| |
| |||||||
Log-Analyse und Auswertung: Windows 7: Lauter Links und neue Fenster in ChromeWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
31.10.2014, 10:01
| #1 |
| |  Windows 7: Lauter Links und neue Fenster in Chrome Hallo Zusammen, nach dem gestern mein Rechner zwar startet, aber keinen Desktop mehr anzeigte, war ich auf der suche nach Hilfe. Ich habe ein paar Scans durchlaufen lassen und nach einigen Neustarts lief es erstmal wieder. Nun habe ich leider noch das o.g. Problem und komme einfach nicht weiter. Es wäre schön, wenn mir jemand helfen könnte, bevor ich die Kiste rauswerfe. MfG bonger Anhang: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 30-10-2014 01
Ran by bonger at 2014-10-31 10:06:04
Running from C:\Users\bonger\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Disabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
7-Zip 9.20 (HKLM\...\7-Zip) (Version: - )
Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.8.0.1430 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM\...\Adobe Creative Cloud) (Version: 2.3.0.322 - Adobe Systems Incorporated)
Adobe Digital Editions (HKLM\...\Digital Editions) (Version: - )
Adobe Download Assistant (HKLM\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.9 - Adobe Systems Incorporated)
Adobe Dreamweaver CS3 (HKLM\...\Adobe_435a6af7459cb02a9c1138113a26e93) (Version: 9.0 - Adobe Systems Incorporated)
Adobe Dreamweaver CS6 (HKLM\...\{A4ED5E53-7AA0-11E1-BF04-B2D4D4A5360E}) (Version: 12 - Adobe Systems Incorporated)
Adobe Fireworks CS6 (HKLM\...\{CA7C485C-7A89-11E1-B2C8-CD54B377BC52}) (Version: 12.0.0 - Adobe Systems Incorporated)
Adobe Flash Player 15 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 15.0.0.167 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Media Player (HKLM\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)
Adobe Photoshop CC (HKLM\...\{2D99B50E-431D-4AA8-85C1-172A6F8BCF09}) (Version: 14.0 - Adobe Systems Incorporated)
Adobe Photoshop CS3 (HKLM\...\Adobe_5f143314a5d434c8511097393d17397) (Version: 10.0 - Adobe Systems Incorporated)
Adobe Photoshop CS5 (HKLM\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated)
Adobe Reader X (10.1.7) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.7 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.5 (HKLM\...\Adobe Shockwave Player) (Version: 11.5.1.601 - Adobe Systems, Inc.)
Adobe Widget Browser (HKLM\...\com.adobe.WidgetBrowser.E7BED6E5DDA59983786DD72EBFA46B1598278E07.1) (Version: 2.0 Build 230 - Adobe Systems Incorporated.)
Anno 2070 (HKLM\...\{435C32E1-96F0-4518-B051-A5403900C389}_is1) (Version: 1.01 - RAF)
AnyDVD (HKLM\...\AnyDVD) (Version: 6.7.1.0 - SlySoft)
Apple Application Support (HKLM\...\{78002155-F025-4070-85B3-7C0453561701}) (Version: 3.0.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{C0CC75CD-F5B7-46AD-B016-17C0F5171718}) (Version: 8.0.0.23 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Assassin's Creed (HKLM\...\{8CFA9151-6404-409A-AF22-4632D04582FD}) (Version: 1.02 - Ubisoft)
Avira (HKLM\...\{9bd9b85e-7792-483b-a318-cc51ff0877ed}) (Version: 1.1.22.50000 - Avira Operations GmbH & Co. KG)
Avira (Version: 1.1.22.50000 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.7.306 - Avira)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
Bonjour-Druckdienste (HKLM\...\{9D210D79-AEC5-453B-960C-4DD2C73931E1}) (Version: 2.0.2.0 - Apple Inc.)
BPM-Studio 4 Demo (HKLM\...\{9CCB8F6D-33FC-4E79-8616-7BE5DF32A955}) (Version: 4.9.93 - AlcaTech)
calibre (HKLM\...\{42C91438-46F2-4017-919B-C1081F732F07}) (Version: 0.8.70 - Kovid Goyal)
Call of Duty(R) 4 - Modern Warfare(TM) (HKLM\...\InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}) (Version: 1.7 - Activision)
Call of Duty(R) 4 - Modern Warfare(TM) (Version: 1.00.0000 - Activision) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (Version: - ) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (Version: 1.6 - Activision) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (Version: - ) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (Version: 1.7 - Activision) Hidden
Call of Duty: Black Ops II (HKLM\...\Call of Duty: Black Ops II_is1) (Version: - )
Civilization III Play the World (HKLM\...\{E8650C8D-CCB2-496E-816C-ECC54A7EE411}) (Version: - )
CloneDVD2 (HKLM\...\CloneDVD2) (Version: 2.9.2.8 - Elaborate Bytes)
Common Desktop Agent (Version: 1.53.0 - OEM) Hidden
CopyTrans Control Center deinstallieren (HKCU\...\CopyTrans Suite) (Version: 3.003 - WindSolutions)
Counter-Strike: Source (HKLM\...\Steam App 240) (Version: - Valve)
Crysis® 2 (HKLM\...\{6033673D-2530-4587-8AD0-EB059FC263F9}) (Version: 1.0.0.0 - Electronic Arts)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd)
EA Download Manager (HKLM\...\EADM) (Version: 7.1.3.3 - Electronic Arts, Inc.)
eReg (Version: 1.20.138.34 - Logitech, Inc.) Hidden
Free M4a to MP3 Converter 7.1 (HKLM\...\Free M4a to MP3 Converter_is1) (Version: - ManiacTools.com)
Free Window Registry Repair (HKLM\...\Free Window Registry Repair) (Version: - )
Free YouTube to MP3 Converter version 3.12.41.623 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.41.623 - DVDVideoSoft Ltd.)
GameSpy Comrade (HKLM\...\{176B3593-72F1-459C-829C-5E9671E2CB35}) (Version: 1.4.3.154 - GameSpy)
Google Chrome (HKLM\...\Google Chrome) (Version: 33.0.1750.117 - Google Inc.)
Google Update Helper (Version: 1.3.25.5 - Google Inc.) Hidden
Google+ Auto Backup (HKCU\...\Google+ Auto Backup) (Version: 1.0.22.105 - Google, Inc.)
Google+ Auto Backup (HKLM\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
Grand Theft Auto IV (HKLM\...\{579BA58C-F33D-4970-9953-B94B43768AC3}) (Version: 1.00.0000 - Rockstar Games)
Grand Theft Auto IV (Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
Grand Theft Auto San Andreas (HKLM\...\{086BADF8-9B1F-4E89-B207-2EDA520972D6}) (Version: 1.00.00001 - Rockstar Games)
Grand Theft Auto: Episodes From Liberty City (HKLM\...\{61B8B2F9-D8DA-4B24-89A9-DB09F38A4899}) (Version: 1.1.0.0 - Rockstar Games)
Hold 'Em (HKLM\...\HoldEm) (Version: 6.0.6000.17034 - Microsoft Corporation)
iCloud (HKLM\...\{8D9592B4-7E22-4D1F-B2CB-B5F0F2F619CB}) (Version: 4.0.3.56 - Apple Inc.)
ICQ7.2 (HKLM\...\{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}) (Version: 7.2 - ICQ)
iTunes (HKLM\...\{F32DC846-4457-40A8-BECA-BCC0E960BC53}) (Version: 11.4.0.18 - Apple Inc.)
Java 7 Update 71 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
Java 8 Update 25 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
Java SE Development Kit 7 Update 51 (HKLM\...\{32A3A4F4-B792-11D6-A78A-00B0D0170510}) (Version: 1.7.0.510 - Oracle)
JavaFX 2.1.1 (HKLM\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Junk Mail filter update (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Logitech SetPoint 6.52 (HKLM\...\sp6) (Version: 6.52.74 - Logitech)
LookThisUp (HKLM\...\LookThisUp) (Version: 1.0.2 - LookThisUp) <==== ATTENTION
Mesh Runtime (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 1.1 (HKLM\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM\...\{95140000-0081-0407-0000-0000000FF1CE}) (Version: 14.0.6123.5001 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 1.0.0.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 7.0.1 (x86 de) (HKLM\...\Mozilla Firefox 7.0.1 (x86 de)) (Version: 7.0.1 - Mozilla)
MSVC80_x86_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x86 (Version: 1.0.1.2 - Nokia) Hidden
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 8 (HKLM\...\{D6C9AF27-9414-46C8-B9D8-D878BA041031}) (Version: 8.3.312 - Nero AG)
Nokia Connectivity Cable Driver (HKLM\...\{4AA68A73-DB9C-439D-9481-981C82BD008B}) (Version: 7.1.69.0 - Nokia)
Nokia PC-Internetzugang (HKLM\...\Nokia PC Internet Access) (Version: 1.1.1.2 - Nokia)
Nokia PC-Internetzugang (Version: 1.1.1.2 - Nokia) Hidden
Nokia Suite (HKLM\...\Nokia Suite) (Version: 3.3.86.0 - Nokia)
Nokia Suite (Version: 3.3.86.0 - Nokia) Hidden
NVIDIA 3D Vision Controller-Treiber 320.49 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 320.49 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 320.49 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 320.49 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.5.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.5.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 320.49 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 320.49 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.0604 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0604 - NVIDIA Corporation)
One Click PDF 2.0 (HKLM\...\{E32D85B0-1B37-4192-81F1-46804EE760E3}) (Version: 2.00.0030 - Sowedoo Software)
PC Connectivity Solution (HKLM\...\{A2AA4204-C05A-4013-888A-AD153139297F}) (Version: 11.5.29.0 - Nokia)
PDF Settings (Version: 1.0 - Adobe Systems Incorporated) Hidden
PDF Settings CC (Version: 12.0 - Adobe Systems Incorporated) Hidden
PDF Settings CS5 (Version: 10.0 - Adobe Systems Incorporated) Hidden
PDF24 Creator 6.3.2 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
pdfforge Images2PDF 0.9.7.1125 (HKLM\...\{00120495-F25C-4F44-9DC7-2D812D025DBA}) (Version: 0.9.7.1125 - pdfforge)
PDFzuWord Professional (HKLM\...\PDFzuWord Professional_is1) (Version: - )
PhotoSync (HKLM\...\{1F4C691C-FB95-4EB7-964E-5DD767B9F6AD}) (Version: 2.2.4 - touchbyte GmbH)
PhotoSync (HKLM\...\{C80C0208-EC0C-4AB1-954A-C2E77E266858}) (Version: 2.1.2 - touchbyte GmbH)
photoSync shell (HKLM\...\{E3F2CE9F-ABC1-4ED9-86A7-B724061B2B7F}) (Version: 1.0.1 - webEcoz, LLC.)
photoSync v1.2.13 (HKLM\...\{44556BAF-0209-4CBC-B333-2D6BB69AA43E}_is1) (Version: 1.2.13 - webEcoz, LLC.)
Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PlayReady PC Runtime x86 (HKLM\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
Preispiraten (HKLM\...\{40A0ED36-C895-4783-87AD-85ABB7FB6B2A}) (Version: 2.5 - metaspinner media GmbH)
Preispiraten (HKLM\...\{5384EA8A-FECA-4D6E-B7B4-3D4D9D47E5DF}) (Version: 6 - metaspinner net GmbH)
PunkBuster Services (HKLM\...\PunkBusterSvc) (Version: 0.986 - Even Balance, Inc.)
QuickTime 7 (HKLM\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Rockstar Games Social Club (HKLM\...\{08B3869E-D282-424C-9AFC-870E04A4BA14}) (Version: 1.00.0000 - Rockstar Games)
S.T.A.L.K.E.R. - Clear Sky (HKLM\...\S.T.A.L.K.E.R. - Clear Sky_is1) (Version: 1.0001 - Deep Silver)
Samsung Easy Printer Manager (HKLM\...\Samsung Easy Printer Manager) (Version: 1.02.06.07 - Samsung Electronics Co., Ltd.)
Samsung ML-2160 Series (HKLM\...\Samsung ML-2160 Series) (Version: 1.08 (24.08.2012) - Samsung Electronics Co., Ltd.)
Samsung Printer Live Update (HKLM\...\Samsung Printer Live Update) (Version: 1.01.00.04 - Samsung Electronics Co., Ltd.)
Steam (HKLM\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Sweet Home 3D version 4.4 (HKLM\...\Sweet Home 3D_is1) (Version: - eTeks)
TeamViewer (HKLM\...\TeamViewer) (Version: - )
TeamViewer 8 (HKLM\...\TeamViewer 8) (Version: 8.0.20935 - TeamViewer)
TortoiseOverlays (HKLM\...\{7BA596FB-144D-44EB-A7E6-ABAE3D24204F}) (Version: 1.1.19334 - TortoiseSVN)
TuneUp Utilities Language Pack (de-DE) (Version: 13.0.3020.2 - TuneUp Software) Hidden
TVersity Codec Pack 1.7 (HKLM\...\TVersity Codec Pack) (Version: 1.7 - TVersity Inc.)
TVersity Media Server 1.9.7 (HKLM\...\TVersity Media Server) (Version: 1.9.7 - TVersity)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft)
Updater Service (HKLM\...\Updater Service) (Version: 11,6,20,2 - ) <==== ATTENTION
VCRedistSetup (Version: 1.0.0 - Nero AG) Hidden
Virtual DJ Home - Atomix Productions (HKLM\...\Virtual DJ Home - Atomix Productions) (Version: - )
VirtualCloneDrive (HKLM\...\VirtualCloneDrive) (Version: - Elaborate Bytes)
VirtualDJ Home FREE (HKLM\...\{19192A84-6172-4312-A661-D8F9A34585AB}) (Version: 7.0.4.1 - Atomix Productions)
Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player 1.1.11 (HKLM\...\VLC media player) (Version: 1.1.11 - VideoLAN)
vShare.tv plugin 1.3 (HKLM\...\vShare.tv plugin) (Version: 1.3 - vShare.tv, Inc.) <==== ATTENTION
webssearches uninstall (HKLM\...\webssearches uninstall) (Version: - webssearches) <==== ATTENTION
Wi-Fi MediaConnect (HKLM\...\{AA58346A-A5D7-4659-91D6-38D07345BDCF}) (Version: 1.6.43 - Philips)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
WindowsMangerProtect20.0.0.1013 (HKLM\...\WindowsMangerProtect) (Version: 20.0.0.1013 - WindowsProtect LIMITED) <==== ATTENTION
Windows-Treiberpaket - Nokia pccsmcfd (08/22/2008 7.0.0.0) (HKLM\...\504244733D18C8F63FF584AEB290E3904E791693) (Version: 08/22/2008 7.0.0.0 - Nokia)
WinRAR (HKLM\...\WinRAR archiver) (Version: - )
ZBrush 4R6 (HKLM\...\ZBrush 4R6 4R6) (Version: 4R6 - Pixologic)
Zune (HKLM\...\Zune) (Version: 04.08.2345.00 - Microsoft Corporation)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\bonger\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\bonger\AppData\Local\Google\Update\1.3.25.5\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\bonger\AppData\Local\Google\Update\1.3.25.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\bonger\AppData\Local\Google\Update\1.3.25.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{3C4F3BE3-47EB-101B-A3C9-08002B2F49FB}\InprocServer32 -> C:\Windows\system32\comdlg32.ocx (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{3C4F3BE5-47EB-101B-A3C9-08002B2F49FB}\InprocServer32 -> C:\Windows\system32\comdlg32.ocx (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{3C4F3BE7-47EB-101B-A3C9-08002B2F49FB}\InprocServer32 -> C:\Windows\system32\comdlg32.ocx (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\bonger\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\bonger\AppData\Local\Google\Update\1.3.25.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{7629CFA2-3FE5-101B-A3C9-08002B2F49FB}\InprocServer32 -> C:\Windows\system32\comdlg32.ocx (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{7629CFA4-3FE5-101B-A3C9-08002B2F49FB}\InprocServer32 -> C:\Windows\system32\comdlg32.ocx (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\bonger\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\bonger\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\bonger\AppData\Local\Google\Update\1.3.25.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\bonger\AppData\Local\Google\Update\1.3.25.5\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{F9043C85-F6F2-101A-A3C9-08002B2F49FB}\InprocServer32 -> C:\Windows\system32\comdlg32.ocx (Microsoft Corporation)
==================== Restore Points =========================
14-10-2014 06:55:42 Windows Update
16-10-2014 06:38:17 Installed Java 7 Update 71
16-10-2014 07:05:53 Windows Update
21-10-2014 14:01:27 Windows Update
24-10-2014 14:12:34 Windows Update
28-10-2014 07:44:40 Windows Update
29-10-2014 14:00:02 Säuberung (Spybot - Search & Destroy 2.4, Administratorrechte)
29-10-2014 15:04:50 RCP Mi, Okt 29, 14 16:04
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:04 - 2013-09-13 19:37 - 00000898 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 lmlicenses.wip4.adobe.com
127.0.0.1 lm.licenses.adobe.com
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {167FF12E-338D-4CC6-B22E-4E8A6B4815E4} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1049129853-3666174710-3722791784-1000Core => C:\Users\bonger\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-19] (Google Inc.)
Task: {4677014E-2033-4BE3-9354-045A28B6A522} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)
Task: {760490E2-009F-4A3A-BED9-9A711AFEFC12} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {8DF8CC54-9310-4617-8236-86B16A9CFE31} - System32\Tasks\AdobeAAMUpdater-1.0-bonger-PC-bonger => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-12-10] (Adobe Systems Incorporated)
Task: {9E56E1B3-D4F9-4FCB-AB58-428B1A77EB58} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1049129853-3666174710-3722791784-1000UA => C:\Users\bonger\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-19] (Google Inc.)
Task: {AABC03D5-7765-441A-99D4-A4B16B7AA6B8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-24] (Adobe Systems Incorporated)
Task: {ABEC9295-40AB-46FF-BEE6-807EE8310D24} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)
Task: {C83FC246-0975-4CCD-9C63-3701A2F93459} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2014-10-07] (Oracle Corporation)
Task: {DADA4C33-C899-46DD-B58D-0FD6BE4E428D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {FD6E2A7C-6EF3-4C44-A7A4-882C41612684} - System32\Tasks\Google Updater and Installer => C:\Users\bonger\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-19] (Google Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1049129853-3666174710-3722791784-1000Core.job => C:\Users\bonger\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1049129853-3666174710-3722791784-1000UA.job => C:\Users\bonger\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-04-19 04:21 - 2013-06-21 10:52 - 00079648 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2011-04-25 11:25 - 2011-04-25 11:25 - 00024064 _____ () C:\Windows\System32\ssj1mlm.dll
2012-10-05 10:51 - 2012-10-05 10:51 - 00911872 _____ () C:\Windows\system32\spool\DRIVERS\W32X86\3\ssj1mdu.dll
2014-02-12 20:58 - 2014-02-12 20:58 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 20:58 - 2014-02-12 20:58 - 01044808 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2013-12-13 12:20 - 2013-12-13 12:20 - 02602864 _____ () C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll
2014-01-04 14:53 - 2010-01-31 20:56 - 00024576 _____ () C:\Program Files\photoSync\servicemanager.pyd
2014-01-04 14:53 - 2010-01-31 20:14 - 00118784 _____ () C:\Program Files\photoSync\pywintypes25.dll
2014-01-04 14:53 - 2010-01-31 20:56 - 00036864 _____ () C:\Program Files\photoSync\win32service.pyd
2014-01-04 14:53 - 2010-01-31 20:56 - 00102400 _____ () C:\Program Files\photoSync\win32api.pyd
2014-01-04 14:53 - 2010-01-31 20:54 - 00013824 _____ () C:\Program Files\photoSync\win32event.pyd
2014-01-04 14:53 - 2010-01-31 20:54 - 00014848 _____ () C:\Program Files\photoSync\win32evtlog.pyd
2014-01-04 14:53 - 2010-01-31 20:11 - 00053248 _____ () C:\Program Files\photoSync\_socket.pyd
2014-01-04 14:53 - 2010-01-31 20:11 - 00671744 _____ () C:\Program Files\photoSync\_ssl.pyd
2014-01-04 14:53 - 2010-01-31 20:54 - 00019968 _____ () C:\Program Files\photoSync\win32pipe.pyd
2014-01-04 14:53 - 2010-01-31 20:54 - 00110592 _____ () C:\Program Files\photoSync\win32file.pyd
2014-01-04 14:53 - 2010-01-31 20:11 - 00294912 _____ () C:\Program Files\photoSync\_hashlib.pyd
2014-01-04 14:53 - 2010-01-31 20:11 - 00086016 _____ () C:\Program Files\photoSync\_ctypes.pyd
2014-01-04 14:53 - 2010-01-31 20:56 - 00110592 _____ () C:\Program Files\photoSync\win32security.pyd
2014-01-04 14:53 - 2010-01-31 20:11 - 00049152 _____ () C:\Program Files\photoSync\_sqlite3.pyd
2014-01-04 14:53 - 2010-01-31 20:11 - 00260096 _____ () C:\Program Files\photoSync\sqlite3.dll
2014-01-04 14:53 - 2009-11-02 10:40 - 00339968 _____ () C:\Program Files\photoSync\_imaging.pyd
2014-01-04 14:53 - 2011-03-21 14:13 - 00033280 _____ () C:\Program Files\photoSync\simplejson._speedups.pyd
2014-01-04 14:53 - 2010-01-31 20:54 - 00040960 _____ () C:\Program Files\photoSync\win32process.pyd
2011-03-08 18:26 - 2011-04-26 10:24 - 00066872 _____ () C:\Windows\system32\PnkBstrA.exe
2014-01-04 14:53 - 2010-01-31 20:56 - 00102400 _____ () C:\Program Files\PhotoSync\win32api.pyd
2014-01-04 14:53 - 2010-01-31 20:14 - 00118784 _____ () C:\Program Files\PhotoSync\pywintypes25.dll
2014-01-04 14:53 - 2010-01-31 20:14 - 00335872 _____ () C:\Program Files\PhotoSync\pythoncom25.dll
2014-01-04 14:53 - 2010-01-31 20:58 - 00241664 _____ () C:\Program Files\PhotoSync\win32com.shell.shell.pyd
2014-01-04 14:53 - 2010-01-31 20:11 - 00053248 _____ () C:\Program Files\PhotoSync\_socket.pyd
2014-01-04 14:53 - 2010-01-31 20:11 - 00671744 _____ () C:\Program Files\PhotoSync\_ssl.pyd
2014-01-04 14:53 - 2010-01-31 20:54 - 00013824 _____ () C:\Program Files\PhotoSync\win32event.pyd
2014-01-04 14:53 - 2010-05-14 22:05 - 00983040 _____ () C:\Program Files\PhotoSync\wx._core_.pyd
2014-01-04 14:53 - 2010-05-14 22:07 - 00741376 _____ () C:\Program Files\PhotoSync\wx._gdi_.pyd
2014-01-04 14:53 - 2010-05-14 22:07 - 00655360 _____ () C:\Program Files\PhotoSync\wx._windows_.pyd
2014-01-04 14:53 - 2010-05-14 22:08 - 00942080 _____ () C:\Program Files\PhotoSync\wx._controls_.pyd
2014-01-04 14:53 - 2010-05-14 22:09 - 00663552 _____ () C:\Program Files\PhotoSync\wx._misc_.pyd
2014-01-04 14:53 - 2010-01-31 20:56 - 00155648 _____ () C:\Program Files\PhotoSync\win32gui.pyd
2014-01-04 14:53 - 2010-05-14 22:10 - 00143360 _____ () C:\Program Files\PhotoSync\wx._xrc.pyd
2014-01-04 14:53 - 2010-01-31 20:54 - 00019968 _____ () C:\Program Files\PhotoSync\win32pipe.pyd
2014-01-04 14:53 - 2010-01-31 20:54 - 00110592 _____ () C:\Program Files\PhotoSync\win32file.pyd
2014-01-04 14:53 - 2010-01-31 20:11 - 00294912 _____ () C:\Program Files\PhotoSync\_hashlib.pyd
2014-01-04 14:53 - 2009-11-02 10:40 - 00339968 _____ () C:\Program Files\PhotoSync\_imaging.pyd
2014-01-04 14:53 - 2010-01-31 20:11 - 00086016 _____ () C:\Program Files\PhotoSync\_ctypes.pyd
2014-01-04 14:53 - 2011-03-21 14:13 - 00033280 _____ () C:\Program Files\PhotoSync\simplejson._speedups.pyd
2014-01-04 14:53 - 2010-01-31 20:54 - 00040960 _____ () C:\Program Files\PhotoSync\win32process.pyd
2014-01-04 14:53 - 2010-01-31 20:56 - 00110592 _____ () C:\Program Files\PhotoSync\win32security.pyd
2013-12-19 10:49 - 2013-12-19 10:49 - 32733080 _____ () C:\Program Files\Adobe\Adobe Creative Cloud\HEX\libcef.dll
2013-12-13 12:20 - 2013-12-13 12:20 - 04696432 _____ () C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
2011-07-29 20:31 - 2011-07-29 20:31 - 01249064 _____ () C:\ProgramData\TVersity\Media Server\MediaServer.exe
2011-07-13 19:36 - 2011-07-13 19:36 - 00347944 _____ () C:\ProgramData\TVersity\Media Server\taglib.dll
2011-07-13 19:36 - 2011-07-13 19:36 - 00225064 _____ () C:\ProgramData\TVersity\Media Server\CORE_RL_lcms_.dll
2011-07-13 19:36 - 2011-07-13 19:36 - 00031528 _____ () C:\ProgramData\TVersity\Media Server\CORE_RL_xlib_.dll
2011-07-13 19:36 - 2011-07-13 19:36 - 00716584 _____ () C:\ProgramData\TVersity\Media Server\log4cxx.dll
2011-07-13 19:35 - 2011-07-13 19:35 - 04534072 _____ () C:\ProgramData\TVersity\Media Server\avcodec-52.dll
2011-07-13 19:36 - 2011-07-13 19:36 - 00083768 _____ () C:\ProgramData\TVersity\Media Server\avutil-50.dll
2011-07-13 19:36 - 2011-07-13 19:36 - 00313640 _____ () C:\ProgramData\TVersity\Media Server\libmp3lame-0.dll
2011-07-13 19:36 - 2011-07-13 19:36 - 00795448 _____ () C:\ProgramData\TVersity\Media Server\avformat-52.dll
2011-07-13 19:35 - 2011-07-13 19:35 - 00203064 _____ () C:\ProgramData\TVersity\Media Server\swscale-0.dll
2011-07-13 19:36 - 2011-07-13 19:36 - 00509720 _____ () C:\ProgramData\TVersity\Media Server\sqlite3.dll
2014-02-23 11:20 - 2014-02-20 02:02 - 00051016 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.117\chrome_elf.dll
2014-02-23 11:20 - 2014-02-20 02:02 - 00716616 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.117\libglesv2.dll
2014-02-23 11:20 - 2014-02-20 02:02 - 00100168 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.117\libegl.dll
2014-02-23 11:20 - 2014-02-20 02:02 - 01647432 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.117\ffmpegsumo.dll
2014-02-23 11:20 - 2014-02-20 02:03 - 13632840 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.117\PepperFlash\pepflashplayer.dll
2014-02-23 11:20 - 2014-02-20 02:03 - 04060488 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.117\pdf.dll
2014-02-23 11:20 - 2014-02-20 02:03 - 00394568 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.117\ppGoogleNaClPluginChrome.dll
2010-11-12 17:35 - 2007-04-09 17:37 - 01649152 _____ () C:\Users\bonger\Programme\Adobe Photoshop_CS3_Portable-Sp33dcrew\UnvollständigPhotoshop_CS3_Portable-Sp33dcrew\Photoshop.dll
2010-11-12 17:35 - 2007-04-09 17:36 - 00012800 _____ () C:\Users\bonger\Programme\Adobe Photoshop_CS3_Portable-Sp33dcrew\UnvollständigPhotoshop_CS3_Portable-Sp33dcrew\QuickTimeGlue.dll
2010-11-12 17:35 - 2007-04-09 17:36 - 00160256 _____ () C:\Users\bonger\Programme\Adobe Photoshop_CS3_Portable-Sp33dcrew\UnvollständigPhotoshop_CS3_Portable-Sp33dcrew\AdobeXMP.dll
2009-02-26 12:46 - 2009-02-26 12:46 - 00064344 _____ () C:\Program Files\Microsoft Office\Office12\ADDINS\ColleagueImport.dll
2011-06-22 10:46 - 2011-06-22 10:46 - 00434016 _____ () C:\Program Files\Microsoft Office\Office12\ADDINS\UmOutlookAddin.dll
2013-07-10 17:07 - 2013-07-10 17:07 - 00756888 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\ProgramData\TEMP:117E206F
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Wi-Fi MediaConnect.lnk => C:\Windows\pss\Wi-Fi MediaConnect.lnk.CommonStartup
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeCS5ServiceManager => "C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: EvtMgr6 => C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming
MSCONFIG\startupreg: Google Update => "C:\Users\bonger\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} => "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Logitech Download Assistant => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
MSCONFIG\startupreg: msnmsgr => "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
MSCONFIG\startupreg: NBKeyScan => "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
MSCONFIG\startupreg: NokiaSuite.exe => C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe -tray
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: Realtime Audio Engine => "mmrtkrnl.exe" /i
MSCONFIG\startupreg: SwitchBoard => C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
MSCONFIG\startupreg: VirtualCloneDrive => "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
MSCONFIG\startupreg: Zune Launcher => "C:\Program Files\Zune\ZuneLauncher.exe"
========================= Accounts: ==========================
Administrator (S-1-5-21-1049129853-3666174710-3722791784-500 - Administrator - Disabled)
ASPNET (S-1-5-21-1049129853-3666174710-3722791784-1006 - Limited - Enabled)
bonger (S-1-5-21-1049129853-3666174710-3722791784-1000 - Administrator - Enabled) => C:\Users\bonger
Gast (S-1-5-21-1049129853-3666174710-3722791784-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1049129853-3666174710-3722791784-1004 - Limited - Enabled)
UpdatusUser (S-1-5-21-1049129853-3666174710-3722791784-1007 - Limited - Enabled) => C:\Users\TEMP
==================== Faulty Device Manager Devices =============
Name: MIPv432
Description: MIPv432
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MIPv432
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: Microsoft-Adapter für Miniports virtueller WiFis
Description: Microsoft-Adapter für Miniports virtueller WiFis
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: vwifimp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (10/31/2014 08:55:13 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1".
Die abhängige Assemblierung "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (10/31/2014 08:54:29 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (10/31/2014 08:54:28 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (10/31/2014 08:04:06 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1511) (User: bonger-PC)
Description: Das lokale Benutzerprofil wurde nicht gefunden. Sie werden mit einem temporären Benutzerprofil angemeldet. Änderungen, die Sie am Benutzerprofil vornehmen, gehen bei der Abmeldung verloren.
Error: (10/31/2014 08:04:06 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1515) (User: bonger-PC)
Description: Dieses Benutzerprofil wurde gesichert. Bei der nächsten Anmeldung dieses Benutzers wird automatisch versucht, dieses gesicherte Profil zu verwenden.
Error: (10/30/2014 09:44:54 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1511) (User: bonger-PC)
Description: Das lokale Benutzerprofil wurde nicht gefunden. Sie werden mit einem temporären Benutzerprofil angemeldet. Änderungen, die Sie am Benutzerprofil vornehmen, gehen bei der Abmeldung verloren.
Error: (10/30/2014 09:44:54 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1515) (User: bonger-PC)
Description: Dieses Benutzerprofil wurde gesichert. Bei der nächsten Anmeldung dieses Benutzers wird automatisch versucht, dieses gesicherte Profil zu verwenden.
Error: (10/29/2014 04:16:54 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1511) (User: bonger-PC)
Description: Das lokale Benutzerprofil wurde nicht gefunden. Sie werden mit einem temporären Benutzerprofil angemeldet. Änderungen, die Sie am Benutzerprofil vornehmen, gehen bei der Abmeldung verloren.
Error: (10/29/2014 04:16:54 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1515) (User: bonger-PC)
Description: Dieses Benutzerprofil wurde gesichert. Bei der nächsten Anmeldung dieses Benutzers wird automatisch versucht, dieses gesicherte Profil zu verwenden.
Error: (10/29/2014 04:04:50 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "ConvertStringSidToSid(S-1-5-21-1049129853-3666174710-3722791784-1007.bak)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
.
Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt
Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {9414e864-9fdd-4b8d-9291-0f3cdf061afa}
System errors:
=============
Error: (10/31/2014 08:05:57 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet:
%%-2140993535
Error: (10/31/2014 08:05:57 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%-2140993535
Error: (10/31/2014 08:05:57 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet:
%%-2140993535
Error: (10/31/2014 08:05:57 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%-2140993535
Error: (10/31/2014 08:05:57 AM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: 0x80630801
Error: (10/31/2014 08:05:57 AM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: 0x80630801
Error: (10/31/2014 08:05:46 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet:
%%-2140993535
Error: (10/31/2014 08:05:46 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%-2140993535
Error: (10/31/2014 08:05:46 AM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: 0x80630801
Error: (10/31/2014 08:05:40 AM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0
Microsoft Office Sessions:
=========================
Error: (09/27/2012 03:28:30 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6557.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 1814 seconds with 300 seconds of active time. This session ended with a crash.
Error: (07/15/2012 09:11:32 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6557.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 127 seconds with 0 seconds of active time. This session ended with a crash.
Error: (11/23/2011 08:11:25 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6557.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 1549 seconds with 0 seconds of active time. This session ended with a crash.
Error: (12/21/2010 01:46:08 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.6500.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 12526 seconds with 3480 seconds of active time. This session ended with a crash.
==================== Memory info ===========================
Processor: Intel(R) Core(TM)2 Quad CPU Q8300 @ 2.50GHz
Percentage of memory in use: 74%
Total physical RAM: 3326.18 MB
Available physical RAM: 853.42 MB
Total Pagefile: 6650.64 MB
Available Pagefile: 2366.42 MB
Total Virtual: 2047.88 MB
Available Virtual: 1907.53 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:931.32 GB) (Free:390.16 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive h: (CALL OF DUTY BLA) (CDROM) (Total:7.95 GB) (Free:0 GB) CDFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: F98D6E74)
Partition 1: (Active) - (Size=931.3 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 30-10-2014 01
Ran by bonger (administrator) on BONGER-PC on 31-10-2014 10:05:24
Running from C:\Users\bonger\Downloads
Loaded Profiles: bonger & UpdatusUser (Available profiles: bonger & UpdatusUser)
Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Fuyu LIMITED) C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Nero AG) C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(webEcoz, LLC.) C:\Program Files\PhotoSync\peservice.exe
(Prolific Technology Inc.) C:\Windows\System32\IoctlSvc.exe
() C:\Windows\System32\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(webEcoz, LLC.) C:\Program Files\PhotoSync\Sync.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Geek Software GmbH) C:\Program Files\PDF24\pdf24.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(LookThisUp) C:\Users\bonger\AppData\Roaming\LookThisUp\LookThisUp.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
() C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
() C:\ProgramData\TVersity\Media Server\MediaServer.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\System32\UI0Detect.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Adobe Systems, Incorporated) C:\Users\bonger\Programme\Adobe Photoshop_CS3_Portable-Sp33dcrew\UnvollständigPhotoshop_CS3_Portable-Sp33dcrew\Photoshop.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [Nvtmru] => C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-07-03] (NVIDIA Corporation)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [43816 2014-07-31] (Apple Inc.)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [703736 2014-10-15] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-12-10] (Adobe Systems Incorporated)
HKLM\...\Run: [sync] => C:\Program Files\photoSync\sync.exe [276992 2013-10-08] (webEcoz, LLC.)
HKLM\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2239376 2013-12-19] (Adobe Systems Incorporated)
HKLM\...\Run: [PDFPrint] => C:\Program Files\PDF24\pdf24.exe [189480 2014-02-06] (Geek Software GmbH)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [152392 2014-09-01] (Apple Inc.)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [165168 2014-09-23] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-1049129853-3666174710-3722791784-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\S-1-5-21-1049129853-3666174710-3722791784-1000\...\Run: [iCloudServices] => C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2014-08-07] (Apple Inc.)
HKU\S-1-5-21-1049129853-3666174710-3722791784-1000\...\Run: [ApplePhotoStreams] => C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2014-08-14] (Apple Inc.)
HKU\S-1-5-21-1049129853-3666174710-3722791784-1000\...\Run: [Google Update] => C:\Users\bonger\AppData\Local\Google\Update\GoogleUpdate.exe [107912 2014-10-19] (Google Inc.)
HKU\S-1-5-21-1049129853-3666174710-3722791784-1000\...\Run: [LookThisUp] => C:\Users\bonger\AppData\Roaming\LookThisUp\LookThisUp.exe [1848976 2014-10-29] (LookThisUp)
HKU\S-1-5-21-1049129853-3666174710-3722791784-1000\...\MountPoints2: {00f6cfd2-1ca4-11e3-b7c7-00242178bae9} - H:\hmh-codbo2ger.exe
HKU\S-1-5-21-1049129853-3666174710-3722791784-1000\...\MountPoints2: {123ce3af-49a3-11e0-aec2-00242178bae9} - I:\raf-anno2070.exe
HKU\S-1-5-21-1049129853-3666174710-3722791784-1000\...\MountPoints2: {26ebb527-0096-11e2-a0a9-00242178bae9} - I:\hmh-codbo2ger.exe
HKU\S-1-5-21-1049129853-3666174710-3722791784-1000\...\MountPoints2: {78443e54-98a9-11e0-85eb-00242178bae9} - J:\NokiaPCIA_Autorun.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2013-07-16] (Microsoft Corporation)
Startup: C:\Users\bonger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll ()
ShellIconOverlayIdentifiers: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
BootExecute: autocheck autochk * sdnclean.exe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:58045;https=127.0.0.1:58045
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StMBGUhCtXlT7G1muS_BRDXuH_N6QVFdlkuDDcdAb73v8hpPF8UGJXlmEHt88OVgGd9Va-0IVa8Q89c8XlhH2LXgd00JKyCWlgDUsf5Qr5uJhgVX9NPpFaCzpys6K3cVSliWAwmET5tEvaL6TrelP4iE9hintQFZy0EBWTSDCzKt3kTORp-y4l9-kuWbBjytaVFmHJQA,,&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StMBGUhCtXlT7G1muS_BRDXuH_N6QVFdlkuDDcdAb73v8hpPF8UGJXlmEHt88OVgGd9Va-0IVa8Q89c8XlhH2LXgd00JKyCWlgDUsf5Qr5uJhgVX9NPpFaCzpys6K3cVSliWAwmET5tEvaL6TrelP4iE9hintQFZy0EBWTSDCzKt3kTORp-y4l9-kuWbBjytaVFmHJQA,,&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://istart.webssearches.com/?type=sc&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX&q={searchTerms}
SearchScopes: HKLM - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StMBGUhCtXlT7G1muS_BRDXuH_N6QVFdlkuDDcdAb73v8hpPF8UGJXlmEHt88OVgGd9Va-0IVa8Q89c8XlhH2LXgd00JKyCWlgDUsf5Qr5uJhgVX9NPpFaCzpys6K3cVSliWAwmET5tEvaL6TrelP4iE9hintQFZy0EBWTSDCzKt3kTORp-y4l8BnrRdg35NVnMm3p7g,,&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX&q={searchTerms}
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX&q={searchTerms}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StMBGUhCtXlT7G1muS_BRDXuH_N6QVFdlkuDDcdAb73v8hpPF8UGJXlmEHt88OVgGd9Va-0IVa8Q89c8XlhH2LXgd00JKyCWlgDUsf5Qr5uJhgVX9NPpFaCzpys6K3cVSliWAwmET5tEvaL6TrelP4iE9hintQFZy0EBWTSDCzKt3kTORp-y4l9-kuWbBjytaVFmHJQA,,&q={searchTerms}
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX&q={searchTerms}
BHO: PreispiratenSearchURL -> {0B660087-931C-4056-A04F-0423890E40B6} -> C:\Program Files\Preispiraten\Preispiraten2\PPSearchURL.dll ()
BHO: Zonealarm Helper Object -> {2A841F7A-A014-4DA5-B6D9-8B913DFB7A8C} -> No File
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: IE5BarLauncherBHO Class -> {78F3A323-798E-4AEA-9A57-88F4B05FD5DD} -> C:\Program Files\vShare.tv plugin\BarLcher.dll (VShare Inc.)
BHO: amazon -> {84B94901-3645-4D80-A6B7-4D0050B19455} -> C:\Program Files\Preispiraten6\IEButtonAmazonInterface.dll ()
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
BHO: metaspinner media GmbH -> {CD9B7762-DFBC-42B1-BB30-02A78287B456} -> C:\Program Files\Preispiraten\Preispiraten2\IEButtonEBayInterface.dll ()
BHO: metaspinner media GmbH -> {D3AA56A9-8137-4950-A6F9-D0190A82AF2A} -> C:\Program Files\Preispiraten\Preispiraten2\IEButtonPPInterface.dll ()
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
BHO: Preispiraten -> {E9E027BF-C3F3-4022-8F6B-8F6D39A59684} -> C:\Program Files\Preispiraten6\IEButtonPPInterface.dll ()
Toolbar: HKLM - No Name - {99079a25-328f-4bd4-be04-00955acaa0a7} - No File
Toolbar: HKLM - No Name - !{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - No File
Toolbar: HKLM - No Name - !{95B7759C-8C7F-4BF1-B163-73684A933233} - No File
Toolbar: HKLM - No Name - !{98889811-442D-49dd-99D7-DC866BE87DBC} - No File
Toolbar: HKLM - No Name - !{F9639E4A-801B-4843-AEE3-03D9DA199E77} - No File
Toolbar: HKLM - ZoneAlarm Security Toolbar - {438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59} - No File
Toolbar: HKCU - No Name - {4C350B19-6CA1-4569-B14C-296D8D6535B2} - No File
Toolbar: HKCU - No Name - {32099AAC-C132-4136-9E9A-4E364A424E17} - No File
Toolbar: HKCU - No Name - {EFEED92A-A33D-4873-BA8F-32BAA631E54D} - No File
Toolbar: HKCU - VShareToolBar - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\vShare.tv plugin\BarLcher.dll (VShare Inc.)
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_25-windows-i586.cab
DPF: {CAFEEFAC-0018-0000-0025-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_25-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_25-windows-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Winsock: Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Hosts: 127.0.0.1 lmlicenses.wip4.adobe.com
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default
FF NewTab: hxxp://istart.webssearches.com/newtab/?type=nt&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX
FF DefaultSearchEngine: webssearches
FF SelectedSearchEngine: webssearches
FF Homepage: hxxp://istart.webssearches.com/?type=hp&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX
FF Keyword.URL: hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StMBGUhCtXlT7G1muS_BRDXuH_N6QVFdlkuDDcdAb73v8hpPF8UGJXlmEHt88OVgGd9Va-0IVa8Q89c8XlhH2LXgd00JKyCWlgDUsf5Qr5uJhgVX9NPpFaCzpys6K3cVSliWAwmET5tEvaL6TrelP4iE9hintQFZy0EBWTSDCzKt3kTORp-y4l9-kuWbBjytaVFmHJQA,,&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre1.8.0_25\bin\new_plugin\npjp2.dll No File
FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\3.0.40723.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @pages.tvunetworks.com/WebPlayer -> C:\Windows\system32\TVUAx\npTVUAx.dll (TVU networks)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\bonger\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\bonger\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\bonger\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npvsharetvplg.dll (vShare.tv )
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\webssearches.xml
FF Extension: 20-20 3D Viewer - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\2020Player@2020Technologies.com [2010-11-12]
FF Extension: Virtus Search Opt-in - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\extension@virtusdesigns.com [2010-11-26]
FF Extension: Fast Start - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\faststartff@gmail.com [2014-10-29]
FF Extension: TVU Web Player - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\firefox@tvunetworks.com [2011-04-23]
FF Extension: SpecialSavings - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\specialsavings@superfish.com [2012-03-13]
FF Extension: Eclipse - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{12bc3590-67a6-11de-8a39-0800200c9a66} [2010-11-26]
FF Extension: FT DeepDark - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{77d2ed30-4cd2-11e0-b8af-0800200c9a66} [2012-07-10]
FF Extension: ICQ Toolbar - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{800b5000-a755-47e1-992b-48a1c1357f07} [2012-08-05]
FF Extension: iMacros for Firefox - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670} [2014-03-05]
FF Extension: FT GraphiteGlow - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{99e34760-2754-11e0-91fa-0800200c9a66} [2012-07-10]
FF Extension: FT SleekDark - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{a21cd440-41d6-11e0-9207-0800200c9a66} [2012-07-10]
FF Extension: Preispiraten - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{C8D3D3BE-7ADC-4109-BF8C-6330A9F58B0C} [2010-11-22]
FF Extension: Greasemonkey - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} [2012-10-16]
FF Extension: NASA Night Launch - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\nasanightlaunch@example.com.xpi [2011-10-26]
FF Extension: Amazon Startcenter - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{144D1513-0819-4538-AD26-D515AF443AE7}.xpi [2012-07-10]
FF Extension: Amazon Statusbar Button - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{32DD6873-2BC0-4E4B-B9A3-0E602AB0DC14}.xpi [2012-07-10]
FF Extension: FXOpera - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{e7c7d1b3-5984-410e-9f1e-54e3f8490e8e}.xpi [2011-10-26]
FF Extension: SweetPacks Toolbar for Firefox - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi [2012-03-13]
FF Extension: Anti-Banner - C:\Program Files\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak2 [2012-07-18]
FF Extension: Modul zur Link-Untersuchung - C:\Program Files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2 [2012-07-18]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [2010-12-15]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011-03-16]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} [2011-06-15]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA} [2011-10-12]
FF HKLM\...\Firefox\Extensions: [fe_7.0@nokia.com] - C:\Program Files\Nokia\Nokia Suite\Connectors\Bookmarks Connector\FirefoxExtension_7.0
FF Extension: Firefox Synchronisation Extension - C:\Program Files\Nokia\Nokia Suite\Connectors\Bookmarks Connector\FirefoxExtension_7.0 [2012-02-23]
FF HKLM\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2013-06-27]
FF HKLM\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\extensions\faststartff@gmail.com
FF HKLM\...\Thunderbird\Extensions: [te_9.0@nokia.com] - C:\Program Files\Nokia\Nokia Suite\Connectors\Thunderbird Connector\ThunderbirdExtension_9.0
FF Extension: Thunderbird Address Book Synchronisation Extension - C:\Program Files\Nokia\Nokia Suite\Connectors\Thunderbird Connector\ThunderbirdExtension_9.0 [2012-02-23]
FF HKCU\...\Firefox\Extensions: [specialsavings@superfish.com] - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles/6wf3z6x7.default\extensions\specialsavings@superfish.com
FF Extension: SpecialSavings - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles/6wf3z6x7.default\extensions\specialsavings@superfish.com [2012-03-13]
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe hxxp://istart.webssearches.com/?type=sc&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX
Chrome:
=======
CHR Profile: C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-23]
CHR Extension: (YouTube) - C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-23]
CHR Extension: (Adblock Plus) - C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-10-31]
CHR Extension: (Google-Suche) - C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-23]
CHR Extension: (Logitech SetPoint) - C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Extensions\edaibbiobngpbmeonadpbfafbkimjbdd [2014-07-25]
CHR Extension: (vshare plugin) - C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpionmjnkbpcdpcflammlgllecmejgjj [2014-07-25]
CHR Extension: (Google Wallet) - C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-14]
CHR Extension: (Google Mail) - C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-23]
CHR HKLM\...\Chrome\Extension: [edaibbiobngpbmeonadpbfafbkimjbdd] - C:\ProgramData\Logitech\LogiSmoothChromeExt.crx [2013-06-27]
CHR HKLM\...\Chrome\Extension: [kdfbddbdpnahdahmamlolacimfdbeckk] - C:\Users\bonger\AppData\Local\CRE\kdfbddbdpnahdahmamlolacimfdbeckk.crx [2013-06-09]
CHR HKLM\...\Chrome\Extension: [kpionmjnkbpcdpcflammlgllecmejgjj] - C:\Program Files\vShare.tv plugin\vshareplg.crx [2011-08-31]
CHR HKCU\...\Chrome\Extension: [kdfbddbdpnahdahmamlolacimfdbeckk] - C:\Users\bonger\AppData\Local\CRE\kdfbddbdpnahdahmamlolacimfdbeckk.crx [2013-06-09]
CHR StartMenuInternet: Google Chrome - C:\Program Files\Google\Chrome\Application\chrome.exe hxxp://istart.webssearches.com/?type=sc&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [431920 2014-10-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [431920 2014-10-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [994096 2014-10-15] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [160560 2014-09-23] (Avira Operations GmbH & Co. KG)
S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2010-11-12] (Macrovision Europe Ltd.) [File not signed]
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 peservice; C:\Program Files\photoSync\peservice.exe [41472 2013-10-08] (webEcoz, LLC.) [File not signed]
R2 PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [File not signed]
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [66872 2011-04-26] ()
S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 TVersityMediaServer; C:\ProgramData\TVersity\Media Server\MediaServer.exe [1249064 2011-07-29] ()
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [488960 2014-10-29] (Fuyu LIMITED) [File not signed]
S2 CltMngSvc; No ImagePath
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [108480 2010-09-14] (SlySoft, Inc.)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [281760 2011-02-05] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98160 2014-10-15] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-10-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-10-10] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [37384 2014-10-15] (Avira Operations GmbH & Co. KG)
S3 bdacap; C:\Windows\System32\drivers\bdacap.sys [322048 2006-11-03] (Genesys Logic, Inc.) [File not signed]
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2013-09-13] (DT Soft Ltd)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [31088 2010-12-16] (Elaborate Bytes AG)
R3 ElbyDelay; C:\Windows\System32\Drivers\ElbyDelay.sys [11984 2007-02-16] (Elaborate Bytes AG)
R3 LEqdUsb; C:\Windows\System32\Drivers\LEqdUsb.Sys [44296 2013-01-03] (Logitech, Inc.)
R3 LHidEqd; C:\Windows\System32\Drivers\LHidEqd.Sys [12808 2013-01-03] (Logitech, Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2011-02-05] ()
R1 MIPFSv332; C:\Windows\system32\drivers\MIPFSv332.sys [145960 2010-09-20] (GetData Pty Ltd)
R3 netr28u; C:\Windows\System32\DRIVERS\netr28u.sys [657408 2009-07-13] (Ralink Technology Corp.)
S3 RzSynapse; C:\Windows\System32\DRIVERS\RzSynapse.sys [60032 2010-04-21] (Razer USA Ltd) [File not signed]
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [611064 2011-03-08] (Duplex Secure Ltd.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-10-10] (Avira GmbH)
R2 SSPORT; C:\Windows\system32\Drivers\SSPORT.sys [5120 2011-03-14] (Samsung Electronics) [File not signed]
R3 vpcbus; C:\Windows\System32\DRIVERS\vpchbus.sys [172416 2010-11-20] (Microsoft Corporation)
R1 vpcnfltr; C:\Windows\System32\DRIVERS\vpcnfltr.sys [48128 2010-11-20] (Microsoft Corporation)
R3 vpcusb; C:\Windows\System32\DRIVERS\vpcusb.sys [78336 2010-11-20] (Microsoft Corporation)
R1 vpcvmm; C:\Windows\System32\drivers\vpcvmm.sys [296064 2010-11-20] (Microsoft Corporation)
R3 WFMC_VAD; C:\Windows\System32\DRIVERS\wfmcvad.sys [19456 2010-02-08] (WiFi Media Connect)
S1 ArcSec; system32\drivers\ArcSec.sys [X]
S1 MIPv432; \??\C:\Windows\system32\drivers\MIPv432.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-10-31 09:43 - 2014-10-31 09:44 - 00045704 _____ () C:\Users\bonger\Downloads\Addition.txt
2014-10-31 09:41 - 2014-10-31 10:05 - 00034401 _____ () C:\Users\bonger\Downloads\FRST.txt
2014-10-31 09:40 - 2014-10-31 10:05 - 00000000 ____D () C:\FRST
2014-10-31 09:40 - 2014-10-31 09:40 - 01105408 _____ (Farbar) C:\Users\bonger\Downloads\FRST.exe
2014-10-31 09:34 - 2014-10-31 09:34 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-10-31 09:31 - 2014-10-31 09:31 - 00638888 _____ (Oracle Corporation) C:\Users\bonger\Downloads\chromeinstall-8u25.exe
2014-10-31 08:04 - 2014-10-31 08:04 - 00000020 ___SH () C:\Users\TEMP\ntuser.ini
2014-10-31 08:04 - 2014-10-31 08:04 - 00000000 _SHDL () C:\Users\TEMP\Startmenü
2014-10-31 08:04 - 2014-10-31 08:04 - 00000000 _SHDL () C:\Users\TEMP\Netzwerkumgebung
2014-10-31 08:04 - 2014-10-31 08:04 - 00000000 _SHDL () C:\Users\TEMP\Druckumgebung
2014-10-31 08:04 - 2014-10-31 08:04 - 00000000 _SHDL () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-10-31 08:04 - 2014-10-31 08:04 - 00000000 _SHDL () C:\Users\TEMP\AppData\Local\Verlauf
2014-10-31 08:04 - 2014-10-31 08:04 - 00000000 ____D () C:\Users\TEMP
2014-10-31 08:04 - 2012-02-16 15:45 - 00000000 ____D () C:\Users\TEMP\AppData\Roaming\Macromedia
2014-10-31 08:04 - 2010-11-15 12:44 - 00000000 ____D () C:\Users\TEMP\AppData\Local\Microsoft Help
2014-10-31 08:04 - 2009-07-14 05:42 - 00000000 ___RD () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-10-31 08:04 - 2009-07-14 05:37 - 00000000 ___RD () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-10-29 16:05 - 2014-10-29 16:05 - 00000000 ____D () C:\Users\bonger\AppData\Roaming\dlg
2014-10-29 16:01 - 2014-10-31 08:19 - 00000000 ____D () C:\Users\bonger\AppData\Roaming\Systweak
2014-10-29 16:01 - 2014-10-31 08:05 - 00000000 ____D () C:\Users\bonger\AppData\Roaming\LookThisUp
2014-10-29 16:01 - 2014-10-29 16:01 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2014-10-29 16:01 - 2014-10-06 16:36 - 00018248 _____ () C:\Windows\system32\roboot.exe
2014-10-29 16:00 - 2014-10-29 16:00 - 00664432 _____ () C:\Users\bonger\Downloads\RegpairSetup-Downloader.exe
2014-10-29 15:26 - 2014-10-29 16:04 - 00000000 ____D () C:\Program Files\Free Window Registry Repair
2014-10-29 15:26 - 2014-10-29 15:26 - 00000000 ____D () C:\Users\bonger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Window Registry Repair
2014-10-29 15:26 - 2014-10-29 15:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Window Registry Repair
2014-10-29 15:24 - 2014-10-29 15:25 - 00370560 _____ () C:\Users\bonger\Downloads\SoftonicDownloader_fuer_free-window-registry-repair.exe
2014-10-29 14:48 - 2013-09-13 19:37 - 00000898 _____ () C:\Windows\system32\Drivers\etc\hosts.20141029-144821.backup
2014-10-29 14:44 - 2013-09-13 19:37 - 00000898 _____ () C:\Windows\system32\Drivers\etc\hosts.20141029-144409.backup
2014-10-29 14:34 - 2014-10-31 08:22 - 00000155 _____ () C:\Windows\wininit.ini
2014-10-29 14:16 - 2014-10-31 08:22 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-10-29 14:16 - 2014-10-31 08:22 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2
2014-10-29 14:15 - 2014-10-29 14:15 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\bonger\Downloads\spybot-2.4.exe
2014-10-26 09:03 - 2014-10-26 09:11 - 02817032 _____ () C:\Users\bonger\Downloads\wulogo4254.rar
2014-10-23 14:53 - 2014-10-23 14:53 - 02524336 _____ () C:\Users\bonger\Downloads\adobe-indesign_26285 (1).exe
2014-10-23 14:50 - 2014-10-23 14:50 - 00000000 ____D () C:\Program Files\Adobe Download Assistant
2014-10-23 14:49 - 2014-10-23 14:50 - 00001092 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Download Assistant.lnk
2014-10-23 14:49 - 2014-10-23 14:49 - 00000000 ____D () C:\Users\bonger\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
2014-10-23 14:48 - 2014-10-23 14:48 - 02524336 _____ () C:\Users\bonger\Downloads\adobe-indesign_26285.exe
2014-10-21 16:16 - 2014-10-21 16:16 - 00913088 _____ () C:\Users\bonger\Downloads\postcard.psd
2014-10-20 11:05 - 2014-10-20 11:05 - 00035304 _____ () C:\Users\bonger\Downloads\janeausten.zip
2014-10-20 10:56 - 2014-10-20 10:56 - 00013179 _____ () C:\Users\bonger\Downloads\gratis.zip
2014-10-16 07:40 - 2014-10-31 09:32 - 00272296 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-10-16 07:39 - 2014-10-31 09:32 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-10-16 07:34 - 2014-10-07 03:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-16 07:34 - 2014-09-29 01:41 - 02379264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-16 07:34 - 2014-09-25 23:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-16 07:34 - 2014-09-25 23:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-16 07:34 - 2014-09-25 23:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-16 07:34 - 2014-09-25 23:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-16 07:34 - 2014-09-25 23:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-16 07:34 - 2014-09-19 02:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-16 07:34 - 2014-09-19 02:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-16 07:34 - 2014-09-19 02:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-16 07:34 - 2014-09-19 02:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-10-16 07:34 - 2014-09-19 02:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-16 07:34 - 2014-09-19 02:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-16 07:34 - 2014-09-19 02:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-10-16 07:34 - 2014-09-19 01:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-10-16 07:34 - 2014-09-19 01:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-16 07:34 - 2014-09-19 01:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-16 07:34 - 2014-09-19 01:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-16 07:34 - 2014-09-19 01:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-16 07:34 - 2014-09-19 01:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-16 07:34 - 2014-09-19 01:50 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-10-16 07:34 - 2014-09-19 01:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-10-16 07:34 - 2014-09-19 01:44 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-16 07:34 - 2014-09-19 01:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-16 07:34 - 2014-09-19 01:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-16 07:34 - 2014-09-19 01:20 - 00677888 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-16 07:34 - 2014-09-19 01:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-16 07:34 - 2014-09-19 01:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-10-16 07:34 - 2014-09-19 00:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-16 07:34 - 2014-09-19 00:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-16 07:34 - 2014-09-19 00:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-16 07:34 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-16 07:34 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-16 07:34 - 2014-07-17 02:39 - 03221504 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-16 07:34 - 2014-07-17 02:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-10-16 07:34 - 2014-07-17 02:39 - 00919552 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-10-16 07:34 - 2014-07-17 02:39 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-16 07:34 - 2014-07-17 02:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-16 07:34 - 2014-07-17 02:39 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2014-10-16 07:34 - 2014-07-17 02:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-16 07:34 - 2014-07-17 02:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-16 07:34 - 2014-07-17 02:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-16 07:34 - 2014-07-17 02:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-16 07:34 - 2014-07-17 02:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-16 07:34 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-16 07:34 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-16 07:34 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-16 07:33 - 2014-09-18 02:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-16 07:33 - 2014-09-13 02:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-15 10:22 - 2014-10-15 10:22 - 03909864 _____ () C:\Users\bonger\Downloads\Hearts_II_Photoshop_Brushes_by_redheadstock.zip
2014-10-15 10:21 - 2014-10-15 10:22 - 00341606 _____ () C:\Users\bonger\Downloads\Heart_Brushes_by_XPhotoshoperX.abr
2014-10-14 09:09 - 2014-10-14 09:09 - 00928816 _____ () C:\Users\bonger\Downloads\2147495790.zip
2014-10-02 08:29 - 2014-10-02 08:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2014-10-01 05:23 - 2014-09-25 02:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-10-31 10:02 - 2010-11-12 09:57 - 01267024 _____ () C:\Windows\WindowsUpdate.log
2014-10-31 09:56 - 2011-02-20 18:26 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-31 09:50 - 2013-09-30 19:48 - 00000000 ____D () C:\Users\bonger\AppData\Local\D584027D-25E0-4F6F-A217-1CE1A5C323F6.aplzod
2014-10-31 09:33 - 2014-02-20 11:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2014-10-31 09:33 - 2013-10-21 14:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-10-31 09:32 - 2014-09-17 03:55 - 00176552 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-10-31 09:32 - 2014-09-17 03:55 - 00176552 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-10-31 09:32 - 2013-10-21 14:26 - 00000000 ____D () C:\ProgramData\Oracle
2014-10-31 09:32 - 2010-12-15 12:39 - 00000000 ____D () C:\Program Files\Java
2014-10-31 09:15 - 2012-10-16 05:38 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-10-31 09:08 - 2011-10-26 16:00 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1049129853-3666174710-3722791784-1000UA.job
2014-10-31 08:14 - 2010-11-12 11:29 - 00000000 ____D () C:\Users\bonger\AppData\Local\Adobe
2014-10-31 08:12 - 2009-07-14 05:34 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-31 08:12 - 2009-07-14 05:34 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-31 08:05 - 2014-01-04 14:53 - 00000000 ____D () C:\ProgramData\photoSync
2014-10-31 08:05 - 2010-12-15 22:29 - 00000434 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-10-31 08:04 - 2013-07-25 13:23 - 00034834 _____ () C:\Windows\setupact.log
2014-10-31 08:04 - 2013-04-19 04:21 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-10-31 08:04 - 2011-02-20 18:26 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-31 08:04 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-30 09:52 - 2010-11-12 09:58 - 02530916 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-30 09:52 - 2009-08-14 13:34 - 00726240 _____ () C:\Windows\system32\perfh019.dat
2014-10-30 09:52 - 2009-08-14 13:34 - 00156162 _____ () C:\Windows\system32\perfc019.dat
2014-10-29 16:16 - 2013-08-16 08:22 - 00243646 _____ () C:\Windows\PFRO.log
2014-10-29 16:01 - 2014-07-25 14:39 - 00002533 _____ () C:\Users\bonger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-10-29 16:01 - 2011-05-01 12:02 - 00001340 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-10-29 16:01 - 2010-11-12 10:00 - 00001641 _____ () C:\Users\bonger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-10-29 15:25 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Public
2014-10-29 14:34 - 2014-01-20 07:53 - 00000000 ___RD () C:\Users\bonger\Desktop\Document
2014-10-29 13:59 - 2011-09-11 09:05 - 00681313 _____ () C:\Windows\system32\TVersityMediaServer.log
2014-10-28 06:35 - 2010-11-12 10:15 - 00229000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-10-27 08:40 - 2010-11-12 11:16 - 00000000 ____D () C:\Users\bonger\AppData\Local\CrashDumps
2014-10-26 15:08 - 2011-10-26 16:00 - 00001072 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1049129853-3666174710-3722791784-1000Core.job
2014-10-21 14:55 - 2009-07-14 05:33 - 04138472 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-20 15:17 - 2010-11-12 10:39 - 00000000 ____D () C:\Users\bonger\AppData\Roaming\Adobe
2014-10-20 11:32 - 2010-11-12 11:01 - 00143040 _____ () C:\Users\bonger\AppData\Local\GDIPFONTCACHEV1.DAT
2014-10-19 09:06 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2014-10-17 07:55 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-10-17 07:41 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ru-RU
2014-10-17 07:41 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-10-16 08:20 - 2010-11-12 10:33 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-10-16 08:17 - 2013-08-14 10:32 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-16 08:08 - 2010-11-13 07:46 - 100290944 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-10-15 08:06 - 2014-08-05 10:38 - 00000000 ____D () C:\ProgramData\Package Cache
2014-10-15 08:06 - 2013-10-21 04:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-10-15 08:06 - 2013-10-21 04:10 - 00000000 ____D () C:\Program Files\Avira
2014-10-15 08:04 - 2013-10-21 04:10 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-10-15 08:04 - 2013-10-21 04:10 - 00098160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-10-15 08:04 - 2013-10-21 04:10 - 00037384 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-10-02 07:55 - 2009-07-14 05:53 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
Some content of TEMP:
====================
C:\Users\bonger\AppData\Local\Temp\avgnt.exe
C:\Users\bonger\AppData\Local\Temp\GLB1A2B.EXE
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-10-26 08:29
==================== End Of Log ============================
|
|
31.10.2014, 10:13
| #2 |
| /// the machine /// TB-Ausbilder    | Windows 7: Lauter Links und neue Fenster in Chrome hi,
__________________Lade Dir bitte von hier  Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
Scan mit Combofix
__________________ |
|
01.11.2014, 10:05
| #3 |
| | Windows 7: Lauter Links und neue Fenster in ChromeCode:
ATTFilter ComboFix 14-10-29.01 - bonger 01.11.2014 9:51.1.4 - x86
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.49.1031.18.3326.1523 [GMT 1:00]
ausgeführt von:: c:\users\bonger\Downloads\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Desktop *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\premieropinion
c:\program files\premieropinion\pmls.dll
c:\program files\premieropinion\pmls64.dll
c:\program files\premieropinion\pmropn32.exe
c:\program files\premieropinion\pmropn64.exe
c:\program files\premieropinion\pmservice.exe
c:\users\bonger\AppData\Local\assembly\tmp
c:\users\bonger\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
c:\windows\IsUn0407.exe
.
.
((((((((((((((((((((((( Dateien erstellt von 2014-10-01 bis 2014-11-01 ))))))))))))))))))))))))))))))
.
.
2014-11-01 09:01 . 2014-11-01 09:01 -------- d-----w- c:\users\TEMP
2014-11-01 08:39 . 2014-11-01 08:39 -------- d-----w- c:\users\bonger\AppData\Roaming\PC Speed Maximizer
2014-11-01 08:37 . 2014-11-01 08:37 -------- d-----w- c:\program files\VS Revo Group
2014-11-01 08:35 . 2014-11-01 08:35 -------- d-----w- c:\users\bonger\AppData\Local\InstaShare
2014-11-01 08:34 . 2014-11-01 08:34 -------- d-----w- c:\program files\PC Speed Maximizer
2014-11-01 08:34 . 2014-11-01 08:34 -------- d-----w- c:\programdata\nXeUcVT
2014-11-01 08:34 . 2014-11-01 08:34 -------- d-----w- c:\programdata\InstaShare
2014-11-01 08:33 . 2014-11-01 08:33 -------- d-----w- c:\program files\TNT2
2014-11-01 08:33 . 2014-11-01 08:33 -------- d-----w- c:\users\bonger\AppData\Local\TNT2
2014-10-31 08:40 . 2014-10-31 09:06 -------- d-----w- C:\FRST
2014-10-31 08:34 . 2014-10-31 08:34 -------- d-----w- c:\program files\Common Files\Java
2014-10-31 07:09 . 2014-10-14 20:13 8901368 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{4045D832-7913-470D-9116-797E6BCDF8E8}\mpengine.dll
2014-10-29 15:05 . 2014-10-29 15:05 -------- d-----w- c:\users\bonger\AppData\Roaming\dlg
2014-10-29 15:01 . 2014-10-31 07:19 -------- d-----w- c:\users\bonger\AppData\Roaming\Systweak
2014-10-29 15:01 . 2014-10-06 15:36 18248 ----a-w- c:\windows\system32\roboot.exe
2014-10-29 14:26 . 2014-10-29 15:04 -------- d-----w- c:\program files\Free Window Registry Repair
2014-10-29 13:16 . 2014-10-31 07:22 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2014-10-29 13:16 . 2014-11-01 07:36 -------- d-----w- c:\program files\Spybot - Search & Destroy 2
2014-10-23 13:50 . 2014-10-23 13:50 -------- d-----w- c:\program files\Adobe Download Assistant
2014-10-23 13:49 . 2014-10-23 13:49 -------- d-----w- c:\users\bonger\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
2014-10-16 06:39 . 2014-10-31 08:32 96680 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2014-10-16 06:33 . 2014-09-18 01:32 2363904 ----a-w- c:\windows\system32\msi.dll
2014-10-16 06:33 . 2014-09-13 01:40 67072 ----a-w- c:\windows\system32\packager.dll
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-10-28 05:35 . 2010-11-12 09:15 229000 ------w- c:\windows\system32\MpSigStub.exe
2014-10-15 07:04 . 2013-10-21 03:10 37384 ----a-w- c:\windows\system32\drivers\avnetflt.sys
2014-10-15 07:04 . 2013-10-21 03:10 136216 ----a-w- c:\windows\system32\drivers\avipbb.sys
2014-10-15 07:04 . 2013-10-21 03:10 98160 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2014-09-25 01:40 . 2014-10-01 04:23 519680 ----a-w- c:\windows\system32\qdvd.dll
2014-09-24 02:15 . 2012-10-16 04:38 701104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-09-24 02:15 . 2011-06-13 17:00 71344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-09-09 21:47 . 2014-09-24 02:05 2048 ----a-w- c:\windows\system32\tzres.dll
2014-08-29 06:19 . 2010-06-24 10:33 23256 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2014-08-23 01:46 . 2014-08-28 07:11 305152 ----a-w- c:\windows\system32\gdi32.dll
2011-10-04 07:41 . 2011-05-01 11:02 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{0B660087-931C-4056-A04F-0423890E40B6}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{955D413E-9DCE-4CC9-BB9D-C807E2C04601}"= "c:\program files\TNT2\Profiles\10959\passport.dll" [2014-11-01 11520]
.
[HKEY_CLASSES_ROOT\clsid\{955d413e-9dce-4cc9-bb9d-c807e2c04601}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{955D413E-9DCE-4CC9-BB9D-C807E2C04601}"= "c:\program files\TNT2\Profiles\10959\passport.dll" [2014-11-01 11520]
.
[HKEY_CLASSES_ROOT\clsid\{955d413e-9dce-4cc9-bb9d-c807e2c04601}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco1]
@="{AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47}"
[HKEY_CLASSES_ROOT\CLSID\{AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47}]
2013-12-13 11:20 2602864 ----a-w- c:\program files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco2]
@="{853B7E05-C47D-4985-909A-D0DC5C6D7303}"
[HKEY_CLASSES_ROOT\CLSID\{853B7E05-C47D-4985-909A-D0DC5C6D7303}]
2013-12-13 11:20 2602864 ----a-w- c:\program files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco3]
@="{42D38F2E-98E9-4382-B546-E24E4D6D04BB}"
[HKEY_CLASSES_ROOT\CLSID\{42D38F2E-98E9-4382-B546-E24E4D6D04BB}]
2013-12-13 11:20 2602864 ----a-w- c:\program files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2010-04-23 17:50 66312 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2010-04-23 17:50 66312 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2010-04-23 17:50 66312 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2010-04-23 17:50 66312 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2010-04-23 17:50 66312 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2010-04-23 17:50 66312 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2010-04-23 17:50 66312 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2010-04-23 17:50 66312 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2010-04-23 17:50 66312 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2013-03-14 3672640]
"iCloudServices"="c:\program files\Common Files\Apple\Internet Services\iCloudServices.exe" [2014-08-07 43816]
"ApplePhotoStreams"="c:\program files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" [2014-08-14 43816]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"Nvtmru"="c:\program files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-07-03 1028896]
"Logitech Download Assistant"="c:\windows\System32\LogiLDA.dll" [2012-09-20 1425208]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2014-07-31 43816]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2014-10-15 703736]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2013-12-10 472984]
"sync"="c:\program files\photoSync\sync.exe" [2013-10-08 276992]
"Adobe Creative Cloud"="c:\program files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" [2013-12-19 2239376]
"PDFPrint"="c:\program files\PDF24\pdf24.exe" [2014-02-06 189480]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2014-09-01 152392]
"Avira Systray"="c:\program files\Avira\My Avira\Avira.OE.Systray.exe" [2014-09-23 165168]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SPReview"="c:\windows\System32\SPReview\SPReview.exe" [2013-07-16 280576]
.
c:\users\bonger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE /tsr [2009-2-26 97680]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
2013-02-08 18:30 66800 ----a-w- c:\program files\Common Files\LogiShrd\Bluetooth\LBTWLgn.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean.exe
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Wi-Fi MediaConnect.lnk]
backup=c:\windows\pss\Wi-Fi MediaConnect.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
2013-12-10 17:18 472984 ----a-w- c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager]
2010-07-22 20:10 402432 ----a-w- c:\program files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2013-03-14 08:23 3672640 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EvtMgr6]
2013-02-21 02:44 2238704 ----a-w- c:\program files\Logitech\SetPointP\SetPoint.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2014-10-19 13:03 107912 ----atw- c:\users\bonger\AppData\Local\Google\Update\GoogleUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
2008-06-24 15:06 1840424 ----a-w- c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2014-09-01 02:47 152392 ----a-w- c:\program files\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Download Assistant]
2012-09-20 14:02 1425208 ----a-w- c:\windows\System32\LogiLDA.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
2010-11-10 01:54 4240760 ----a-w- c:\program files\Windows Live\Messenger\msnmsgr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
2008-06-08 08:31 2221352 ----a-w- c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe]
2012-01-10 17:36 1083264 ----a-w- c:\program files\Nokia\Nokia Suite\NokiaSuite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2014-01-17 14:24 421888 ----a-w- c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Realtime Audio Engine]
2010-06-29 19:12 70144 ----a-w- c:\windows\System32\mmrtkrnl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard]
2010-02-19 12:37 517096 ----a-w- c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VirtualCloneDrive]
2011-03-07 13:33 89456 ----a-w- c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zune Launcher]
2011-08-05 11:29 159456 ----a-w- c:\program files\Zune\ZuneLauncher.exe
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Google Update"="c:\users\bonger\AppData\Local\Google\Update\GoogleUpdate.exe" /c
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" -autorun
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
"PDFPrint"=c:\program files\PDF24\pdf24.exe
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe"
"AdobeCS6ServiceManager"="c:\program files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
"CDAServer"=c:\program files\Common Files\Common Desktop Agent\CDASrv.exe
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime
.
R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2011-03-08 611064]
R1 ArcSec;ArcSec;c:\windows\system32\drivers\ArcSec.sys [x]
R1 MIPv432;MIPv432;c:\windows\system32\drivers\MIPv432.sys [x]
R3 bdacap;PC-DTV Receiver;c:\windows\system32\drivers\bdacap.sys [2006-11-03 322048]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-09-19 108032]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 15872]
R3 RzSynapse;Razer Naga Driver;c:\windows\system32\DRIVERS\RzSynapse.sys [2010-04-21 60032]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [2011-01-18 109328]
R3 VBoxNetFlt;VBoxNetFlt Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2013-10-10 37352]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2013-09-13 242240]
S1 MIPFSv332;MIPFSv332;c:\windows\system32\drivers\MIPFSv332.sys [2010-09-20 145960]
S2 AntiVirSchedulerService;Avira Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [2014-10-15 431920]
S2 AntiVirWebService;Avira Browser-Schutz;c:\program files\Avira\AntiVir Desktop\avwebg7.exe [2014-10-15 994096]
S2 AqCaPmbYtj;AqCaPmbYtj;c:\programdata\nXeUcVT\AqCaPmbYtj.exe [2014-11-01 2726256]
S2 Avira.OE.ServiceHost;Avira Service Host;c:\program files\Avira\My Avira\Avira.OE.ServiceHost.exe [2014-09-23 160560]
S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys [2014-10-15 37384]
S2 peservice;photoSync service;c:\program files\photoSync\peservice.exe [2013-10-08 41472]
S2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys [2011-03-14 5120]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-06-21 413472]
S2 TeamViewer8;TeamViewer 8;c:\program files\TeamViewer\Version8\TeamViewer_Service.exe [2013-09-12 5071712]
S3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter;c:\windows\system32\Drivers\LEqdUsb.Sys [2013-01-03 44296]
S3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter;c:\windows\system32\Drivers\LHidEqd.Sys [2013-01-03 12808]
S3 netr28u;RT2870-USB-Drahtlos-LAN-Kartentreiber für Vista;c:\windows\system32\DRIVERS\netr28u.sys [2009-07-13 657408]
S3 WFMC_VAD;WFMCVAD (WDM);c:\windows\system32\DRIVERS\wfmcvad.sys [2010-02-08 19456]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-02-23 10:19 1150280 ----a-w- c:\program files\Google\Chrome\Application\33.0.1750.117\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-11-01 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-16 02:15]
.
2014-11-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-02-20 12:50]
.
2014-11-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-02-20 12:50]
.
2014-10-26 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1049129853-3666174710-3722791784-1000Core.job
- c:\users\bonger\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-26 13:03]
.
2014-11-01 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1049129853-3666174710-3722791784-1000UA.job
- c:\users\bonger\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-26 13:03]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://istart.webssearches.com/?type=hp&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX
mStart Page = hxxp://istart.webssearches.com/?type=hp&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX
uInternet Settings,ProxyOverride = <-loopback>
uSearchAssistant = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StMBGUhCtXlT7G1muS_BRDXuH_N6QVFdlkuDDcdAb73v8hpPF8UGJXlmEHt88OVgGd9Va-0IVa8Q89c8XlhH2LXgd00JKyCWlgDUsf5Qr5uJhgVX9NPpFaCzpys6K3cVSliWAwmET5tEvaL6TrelP4iE9hintQFZy0EBWTSDCzKt3kTORp-y4l9-kuWbBjytaVFmHJQA,,&q={searchTerms}
IE:
IE: &Preispiratensuche nach markiertem Text - c:\\Program Files\\Preispiraten6\\preispiraten.html
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: amazon Suche - c:\program files\Preispiraten\Preispiraten2\Searchamazon.htm
IE: amazon Suche starten - c:\program files\Preispiraten\Preispiraten2\Searchamazon.htm
IE: eBay - Mein eBay - c:\program files\Preispiraten\Preispiraten2\SearchEbaymein.htm
IE: eBay - Powersuche - c:\program files\Preispiraten\Preispiraten2\SearchEbaypower.htm
IE: eBay - Startseite - c:\program files\Preispiraten\Preispiraten2\SearchEbay.htm
IE: eBay Suche starten - c:\program files\Preispiraten\Preispiraten2\SearchEbay.htm
IE: Google Suche - c:\program files\Preispiraten\Preispiraten2\SearchGoogle.htm
IE: Google Suche starten - c:\program files\Preispiraten\Preispiraten2\SearchGoogle.htm
IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Web-Suche
IE: {{2638A03E-1669-43BE-8119-B47087629A7F} - c:\program files\Preispiraten\Preispiraten2\preispiraten2ie.exe
IE: {{9E029088-432F-4EBF-9537-0171A4C37870} - hxxp://webtip.ch/cgi-bin/amz_track/tracker_de.pl?loc=main&site=home
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\
FF - prefs.js: browser.search.selectedEngine - webssearches
FF - prefs.js: browser.startup.homepage - hxxp://istart.webssearches.com/?type=hp&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX
FF - prefs.js: keyword.URL - hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StMBGUhCtXlT7G1muS_BRDXuH_N6QVFdlkuDDcdAb73v8hpPF8UGJXlmEHt88OVgGd9Va-0IVa8Q89c8XlhH2LXgd00JKyCWlgDUsf5Qr5uJhgVX9NPpFaCzpys6K3cVSliWAwmET5tEvaL6TrelP4iE9hintQFZy0EBWTSDCzKt3kTORp-y4l9-kuWbBjytaVFmHJQA,,&q=
FF - ExtSQL: 2014-10-29 16:01; faststartff@gmail.com; c:\users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\extensions\faststartff@gmail.com
FF - ExtSQL: !HIDDEN! 2014-10-29 16:01; faststartff@gmail.com; c:\users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\extensions\faststartff@gmail.com
FF - user.js: plugin.state.npconduitfirefoxplugin - 0
FF - user.js: plugin.state.nptnt - 2
FF - user.js: plugin.state.nptnt - 2
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-10 - (no file)
Toolbar-!{95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
WebBrowser-{EFEED92A-A33D-4873-BA8F-32BAA631E54D} - (no file)
AddRemove-S.T.A.L.K.E.R. - Clear Sky_is1 - h:\spiele\S.T.A.L.K.E.R. - Clear Sky\unins000.exe
AddRemove-{31AE3593-448E-43AB-B865-C235F64B0FB5} - c:\programdata\{9559969E-5786-48CA-87AB-B7695EC37420}\EGR-ShellExtension_setup.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-1049129853-3666174710-3722791784-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:bc,23,5a,2b,7f,93,62,7e,f1,8e,26,3c,ab,1a,f8,fb,f7,eb,58,70,14,5b,ca,
86,ff,74,45,22,44,d1,98,89,c7,aa,43,49,91,7e,a7,63,d0,ca,30,ce,f0,9c,f7,92,\
"??"=hex:d6,88,60,fa,fb,fd,93,f2,a3,94,62,05,28,0d,21,8b
.
[HKEY_USERS\S-1-5-21-1049129853-3666174710-3722791784-1000\Software\SecuROM\License information*]
"datasecu"=hex:ef,02,0f,ba,fd,b0,b6,27,86,07,01,d5,85,6e,58,fc,74,f8,7c,df,bf,
8a,e6,ea,21,4a,c7,23,1b,af,ff,15,cf,eb,29,8c,41,3f,56,4c,44,85,a0,af,e5,7c,\
"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------
.
- - - - - - - > 'Explorer.exe'(5960)
c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\windows\system32\nvvsvc.exe
c:\program files\NVIDIA Corporation\Display\nvxdsync.exe
c:\windows\system32\nvvsvc.exe
c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Nero\Nero8\Nero BackItUp\NBService.exe
c:\program files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
c:\windows\system32\taskhost.exe
c:\program files\PC Speed Maximizer\SPMSmartScan.exe
c:\windows\system32\IoctlSvc.exe
c:\windows\system32\PnkBstrA.exe
c:\programdata\TVersity\Media Server\MediaServer.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\NVIDIA Corporation\Display\nvtray.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\program files\Avira\AntiVir Desktop\avshadow.exe
c:\windows\system32\conhost.exe
c:\windows\System32\WUDFHost.exe
c:\windows\system32\sppsvc.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\system32\taskhost.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2014-11-01 10:07:00 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2014-11-01 09:07
.
Vor Suchlauf: 8 Verzeichnis(se), 422.464.978.944 Bytes frei
Nach Suchlauf: 13 Verzeichnis(se), 422.375.800.832 Bytes frei
.
- - End Of File - - DE3FAFAA853586AF362D7C673FB419CA
A36C5E4F47E84449FF07ED3517B43A31
|
|
01.11.2014, 20:28
| #4 |
| /// the machine /// TB-Ausbilder | Windows 7: Lauter Links und neue Fenster in Chrome Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
02.11.2014, 10:32
| #5 |
| | Windows 7: Lauter Links und neue Fenster in ChromeCode:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 02.11.2014 Suchlauf-Zeit: 10:11:35 Logdatei: mbam.txt Administrator: Ja Version: 2.00.3.1025 Malware Datenbank: v2014.11.02.03 Rootkit Datenbank: v2014.11.01.02 Lizenz: Kostenlos Malware Schutz: Deaktiviert Bösartiger Webseiten Schutz: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x86 Dateisystem: NTFS Benutzer: bonger Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 363947 Verstrichene Zeit: 16 Min, 0 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (Keine schädliche Elemente erkannt) Module: 0 (Keine schädliche Elemente erkannt) Registrierungsschlüssel: 0 (Keine schädliche Elemente erkannt) Registrierungswerte: 0 (Keine schädliche Elemente erkannt) Registrierungsdaten: 0 (Keine schädliche Elemente erkannt) Ordner: 0 (Keine schädliche Elemente erkannt) Dateien: 0 (Keine schädliche Elemente erkannt) Physische Sektoren: 0 (Keine schädliche Elemente erkannt) (end) Code:
ATTFilter # AdwCleaner v4.002 - Bericht erstellt am 02/11/2014 um 09:45:24
# DB v2014-10-26.6
# Aktualisiert 27/10/2014 von Xplode
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (32 bits)
# Benutzername : bonger - BONGER-PC
# Gestartet von : C:\Users\bonger\Downloads\AdwCleaner_4.002.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\Ask
Ordner Gelöscht : C:\Program Files\Astroburn Toolbar
Ordner Gelöscht : C:\Users\bonger\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Program Files\DAEMON Tools Toolbar
Ordner Gelöscht : C:\Users\bonger\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\bonger\AppData\Roaming\eType
Ordner Gelöscht : C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\FoxTab
Ordner Gelöscht : C:\ProgramData\ICQ\ICQToolbar
Ordner Gelöscht : C:\Program Files\ICQ6Toolbar
Ordner Gelöscht : C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\ICQToolbarData
Ordner Gelöscht : C:\Users\bonger\AppData\Local\Ilivid Player
Ordner Gelöscht : C:\Program Files\iLivid
Ordner Gelöscht : C:\Program Files\Iminent
Ordner Gelöscht : C:\Users\bonger\AppData\Local\PackageAware
Ordner Gelöscht : C:\Program Files\PC Speed Maximizer
Ordner Gelöscht : C:\Program Files\pc speed up
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\pdfforge
Ordner Gelöscht : C:\Program Files\pdfforge
Ordner Gelöscht : C:\Users\bonger\AppData\Roaming\pdfforge
Ordner Gelöscht : C:\Users\bonger\AppData\Roaming\PerformerSoft
Ordner Gelöscht : C:\Users\bonger\AppData\LocalLow\Softonic
Ordner Gelöscht : C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\SweetIMToolbarData
Ordner Gelöscht : C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\SweetPacksToolbarData
Ordner Gelöscht : C:\Users\bonger\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Program Files\Windows iLivid Toolbar
Ordner Gelöscht : C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{800B5000-A755-47E1-992B-48A1C1357F07}
Datei Gelöscht : C:\Users\bonger\AppData\Local\CRE\kdfbddbdpnahdahmamlolacimfdbeckk.crx
Datei Gelöscht : C:\Windows\system32\roboot.exe
Datei Gelöscht : C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\invalidprefs.js
Datei Gelöscht : C:\Program Files\Mozilla Firefox\searchplugins\webssearches.xml
Datei Gelöscht : C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\user.js
Datei Gelöscht : C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
Datei Gelöscht : C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
***** [ Tasks ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\kdfbddbdpnahdahmamlolacimfdbeckk
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\kdfbddbdpnahdahmamlolacimfdbeckk
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\nohfdhapjjlndfgjnmdlcabloeembdkj
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Web-Suche
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\FTDownloader
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHost.Tool
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHost.Tool.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_arcsoft-totalmedia-theatre_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_arcsoft-totalmedia-theatre_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_bpm-studio_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_bpm-studio_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_call-of-duty-4_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_call-of-duty-4_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_cyberlink-powerdvd_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_cyberlink-powerdvd_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_fifa-09_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_fifa-09_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_jdownloader_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_jdownloader_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_norton-internet-security_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_norton-internet-security_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_stereoscopic-player_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_stereoscopic-player_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_virtual-clonedrive_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_virtual-clonedrive_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_virtual-dj_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_virtual-dj_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_winrar_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_winrar_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{06DEB529-DE09-43EC-B6E2-451AAB0FF000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{19D2F415-D58B-46BC-9390-C03DCBC21EB2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2A841F7A-A014-4DA5-B6D9-8B913DFB7A8C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{987D9269-F8A1-408F-BF62-4397D2F5363E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{9F0F16DD-4E76-4049-A9B1-7A91E48F0323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E0722BEB-FDA1-4AA1-A2A8-15A74A5B3F70}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F1963E76-845B-474C-8C7F-D69A96D8AA34}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F4288797-CB12-49CE-9DF8-7CDFA1143BEA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{477F210A-2A86-4666-9C4B-1189634D2C84}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6F43FA77-C18F-4D0C-9C7E-958876FE2061}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{744E0E81-BC79-4719-A58B-C98F7E78EE5D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DF948646-8BF4-450E-A059-CF8A4E0FE2BE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E96B49B0-E11F-48FC-984A-EEC29A4F57E1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FF871E51-2655-4D06-AED5-745962A96B32}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2A841F7A-A014-4DA5-B6D9-8B913DFB7A8C}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2A841F7A-A014-4DA5-B6D9-8B913DFB7A8C}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A1B48071-416D-474E-A13B-BE5456E7FC31}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2A841F7A-A014-4DA5-B6D9-8B913DFB7A8C}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1B48071-416D-474E-A13B-BE5456E7FC31}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\dt soft\daemon tools toolbar
Schlüssel Gelöscht : HKCU\Software\IM
Schlüssel Gelöscht : HKCU\Software\ImInstaller
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\StartSearch
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKCU\Software\vShare.tv
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\searchqutoolbar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar
Schlüssel Gelöscht : HKLM\SOFTWARE\Bandoo
Schlüssel Gelöscht : HKLM\SOFTWARE\ICQ\ICQToolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Speedchecker Limited
Schlüssel Gelöscht : HKLM\SOFTWARE\systweak
Schlüssel Gelöscht : HKLM\SOFTWARE\Uniblue
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\43C098337DB065A49B665D4EA7F16D1C
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A71991503412AEB42838B02C5ED9F9CD
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7652513C62FF63448CFF05163719DB7
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GoogleUpdate.exe
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.17344
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
-\\ Mozilla Firefox v7.0.1 (de)
-\\ Google Chrome v33.0.1750.117
*************************
AdwCleaner[R0].txt - [17690 octets] - [02/11/2014 09:41:14]
AdwCleaner[S0].txt - [17419 octets] - [02/11/2014 09:45:24]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [17480 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.3.5 (10.31.2014:1)
OS: Windows 7 Ultimate x86
Ran by bonger on 02.11.2014 at 9:57:22,99
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{C7C8B596-7B57-450A-B642-108659A195EA}
~~~ Files
Successfully deleted: [File] "C:\Windows\wininit.ini"
~~~ Folders
Successfully deleted: [Folder] "C:\Users\bonger\AppData\Roaming\getrighttogo"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\free window registry repair"
Successfully deleted: [Folder] "C:\Users\bonger\AppData\Roaming\microsoft\windows\start menu\programs\free window registry repair"
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{005BCBE4-93BC-4EC5-B25B-981D5873DCE5}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{13A93D4B-1A2D-46B4-9895-7ACE48061F64}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{1496C326-5B7C-4C66-B719-3EC4CC7C418F}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{1626441C-39A2-4238-99B4-29A4BF2F904B}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{1C022D0B-9B15-4890-ADF1-A1FEDC8F19BB}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{23168811-69F0-4B60-B519-B3744FDADF04}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{2C42274C-6C85-4148-A157-8DE67C6C2468}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{2C96EDEC-B296-4CA6-BC18-280BBB352BFF}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{30D58278-DA65-490B-9DCF-0AA12AF53C2B}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{3786C4B8-CC7E-4E0B-952E-571A2D5ED110}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{3B58CDE9-B036-4201-9BEA-6725CA16F6D1}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{4107F8A5-F8FC-4974-9BCF-086057FB93A2}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{42EDEEB4-B7BC-4AB7-91BE-94B89DB23FB4}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{463E119A-2634-47B9-A94C-848612210080}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{4A08C338-40F5-4D69-B0FD-1E2FD60EDAB9}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{4C6E2781-21AA-434E-B3E6-B4F9C76F145B}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{4ED2B88A-08C5-43F8-81C8-83F002F334A2}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{51C2A460-00CB-461C-BEC4-F10FD8727906}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{5C973365-899F-4BD3-A229-C03A0C3AA63D}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{5DA6A440-096C-498E-A558-27CD8E0DAE3D}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{5E3990AE-294A-412A-8826-000BC08A571D}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{6B77EFB3-2E25-485B-B2D9-99EDF374BC29}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{76E62CC8-A5C5-418D-B58F-F53F69F3B58F}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{8B9E05F2-DE1E-4D0A-824A-A6EC7FEE18E0}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{8BE91616-2266-4E4F-8404-BC153119B5E6}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{9995B115-13D0-415E-A0A0-7ED7E4873272}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{B416D47C-6F3A-441A-91DB-0CD1D4F72D57}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{B877F3A9-9CBA-4C09-8538-A9EF5C12A4E0}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{C45DAAA6-980C-47CF-81A2-40F683E6EE22}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{C6080AFF-EB45-4425-A7AE-F7A22CCFB712}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{CC898FFE-797B-4632-AE92-A2DF6CF36BE6}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{D213DE9B-0904-4ECA-B1CE-79ED0283BCC3}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{DBEAE7C5-C718-465C-8600-614A351C4743}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{E737C967-0C45-4D04-BCEE-49AA493FFBDD}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{EDB80422-60C9-4A4C-A093-DD3585F6ACF4}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{F33417CE-49F4-49C5-A553-292E1952660C}
Successfully deleted: [Empty Folder] C:\Users\bonger\appdata\local\{F4822BFF-5922-43FA-B202-83438ECA35D8}
~~~ FireFox
Successfully deleted: [File] C:\user.js
Successfully deleted the following from C:\Users\bonger\AppData\Roaming\mozilla\firefox\profiles\6wf3z6x7.default\prefs.js
user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
user_pref("browser.search.defaultengine", "Ask.com");
user_pref("browser.search.defaultenginename", "webssearches");
user_pref("browser.search.selectedEngine", "webssearches");
user_pref("extensions.BabylonToolbar.aflt", "babsst");
user_pref("extensions.BabylonToolbar.babExt", "");
user_pref("extensions.BabylonToolbar.babTrack", "affID=112542&tt=2912_6");
user_pref("extensions.BabylonToolbar.bbDpng", 5);
user_pref("extensions.BabylonToolbar.dfltLng", "en");
user_pref("extensions.BabylonToolbar.dfltSrch", true);
user_pref("extensions.BabylonToolbar.hmpg", true);
user_pref("extensions.BabylonToolbar.id", "eac8dc3f00000000000000242178bae9");
user_pref("extensions.BabylonToolbar.instlDay", "15538");
user_pref("extensions.BabylonToolbar.instlRef", "sst");
user_pref("extensions.BabylonToolbar.keyWordUrl", "hxxp://search.babylon.com/?affID=112542&tt=2912_6&babsrc=KW_ss&mntrId=eac8dc3f00000000000000242178bae9&q=");
user_pref("extensions.BabylonToolbar.lastDP", 5);
user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.5.3.176:34:24");
user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "7.0");
user_pref("extensions.BabylonToolbar.newTab", false);
user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?affID=112542&tt=2912_6&babsrc=NT_ss&mntrId=eac8dc3f00000000000000242178bae9");
user_pref("extensions.BabylonToolbar.noFFXTlbr", false);
user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
user_pref("extensions.BabylonToolbar.propectorlck", 148490685);
user_pref("extensions.BabylonToolbar.prtkDS", 1);
user_pref("extensions.BabylonToolbar.prtkHmpg", 1);
user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
user_pref("extensions.BabylonToolbar.ptch_0717", true);
user_pref("extensions.BabylonToolbar.smplGrp", "azb");
user_pref("extensions.BabylonToolbar.srcExt", "ss");
user_pref("extensions.BabylonToolbar.tlbrId", "base");
user_pref("extensions.BabylonToolbar.vrsn", "1.5.3.17");
user_pref("extensions.BabylonToolbar.vrsnTs", "1.5.3.176:34:24");
user_pref("extensions.BabylonToolbar.vrsni", "1.5.3.17");
user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
user_pref("extensions.BabylonToolbar_i.babExt", "");
user_pref("extensions.BabylonToolbar_i.babTrack", "affID=112542&tt=2912_6");
user_pref("extensions.BabylonToolbar_i.hardId", "eac8dc3f00000000000000242178bae9");
user_pref("extensions.BabylonToolbar_i.id", "eac8dc3f00000000000000242178bae9");
user_pref("extensions.BabylonToolbar_i.instlDay", "15538");
user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
user_pref("extensions.BabylonToolbar_i.newTab", false);
user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
user_pref("extensions.BabylonToolbar_i.tlbrId", "base");
user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.176:34:24");
user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
user_pref("extensions.Softonic.aflt", "OC");
user_pref("extensions.Softonic.appId", "{7ABBFE1C-E485-44AA-8F36-353751B4124D}");
user_pref("extensions.Softonic.autoRvrt", "false");
user_pref("extensions.Softonic.dfltLng", "de");
user_pref("extensions.Softonic.dfltSrch", true);
user_pref("extensions.Softonic.dnsErr", true);
user_pref("extensions.Softonic.excTlbr", false);
user_pref("extensions.Softonic.ffxUnstlRst", false);
user_pref("extensions.Softonic.hmpg", true);
user_pref("extensions.Softonic.id", "eac8dc3f0000000000000015af7253ec");
user_pref("extensions.Softonic.instlDay", "16016");
user_pref("extensions.Softonic.instlRef", "MOY00621");
user_pref("extensions.Softonic.newTab", true);
user_pref("extensions.Softonic.newTabUrl", "hxxp://search.softonic.com/MOY00621/tb_v1/?SearchSource=15&cc=&mi=eac8dc3f0000000000000015af7253ec");
user_pref("extensions.Softonic.prdct", "Softonic");
user_pref("extensions.Softonic.prtnrId", "softonic");
user_pref("extensions.Softonic.rvrt", "false");
user_pref("extensions.Softonic.smplGrp", "none");
user_pref("extensions.Softonic.srchPrvdr", "Search the web (Softonic)");
user_pref("extensions.Softonic.tlbrId", "opencandy2013");
user_pref("extensions.Softonic.tlbrSrchUrl", "hxxp://search.softonic.com/MOY00621/tb_v1?SearchSource=1&cc=&mi=eac8dc3f0000000000000015af7253ec&q=");
user_pref("extensions.Softonic.vrsn", "1.8.21.14");
user_pref("extensions.Softonic.vrsnTs", "1.8.21.1411:42:18");
user_pref("extensions.Softonic.vrsni", "1.8.21.14");
user_pref("extensions.delta.aflt", "babsst");
user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
user_pref("extensions.delta.autoRvrt", "false");
user_pref("extensions.delta.dfltLng", "en");
user_pref("extensions.delta.excTlbr", false);
user_pref("extensions.delta.ffxUnstlRst", true);
user_pref("extensions.delta.id", "eac8dc3f00000000000000242178bae9");
user_pref("extensions.delta.instlDay", "15819");
user_pref("extensions.delta.instlRef", "sst");
user_pref("extensions.delta.newTab", false);
user_pref("extensions.delta.prdct", "delta");
user_pref("extensions.delta.prtnrId", "delta");
user_pref("extensions.delta.rvrt", "false");
user_pref("extensions.delta.smplGrp", "none");
user_pref("extensions.delta.tlbrId", "base");
user_pref("extensions.delta.tlbrSrchUrl", "");
user_pref("extensions.delta.vrsn", "1.8.16.16");
user_pref("extensions.delta.vrsnTs", "1.8.16.1616:46:22");
user_pref("extensions.delta.vrsni", "1.8.16.16");
user_pref("extensions.holasearch.admin", false);
user_pref("extensions.holasearch.aflt", "babsst");
user_pref("extensions.holasearch.appId", "{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}");
user_pref("extensions.holasearch.autoRvrt", "false");
user_pref("extensions.holasearch.dfltLng", "de");
user_pref("extensions.holasearch.excTlbr", false);
user_pref("extensions.holasearch.ffxUnstlRst", false);
user_pref("extensions.holasearch.id", "eac8dc3f0000000000000015af7253ec");
user_pref("extensions.holasearch.instlDay", "15938");
user_pref("extensions.holasearch.instlRef", "sst");
user_pref("extensions.holasearch.newTab", false);
user_pref("extensions.holasearch.prdct", "holasearch");
user_pref("extensions.holasearch.prtnrId", "holasearch");
user_pref("extensions.holasearch.rvrt", "false");
user_pref("extensions.holasearch.smplGrp", "none");
user_pref("extensions.holasearch.tlbrId", "base");
user_pref("extensions.holasearch.tlbrSrchUrl", "");
user_pref("extensions.holasearch.vrsn", "1.8.16.16");
user_pref("extensions.holasearch.vrsnTs", "1.8.16.1611:44:21");
user_pref("extensions.holasearch.vrsni", "1.8.16.16");
user_pref("extensions.incredibar.admin", false);
user_pref("extensions.incredibar.aflt", "orgnl");
user_pref("extensions.incredibar.afterInstallRpt", "sent");
user_pref("extensions.incredibar.cntry", "DE");
user_pref("extensions.incredibar.dfltLng", "");
user_pref("extensions.incredibar.dfltSrch", false);
user_pref("extensions.incredibar.dfltlng", "en");
user_pref("extensions.incredibar.dfltsrch", "false");
user_pref("extensions.incredibar.did", "10595");
user_pref("extensions.incredibar.envrmnt", "production");
user_pref("extensions.incredibar.excTlbr", false);
user_pref("extensions.incredibar.hdrMd5", "BFCF1B2B59E06393B15A51B9A8319AF7");
user_pref("extensions.incredibar.hmpg", false);
user_pref("extensions.incredibar.hrdid", "0");
user_pref("extensions.incredibar.id", "eac8dc3f00000000000000242178bae9");
user_pref("extensions.incredibar.installerproductid", "26");
user_pref("extensions.incredibar.instlDay", "15412");
user_pref("extensions.incredibar.instlRef", "");
user_pref("extensions.incredibar.instlday", "15412");
user_pref("extensions.incredibar.instlref", "");
user_pref("extensions.incredibar.isDcmntCmplt", false);
user_pref("extensions.incredibar.isdcmntcmplt", "false");
user_pref("extensions.incredibar.keywordurl", "");
user_pref("extensions.incredibar.lastVrsnTs", "1.5.11.1421:08:35");
user_pref("extensions.incredibar.mntrvrsn", "1.2.0");
user_pref("extensions.incredibar.newTab", false);
user_pref("extensions.incredibar.newtab", "false");
user_pref("extensions.incredibar.newtaburl", "");
user_pref("extensions.incredibar.noFFXTlbr", false);
user_pref("extensions.incredibar.ppd", "");
user_pref("extensions.incredibar.prdct", "incredibar");
user_pref("extensions.incredibar.productid", "26");
user_pref("extensions.incredibar.prtnrId", "Incredibar");
user_pref("extensions.incredibar.prtnrid", "Incredibar");
user_pref("extensions.incredibar.sg", "none");
user_pref("extensions.incredibar.smplGrp", "none");
user_pref("extensions.incredibar.smplgrp", "none");
user_pref("extensions.incredibar.srch", "");
user_pref("extensions.incredibar.srchprvdr", "");
user_pref("extensions.incredibar.tlbrId", "base");
user_pref("extensions.incredibar.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6R8mJhtCNP&loc=IB_TB&i=26&search=");
user_pref("extensions.incredibar.tlbrid", "base");
user_pref("extensions.incredibar.tlbrsrchurl", "hxxp://mystart.Incredibar.com/?a=6R8mJhtCNP&loc=IB_TB&i=26&search=");
user_pref("extensions.incredibar.upn2", "6R8mJhtCNP");
user_pref("extensions.incredibar.upn2n", "92824008879849137");
user_pref("extensions.incredibar.vrsn", "1.5.11.14");
user_pref("extensions.incredibar.vrsnTs", "1.5.11.1421:08:35");
user_pref("extensions.incredibar.vrsni", "1.5.11.14");
user_pref("extensions.incredibar.vrsnts", "1.5.11.1421:08:35");
user_pref("extensions.incredibar_i.aflt", "orgnl");
user_pref("extensions.incredibar_i.dfltLng", "");
user_pref("extensions.incredibar_i.did", "10595");
user_pref("extensions.incredibar_i.excTlbr", false);
user_pref("extensions.incredibar_i.id", "eac8dc3f00000000000000242178bae9");
user_pref("extensions.incredibar_i.installerproductid", "26");
user_pref("extensions.incredibar_i.instlDay", "15412");
user_pref("extensions.incredibar_i.instlRef", "");
user_pref("extensions.incredibar_i.ms_url_id", "");
user_pref("extensions.incredibar_i.newTab", false);
user_pref("extensions.incredibar_i.ppd", "");
user_pref("extensions.incredibar_i.prdct", "incredibar");
user_pref("extensions.incredibar_i.productid", "26");
user_pref("extensions.incredibar_i.prtnrId", "Incredibar");
user_pref("extensions.incredibar_i.smplGrp", "none");
user_pref("extensions.incredibar_i.tlbrId", "base");
user_pref("extensions.incredibar_i.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6R8mJhtCNP&loc=IB_TB&i=26&search=");
user_pref("extensions.incredibar_i.upn2", "6R8mJhtCNP");
user_pref("extensions.incredibar_i.upn2n", "92824008879849137");
user_pref("extensions.incredibar_i.vrsn", "1.5.11.14");
user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.1421:08:35");
user_pref("extensions.incredibar_i.vrsni", "1.5.11.14");
user_pref("sweetim.toolbar.cargo", "3.1010006");
user_pref("sweetim.toolbar.dialogs.0.enable", "true");
user_pref("sweetim.toolbar.dialogs.0.handler", "chrome://sim_toolbar_package/content/optionsdialog-handler.js");
user_pref("sweetim.toolbar.dialogs.0.height", "335");
user_pref("sweetim.toolbar.dialogs.0.id", "id_options_dialog");
user_pref("sweetim.toolbar.dialogs.0.title", "$string.config.label;");
user_pref("sweetim.toolbar.dialogs.0.url", "hxxp://www.sweetim.com/simffbar/options_remote_ff.html");
user_pref("sweetim.toolbar.dialogs.0.width", "761");
user_pref("sweetim.toolbar.dialogs.1.enable", "true");
user_pref("sweetim.toolbar.dialogs.1.handler", "chrome://sim_toolbar_package/content/exampledialog-handler.js");
user_pref("sweetim.toolbar.dialogs.1.height", "300");
user_pref("sweetim.toolbar.dialogs.1.id", "id_example_dialog");
user_pref("sweetim.toolbar.dialogs.1.title", "Example (unit-test) dialog");
user_pref("sweetim.toolbar.dialogs.1.url", "chrome://sim_toolbar_package/content/exampledialog.html");
user_pref("sweetim.toolbar.dialogs.1.width", "500");
user_pref("sweetim.toolbar.dnscatch.domain-blacklist", ".*.sweetim.com/.*|.*.facebook.com/.*|.*.google.com/.*|.*.google.co.in/.*|.*.google.com.br/.*|.*.google.es/.*|.*.youtube
user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
user_pref("sweetim.toolbar.mode.debug", "false");
user_pref("sweetim.toolbar.scripts.0.addcontextdiv", "true");
user_pref("sweetim.toolbar.scripts.0.callback", "simVerification");
user_pref("sweetim.toolbar.scripts.0.domain-blacklist", "");
user_pref("sweetim.toolbar.scripts.0.domain-whitelist", "hxxp://(www.|apps.)?facebook\\.com.*");
user_pref("sweetim.toolbar.scripts.0.elementid", "id_script_sim_fb");
user_pref("sweetim.toolbar.scripts.0.enable", "true");
user_pref("sweetim.toolbar.scripts.0.id", "id_script_fb");
user_pref("sweetim.toolbar.scripts.0.url", "hxxp://sc.sweetim.com/apps/in/fb/infb.js");
user_pref("sweetim.toolbar.scripts.1.addcontextdiv", "false");
user_pref("sweetim.toolbar.scripts.1.callback", "");
user_pref("sweetim.toolbar.scripts.1.domain-blacklist", ".*.google..*|.*.bing..*|.*.live..*|.*.msn..*|.*.yahoo..*|.*.youtube.com.*|.*ask.com.*|.*.sweetim.com.*");
user_pref("sweetim.toolbar.scripts.1.domain-whitelist", "");
user_pref("sweetim.toolbar.scripts.1.elementid", "id_predict_include_script");
user_pref("sweetim.toolbar.scripts.1.enable", "false");
user_pref("sweetim.toolbar.scripts.1.id", "id_script_prad");
user_pref("sweetim.toolbar.scripts.1.url", "hxxp://cdn1.predictad.com/scripts/publishers/sweetim/predictadme.js");
user_pref("sweetim.toolbar.search.external", "<?xml version=\"1.0\"?><TOOLBAR><EXTERNAL_SEARCH engine=\"hxxp://*google.*\" param=\"q=\" /><EXTERNAL_SEARCH engine=\"hxxp://sear
user_pref("sweetim.toolbar.search.history.capacity", "10");
user_pref("sweetim.toolbar.searchguard.enable", "true");
user_pref("sweetim.toolbar.simapp_id", "{AC1FF1A4-B608-42B9-9E08-C267EFCCA4D4}");
user_pref("sweetim.toolbar.version", "1.5.0.2");
Emptied folder: C:\Users\bonger\AppData\Roaming\mozilla\firefox\profiles\6wf3z6x7.default\minidumps [2 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 02.11.2014 at 9:59:39,43
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 01-11-2014
Ran by bonger (administrator) on BONGER-PC on 02-11-2014 10:03:00
Running from C:\Users\bonger\Downloads
Loaded Profiles: bonger & UpdatusUser (Available profiles: bonger & UpdatusUser)
Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Nero AG) C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(webEcoz, LLC.) C:\Program Files\PhotoSync\Sync.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Geek Software GmbH) C:\Program Files\PDF24\pdf24.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(webEcoz, LLC.) C:\Program Files\PhotoSync\peservice.exe
(Prolific Technology Inc.) C:\Windows\System32\IoctlSvc.exe
() C:\Windows\System32\PnkBstrA.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
() C:\ProgramData\TVersity\Media Server\MediaServer.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Apple Inc.) C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
() C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Thisisu) C:\Users\bonger\Downloads\JRT (1).exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [Nvtmru] => C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-07-03] (NVIDIA Corporation)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [43816 2014-07-31] (Apple Inc.)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [703736 2014-10-15] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-12-10] (Adobe Systems Incorporated)
HKLM\...\Run: [sync] => C:\Program Files\photoSync\sync.exe [276992 2013-10-08] (webEcoz, LLC.)
HKLM\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2239376 2013-12-19] (Adobe Systems Incorporated)
HKLM\...\Run: [PDFPrint] => C:\Program Files\PDF24\pdf24.exe [189480 2014-02-06] (Geek Software GmbH)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [152392 2014-09-01] (Apple Inc.)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [165168 2014-09-23] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-1049129853-3666174710-3722791784-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\S-1-5-21-1049129853-3666174710-3722791784-1000\...\Run: [iCloudServices] => C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2014-08-07] (Apple Inc.)
HKU\S-1-5-21-1049129853-3666174710-3722791784-1000\...\Run: [ApplePhotoStreams] => C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2014-08-14] (Apple Inc.)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2013-07-16] (Microsoft Corporation)
Startup: C:\Users\bonger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll ()
ShellIconOverlayIdentifiers: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
BootExecute: autocheck autochk * sdnclean.exe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
SearchScopes: HKCU - {1C6BBE7F-01F0-4E30-A6B1-80422086B185} URL = hxxp://search.yahoo.com/search?p={searchTerms}&fr=tightropetb&type=10959
BHO: PreispiratenSearchURL -> {0B660087-931C-4056-A04F-0423890E40B6} -> C:\Program Files\Preispiraten\Preispiraten2\PPSearchURL.dll ()
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO: amazon -> {84B94901-3645-4D80-A6B7-4D0050B19455} -> C:\Program Files\Preispiraten6\IEButtonAmazonInterface.dll ()
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
BHO: metaspinner media GmbH -> {CD9B7762-DFBC-42B1-BB30-02A78287B456} -> C:\Program Files\Preispiraten\Preispiraten2\IEButtonEBayInterface.dll ()
BHO: metaspinner media GmbH -> {D3AA56A9-8137-4950-A6F9-D0190A82AF2A} -> C:\Program Files\Preispiraten\Preispiraten2\IEButtonPPInterface.dll ()
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
BHO: Preispiraten -> {E9E027BF-C3F3-4022-8F6B-8F6D39A59684} -> C:\Program Files\Preispiraten6\IEButtonPPInterface.dll ()
Toolbar: HKLM - No Name - !{98889811-442D-49dd-99D7-DC866BE87DBC} - No File
Toolbar: HKCU - No Name - {955D413E-9DCE-4CC9-BB9D-C807E2C04601} - No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_25-windows-i586.cab
DPF: {CAFEEFAC-0018-0000-0025-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_25-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_25-windows-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Winsock: Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre1.8.0_25\bin\new_plugin\npjp2.dll No File
FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\3.0.40723.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @pages.tvunetworks.com/WebPlayer -> C:\Windows\system32\TVUAx\npTVUAx.dll (TVU networks)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\bonger\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\bonger\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\bonger\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Extension: 20-20 3D Viewer - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\2020Player@2020Technologies.com [2010-11-12]
FF Extension: Virtus Search Opt-in - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\extension@virtusdesigns.com [2010-11-26]
FF Extension: TVU Web Player - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\firefox@tvunetworks.com [2011-04-23]
FF Extension: Eclipse - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{12bc3590-67a6-11de-8a39-0800200c9a66} [2010-11-26]
FF Extension: FT DeepDark - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{77d2ed30-4cd2-11e0-b8af-0800200c9a66} [2012-07-10]
FF Extension: iMacros for Firefox - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670} [2014-03-05]
FF Extension: FT GraphiteGlow - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{99e34760-2754-11e0-91fa-0800200c9a66} [2012-07-10]
FF Extension: FT SleekDark - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{a21cd440-41d6-11e0-9207-0800200c9a66} [2012-07-10]
FF Extension: Preispiraten - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{C8D3D3BE-7ADC-4109-BF8C-6330A9F58B0C} [2010-11-22]
FF Extension: Greasemonkey - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} [2012-10-16]
FF Extension: NASA Night Launch - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\nasanightlaunch@example.com.xpi [2011-10-26]
FF Extension: Amazon Startcenter - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{144D1513-0819-4538-AD26-D515AF443AE7}.xpi [2012-07-10]
FF Extension: Amazon Statusbar Button - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{32DD6873-2BC0-4E4B-B9A3-0E602AB0DC14}.xpi [2012-07-10]
FF Extension: FXOpera - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{e7c7d1b3-5984-410e-9f1e-54e3f8490e8e}.xpi [2011-10-26]
FF Extension: Anti-Banner - C:\Program Files\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak2 [2012-07-18]
FF Extension: Modul zur Link-Untersuchung - C:\Program Files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2 [2012-07-18]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [2010-12-15]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011-03-16]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} [2011-06-15]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA} [2011-10-12]
FF HKLM\...\Firefox\Extensions: [fe_7.0@nokia.com] - C:\Program Files\Nokia\Nokia Suite\Connectors\Bookmarks Connector\FirefoxExtension_7.0
FF Extension: Firefox Synchronisation Extension - C:\Program Files\Nokia\Nokia Suite\Connectors\Bookmarks Connector\FirefoxExtension_7.0 [2012-02-23]
FF HKLM\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2013-06-27]
FF HKLM\...\Thunderbird\Extensions: [te_9.0@nokia.com] - C:\Program Files\Nokia\Nokia Suite\Connectors\Thunderbird Connector\ThunderbirdExtension_9.0
FF Extension: Thunderbird Address Book Synchronisation Extension - C:\Program Files\Nokia\Nokia Suite\Connectors\Thunderbird Connector\ThunderbirdExtension_9.0 [2012-02-23]
FF Extension: No Name - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\extensions\specialsavings@superfish.com [Not Found]
FF Extension: No Name - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\extensions\faststartff@gmail.com [Not Found]
FF StartMenuInternet: FIREFOX.EXE - firefox.exe
Chrome:
=======
CHR Profile: C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-23]
CHR Extension: (YouTube) - C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-23]
CHR Extension: (Adblock Plus) - C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-10-31]
CHR Extension: (Google-Suche) - C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-23]
CHR Extension: (Logitech SetPoint) - C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Extensions\edaibbiobngpbmeonadpbfafbkimjbdd [2014-07-25]
CHR Extension: (Google Wallet) - C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-14]
CHR Extension: (Google Mail) - C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-23]
CHR HKLM\...\Chrome\Extension: [edaibbiobngpbmeonadpbfafbkimjbdd] - C:\ProgramData\Logitech\LogiSmoothChromeExt.crx [2013-06-27]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [431920 2014-10-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [431920 2014-10-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [994096 2014-10-15] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [160560 2014-09-23] (Avira Operations GmbH & Co. KG)
S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2010-11-12] (Macrovision Europe Ltd.) [File not signed]
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 peservice; C:\Program Files\photoSync\peservice.exe [41472 2013-10-08] (webEcoz, LLC.) [File not signed]
R2 PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [File not signed]
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [66872 2011-04-26] ()
S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 TVersityMediaServer; C:\ProgramData\TVersity\Media Server\MediaServer.exe [1249064 2011-07-29] ()
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [108480 2010-09-14] (SlySoft, Inc.)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [281760 2011-02-05] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98160 2014-10-15] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-10-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-10-10] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [37384 2014-10-15] (Avira Operations GmbH & Co. KG)
S3 bdacap; C:\Windows\System32\drivers\bdacap.sys [322048 2006-11-03] (Genesys Logic, Inc.) [File not signed]
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2013-09-13] (DT Soft Ltd)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [31088 2010-12-16] (Elaborate Bytes AG)
R3 ElbyDelay; C:\Windows\System32\Drivers\ElbyDelay.sys [11984 2007-02-16] (Elaborate Bytes AG)
R3 LEqdUsb; C:\Windows\System32\Drivers\LEqdUsb.Sys [44296 2013-01-03] (Logitech, Inc.)
R3 LHidEqd; C:\Windows\System32\Drivers\LHidEqd.Sys [12808 2013-01-03] (Logitech, Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2011-02-05] ()
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [114904 2014-11-02] (Malwarebytes Corporation)
R1 MIPFSv332; C:\Windows\system32\drivers\MIPFSv332.sys [145960 2010-09-20] (GetData Pty Ltd)
R3 netr28u; C:\Windows\System32\DRIVERS\netr28u.sys [657408 2009-07-13] (Ralink Technology Corp.)
S3 RzSynapse; C:\Windows\System32\DRIVERS\RzSynapse.sys [60032 2010-04-21] (Razer USA Ltd) [File not signed]
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [611064 2011-03-08] (Duplex Secure Ltd.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-10-10] (Avira GmbH)
R2 SSPORT; C:\Windows\system32\Drivers\SSPORT.sys [5120 2011-03-14] (Samsung Electronics) [File not signed]
R3 vpcbus; C:\Windows\System32\DRIVERS\vpchbus.sys [172416 2010-11-20] (Microsoft Corporation)
R1 vpcnfltr; C:\Windows\System32\DRIVERS\vpcnfltr.sys [48128 2010-11-20] (Microsoft Corporation)
R3 vpcusb; C:\Windows\System32\DRIVERS\vpcusb.sys [78336 2010-11-20] (Microsoft Corporation)
R1 vpcvmm; C:\Windows\System32\drivers\vpcvmm.sys [296064 2010-11-20] (Microsoft Corporation)
R3 WFMC_VAD; C:\Windows\System32\DRIVERS\wfmcvad.sys [19456 2010-02-08] (WiFi Media Connect)
S1 ArcSec; system32\drivers\ArcSec.sys [X]
S3 catchme; \??\C:\Users\bonger\AppData\Local\Temp\catchme.sys [X]
S1 MIPv432; \??\C:\Windows\system32\drivers\MIPv432.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-02 10:02 - 2014-11-02 10:02 - 00000000 ____D () C:\Users\bonger\Downloads\FRST-OlderVersion
2014-11-02 09:59 - 2014-11-02 09:59 - 00019754 _____ () C:\Users\bonger\Desktop\JRT.txt
2014-11-02 09:57 - 2014-11-02 09:57 - 01706359 _____ (Thisisu) C:\Users\bonger\Downloads\JRT (1).exe
2014-11-02 09:55 - 2014-11-02 09:55 - 01706359 _____ (Thisisu) C:\Users\bonger\Downloads\JRT.exe
2014-11-02 09:55 - 2014-11-02 09:55 - 00000000 ____D () C:\Windows\ERUNT
2014-11-02 09:54 - 2014-11-02 09:54 - 00017561 _____ () C:\Users\bonger\Desktop\AdwCleaner[S0].txt
2014-11-02 09:48 - 2014-11-02 09:48 - 00000020 ___SH () C:\Users\TEMP\ntuser.ini
2014-11-02 09:48 - 2014-11-02 09:48 - 00000000 _SHDL () C:\Users\TEMP\AppData\Local\Verlauf
2014-11-02 09:47 - 2014-11-02 09:48 - 00000000 ____D () C:\Users\TEMP
2014-11-02 09:47 - 2014-11-02 09:47 - 00000000 _SHDL () C:\Users\TEMP\Startmenü
2014-11-02 09:47 - 2014-11-02 09:47 - 00000000 _SHDL () C:\Users\TEMP\Netzwerkumgebung
2014-11-02 09:47 - 2014-11-02 09:47 - 00000000 _SHDL () C:\Users\TEMP\Druckumgebung
2014-11-02 09:47 - 2014-11-02 09:47 - 00000000 _SHDL () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-02 09:47 - 2012-02-16 15:45 - 00000000 ____D () C:\Users\TEMP\AppData\Roaming\Macromedia
2014-11-02 09:47 - 2010-11-15 12:44 - 00000000 ____D () C:\Users\TEMP\AppData\Local\Microsoft Help
2014-11-02 09:47 - 2009-07-14 05:42 - 00000000 ___RD () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-02 09:47 - 2009-07-14 05:37 - 00000000 ___RD () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-11-02 09:41 - 2014-11-02 09:45 - 00000000 ____D () C:\AdwCleaner
2014-11-02 09:40 - 2014-11-02 09:40 - 01998336 _____ () C:\Users\bonger\Downloads\AdwCleaner_4.002.exe
2014-11-02 09:04 - 2014-11-02 09:04 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-02 09:03 - 2014-11-02 09:03 - 00001111 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-11-02 09:03 - 2014-11-02 09:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-11-02 09:03 - 2014-11-02 09:03 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-11-02 09:03 - 2014-11-02 09:03 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware
2014-11-02 09:03 - 2014-10-01 11:11 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-02 09:03 - 2014-10-01 11:11 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-11-02 09:03 - 2014-10-01 11:11 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-11-02 09:02 - 2014-11-02 09:02 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\bonger\Downloads\mbam-setup-2.0.3.1025.exe
2014-11-01 10:07 - 2014-11-01 10:07 - 00026044 _____ () C:\ComboFix.txt
2014-11-01 09:49 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-11-01 09:49 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-11-01 09:49 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-11-01 09:49 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-11-01 09:49 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-11-01 09:49 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-11-01 09:49 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-11-01 09:49 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-11-01 09:48 - 2014-11-01 10:07 - 00000000 ____D () C:\Qoobox
2014-11-01 09:48 - 2014-11-01 10:05 - 00000000 ____D () C:\Windows\erdnt
2014-11-01 09:47 - 2014-11-01 09:47 - 05591672 ____R (Swearware) C:\Users\bonger\Downloads\ComboFix.exe
2014-11-01 09:37 - 2014-11-01 09:37 - 00001291 _____ () C:\Users\bonger\Desktop\Revo Uninstaller.lnk
2014-11-01 09:37 - 2014-11-01 09:37 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-11-01 09:37 - 2014-10-31 09:32 - 00272296 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-11-01 09:36 - 2014-11-01 09:36 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\bonger\Downloads\revosetup95.exe
2014-11-01 09:35 - 2014-11-01 09:35 - 00918440 _____ (Oracle Corporation) C:\Users\bonger\Downloads\jre-7u60-windows-i586-iftw.exe
2014-11-01 09:34 - 2014-11-02 09:34 - 00000000 ____D () C:\ProgramData\InstaShare
2014-11-01 09:34 - 2014-11-01 09:34 - 00000000 ____D () C:\ProgramData\nXeUcVT
2014-11-01 09:30 - 2014-11-01 09:30 - 79397080 _____ () C:\Users\bonger\Downloads\java-setup (1).exe
2014-11-01 09:28 - 2014-11-01 09:28 - 79397080 _____ () C:\Users\bonger\Downloads\java-setup.exe
2014-10-31 09:43 - 2014-10-31 10:06 - 00046081 _____ () C:\Users\bonger\Downloads\Addition.txt
2014-10-31 09:41 - 2014-11-02 10:03 - 00026127 _____ () C:\Users\bonger\Downloads\FRST.txt
2014-10-31 09:40 - 2014-11-02 10:03 - 00000000 ____D () C:\FRST
2014-10-31 09:40 - 2014-11-02 10:02 - 01105920 _____ (Farbar) C:\Users\bonger\Downloads\FRST.exe
2014-10-31 09:34 - 2014-10-31 09:34 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-10-31 09:31 - 2014-10-31 09:31 - 00638888 _____ (Oracle Corporation) C:\Users\bonger\Downloads\chromeinstall-8u25.exe
2014-10-29 16:05 - 2014-10-29 16:05 - 00000000 ____D () C:\Users\bonger\AppData\Roaming\dlg
2014-10-29 16:00 - 2014-10-29 16:00 - 00664432 _____ () C:\Users\bonger\Downloads\RegpairSetup-Downloader.exe
2014-10-29 15:26 - 2014-10-29 16:04 - 00000000 ____D () C:\Program Files\Free Window Registry Repair
2014-10-29 14:48 - 2013-09-13 19:37 - 00000898 _____ () C:\Windows\system32\Drivers\etc\hosts.20141029-144821.backup
2014-10-29 14:44 - 2013-09-13 19:37 - 00000898 _____ () C:\Windows\system32\Drivers\etc\hosts.20141029-144409.backup
2014-10-29 14:16 - 2014-11-01 08:36 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2
2014-10-29 14:16 - 2014-10-31 08:22 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-10-29 14:15 - 2014-10-29 14:15 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\bonger\Downloads\spybot-2.4.exe
2014-10-26 09:03 - 2014-10-26 09:11 - 02817032 _____ () C:\Users\bonger\Downloads\wulogo4254.rar
2014-10-23 14:53 - 2014-10-23 14:53 - 02524336 _____ () C:\Users\bonger\Downloads\adobe-indesign_26285 (1).exe
2014-10-23 14:50 - 2014-10-23 14:50 - 00000000 ____D () C:\Program Files\Adobe Download Assistant
2014-10-23 14:49 - 2014-10-23 14:50 - 00001092 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Download Assistant.lnk
2014-10-23 14:49 - 2014-10-23 14:49 - 00000000 ____D () C:\Users\bonger\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
2014-10-23 14:48 - 2014-10-23 14:48 - 02524336 _____ () C:\Users\bonger\Downloads\adobe-indesign_26285.exe
2014-10-21 16:16 - 2014-10-21 16:16 - 00913088 _____ () C:\Users\bonger\Downloads\postcard.psd
2014-10-20 11:05 - 2014-10-20 11:05 - 00035304 _____ () C:\Users\bonger\Downloads\janeausten.zip
2014-10-20 10:56 - 2014-10-20 10:56 - 00013179 _____ () C:\Users\bonger\Downloads\gratis.zip
2014-10-16 07:39 - 2014-10-31 09:32 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-10-16 07:34 - 2014-10-07 03:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-16 07:34 - 2014-09-29 01:41 - 02379264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-16 07:34 - 2014-09-25 23:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-16 07:34 - 2014-09-25 23:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-16 07:34 - 2014-09-25 23:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-16 07:34 - 2014-09-25 23:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-16 07:34 - 2014-09-25 23:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-16 07:34 - 2014-09-19 02:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-16 07:34 - 2014-09-19 02:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-16 07:34 - 2014-09-19 02:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-16 07:34 - 2014-09-19 02:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-10-16 07:34 - 2014-09-19 02:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-16 07:34 - 2014-09-19 02:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-16 07:34 - 2014-09-19 02:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-10-16 07:34 - 2014-09-19 01:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-10-16 07:34 - 2014-09-19 01:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-16 07:34 - 2014-09-19 01:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-16 07:34 - 2014-09-19 01:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-16 07:34 - 2014-09-19 01:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-16 07:34 - 2014-09-19 01:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-16 07:34 - 2014-09-19 01:50 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-10-16 07:34 - 2014-09-19 01:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-10-16 07:34 - 2014-09-19 01:44 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-16 07:34 - 2014-09-19 01:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-16 07:34 - 2014-09-19 01:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-16 07:34 - 2014-09-19 01:20 - 00677888 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-16 07:34 - 2014-09-19 01:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-16 07:34 - 2014-09-19 01:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-10-16 07:34 - 2014-09-19 00:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-16 07:34 - 2014-09-19 00:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-16 07:34 - 2014-09-19 00:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-16 07:34 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-16 07:34 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-16 07:34 - 2014-07-17 02:39 - 03221504 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-16 07:34 - 2014-07-17 02:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-10-16 07:34 - 2014-07-17 02:39 - 00919552 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-10-16 07:34 - 2014-07-17 02:39 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-16 07:34 - 2014-07-17 02:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-16 07:34 - 2014-07-17 02:39 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2014-10-16 07:34 - 2014-07-17 02:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-16 07:34 - 2014-07-17 02:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-16 07:34 - 2014-07-17 02:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-16 07:34 - 2014-07-17 02:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-16 07:34 - 2014-07-17 02:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-16 07:34 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-16 07:34 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-16 07:34 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-16 07:33 - 2014-09-18 02:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-16 07:33 - 2014-09-13 02:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-15 10:22 - 2014-10-15 10:22 - 03909864 _____ () C:\Users\bonger\Downloads\Hearts_II_Photoshop_Brushes_by_redheadstock.zip
2014-10-15 10:21 - 2014-10-15 10:22 - 00341606 _____ () C:\Users\bonger\Downloads\Heart_Brushes_by_XPhotoshoperX.abr
2014-10-14 09:09 - 2014-10-14 09:09 - 00928816 _____ () C:\Users\bonger\Downloads\2147495790.zip
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-02 10:00 - 2013-09-30 19:48 - 00000000 ____D () C:\Users\bonger\AppData\Local\D584027D-25E0-4F6F-A217-1CE1A5C323F6.aplzod
2014-11-02 10:00 - 2010-11-12 09:58 - 02572698 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-02 10:00 - 2009-08-14 13:34 - 00729182 _____ () C:\Windows\system32\perfh019.dat
2014-11-02 10:00 - 2009-08-14 13:34 - 00157044 _____ () C:\Windows\system32\perfc019.dat
2014-11-02 09:56 - 2011-02-20 18:26 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-02 09:56 - 2009-07-14 05:34 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-02 09:56 - 2009-07-14 05:34 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-02 09:49 - 2010-12-15 22:29 - 00000434 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-11-02 09:48 - 2014-01-04 14:53 - 00000000 ____D () C:\ProgramData\photoSync
2014-11-02 09:47 - 2013-08-16 08:22 - 00260928 _____ () C:\Windows\PFRO.log
2014-11-02 09:47 - 2013-07-25 13:23 - 00035114 _____ () C:\Windows\setupact.log
2014-11-02 09:47 - 2013-04-19 04:21 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-11-02 09:47 - 2011-02-20 18:26 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-02 09:47 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-02 09:46 - 2010-11-12 09:57 - 01353727 _____ () C:\Windows\WindowsUpdate.log
2014-11-02 09:45 - 2013-06-25 03:09 - 00000000 ____D () C:\Users\bonger\AppData\Local\CRE
2014-11-02 09:34 - 2013-08-21 08:37 - 00000000 ____D () C:\Users\bonger\Download
2014-11-02 09:15 - 2012-10-16 05:38 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-02 09:08 - 2011-10-26 16:00 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1049129853-3666174710-3722791784-1000UA.job
2014-11-02 08:46 - 2010-11-12 11:29 - 00000000 ____D () C:\Users\bonger\AppData\Local\Adobe
2014-11-02 08:37 - 2011-09-11 09:05 - 00681621 _____ () C:\Windows\system32\TVersityMediaServer.log
2014-11-01 10:27 - 2010-11-12 11:16 - 00000000 ____D () C:\Users\bonger\AppData\Local\CrashDumps
2014-11-01 10:07 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Default
2014-11-01 10:07 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Public
2014-11-01 10:02 - 2009-07-14 03:04 - 00000215 _____ () C:\Windows\system.ini
2014-11-01 09:37 - 2013-10-21 14:26 - 00000000 ____D () C:\ProgramData\Oracle
2014-11-01 09:36 - 2010-12-15 12:39 - 00000000 ____D () C:\Program Files\Java
2014-11-01 09:28 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Resources
2014-11-01 09:24 - 2014-07-25 14:39 - 00002305 _____ () C:\Users\bonger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-11-01 09:24 - 2011-05-01 12:02 - 00001112 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-11-01 09:24 - 2010-11-12 10:00 - 00001413 _____ () C:\Users\bonger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-10-31 09:33 - 2014-02-20 11:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2014-10-31 09:33 - 2013-10-21 14:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-10-31 09:32 - 2014-09-17 03:55 - 00176552 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-10-31 09:32 - 2014-09-17 03:55 - 00176552 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-10-29 14:34 - 2014-01-20 07:53 - 00000000 ___RD () C:\Users\bonger\Desktop\Document
2014-10-28 06:35 - 2010-11-12 10:15 - 00229000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-10-26 15:08 - 2011-10-26 16:00 - 00001072 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1049129853-3666174710-3722791784-1000Core.job
2014-10-21 14:55 - 2009-07-14 05:33 - 04138472 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-20 15:17 - 2010-11-12 10:39 - 00000000 ____D () C:\Users\bonger\AppData\Roaming\Adobe
2014-10-20 11:32 - 2010-11-12 11:01 - 00143040 _____ () C:\Users\bonger\AppData\Local\GDIPFONTCACHEV1.DAT
2014-10-19 09:06 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2014-10-17 07:55 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-10-17 07:41 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ru-RU
2014-10-17 07:41 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-10-16 08:20 - 2010-11-12 10:33 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-10-16 08:17 - 2013-08-14 10:32 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-16 08:08 - 2010-11-13 07:46 - 100290944 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-10-15 08:06 - 2014-08-05 10:38 - 00000000 ____D () C:\ProgramData\Package Cache
2014-10-15 08:06 - 2013-10-21 04:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-10-15 08:06 - 2013-10-21 04:10 - 00000000 ____D () C:\Program Files\Avira
2014-10-15 08:04 - 2013-10-21 04:10 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-10-15 08:04 - 2013-10-21 04:10 - 00098160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-10-15 08:04 - 2013-10-21 04:10 - 00037384 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
Some content of TEMP:
====================
C:\Users\bonger\AppData\Local\Temp\avgnt.exe
C:\Users\bonger\AppData\Local\Temp\Quarantine.exe
C:\Users\bonger\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-10-26 08:29
==================== End Of Log ============================
|
|
02.11.2014, 18:05
| #6 |
| /// the machine /// TB-Ausbilder | Windows 7: Lauter Links und neue Fenster in ChromeESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ --> Windows 7: Lauter Links und neue Fenster in Chrome |
|
04.11.2014, 04:22
| #7 |
| | Windows 7: Lauter Links und neue Fenster in ChromeCode:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=ca4bbc358453ed43a18704c888f50b93
# engine=20897
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-11-03 05:27:15
# local_time=2014-11-03 06:27:15 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1810 16777213 100 100 11777 33567193 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 256669 166623626 0 0
# scanned=524889
# found=23
# cleaned=22
# scan_time=6572
sh=08B8AD866A27ADACE4F29D9155AFBAF1CAAE1F15 ft=1 fh=7fcca138d1725700 vn="Variante von MSIL/Adware.PullUpdate.F Anwendung" ac=I fn="C:\Users\All Users\nXeUcVT\dat\EKgpyXMhjqG.dll"
sh=1CBFF3BADC71DF7CE2A39D6513F977BFC5E88D33 ft=1 fh=be5c08edcfbfb2a8 vn="Variante von Win32/Toolbar.SearchSuite evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\Windows iLivid Toolbar\Datamngr\datamngr.dll.vir"
sh=1B914EB3AB94F1466EB595D38785F15E52DB848B ft=1 fh=8ac696ba96ab6d55 vn="Variante von Win32/Toolbar.SearchSuite evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\Windows iLivid Toolbar\Datamngr\datamngrUI.exe.vir"
sh=D9661E7DF46F4FCB37E7D8C3E1BF74ED9332F66D ft=1 fh=e6b80258c992497f vn="Variante von Win32/Toolbar.SearchSuite evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\Windows iLivid Toolbar\Datamngr\IEBHO.dll.vir"
sh=B81BAAC9D35824000ADB556418067A9220C40F01 ft=1 fh=23a12d968d390125 vn="Variante von Win32/Toolbar.Visicom.C evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\Windows iLivid Toolbar\Datamngr\ToolBar\dtUser.exe.vir"
sh=5618448E0195BA9251A1A0A5132CE2612037D630 ft=1 fh=ccf0f11a65c989b1 vn="Variante von Win32/Toolbar.Visicom.A evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\Windows iLivid Toolbar\Datamngr\ToolBar\searchquband.dll.vir"
sh=9069C1AE362702A5CFD0947D07C49791244CF7E1 ft=1 fh=b2a7890de2375dad vn="Variante von Win32/Toolbar.Visicom.B evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\Windows iLivid Toolbar\Datamngr\ToolBar\searchqudtx.dll.vir"
sh=355EF3DF30DB2A249AB12BA8939C6E1CC9DE9078 ft=1 fh=36dbadd70f91bf18 vn="Variante von Win32/Systweak.A evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Windows\system32\roboot.exe.vir"
sh=08B8AD866A27ADACE4F29D9155AFBAF1CAAE1F15 ft=1 fh=7fcca138d1725700 vn="Variante von MSIL/Adware.PullUpdate.F Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\ProgramData\nXeUcVT\dat\EKgpyXMhjqG.dll"
sh=5A343816AD5D9008705025A211B196882E5E23E5 ft=1 fh=1d58bb84a288ee81 vn="Variante von Win32/Adware.RK.AM Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Qoobox\Quarantine\C\Program Files\PremierOpinion\pmls.dll.vir"
sh=28FE1F4592D510C5E8F92EE4608E0654B44FF27B ft=1 fh=c7849c38afcc029d vn="Win32/Somoto.G evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\File System\001\t\00\00000000"
sh=EF50E9B48CA05EC1423DD9C858738A2971BFB8A8 ft=1 fh=5f4591e8147a9bfd vn="Win32/StartPage.OIE Trojaner (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\bonger\Download\vlc-1.1.11-win32.exe"
sh=B312E79757AFDF6BB9DD07F5D3E88066B5C1D438 ft=1 fh=d702af4396ccb3ce vn="Win32/Adware.WhenU.SaveNow evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\bonger\Download\Downloads\Internet\Laufwerke\daemon406-x86.exe"
sh=892A6C4FB8F6F81DD79442EA6AC40E21F63C9239 ft=1 fh=fa43a930bca1e78e vn="Variante von Win32/WinloadSDA.D evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\bonger\Downloads\Dienstplan-Editor-pro-lnstall.exe"
sh=4292CDD86D02226963DE44DDCFF688AD49A46668 ft=1 fh=d5bc91bb57fa4ff7 vn="Win32/DownloadAdmin.G evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\bonger\Downloads\java-setup (1).exe"
sh=4292CDD86D02226963DE44DDCFF688AD49A46668 ft=1 fh=d5bc91bb57fa4ff7 vn="Win32/DownloadAdmin.G evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\bonger\Downloads\java-setup.exe"
sh=FBBE31F08E493A8B0702FE72F3ABA6DF996E20C6 ft=1 fh=1055b3d0ea15ac02 vn="Win32/InstallMonetizer.AQ evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\bonger\Downloads\PDFCreator-1_7_2_setup.exe"
sh=70639BDD331D1C324D2AC4911198637AE161C381 ft=1 fh=75fa35fddbdd5ccc vn="Variante von Win32/DownloadGuide.C evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\bonger\Downloads\RegpairSetup-Downloader.exe"
sh=C472F14353BEA813DAC658914715D94B1EF0B77B ft=1 fh=02b314bebb7ce134 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\bonger\Downloads\SketchUp Make 2014 - CHIP-Installer.exe"
sh=0F4809DC5FE8385BD90A46FDEF8DE6DC10E71875 ft=1 fh=c2e918b5bfb41760 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\bonger\Downloads\wm2014xxl - CHIP-Installer.exe"
sh=D32B92ABCEC651ABE6B27997A67674DC994609E4 ft=1 fh=04eb9f1f842db58d vn="Win32/Toolbar.AskSBar evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\bonger\Programme\Nero-8.3.6.0_deu_trial.exe"
sh=B312E79757AFDF6BB9DD07F5D3E88066B5C1D438 ft=1 fh=d702af4396ccb3ce vn="Win32/Adware.WhenU.SaveNow evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="L:\Datensicherung_Festplatte_C\Downloads\Internet\Laufwerke\daemon406-x86.exe"
sh=D32B92ABCEC651ABE6B27997A67674DC994609E4 ft=1 fh=04eb9f1f842db58d vn="Win32/Toolbar.AskSBar evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="L:\Datensicherung_Festplatte C_8.11.2010\Programme\Nero-8.3.6.0_deu_trial.exe"
Code:
ATTFilter Results of screen317's Security Check version 0.99.89
Windows 7 Service Pack 1 x86 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Avira Desktop
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
TuneUp Utilities Language Pack (de-DE)
JavaFX 2.1.1
Java 7 Update 60
Java 7 Update 71
Java 8 Update 25
Java SE Development Kit 7 Update 51
Java version out of Date!
Adobe Flash Player 15.0.0.152
Adobe Reader 10.1.7 Adobe Reader out of Date!
Mozilla Firefox (7.0.1)
Google Chrome 33.0.1750.117
````````Process Check: objlist.exe by Laurent````````
Avira Antivir avgnt.exe
Avira Antivir avguard.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:
````````````````````End of Log``````````````````````
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 02-11-2014
Ran by bonger (administrator) on BONGER-PC on 04-11-2014 04:25:26
Running from C:\Users\bonger\Downloads
Loaded Profiles: bonger & UpdatusUser (Available profiles: bonger & UpdatusUser)
Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Nero AG) C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(webEcoz, LLC.) C:\Program Files\PhotoSync\peservice.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(webEcoz, LLC.) C:\Program Files\PhotoSync\Sync.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Geek Software GmbH) C:\Program Files\PDF24\pdf24.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(Prolific Technology Inc.) C:\Windows\System32\IoctlSvc.exe
() C:\Windows\System32\PnkBstrA.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe
() C:\ProgramData\TVersity\Media Server\MediaServer.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [Nvtmru] => C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-07-03] (NVIDIA Corporation)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [43816 2014-07-31] (Apple Inc.)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [703736 2014-10-15] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-12-10] (Adobe Systems Incorporated)
HKLM\...\Run: [sync] => C:\Program Files\photoSync\sync.exe [276992 2013-10-08] (webEcoz, LLC.)
HKLM\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2239376 2013-12-19] (Adobe Systems Incorporated)
HKLM\...\Run: [PDFPrint] => C:\Program Files\PDF24\pdf24.exe [189480 2014-02-06] (Geek Software GmbH)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [152392 2014-09-01] (Apple Inc.)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [165168 2014-09-23] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-1049129853-3666174710-3722791784-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\S-1-5-21-1049129853-3666174710-3722791784-1000\...\Run: [iCloudServices] => C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2014-08-07] (Apple Inc.)
HKU\S-1-5-21-1049129853-3666174710-3722791784-1000\...\Run: [ApplePhotoStreams] => C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2014-08-14] (Apple Inc.)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2013-07-16] (Microsoft Corporation)
Startup: C:\Users\bonger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll ()
ShellIconOverlayIdentifiers: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
BootExecute: autocheck autochk * sdnclean.exe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1049129853-3666174710-3722791784-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKCU - {1C6BBE7F-01F0-4E30-A6B1-80422086B185} URL = hxxp://search.yahoo.com/search?p={searchTerms}&fr=tightropetb&type=10959
BHO: PreispiratenSearchURL -> {0B660087-931C-4056-A04F-0423890E40B6} -> C:\Program Files\Preispiraten\Preispiraten2\PPSearchURL.dll ()
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO: amazon -> {84B94901-3645-4D80-A6B7-4D0050B19455} -> C:\Program Files\Preispiraten6\IEButtonAmazonInterface.dll ()
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
BHO: metaspinner media GmbH -> {CD9B7762-DFBC-42B1-BB30-02A78287B456} -> C:\Program Files\Preispiraten\Preispiraten2\IEButtonEBayInterface.dll ()
BHO: metaspinner media GmbH -> {D3AA56A9-8137-4950-A6F9-D0190A82AF2A} -> C:\Program Files\Preispiraten\Preispiraten2\IEButtonPPInterface.dll ()
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
BHO: Preispiraten -> {E9E027BF-C3F3-4022-8F6B-8F6D39A59684} -> C:\Program Files\Preispiraten6\IEButtonPPInterface.dll ()
Toolbar: HKLM - No Name - !{98889811-442D-49dd-99D7-DC866BE87DBC} - No File
Toolbar: HKCU - No Name - {955D413E-9DCE-4CC9-BB9D-C807E2C04601} - No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_25-windows-i586.cab
DPF: {CAFEEFAC-0018-0000-0025-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_25-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_25-windows-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Winsock: Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre1.8.0_25\bin\new_plugin\npjp2.dll No File
FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\3.0.40723.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @pages.tvunetworks.com/WebPlayer -> C:\Windows\system32\TVUAx\npTVUAx.dll (TVU networks)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\bonger\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\bonger\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\bonger\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Extension: 20-20 3D Viewer - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\2020Player@2020Technologies.com [2010-11-12]
FF Extension: Virtus Search Opt-in - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\extension@virtusdesigns.com [2010-11-26]
FF Extension: TVU Web Player - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\firefox@tvunetworks.com [2011-04-23]
FF Extension: Eclipse - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{12bc3590-67a6-11de-8a39-0800200c9a66} [2010-11-26]
FF Extension: FT DeepDark - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{77d2ed30-4cd2-11e0-b8af-0800200c9a66} [2012-07-10]
FF Extension: iMacros for Firefox - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670} [2014-03-05]
FF Extension: FT GraphiteGlow - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{99e34760-2754-11e0-91fa-0800200c9a66} [2012-07-10]
FF Extension: FT SleekDark - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{a21cd440-41d6-11e0-9207-0800200c9a66} [2012-07-10]
FF Extension: Preispiraten - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{C8D3D3BE-7ADC-4109-BF8C-6330A9F58B0C} [2010-11-22]
FF Extension: Greasemonkey - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} [2012-10-16]
FF Extension: NASA Night Launch - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\nasanightlaunch@example.com.xpi [2011-10-26]
FF Extension: Amazon Startcenter - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{144D1513-0819-4538-AD26-D515AF443AE7}.xpi [2012-07-10]
FF Extension: Amazon Statusbar Button - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{32DD6873-2BC0-4E4B-B9A3-0E602AB0DC14}.xpi [2012-07-10]
FF Extension: FXOpera - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{e7c7d1b3-5984-410e-9f1e-54e3f8490e8e}.xpi [2011-10-26]
FF Extension: Anti-Banner - C:\Program Files\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak2 [2012-07-18]
FF Extension: Modul zur Link-Untersuchung - C:\Program Files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2 [2012-07-18]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [2010-12-15]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011-03-16]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} [2011-06-15]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA} [2011-10-12]
FF HKLM\...\Firefox\Extensions: [fe_7.0@nokia.com] - C:\Program Files\Nokia\Nokia Suite\Connectors\Bookmarks Connector\FirefoxExtension_7.0
FF Extension: Firefox Synchronisation Extension - C:\Program Files\Nokia\Nokia Suite\Connectors\Bookmarks Connector\FirefoxExtension_7.0 [2012-02-23]
FF HKLM\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2013-06-27]
FF HKLM\...\Thunderbird\Extensions: [te_9.0@nokia.com] - C:\Program Files\Nokia\Nokia Suite\Connectors\Thunderbird Connector\ThunderbirdExtension_9.0
FF Extension: Thunderbird Address Book Synchronisation Extension - C:\Program Files\Nokia\Nokia Suite\Connectors\Thunderbird Connector\ThunderbirdExtension_9.0 [2012-02-23]
FF Extension: No Name - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\extensions\specialsavings@superfish.com [Not Found]
FF Extension: No Name - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\extensions\faststartff@gmail.com [Not Found]
FF StartMenuInternet: FIREFOX.EXE - firefox.exe
Chrome:
=======
CHR Profile: C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-23]
CHR Extension: (YouTube) - C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-23]
CHR Extension: (Adblock Plus) - C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-10-31]
CHR Extension: (Google-Suche) - C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-23]
CHR Extension: (Logitech SetPoint) - C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Extensions\edaibbiobngpbmeonadpbfafbkimjbdd [2014-07-25]
CHR Extension: (Google Wallet) - C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-14]
CHR Extension: (Google Mail) - C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-23]
CHR HKLM\...\Chrome\Extension: [edaibbiobngpbmeonadpbfafbkimjbdd] - C:\ProgramData\Logitech\LogiSmoothChromeExt.crx [2013-06-27]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [431920 2014-10-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [431920 2014-10-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [994096 2014-10-15] (Avira Operations GmbH & Co. KG)
S2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [160560 2014-09-23] (Avira Operations GmbH & Co. KG)
S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2010-11-12] (Macrovision Europe Ltd.) [File not signed]
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 peservice; C:\Program Files\photoSync\peservice.exe [41472 2013-10-08] (webEcoz, LLC.) [File not signed]
R2 PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [File not signed]
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [66872 2011-04-26] ()
S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 TVersityMediaServer; C:\ProgramData\TVersity\Media Server\MediaServer.exe [1249064 2011-07-29] ()
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [108480 2010-09-14] (SlySoft, Inc.)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [281760 2011-02-05] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98160 2014-10-15] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-10-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-10-10] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [37384 2014-10-15] (Avira Operations GmbH & Co. KG)
S3 bdacap; C:\Windows\System32\drivers\bdacap.sys [322048 2006-11-03] (Genesys Logic, Inc.) [File not signed]
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2013-09-13] (DT Soft Ltd)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [31088 2010-12-16] (Elaborate Bytes AG)
R3 ElbyDelay; C:\Windows\System32\Drivers\ElbyDelay.sys [11984 2007-02-16] (Elaborate Bytes AG)
R3 LEqdUsb; C:\Windows\System32\Drivers\LEqdUsb.Sys [44296 2013-01-03] (Logitech, Inc.)
R3 LHidEqd; C:\Windows\System32\Drivers\LHidEqd.Sys [12808 2013-01-03] (Logitech, Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2011-02-05] ()
R1 MIPFSv332; C:\Windows\system32\drivers\MIPFSv332.sys [145960 2010-09-20] (GetData Pty Ltd)
R3 netr28u; C:\Windows\System32\DRIVERS\netr28u.sys [657408 2009-07-13] (Ralink Technology Corp.)
S3 RzSynapse; C:\Windows\System32\DRIVERS\RzSynapse.sys [60032 2010-04-21] (Razer USA Ltd) [File not signed]
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [611064 2011-03-08] (Duplex Secure Ltd.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-10-10] (Avira GmbH)
R2 SSPORT; C:\Windows\system32\Drivers\SSPORT.sys [5120 2011-03-14] (Samsung Electronics) [File not signed]
R3 vpcbus; C:\Windows\System32\DRIVERS\vpchbus.sys [172416 2010-11-20] (Microsoft Corporation)
R1 vpcnfltr; C:\Windows\System32\DRIVERS\vpcnfltr.sys [48128 2010-11-20] (Microsoft Corporation)
R3 vpcusb; C:\Windows\System32\DRIVERS\vpcusb.sys [78336 2010-11-20] (Microsoft Corporation)
R1 vpcvmm; C:\Windows\System32\drivers\vpcvmm.sys [296064 2010-11-20] (Microsoft Corporation)
R3 WFMC_VAD; C:\Windows\System32\DRIVERS\wfmcvad.sys [19456 2010-02-08] (WiFi Media Connect)
S1 ArcSec; system32\drivers\ArcSec.sys [X]
S3 catchme; \??\C:\Users\bonger\AppData\Local\Temp\catchme.sys [X]
S1 MIPv432; \??\C:\Windows\system32\drivers\MIPv432.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-04 04:17 - 2014-11-04 04:17 - 00854448 _____ () C:\Users\bonger\Downloads\SecurityCheck.exe
2014-11-04 04:01 - 2014-11-04 04:01 - 00000020 ___SH () C:\Users\TEMP\ntuser.ini
2014-11-04 04:01 - 2014-11-04 04:01 - 00000000 _SHDL () C:\Users\TEMP\Startmenü
2014-11-04 04:01 - 2014-11-04 04:01 - 00000000 _SHDL () C:\Users\TEMP\Netzwerkumgebung
2014-11-04 04:01 - 2014-11-04 04:01 - 00000000 _SHDL () C:\Users\TEMP\Druckumgebung
2014-11-04 04:01 - 2014-11-04 04:01 - 00000000 _SHDL () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-04 04:01 - 2014-11-04 04:01 - 00000000 _SHDL () C:\Users\TEMP\AppData\Local\Verlauf
2014-11-04 04:01 - 2014-11-04 04:01 - 00000000 ____D () C:\Users\TEMP
2014-11-04 04:01 - 2012-02-16 15:45 - 00000000 ____D () C:\Users\TEMP\AppData\Roaming\Macromedia
2014-11-04 04:01 - 2010-11-15 12:44 - 00000000 ____D () C:\Users\TEMP\AppData\Local\Microsoft Help
2014-11-04 04:01 - 2009-07-14 05:42 - 00000000 ___RD () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-04 04:01 - 2009-07-14 05:37 - 00000000 ___RD () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-11-03 04:35 - 2014-11-03 04:35 - 02347384 _____ (ESET) C:\Users\bonger\Downloads\esetsmartinstaller_deu.exe
2014-11-02 10:02 - 2014-11-04 04:25 - 00000000 ____D () C:\Users\bonger\Downloads\FRST-OlderVersion
2014-11-02 09:57 - 2014-11-02 09:57 - 01706359 _____ (Thisisu) C:\Users\bonger\Downloads\JRT (1).exe
2014-11-02 09:55 - 2014-11-02 09:55 - 01706359 _____ (Thisisu) C:\Users\bonger\Downloads\JRT.exe
2014-11-02 09:55 - 2014-11-02 09:55 - 00000000 ____D () C:\Windows\ERUNT
2014-11-02 09:41 - 2014-11-02 09:45 - 00000000 ____D () C:\AdwCleaner
2014-11-02 09:40 - 2014-11-02 09:40 - 01998336 _____ () C:\Users\bonger\Downloads\AdwCleaner_4.002.exe
2014-11-02 09:04 - 2014-11-02 10:38 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-02 09:03 - 2014-11-02 09:03 - 00001111 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-11-02 09:03 - 2014-11-02 09:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-11-02 09:03 - 2014-11-02 09:03 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-11-02 09:03 - 2014-11-02 09:03 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware
2014-11-02 09:03 - 2014-10-01 11:11 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-02 09:03 - 2014-10-01 11:11 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-11-02 09:03 - 2014-10-01 11:11 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-11-02 09:02 - 2014-11-02 09:02 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\bonger\Downloads\mbam-setup-2.0.3.1025.exe
2014-11-01 10:07 - 2014-11-01 10:07 - 00026044 _____ () C:\ComboFix.txt
2014-11-01 09:49 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-11-01 09:49 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-11-01 09:49 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-11-01 09:49 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-11-01 09:49 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-11-01 09:49 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-11-01 09:49 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-11-01 09:49 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-11-01 09:48 - 2014-11-01 10:07 - 00000000 ____D () C:\Qoobox
2014-11-01 09:48 - 2014-11-01 10:05 - 00000000 ____D () C:\Windows\erdnt
2014-11-01 09:47 - 2014-11-01 09:47 - 05591672 ____R (Swearware) C:\Users\bonger\Downloads\ComboFix.exe
2014-11-01 09:37 - 2014-11-01 09:37 - 00001291 _____ () C:\Users\bonger\Desktop\Revo Uninstaller.lnk
2014-11-01 09:37 - 2014-11-01 09:37 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-11-01 09:37 - 2014-10-31 09:32 - 00272296 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-11-01 09:36 - 2014-11-01 09:36 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\bonger\Downloads\revosetup95.exe
2014-11-01 09:35 - 2014-11-01 09:35 - 00918440 _____ (Oracle Corporation) C:\Users\bonger\Downloads\jre-7u60-windows-i586-iftw.exe
2014-11-01 09:34 - 2014-11-02 09:44 - 00000000 ____D () C:\ProgramData\nXeUcVT
2014-11-01 09:34 - 2014-11-02 09:34 - 00000000 ____D () C:\ProgramData\InstaShare
2014-10-31 09:43 - 2014-10-31 10:06 - 00046081 _____ () C:\Users\bonger\Downloads\Addition.txt
2014-10-31 09:41 - 2014-11-04 04:25 - 00026135 _____ () C:\Users\bonger\Downloads\FRST.txt
2014-10-31 09:40 - 2014-11-04 04:25 - 01106432 _____ (Farbar) C:\Users\bonger\Downloads\FRST.exe
2014-10-31 09:40 - 2014-11-04 04:25 - 00000000 ____D () C:\FRST
2014-10-31 09:34 - 2014-10-31 09:34 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-10-31 09:31 - 2014-10-31 09:31 - 00638888 _____ (Oracle Corporation) C:\Users\bonger\Downloads\chromeinstall-8u25.exe
2014-10-29 16:05 - 2014-10-29 16:05 - 00000000 ____D () C:\Users\bonger\AppData\Roaming\dlg
2014-10-29 15:26 - 2014-10-29 16:04 - 00000000 ____D () C:\Program Files\Free Window Registry Repair
2014-10-29 14:48 - 2013-09-13 19:37 - 00000898 _____ () C:\Windows\system32\Drivers\etc\hosts.20141029-144821.backup
2014-10-29 14:44 - 2013-09-13 19:37 - 00000898 _____ () C:\Windows\system32\Drivers\etc\hosts.20141029-144409.backup
2014-10-29 14:16 - 2014-11-01 08:36 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2
2014-10-29 14:16 - 2014-10-31 08:22 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-10-29 14:15 - 2014-10-29 14:15 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\bonger\Downloads\spybot-2.4.exe
2014-10-26 09:03 - 2014-10-26 09:11 - 02817032 _____ () C:\Users\bonger\Downloads\wulogo4254.rar
2014-10-23 14:53 - 2014-10-23 14:53 - 02524336 _____ () C:\Users\bonger\Downloads\adobe-indesign_26285 (1).exe
2014-10-23 14:50 - 2014-10-23 14:50 - 00000000 ____D () C:\Program Files\Adobe Download Assistant
2014-10-23 14:49 - 2014-10-23 14:50 - 00001092 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Download Assistant.lnk
2014-10-23 14:49 - 2014-10-23 14:49 - 00000000 ____D () C:\Users\bonger\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
2014-10-23 14:48 - 2014-10-23 14:48 - 02524336 _____ () C:\Users\bonger\Downloads\adobe-indesign_26285.exe
2014-10-21 16:16 - 2014-10-21 16:16 - 00913088 _____ () C:\Users\bonger\Downloads\postcard.psd
2014-10-20 11:05 - 2014-10-20 11:05 - 00035304 _____ () C:\Users\bonger\Downloads\janeausten.zip
2014-10-20 10:56 - 2014-10-20 10:56 - 00013179 _____ () C:\Users\bonger\Downloads\gratis.zip
2014-10-16 07:39 - 2014-10-31 09:32 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-10-16 07:34 - 2014-10-07 03:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-16 07:34 - 2014-09-29 01:41 - 02379264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-16 07:34 - 2014-09-25 23:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-16 07:34 - 2014-09-25 23:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-16 07:34 - 2014-09-25 23:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-16 07:34 - 2014-09-25 23:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-16 07:34 - 2014-09-25 23:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-16 07:34 - 2014-09-19 02:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-16 07:34 - 2014-09-19 02:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-16 07:34 - 2014-09-19 02:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-16 07:34 - 2014-09-19 02:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-10-16 07:34 - 2014-09-19 02:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-16 07:34 - 2014-09-19 02:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-16 07:34 - 2014-09-19 02:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-10-16 07:34 - 2014-09-19 01:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-10-16 07:34 - 2014-09-19 01:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-16 07:34 - 2014-09-19 01:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-16 07:34 - 2014-09-19 01:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-16 07:34 - 2014-09-19 01:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-16 07:34 - 2014-09-19 01:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-16 07:34 - 2014-09-19 01:50 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-10-16 07:34 - 2014-09-19 01:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-10-16 07:34 - 2014-09-19 01:44 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-16 07:34 - 2014-09-19 01:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-16 07:34 - 2014-09-19 01:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-16 07:34 - 2014-09-19 01:20 - 00677888 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-16 07:34 - 2014-09-19 01:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-16 07:34 - 2014-09-19 01:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-10-16 07:34 - 2014-09-19 00:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-16 07:34 - 2014-09-19 00:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-16 07:34 - 2014-09-19 00:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-16 07:34 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-16 07:34 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-16 07:34 - 2014-07-17 02:39 - 03221504 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-16 07:34 - 2014-07-17 02:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-10-16 07:34 - 2014-07-17 02:39 - 00919552 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-10-16 07:34 - 2014-07-17 02:39 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-16 07:34 - 2014-07-17 02:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-16 07:34 - 2014-07-17 02:39 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2014-10-16 07:34 - 2014-07-17 02:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-16 07:34 - 2014-07-17 02:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-16 07:34 - 2014-07-17 02:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-16 07:34 - 2014-07-17 02:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-16 07:34 - 2014-07-17 02:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-16 07:34 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-16 07:34 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-16 07:34 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-16 07:33 - 2014-09-18 02:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-16 07:33 - 2014-09-13 02:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-15 10:22 - 2014-10-15 10:22 - 03909864 _____ () C:\Users\bonger\Downloads\Hearts_II_Photoshop_Brushes_by_redheadstock.zip
2014-10-15 10:21 - 2014-10-15 10:22 - 00341606 _____ () C:\Users\bonger\Downloads\Heart_Brushes_by_XPhotoshoperX.abr
2014-10-14 09:09 - 2014-10-14 09:09 - 00928816 _____ () C:\Users\bonger\Downloads\2147495790.zip
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-04 04:19 - 2013-09-30 19:48 - 00000000 ____D () C:\Users\bonger\AppData\Local\D584027D-25E0-4F6F-A217-1CE1A5C323F6.aplzod
2014-11-04 04:15 - 2012-10-16 05:38 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-04 04:12 - 2010-11-12 11:29 - 00000000 ____D () C:\Users\bonger\AppData\Local\Adobe
2014-11-04 04:09 - 2011-10-26 16:00 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1049129853-3666174710-3722791784-1000UA.job
2014-11-04 04:09 - 2009-07-14 05:34 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-04 04:09 - 2009-07-14 05:34 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-04 04:06 - 2010-11-12 09:57 - 01407481 _____ () C:\Windows\WindowsUpdate.log
2014-11-04 04:02 - 2014-01-04 14:53 - 00000000 ____D () C:\ProgramData\photoSync
2014-11-04 04:02 - 2010-12-15 22:29 - 00000432 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-11-04 04:01 - 2013-07-25 13:23 - 00035282 _____ () C:\Windows\setupact.log
2014-11-04 04:01 - 2013-04-19 04:21 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-11-04 04:01 - 2011-02-20 18:26 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-04 04:01 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-03 09:56 - 2011-02-20 18:26 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-03 06:25 - 2010-11-12 17:34 - 00000000 ___RD () C:\Users\bonger\Programme
2014-11-03 06:24 - 2013-08-21 08:37 - 00000000 ____D () C:\Users\bonger\Download
2014-11-03 04:35 - 2010-11-12 09:58 - 02543576 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-03 04:35 - 2009-08-14 13:34 - 00729182 _____ () C:\Windows\system32\perfh019.dat
2014-11-03 04:35 - 2009-08-14 13:34 - 00157044 _____ () C:\Windows\system32\perfc019.dat
2014-11-02 09:47 - 2013-08-16 08:22 - 00260928 _____ () C:\Windows\PFRO.log
2014-11-02 09:45 - 2013-06-25 03:09 - 00000000 ____D () C:\Users\bonger\AppData\Local\CRE
2014-11-02 09:45 - 2010-12-01 22:57 - 00000000 ____D () C:\ProgramData\ICQ
2014-11-02 08:37 - 2011-09-11 09:05 - 00681621 _____ () C:\Windows\system32\TVersityMediaServer.log
2014-11-01 10:27 - 2010-11-12 11:16 - 00000000 ____D () C:\Users\bonger\AppData\Local\CrashDumps
2014-11-01 10:07 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Default
2014-11-01 10:07 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Public
2014-11-01 10:02 - 2009-07-14 03:04 - 00000215 _____ () C:\Windows\system.ini
2014-11-01 09:37 - 2013-10-21 14:26 - 00000000 ____D () C:\ProgramData\Oracle
2014-11-01 09:36 - 2010-12-15 12:39 - 00000000 ____D () C:\Program Files\Java
2014-11-01 09:28 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Resources
2014-11-01 09:24 - 2014-07-25 14:39 - 00002305 _____ () C:\Users\bonger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-11-01 09:24 - 2011-05-01 12:02 - 00001112 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-11-01 09:24 - 2010-11-12 10:00 - 00001413 _____ () C:\Users\bonger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-10-31 09:33 - 2014-02-20 11:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2014-10-31 09:33 - 2013-10-21 14:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-10-31 09:32 - 2014-09-17 03:55 - 00176552 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-10-31 09:32 - 2014-09-17 03:55 - 00176552 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-10-29 14:34 - 2014-01-20 07:53 - 00000000 ___RD () C:\Users\bonger\Desktop\Document
2014-10-28 06:35 - 2010-11-12 10:15 - 00229000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-10-26 15:08 - 2011-10-26 16:00 - 00001072 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1049129853-3666174710-3722791784-1000Core.job
2014-10-21 14:55 - 2009-07-14 05:33 - 04138472 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-20 15:17 - 2010-11-12 10:39 - 00000000 ____D () C:\Users\bonger\AppData\Roaming\Adobe
2014-10-20 11:32 - 2010-11-12 11:01 - 00143040 _____ () C:\Users\bonger\AppData\Local\GDIPFONTCACHEV1.DAT
2014-10-19 09:06 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2014-10-17 07:55 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-10-17 07:41 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ru-RU
2014-10-17 07:41 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-10-16 08:20 - 2010-11-12 10:33 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-10-16 08:17 - 2013-08-14 10:32 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-16 08:08 - 2010-11-13 07:46 - 100290944 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-10-15 08:06 - 2014-08-05 10:38 - 00000000 ____D () C:\ProgramData\Package Cache
2014-10-15 08:06 - 2013-10-21 04:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-10-15 08:06 - 2013-10-21 04:10 - 00000000 ____D () C:\Program Files\Avira
2014-10-15 08:04 - 2013-10-21 04:10 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-10-15 08:04 - 2013-10-21 04:10 - 00098160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-10-15 08:04 - 2013-10-21 04:10 - 00037384 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
Some content of TEMP:
====================
C:\Users\bonger\AppData\Local\Temp\avgnt.exe
C:\Users\bonger\AppData\Local\Temp\Quarantine.exe
C:\Users\bonger\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-10-26 08:29
==================== End Of Log ============================
Hi Schrauber, es läuft alles wieder super. Sehe bzw spüre keine Probleme mehr.  Vielen lieben Dank für deine Hilfe Gruss bonger |
|
04.11.2014, 11:37
| #8 |
| /// the machine /// TB-Ausbilder | Windows 7: Lauter Links und neue Fenster in Chrome Java und Adobe updaten. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
05.11.2014, 05:07
| #9 |
| | Windows 7: Lauter Links und neue Fenster in Chrome Die Fixlist.txt Datei soll im selben Orner sein, sagt er mir. "no fixlist.txt found. The fixlist.txt should be in the same folder/directory the tool is located." Egal wo ich sie hinpacke, er sagt es immer wieder. |
|
05.11.2014, 17:49
| #10 | |
| /// the machine /// TB-Ausbilder | Windows 7: Lauter Links und neue Fenster in ChromeZitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
06.11.2014, 05:01
| #11 |
| | Windows 7: Lauter Links und neue Fenster in Chrome Alles läuft, kann geschlossen werden  |
|
06.11.2014, 14:52
| #12 |
| /// the machine /// TB-Ausbilder | Windows 7: Lauter Links und neue Fenster in Chrome Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
dann auf 
und dann auf 
. 
WARNUNG an die MITLESER: 
Linear-Darstellung
