCleaner
  Dieses Tool erkennt eine Vielzahl von Werbeprogrammen (Adware) und unerwümschten Programmen (PUPs).
  Starte das Tool einmal die Woche und lass es laufen. Sollte eine neue Version verfügbar sein, so wird dies angezeigt und du kannst dir die neueste Version direkt auf den Desktop downloaden.
• SpywareBlaster
  Eine kurze Einführung findest du Hier
• WOT (Web of trust)
  Dieses AddOn warnt dich, bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser
Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Mozilla Firefox

• Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
• NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt, wenn Du es bestätigst.
• AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart außerdem Downloadkapazität.

Performance

• Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
• Halte dich fern von Registry Cleanern.
  Diese Schaden deinem System mehr als dass sie helfen. Hier ein englischer Link:
  Miekemoes Blogspot ( MVP )

Was du vermeiden solltest:

• Klicke nicht auf alles, nur weil es dich dazu auffordert und schön bunt ist.
• Verwende keine P2P oder Filesharing Software (Emule, uTorrent,..)
• Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
• Öffne keine Anhänge von dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie z.B. deinFoto.jpg.exe.
• Lade keine Software von Softonic oder Chip herunter, da diese Installer oft mit Adware oder unerünschter Software versehen sind!

Nun bleibt mir nur noch dir viel Spaß beim sicheren Surfen zu wünschen... ... und vielleicht möchtest du ja das Trojaner-Board unterstützen?

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.