Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Ausgangslage TR/Crypt.XPACL.Gen3. - Malware findet über 100 bösartige Programme (https://www.trojaner-board.de/135682-ausgangslage-tr-crypt-xpacl-gen3-malware-findet-100-boesartige-programme.html)

Makr 28.05.2013 11:42
Ausgangslage TR/Crypt.XPACL.Gen3. - Malware findet über 100 bösartige Programme
 
Liebes Trojaner-Board Team,

Mein Computer zeigte mir vor ein paar Wochen den Virus: TR/Crypt.XPACK.Gen2 an.
Im Pfad F:\d01c7e83fd8b376224\MRT.exe.

Außerdem kommt seither die Meldung tcbhn kann nicht ausgeführt werden und wird geschlossen.

Ich habe dem Trojaner den Zugriff verweigert. Leider kommt die Meldung immer wieder.

Nun habe ich mich an die Anweisungen anderer User gehalten und einen Malware-Suchlauf gemacht. Da kamen mehr als 100 Probleme auf.

Was sol ich nun machen? Bitte bitte ganz einfache Computer-Sprache, da ich nicht die geringste Ahnung vom Innenleben eines Computers habe.

Hier die Log-Datei:

Malwarebytes Anti-Malware (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.05.28.01

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
Mobil-Star :: MOBIL-STAR-03 [Administrator]

Schutz: Aktiviert

28.05.2013 08:30:58
MBAM-log-2013-05-28 (12-42-33).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|F:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 431659
Laufzeit: 3 Stunde(n), 46 Minute(n), 19 Sekunde(n)

Infizierte Speicherprozesse: 1
C:\ProgramData\IBUpdaterService\ibsvc.exe (PUP.InstallBrain) -> 2488 -> Keine Aktion durchgeführt.

Infizierte Speichermodule: 1
C:\Program Files\BrowserCompanion\jsloader.dll (PUP.Blabbers) -> Keine Aktion durchgeführt.

Infizierte Registrierungsschlüssel: 24
HKCR\CLSID\{00cbb66b-1d3b-46d3-9577-323a336acb50} (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCR\TypeLib\{8830DDF0-3042-404D-A62C-384A85E34833} (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCR\Interface\{817923CB-4744-4216-B250-CF7EDA8F1767} (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCR\wit4ie.WitBHO.2 (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCR\wit4ie.WitBHO (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00CBB66B-1D3B-46D3-9577-323A336ACB50} (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00CBB66B-1D3B-46D3-9577-323A336ACB50} (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCR\CLSID\{5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCR\TypeLib\{830B56CB-FD22-44AA-9887-7898F4F4158D} (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCR\tdataprotocol.CTData.1 (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCR\tdataprotocol.CTData (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCR\CLSID\{963B125B-8B21-49A2-A3A8-E37092276531} (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCR\TypeLib\{955B782E-CDC8-4CEE-B6F6-AD7D541A8D8A} (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCR\Interface\{9F0C17EB-EF2C-4278-9136-2D547656BC03} (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCR\updatebho.TimerBHO.1 (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCR\updatebho.TimerBHO (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{963B125B-8B21-49A2-A3A8-E37092276531} (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{963B125B-8B21-49A2-A3A8-E37092276531} (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{963B125B-8B21-49A2-A3A8-E37092276531} (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BrowserCompanion (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKLM\SYSTEM\CurrentControlSet\Services\IBUpdaterService (PUP.InstallBrain) -> Keine Aktion durchgeführt.
HKCR\PROTOCOLS\HANDLER\BASE64 (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCR\PROTOCOLS\HANDLER\CHROME (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCR\PROTOCOLS\HANDLER\PROX (PUP.Blabbers) -> Keine Aktion durchgeführt.

Infizierte Registrierungswerte: 3
HKCR\protocols\Handler\base64|CLSID (PUP.Blabbers) -> Daten: {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} -> Keine Aktion durchgeführt.
HKCR\protocols\Handler\chrome|CLSID (PUP.Blabbers) -> Daten: {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} -> Keine Aktion durchgeführt.
HKCR\protocols\Handler\prox|CLSID (PUP.Blabbers) -> Daten: {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} -> Keine Aktion durchgeführt.

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 7
C:\Program Files\BrowserCompanion (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\ProgramData\IBUpdaterService (PUP.InstallBrain) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Windows\System32\config\systemprofile\AppData\LocalLow\bbrs_002.tb (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Windows\System32\config\systemprofile\AppData\LocalLow\bbrs_002.tb\content (PUP.Blabbers) -> Keine Aktion durchgeführt.

Infizierte Dateien: 89
C:\Program Files\BrowserCompanion\jsloader.dll (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Program Files\BrowserCompanion\tdataprotocol.dll (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Program Files\BrowserCompanion\updatebhoWin32.dll (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\BCHelper.exe (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\Downloads\FlashPlayer_V.134367412c.exe (PUP.FakeFlash.Domaiq) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\Downloads\FlashPlayer_V.134369116c.exe (PUP.FakeFlash.Domaiq) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\Downloads\FlashPlayer_V.135941756c.exe (PUP.FakeFlash.Domaiq) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\Local\Temp\blabbers-ff-le.xpi (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Program Files\BrowserCompanion\blabbers-ff-full.xpi (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Program Files\BrowserCompanion\ack.end (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Program Files\BrowserCompanion\blabbers-ch.crx (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Program Files\BrowserCompanion\logo.ico (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Program Files\BrowserCompanion\terms.lnk.url (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Program Files\BrowserCompanion\toolbar.dll (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Program Files\BrowserCompanion\uninstall.exe (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Program Files\BrowserCompanion\updatebhoWin32.dll_1 (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Program Files\BrowserCompanion\updater.ini (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Program Files\BrowserCompanion\widgetserv.exe (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\ProgramData\IBUpdaterService\ibsvc.exe (PUP.InstallBrain) -> Keine Aktion durchgeführt.
C:\ProgramData\IBUpdaterService\repository.xml (PUP.InstallBrain) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cmpguid.js (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\fix2.js (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\fix3.js (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\fix4.js (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\fix5.js (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\fixJQ1_71.js (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\fixJQ1_71_2.js (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\fixJQ1_83.js (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\fix_IE9_ger.js (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\icon.png (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\jquery4toolbar.js (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\jquery4toolbar183.js (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\lock.js (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\witapi.js (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\witmain.js (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\wittoolbar.js (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\witwidgetapi.js (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\0324adea3b6ec02af09ea4ae9424591b (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\0324adea3b6ec02af09ea4ae9424591b_expire (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\1dd4a0fdeff86d7113af5bf9018092d1 (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\1dd4a0fdeff86d7113af5bf9018092d1_expire (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\24779e9d2de93d13d7e07b527a1684d4 (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\24779e9d2de93d13d7e07b527a1684d4_expire (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\292124057d00cb0fa73db6b90d079658 (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\292124057d00cb0fa73db6b90d079658_expire (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\2a86ac4f3322238b4f27d14a09839275 (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\f03527c67e08602d2e4c18ae7867300d (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\f03527c67e08602d2e4c18ae7867300d_expire (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\fa74672918974682c82b8d91dfbe0d6b (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\fa74672918974682c82b8d91dfbe0d6b_expire (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\ff4d692d5e7cccbc4b3e9ef4062b1c6f (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\ff4d692d5e7cccbc4b3e9ef4062b1c6f_expire (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\5f9c09c99c058ffa5befab6cbe17f7d4 (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\5f9c09c99c058ffa5befab6cbe17f7d4_expire (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\6a8ef73701ad78f92631ccabc37a9b58 (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\6a8ef73701ad78f92631ccabc37a9b58_expire (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\72891ec935a3d247f2da6562ef29a005 (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\72891ec935a3d247f2da6562ef29a005_expire (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\7c703b5a324924a63df3f62c4c95fae8 (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\7c703b5a324924a63df3f62c4c95fae8_expire (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\8ffbb13aa6f702b0cafab391f90d1db7 (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\8ffbb13aa6f702b0cafab391f90d1db7_expire (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\93aa59562815aa22d93923c7215ac7f1 (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\93aa59562815aa22d93923c7215ac7f1_expire (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\a38dbdd1af07f4236d43e8fd995f57a6 (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\a7e0abb80dabcdbb6dbaec920aa126a0 (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\a7e0abb80dabcdbb6dbaec920aa126a0_expire (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\b4e6d346c3e211a88a4175dba0d9e052 (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\b4e6d346c3e211a88a4175dba0d9e052_expire (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\bf73732e1f0b76bac435293ba3880579 (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\bf73732e1f0b76bac435293ba3880579_expire (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\d2458fd784f4eb7cff549c598cd14651 (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\d2458fd784f4eb7cff549c598cd14651_expire (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\dc6668d28979688b1e2066d1dcaef0f6 (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\dc6668d28979688b1e2066d1dcaef0f6_expire (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\e440d29f88739418e905adc0a155a174 (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\e440d29f88739418e905adc0a155a174_expire (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\e919434ec29526b28593c426e4264271 (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\2e74403c227112bec523796d5a77d77e (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\2e74403c227112bec523796d5a77d77e_expire (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\3b507b6d0186efd3615b9b9233c5f708 (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\3b507b6d0186efd3615b9b9233c5f708_expire (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\4d3d10bd28ff623813254a49b26be41f (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\4d3d10bd28ff623813254a49b26be41f_expire (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\5d5c3541c8187f3a48d4f72f4374009c (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\2a86ac4f3322238b4f27d14a09839275_expire (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\5d5c3541c8187f3a48d4f72f4374009c_expire (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\a38dbdd1af07f4236d43e8fd995f57a6_expire (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb\content\cache\e919434ec29526b28593c426e4264271_expire (PUP.Blabbers) -> Keine Aktion durchgeführt.

(Ende)

aharonov 28.05.2013 12:50
Hallo,

die Funde von MBAM sind harmlos.
Wenn du deinen Rechner nach Malware untersuchen lassen willst, dann arbeite bitte diese Anleitung ab und poste die entsprechenden Logfiles.

Makr 28.05.2013 14:56
OTL Logfile:
Code:
OTL logfile created on: 28.05.2013 15:26:08 - Run 1
OTL by OldTimer - Version 3.2.69.0    Folder = C:\Users\Mobil-Star\Downloads
Windows Vista Home Basic Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1,99 Gb Total Physical Memory | 0,79 Gb Available Physical Memory | 39,60% Memory free
5,85 Gb Paging File | 3,65 Gb Available in Paging File | 62,52% Paging File free
Paging file location(s): c:\pagefile.sys 4004 4004 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 116,44 Gb Total Space | 46,21 Gb Free Space | 39,69% Space Free | Partition Type: NTFS
Drive D: | 104,73 Gb Total Space | 42,46 Gb Free Space | 40,54% Space Free | Partition Type: NTFS
Drive F: | 465,64 Gb Total Space | 380,85 Gb Free Space | 81,79% Space Free | Partition Type: FAT32
 
Computer Name: MOBIL-STAR-03 | User Name: Mobil-Star | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2013.05.28 15:23:06 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Mobil-Star\Downloads\OTL (3).exe
PRC - [2013.05.28 08:15:05 | 000,710,912 | ---- | M] () -- C:\ProgramData\IBUpdaterService\ibsvc.exe
PRC - [2013.05.23 07:44:09 | 000,825,808 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
PRC - [2013.04.17 12:18:02 | 000,569,856 | ---- | M] () -- C:\Program Files\Speed Analysis 2\PropertySync.exe
PRC - [2013.04.16 16:10:44 | 019,662,744 | ---- | M] (Google) -- C:\Program Files\Google\Drive\googledrivesync.exe
PRC - [2013.04.04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2013.04.04 14:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2013.04.04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2013.04.03 03:06:10 | 000,587,912 | ---- | M] (Crawler.com) -- C:\Program Files\Spyware Terminator\st_rsser.exe
PRC - [2013.04.03 03:06:06 | 003,684,488 | ---- | M] (Crawler.com) -- C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
PRC - [2013.04.03 03:05:58 | 002,777,736 | ---- | M] (Crawler.com) -- C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
PRC - [2013.03.20 13:55:48 | 000,162,856 | ---- | M] (Geek Software GmbH) -- C:\Program Files\PDF24\pdf24.exe
PRC - [2013.03.12 09:05:50 | 029,106,336 | ---- | M] (Dropbox, Inc.) -- C:\Users\Mobil-Star\AppData\Roaming\Dropbox\bin\Dropbox.exe
PRC - [2013.02.18 12:49:58 | 000,590,848 | ---- | M] (Blabbers Communications Ltd) -- C:\ProgramData\GinyasBrowserCompanion\tbhcn.exe
PRC - [2013.01.31 16:10:00 | 000,201,808 | ---- | M] (Somoto) -- C:\Program Files\FilesFrog Update Checker\update_checker.exe
PRC - [2012.05.04 07:37:10 | 000,021,392 | ---- | M] () -- C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
PRC - [2012.05.04 07:37:00 | 003,521,424 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
PRC - [2012.03.21 15:07:14 | 000,692,888 | ---- | M] () -- C:\Users\Mobil-Star\AppData\Roaming\BrowserCompanion\tcbhn.exe
PRC - [2012.03.04 15:43:47 | 001,693,120 | ---- | M] (Discordia, LTD) -- C:\Program Files\Searchcore Toolbar\Datamngr\datamngrUI.exe
PRC - [2011.05.24 10:33:30 | 001,840,128 | ---- | M] (MAGIX AG) -- C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe
PRC - [2010.11.18 13:09:24 | 000,330,696 | ---- | M] () -- C:\Program Files\Verbindungsassistent\WTGService.exe
PRC - [2010.08.20 21:45:26 | 001,164,584 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
PRC - [2009.10.27 01:07:42 | 000,959,752 | ---- | M] (ABBYY) -- C:\Program Files\ABBYY Screenshot Reader\ScreenshotReader.exe
PRC - [2009.08.05 18:08:26 | 000,193,793 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avnotify.exe
PRC - [2009.08.05 18:08:26 | 000,185,089 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2009.06.10 18:06:09 | 000,108,289 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2009.05.14 16:07:12 | 000,759,048 | ---- | M] (ABBYY) -- C:\Program Files\ABBYY Screenshot Reader\NetworkLicenseServer.exe
PRC - [2009.04.18 18:23:23 | 006,265,376 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
PRC - [2009.04.11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009.04.11 08:27:28 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conime.exe
PRC - [2009.03.31 09:39:36 | 000,233,472 | ---- | M] (Teruten) -- C:\Windows\System32\FsUsbExService.Exe
PRC - [2009.03.02 12:08:43 | 000,209,153 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2009.01.09 20:14:48 | 007,418,368 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin
PRC - [2009.01.09 20:14:42 | 007,424,000 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe
PRC - [2008.11.27 04:54:00 | 000,211,512 | ---- | M] (ATK) -- C:\Program Files\P4G\BatteryLife.exe
PRC - [2008.08.09 06:00:40 | 000,217,088 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Hotkey\HControl.exe
PRC - [2008.06.24 05:16:24 | 002,482,176 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Hotkey\ATKOSD.exe
PRC - [2008.06.18 07:10:24 | 000,297,528 | ---- | M] (ASUS) -- C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
PRC - [2008.06.04 02:29:08 | 000,851,968 | ---- | M] (ATK) -- C:\Program Files\ASUS\Splendid\ACMON.exe
PRC - [2008.04.07 09:17:30 | 000,430,592 | ---- | M] (Nokia.) -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
PRC - [2008.03.31 11:55:48 | 000,225,280 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
PRC - [2008.03.10 09:58:18 | 000,130,560 | ---- | M] () -- C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
PRC - [2008.02.22 09:11:02 | 000,120,320 | ---- | M] () -- C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
PRC - [2008.01.23 19:51:28 | 000,151,552 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\WDC.exe
PRC - [2008.01.21 04:33:00 | 001,008,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MSASCui.exe
PRC - [2007.11.05 04:48:06 | 000,106,496 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe
PRC - [2007.10.03 06:53:00 | 000,094,208 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\AsLdrSrv.exe
PRC - [2007.08.15 20:20:16 | 000,106,496 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\KBFiltr.exe
PRC - [2006.11.03 11:01:16 | 000,319,488 | ---- | M] (PixArt Imaging Incorporation) -- C:\Windows\PixArt\Pac207\Monitor.exe
PRC - [2005.07.07 00:43:42 | 000,155,648 | ---- | M] (ASUSTeK) -- C:\Windows\System32\ACEngSvr.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2013.05.28 07:45:35 | 000,557,056 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI19362\pysqlite2._sqlite.pyd
MOD - [2013.05.28 07:45:35 | 000,128,512 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI19362\_elementtree.pyd
MOD - [2013.05.28 07:45:35 | 000,098,816 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI19362\win32api.pyd
MOD - [2013.05.28 07:45:35 | 000,044,032 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI19362\_socket.pyd
MOD - [2013.05.28 07:45:35 | 000,026,624 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI19362\_multiprocessing.pyd
MOD - [2013.05.28 07:45:35 | 000,022,528 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI19362\win32ts.pyd
MOD - [2013.05.28 07:45:34 | 000,320,512 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI19362\win32com.shell.shell.pyd
MOD - [2013.05.28 07:45:34 | 000,070,656 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI19362\wx._html2.pyd
MOD - [2013.05.28 07:45:33 | 000,011,264 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI19362\win32crypt.pyd
MOD - [2013.05.28 07:45:32 | 000,805,888 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI19362\wx._gdi_.pyd
MOD - [2013.05.28 07:45:29 | 001,022,416 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI19362\windows._cacheinvalidation.pyd
MOD - [2013.05.28 07:45:28 | 000,017,408 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI19362\win32profile.pyd
MOD - [2013.05.28 07:45:26 | 000,087,040 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI19362\_ctypes.pyd
MOD - [2013.05.28 07:45:25 | 000,735,232 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI19362\wx._misc_.pyd
MOD - [2013.05.28 07:45:25 | 000,364,544 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI19362\pythoncom27.dll
MOD - [2013.05.28 07:45:21 | 000,110,080 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI19362\pywintypes27.dll
MOD - [2013.05.28 07:45:21 | 000,108,544 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI19362\win32security.pyd
MOD - [2013.05.28 07:45:20 | 001,175,040 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI19362\wx._core_.pyd
MOD - [2013.05.28 07:45:19 | 001,153,024 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI19362\_ssl.pyd
MOD - [2013.05.28 07:45:18 | 000,711,680 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI19362\_hashlib.pyd
MOD - [2013.05.28 07:45:18 | 000,035,840 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI19362\win32process.pyd
MOD - [2013.05.28 07:45:18 | 000,025,600 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI19362\win32pdh.pyd
MOD - [2013.05.28 07:45:17 | 000,811,008 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI19362\wx._windows_.pyd
MOD - [2013.05.28 07:45:09 | 000,122,368 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI19362\wx._wizard.pyd
MOD - [2013.05.28 07:45:09 | 000,119,808 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI19362\win32file.pyd
MOD - [2013.05.28 07:45:08 | 000,038,912 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI19362\win32inet.pyd
MOD - [2013.05.28 07:44:40 | 001,062,400 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI19362\wx._controls_.pyd
MOD - [2013.05.28 07:44:26 | 000,127,488 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI19362\pyexpat.pyd
MOD - [2013.05.28 07:44:26 | 000,018,432 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI19362\win32event.pyd
MOD - [2013.05.28 07:44:25 | 000,686,080 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI19362\unicodedata.pyd
MOD - [2013.05.28 07:44:15 | 000,010,240 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI19362\select.pyd
MOD - [2013.05.23 07:44:07 | 000,393,168 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\27.0.1453.94\ppgooglenaclpluginchrome.dll
MOD - [2013.05.23 07:44:06 | 013,136,336 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\27.0.1453.94\PepperFlash\pepflashplayer.dll
MOD - [2013.05.23 07:43:59 | 004,051,408 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\27.0.1453.94\pdf.dll
MOD - [2013.05.23 07:43:03 | 001,597,392 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\27.0.1453.94\ffmpegsumo.dll
MOD - [2013.05.20 14:30:00 | 000,092,736 | ---- | M] () -- C:\Users\Mobil-Star\AppData\Local\Google\Chrome\User Data\Default\Extensions\bodddioamolcibagionmmobehnbhiakf\1.0.5_0\chromeNPAPI.dll
MOD - [2013.05.16 11:04:10 | 018,022,400 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\1f0bb5336d1706c9b8ad2330f3642760\PresentationFramework.ni.dll
MOD - [2013.05.16 11:03:36 | 011,522,560 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\9b2940478ec555990b37af5448b8f509\PresentationCore.ni.dll
MOD - [2013.05.16 11:03:02 | 003,883,008 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\a1949f57d2ec260e09768e98fecb0559\WindowsBase.ni.dll
MOD - [2013.05.16 11:02:42 | 013,199,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\6ded1c6dbf61d19f839da66c951d8fa9\System.Windows.Forms.ni.dll
MOD - [2013.05.16 11:02:25 | 007,070,208 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\93a17ba6cb6753328f25466bc0bf1cb1\System.Core.ni.dll
MOD - [2013.04.17 12:18:02 | 000,569,856 | ---- | M] () -- C:\Program Files\Speed Analysis 2\PropertySync.exe
MOD - [2013.04.17 12:18:02 | 000,252,928 | ---- | M] () -- C:\Program Files\Speed Analysis 2\ButtonSite.dll
MOD - [2013.04.11 18:04:33 | 001,218,560 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Management\5d5b1b0c6e8a714de39a06e3b61f35fe\System.Management.ni.dll
MOD - [2013.04.04 08:11:11 | 000,762,880 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\b454f5723ec86048063fe19d4267d9e8\System.Runtime.Remoting.ni.dll
MOD - [2013.04.04 08:10:59 | 001,812,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\40c7a89fe2cbf3c12a2c39e034da54cf\System.Xaml.ni.dll
MOD - [2013.04.04 08:07:24 | 000,595,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\60674dde4b56087c189f576f36f6720f\PresentationFramework.Aero.ni.dll
MOD - [2013.04.04 08:02:24 | 001,667,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\78ecbee4a7444353dce52afb9d9d795c\System.Drawing.ni.dll
MOD - [2013.04.04 08:02:21 | 005,617,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\fc476bbac36944e352c2f547352ffa64\System.Xml.ni.dll
MOD - [2013.04.04 08:02:01 | 009,095,168 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\f93dca0e4baa1dcb37cf75392b7c89da\System.ni.dll
MOD - [2013.04.04 08:01:54 | 014,416,896 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\6a1ccc1e1a79ce267d3d1808af382cd6\mscorlib.ni.dll
MOD - [2012.05.09 21:25:23 | 000,115,137 | ---- | M] () -- C:\Users\Mobil-Star\AppData\Local\Temp\c25e8b3d-33a7-42bf-85e6-6880c6753136\CliSecureRT.dll
MOD - [2012.05.04 07:37:10 | 000,021,392 | ---- | M] () -- C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
MOD - [2012.03.21 15:07:14 | 000,692,888 | ---- | M] () -- C:\Users\Mobil-Star\AppData\Roaming\BrowserCompanion\tcbhn.exe
MOD - [2011.12.22 09:44:06 | 000,087,488 | ---- | M] () -- C:\Program Files\Searchcore Toolbar\Datamngr\ToolBar\searchcoredtx.dll
MOD - [2011.11.02 00:26:32 | 000,087,912 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011.11.02 00:26:12 | 001,242,472 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2010.08.20 21:45:36 | 000,095,528 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
MOD - [2010.08.20 21:45:26 | 001,164,584 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
MOD - [2010.06.15 17:56:25 | 000,034,816 | ---- | M] () -- C:\Program Files\Google\Google Desktop Search\gzlib.dll
MOD - [2009.03.25 17:15:00 | 000,094,720 | ---- | M] () -- C:\Program Files\FileZilla FTP Client\fzshellext.dll
MOD - [2008.10.31 00:37:04 | 000,015,360 | ---- | M] () -- C:\Program Files\P4G\OvrClk.dll
MOD - [2008.08.21 00:49:56 | 000,016,384 | ---- | M] () -- C:\Program Files\P4G\DevMng.dll
MOD - [2008.07.29 13:55:14 | 000,969,728 | ---- | M] () -- C:\Program Files\OpenOffice.org 3\program\libxml2.dll
MOD - [2007.06.15 19:28:36 | 000,147,456 | ---- | M] () -- C:\Program Files\ASUS\ASUS Data Security Manager\OverlayIconShlExt.dll
MOD - [2007.06.02 02:08:18 | 000,143,360 | ---- | M] () -- C:\Program Files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll
 
 
========== Services (SafeList) ==========
 
SRV - [2013.05.28 08:15:05 | 000,710,912 | ---- | M] () [Auto | Running] -- C:\ProgramData\IBUpdaterService\ibsvc.exe -- (IBUpdaterService)
SRV - [2013.05.15 12:38:26 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013.04.04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2013.04.04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2013.04.03 03:06:10 | 000,587,912 | ---- | M] (Crawler.com) [Auto | Running] -- C:\Program Files\Spyware Terminator\st_rsser.exe -- (ST2012_Svc)
SRV - [2012.07.13 13:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2011.05.24 10:33:30 | 001,840,128 | ---- | M] (MAGIX AG) [Auto | Running] -- C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe -- (Fabs)
SRV - [2011.04.26 13:54:12 | 002,702,848 | ---- | M] (MAGIX®) [On_Demand | Stopped] -- C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance)
SRV - [2010.11.18 13:09:24 | 000,330,696 | ---- | M] () [Auto | Running] -- C:\Program Files\Verbindungsassistent\WTGService.exe -- (WTGService)
SRV - [2009.08.05 18:08:26 | 000,185,089 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2009.06.10 18:06:09 | 000,108,289 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2009.05.14 16:07:12 | 000,759,048 | ---- | M] (ABBYY) [Auto | Running] -- C:\Program Files\ABBYY Screenshot Reader\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.ScreenshotReader.9.0)
SRV - [2009.03.31 09:39:36 | 000,233,472 | ---- | M] (Teruten) [Auto | Running] -- C:\Windows\System32\FsUsbExService.Exe -- (FsUsbExService)
SRV - [2008.04.07 09:17:30 | 000,430,592 | ---- | M] (Nokia.) [On_Demand | Running] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2008.03.31 11:55:48 | 000,225,280 | ---- | M] (ASUSTek Computer Inc.) [Auto | Running] -- C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe -- (ADSMService)
SRV - [2008.01.21 04:33:00 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007.10.03 06:53:00 | 000,094,208 | ---- | M] () [Auto | Running] -- C:\Program Files\ASUS\ATK Hotkey\AsLdrSrv.exe -- (ASLDRService)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ewusbfake.sys -- (hwusbfake)
DRV - [2013.05.06 20:33:11 | 000,106,880 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2013.05.06 20:33:11 | 000,102,784 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ew_hwusbdev.sys -- (ew_hwusbdev)
DRV - [2013.04.04 14:50:32 | 000,022,856 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2011.06.21 11:24:06 | 000,032,768 | ---- | M] () [Kernel | System | Running] -- C:\Windows\System32\drivers\sp_rsdrv2.sys -- (sp_rsdrv2)
DRV - [2011.06.02 07:47:22 | 000,136,808 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadmdm.sys -- (ssadmdm)
DRV - [2011.06.02 07:47:22 | 000,121,064 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadbus.sys -- (ssadbus)
DRV - [2011.06.02 07:47:22 | 000,012,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadmdfl.sys -- (ssadmdfl)
DRV - [2009.12.08 08:47:21 | 000,056,816 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2009.06.10 18:06:09 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009.05.01 11:03:06 | 000,096,104 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2009.03.31 09:39:36 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2009.02.13 11:35:01 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2009.01.13 09:45:00 | 000,954,368 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2008.07.23 01:59:59 | 001,772,544 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\snp2uvc.sys -- (SNP2UVC)
DRV - [2008.06.25 00:55:12 | 000,047,104 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2008.01.23 17:08:58 | 000,099,456 | ---- | M] (QUALCOMM Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\alusbser.sys -- (alusbser)
DRV - [2007.09.17 15:53:26 | 000,021,632 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2007.08.11 05:19:26 | 000,029,752 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [File_System | Boot | Running] -- C:\Windows\System32\drivers\AsDsm.sys -- (AsDsm)
DRV - [2007.07.30 19:42:58 | 000,043,008 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2007.07.12 19:18:19 | 000,050,688 | ---- | M] (Realtek Semiconductor Corporation                          ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2007.01.24 05:08:39 | 000,005,632 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\kbfiltr.sys -- (kbfiltr)
DRV - [2006.12.13 11:11:57 | 000,007,680 | ---- | M] (ATK0100) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ATKACPI.sys -- (MTsensor)
DRV - [2006.12.05 11:34:42 | 000,507,136 | ---- | M] (PixArt Imaging Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\PFC027.SYS -- (PAC207)
DRV - [2006.11.02 09:41:49 | 001,010,560 | ---- | M] (Motorola Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\smserial.sys -- (smserial)
DRV - [2000.03.29 18:11:20 | 000,008,096 | ---- | M] (MicroStaff Co.,Ltd.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\MASPINT.SYS -- (MASPINT)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS
IE - HKLM\..\URLSearchHook: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Program Files\softonic-de3\tbsoft.dll (Conduit Ltd.)
IE - HKLM\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUS
IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2426}: "URL" = hxxp://dts.search-results.com/sr?src=ieb&appid=131133&systemid=426&sr=0&q={searchTerms}
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3281675&CUI=UN26151436191424231
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = E0 94 C8 4C A1 13 CB 01  [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie
IE - HKCU\..\URLSearchHook: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Program Files\softonic-de3\tbsoft.dll (Conduit Ltd.)
IE - HKCU\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC
IE - HKCU\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUS
IE - HKCU\..\SearchScopes\{70D46D94-BF1E-45ED-B567-48701376298E}: "URL" = hxxp://127.0.0.1:4664/search&s=WB-0jG6CUgRqCss0xDxfreUDNIM?q={searchTerms}
IE - HKCU\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2426}: "URL" = hxxp://dts.search-results.com/sr?src=ieb&appid=131133&systemid=426&sr=0&q={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "Search Results"
FF - prefs.js..browser.search.defaultthis.engineName: "Pokki Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3281675&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "Search Results"
FF - prefs.js..browser.search.selectedEngine: "Pokki Customized Web Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://www.searchcore.net/426"
FF - prefs.js..extensions.enabledItems: bbrs_002@blabbers.com:1.0.5
FF - prefs.js..extensions.enabledItems: {1FD91A9C-410C-4090-BBCC-55D3450EF433}:1.0
FF - prefs.js..extensions.enabledItems: {e44a1809-4d10-4ab8-b343-3326b64c7cdd}:3.18.0.7
FF - prefs.js..extensions.enabledItems: {9bb815eb-3f9f-4e11-9150-cb70e29b40fc}:2.7.1.3
FF - prefs.js..extensions.enabledItems: {af6ac4f2-9825-4fb6-a600-92bc5361f209}:4.6.0.1
FF - prefs.js..extensions.enabledItems: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065}:2.7.1.3
FF - prefs.js..keyword.URL: "hxxp://dts.search-results.com/sr?src=ffb&appid=131133&systemid=426&sr=0&q="
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa2,version=2.0.0: C:\Program Files\Picasa2\npPicasa2.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Picasa2\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Mobil-Star\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O1DPlugin: C:\Users\Mobil-Star\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\Mobil-Star\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Mobil-Star\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Mobil-Star\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\amazon.com/AmazonMP3DownloaderPlugin: C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101721.dll (Amazon.com, Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.5.16\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013.03.05 22:38:59 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.5.16\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013.05.27 12:38:12 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\Mobil-Star\AppData\Roaming\IDM\idmmzcc5
 
[2012.05.09 20:03:19 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\Extensions
[2013.05.28 08:17:50 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\Firefox\Profiles\i0htsn1x.default\extensions
[2013.03.03 11:18:15 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\Firefox\Profiles\i0htsn1x.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010.06.18 13:58:55 | 000,000,000 | ---D | M] (Radio Bar 2 Toolbar) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\Firefox\Profiles\i0htsn1x.default\extensions\{9bb815eb-3f9f-4e11-9150-cb70e29b40fc}
[2012.05.09 20:03:02 | 000,000,000 | ---D | M] (Searchcore Toolbar) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\Firefox\Profiles\i0htsn1x.default\extensions\{af6ac4f2-9825-4fb6-a600-92bc5361f209}
[2010.07.16 18:30:29 | 000,000,000 | ---D | M] (softonic-de3 Toolbar) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\Firefox\Profiles\i0htsn1x.default\extensions\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}
[2013.03.04 11:14:44 | 000,000,000 | ---D | M] (Pokki Community Toolbar) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\Firefox\Profiles\i0htsn1x.default\extensions\{e44a1809-4d10-4ab8-b343-3326b64c7cdd}
[2012.05.10 10:33:33 | 000,000,000 | ---D | M] (Ginyas Browser Companion) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\Firefox\Profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com
[2013.05.28 08:17:46 | 000,000,000 | ---D | M] (SpecialSavings) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\Firefox\Profiles\i0htsn1x.default\extensions\SpecialSavings@SpecialSavings.com
[2013.05.28 08:17:51 | 000,000,000 | ---D | M] (Speed Analysis 2) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\Firefox\Profiles\i0htsn1x.default\extensions\speedanalysis02@SpeedAnalysis.com
[2013.04.19 09:11:14 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\0324adea3b6ec02af09ea4ae9424591b_expire
[2012.08.07 20:37:32 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\06e0c0d489f84bd667626125b02eb86a_expire
[2013.04.19 09:11:17 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\24779e9d2de93d13d7e07b527a1684d4_expire
[2013.02.28 13:50:40 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\266efba29a8dc2649e413548c9af865c_expire
[2013.03.05 21:11:33 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\292124057d00cb0fa73db6b90d079658_expire
[2012.12.06 01:11:45 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\2a86ac4f3322238b4f27d14a09839275_expire
[2012.08.07 20:37:29 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\2e74403c227112bec523796d5a77d77e_expire
[2012.08.07 20:37:27 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\3b507b6d0186efd3615b9b9233c5f708_expire
[2013.04.19 09:11:15 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\4d3d10bd28ff623813254a49b26be41f_expire
[2013.03.05 21:11:36 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\559d3b97ddd036cd43981f82bb643a6b_expire
[2012.12.06 01:11:47 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\5d5c3541c8187f3a48d4f72f4374009c_expire
[2013.04.19 09:11:18 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\5f9c09c99c058ffa5befab6cbe17f7d4_expire
[2012.12.06 01:11:46 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\6a8ef73701ad78f92631ccabc37a9b58_expire
[2013.03.05 21:11:35 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\72891ec935a3d247f2da6562ef29a005_expire
[2013.03.05 21:11:35 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\75b2e8c430cf4a2a1b0bd53f38a61501_expire
[2013.04.19 09:11:14 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\7c703b5a324924a63df3f62c4c95fae8_expire
[2012.12.06 01:11:48 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\8a8dc36effa0a0300d6fb1a383936a49_expire
[2012.08.07 20:37:26 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\8ffbb13aa6f702b0cafab391f90d1db7_expire
[2012.12.06 01:11:39 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\93aa59562815aa22d93923c7215ac7f1_expire
[2013.03.05 21:11:34 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\a38dbdd1af07f4236d43e8fd995f57a6_expire
[2013.03.05 21:11:34 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\a7e0abb80dabcdbb6dbaec920aa126a0_expire
[2013.02.28 13:50:40 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\bc417bfcd62af75b6bf321501f63d514_expire
[2013.03.05 21:11:34 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\bf73732e1f0b76bac435293ba3880579_expire
[2012.08.07 20:37:30 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\d2458fd784f4eb7cff549c598cd14651_expire
[2012.12.06 01:11:47 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\d89bfd841403290d610bcf662008b443_expire
[2012.08.07 20:37:14 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\dc6668d28979688b1e2066d1dcaef0f6_expire
[2012.05.10 10:35:18 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\e05508e03bf34762151d9d19fffe93df_expire
[2013.04.19 09:11:16 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\e440d29f88739418e905adc0a155a174_expire
[2013.04.19 09:11:15 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\e919434ec29526b28593c426e4264271_expire
[2013.02.28 13:44:34 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\f03527c67e08602d2e4c18ae7867300d_expire
[2013.04.19 09:11:15 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\fa74672918974682c82b8d91dfbe0d6b_expire
[2013.04.19 09:11:15 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\ff4d692d5e7cccbc4b3e9ef4062b1c6f_expire
[2013.03.02 03:06:54 | 000,000,913 | ---- | M] () -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\searchplugins\conduit.xml
[2009.07.06 13:51:46 | 000,001,632 | ---- | M] () -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\searchplugins\live-search.xml
[2012.05.09 20:02:28 | 000,002,525 | ---- | M] () -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\searchplugins\Search_Results.xml
[2012.05.09 20:03:19 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011.12.07 16:39:19 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2012.05.09 20:03:19 | 000,000,000 | ---D | M] (DataMngr) -- C:\PROGRAM FILES\SEARCHCORE TOOLBAR\DATAMNGR\FIREFOXEXTENSION
[2011.01.05 22:11:57 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.01.05 22:11:57 | 000,002,344 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2011.01.05 22:11:57 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.05.09 20:02:28 | 000,002,525 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Search_Results.xml
[2011.01.05 22:11:57 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.01.05 22:11:57 | 000,000,801 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR - homepage: hxxp://www.tagesschau.de/
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\27.0.1453.94\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\27.0.1453.94\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\27.0.1453.94\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin:  (Enabled) = C:\Users\Mobil-Star\AppData\Local\Google\Chrome\User Data\Default\Extensions\bodddioamolcibagionmmobehnbhiakf\1.0.5_0\chromeNPAPI.dll
CHR - plugin: Skype Toolbars (Enabled) = C:\Users\Mobil-Star\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\npSkypeChromePlugin.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: DivX Player Netscape Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: Google Talk Plugin (Enabled) = C:\Users\Mobil-Star\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
CHR - plugin: Google Talk Plugin Video Accelerator (Enabled) = C:\Users\Mobil-Star\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
CHR - plugin: DivX Web Player (Enabled) = C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files\Microsoft\Office Live\npOLW.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files\Picasa2\npPicasa2.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files\Picasa2\npPicasa3.dll
CHR - plugin: Windows Live\u00AE Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: Google Drive = C:\Users\Mobil-Star\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: SpecialSavings = C:\Users\Mobil-Star\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfcpnihmbfoaeoakalclfalkdepgiaje\2.0.0.1\
CHR - Extension: YouTube = C:\Users\Mobil-Star\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Ginyas Browser Companion = C:\Users\Mobil-Star\AppData\Local\Google\Chrome\User Data\Default\Extensions\bodddioamolcibagionmmobehnbhiakf\1.0.5_0\
CHR - Extension: Speed Analysis 2 = C:\Users\Mobil-Star\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf\1.0.0.0\
CHR - Extension: Google Mail = C:\Users\Mobil-Star\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
 
O1 HOSTS File: ([2009.04.18 14:33:46 | 000,305,200 | R--- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1      localhost
O1 - Hosts: ::1            localhost
O1 - Hosts: 127.0.0.1        www.007guard.com
O1 - Hosts: 127.0.0.1        007guard.com
O1 - Hosts: 127.0.0.1        008i.com
O1 - Hosts: 127.0.0.1        www.008k.com
O1 - Hosts: 127.0.0.1        008k.com
O1 - Hosts: 127.0.0.1        www.00hq.com
O1 - Hosts: 127.0.0.1        00hq.com
O1 - Hosts: 127.0.0.1        010402.com
O1 - Hosts: 127.0.0.1        www.032439.com
O1 - Hosts: 127.0.0.1        032439.com
O1 - Hosts: 127.0.0.1        www.0scan.com
O1 - Hosts: 127.0.0.1        0scan.com
O1 - Hosts: 127.0.0.1        www.1000gratisproben.com
O1 - Hosts: 127.0.0.1        1000gratisproben.com
O1 - Hosts: 127.0.0.1        www.1001namen.com
O1 - Hosts: 127.0.0.1        1001namen.com
O1 - Hosts: 127.0.0.1        100888290cs.com
O1 - Hosts: 127.0.0.1        www.100888290cs.com
O1 - Hosts: 127.0.0.1        100sexlinks.com
O1 - Hosts: 127.0.0.1        www.100sexlinks.com
O1 - Hosts: 127.0.0.1        10sek.com
O1 - Hosts: 127.0.0.1        www.10sek.com
O1 - Hosts: 127.0.0.1        www.1-2005-search.com
O1 - Hosts: 10510 more lines...
O2 - BHO: (Ginyas Browser Companion) - {00cbb66b-1d3b-46d3-9577-323a336acb50} - C:\Program Files\BrowserCompanion\jsloader.dll ( )
O2 - BHO: (Speed Analysis 2) - {18DBB6CE-3148-4FEC-B481-103CB3290427} - C:\Program Files\Speed Analysis 2\ScriptHost.dll (SpeedAnalysis.com)
O2 - BHO: (no name) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - No CLSID value found.
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (DataMngr) - {7DA17D5A-5718-4130-A605-FC316C827836} - C:\Program Files\Searchcore Toolbar\Datamngr\BrowserConnection.dll (Discordia , LTD)
O2 - BHO: (SpecialSavings) - {938958E8-355C-49FF-92B0-53C1B87ACEA9} - C:\Program Files\SpecialSavings\ScriptHost.dll (SpecialSavings.com)
O2 - BHO: (Ginyas Browser Companion Verifier) - {963B125B-8B21-49A2-A3A8-E37092276531} - C:\Program Files\BrowserCompanion\updatebhoWin32.dll (Blabbers Communications Ltd)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Searchcore Toolbar) - {af6ac4f2-9825-4fb6-a600-92bc5361f209} - C:\Program Files\Searchcore Toolbar\Datamngr\ToolBar\searchcoredtx.dll ()
O2 - BHO: (softonic-de3 Toolbar) - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Program Files\softonic-de3\tbsoft.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Searchcore Toolbar) - {af6ac4f2-9825-4fb6-a600-92bc5361f209} - C:\Program Files\Searchcore Toolbar\Datamngr\ToolBar\searchcoredtx.dll ()
O3 - HKLM\..\Toolbar: (softonic-de3 Toolbar) - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Program Files\softonic-de3\tbsoft.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (softonic-de3 Toolbar) - {CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} - C:\Program Files\softonic-de3\tbsoft.dll (Conduit Ltd.)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [DATAMNGR] C:\Program Files\Searchcore Toolbar\Datamngr\datamngrUI.exe (Discordia, LTD)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKLM..\Run: [Monitor] C:\Windows\PixArt\Pac207\Monitor.exe (PixArt Imaging Incorporation)
O4 - HKLM..\Run: [PDFPrint] C:\Program Files\PDF24\pdf24.exe (Geek Software GmbH)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [SpywareTerminatorShield] C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe (Crawler.com)
O4 - HKLM..\Run: [SpywareTerminatorUpdater] C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe (Crawler.com)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [ABBYY Screenshot Reader Retail] C:\Program Files\ABBYY Screenshot Reader\ScreenshotReader.exe (ABBYY)
O4 - HKCU..\Run: [GoogleDriveSync] C:\Program Files\Google\Drive\googledrivesync.exe (Google)
O4 - HKCU..\Run: [KiesHelper] C:\Program Files\Samsung\Kies\KiesHelper.exe (Samsung)
O4 - HKCU..\Run: [KiesPDLR] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe ()
O4 - HKCU..\Run: [MyWirelessCard] C:\Program Files\A-Link\3GU USB Modem\Connection Manager.exe ()
O4 - HKCU..\Run: [SDP] C:\Program Files\FilesFrog Update Checker\update_checker.exe (Somoto)
O4 - HKLM..\RunOnce: [awde7zip23708]  File not found
O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - Startup: C:\Users\Mobil-Star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Mobil-Star\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O4 - Startup: C:\Users\Mobil-Star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote Inhaltsverzeichnis.onetoc2 ()
O4 - Startup: C:\Users\Mobil-Star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
O4 - Startup: C:\Users\Mobil-Star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tcbhn.lnk = C:\Users\Mobil-Star\AppData\Roaming\BrowserCompanion\tcbhn.exe ()
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: localhost ([]http in Local intranet)
O15 - HKCU\..Trusted Ranges: GD ([http] in Local intranet)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 78.42.43.62 82.212.62.62
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0DA3776B-E400-479E-92D4-D55E133397BE}: DhcpNameServer = 78.42.43.62 82.212.62.62
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A7BE9011-A25E-4992-9472-2B8B84B58768}: DhcpNameServer = 192.168.42.129
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DCB0ACEF-B69E-48FA-8EB4-EC18E4A0EA94}: DhcpNameServer = 78.42.43.62 82.212.62.62
O18 - Protocol\Handler\base64 {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files\BrowserCompanion\tdataprotocol.dll (Blabbers Communications Ltd)
O18 - Protocol\Handler\chrome {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files\BrowserCompanion\tdataprotocol.dll (Blabbers Communications Ltd)
O18 - Protocol\Handler\prox {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files\BrowserCompanion\tdataprotocol.dll (Blabbers Communications Ltd)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - AppInit_DLLs: (C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll) - C:\Program Files\Searchcore Toolbar\Datamngr\datamngr.dll (Discordia, LTD)
O20 - AppInit_DLLs: (C:\PROGRA~1\SEARCH~1\Datamngr\IEBHO.dll) - C:\Program Files\Searchcore Toolbar\Datamngr\IEBHO.dll (Discordia, LTD)
O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL) - C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Mobil-Star\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O24 - Desktop BackupWallPaper: C:\Users\Mobil-Star\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{1bb13412-b668-11e2-99f5-00248c785b79}\Shell - "" = AutoRun
O33 - MountPoints2\{1bb13412-b668-11e2-99f5-00248c785b79}\Shell\AutoRun\command - "" = H:\.\Autorun.exe AUTORUN=1
O33 - MountPoints2\{2070fca0-8c3f-11df-b304-00248c785b79}\Shell - "" = AutoRun
O33 - MountPoints2\{2070fca0-8c3f-11df-b304-00248c785b79}\Shell\AutoRun\command - "" = F:\QsSetup.exe
O33 - MountPoints2\{3acea333-e9b1-11df-8318-00248c785b79}\Shell - "" = AutoRun
O33 - MountPoints2\{3acea333-e9b1-11df-8318-00248c785b79}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{3acea3b0-e9b1-11df-8318-00248c785b79}\Shell - "" = AutoRun
O33 - MountPoints2\{3acea3b0-e9b1-11df-8318-00248c785b79}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{5238f0c0-a35b-11e1-ae24-00248c785b79}\Shell - "" = AutoRun
O33 - MountPoints2\{5238f0c0-a35b-11e1-ae24-00248c785b79}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{5238f0d3-a35b-11e1-ae24-00248c785b79}\Shell - "" = AutoRun
O33 - MountPoints2\{5238f0d3-a35b-11e1-ae24-00248c785b79}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{5238f0ed-a35b-11e1-ae24-00248c785b79}\Shell - "" = AutoRun
O33 - MountPoints2\{5238f0ed-a35b-11e1-ae24-00248c785b79}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{7a3b7d65-3f36-11de-988d-00248c785b79}\Shell - "" = AutoRun
O33 - MountPoints2\{7a3b7d65-3f36-11de-988d-00248c785b79}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O33 - MountPoints2\{c679fe05-e8e3-11df-89b2-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{c679fe05-e8e3-11df-89b2-806e6f6e6963}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{c679fe6f-e8e3-11df-89b2-00248c785b79}\Shell - "" = AutoRun
O33 - MountPoints2\{c679fe6f-e8e3-11df-89b2-00248c785b79}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.05.28 08:28:24 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\AppData\Roaming\Malwarebytes
[2013.05.28 08:27:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013.05.28 08:27:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013.05.28 08:27:40 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2013.05.28 08:27:39 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2013.05.28 08:17:46 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\AppData\Roaming\PerformerSoft
[2013.05.28 08:17:43 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\AppData\Roaming\SpeedAnalysis2
[2013.05.28 08:17:36 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\AppData\Roaming\SpecialSavings
[2013.05.28 08:17:34 | 000,018,096 | ---- | C] (PerformerSoft LLC) -- C:\Windows\System32\roboot.exe
[2013.05.28 08:17:22 | 000,000,000 | ---D | C] -- C:\Program Files\Speed Analysis 2
[2013.05.28 08:17:22 | 000,000,000 | ---D | C] -- C:\Program Files\SpecialSavings
[2013.05.28 08:17:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Performer
[2013.05.28 08:17:18 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\77zip
[2013.05.28 08:17:14 | 000,000,000 | ---D | C] -- C:\Program Files\PC Performer
[2013.05.28 08:17:13 | 000,000,000 | ---D | C] -- C:\Program Files\77zip
[2013.05.28 08:17:09 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\AppData\Roaming\File Scout
[2013.05.28 08:11:58 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\Local Settings
[2013.05.28 08:11:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
[2013.05.28 08:11:53 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip
[2013.05.28 08:11:48 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker
[2013.05.28 08:11:48 | 000,000,000 | ---D | C] -- C:\Program Files\FilesFrog Update Checker
[2013.05.27 13:16:41 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\AppData\Roaming\Spyware Terminator
[2013.05.27 13:16:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Spyware Terminator
[2013.05.27 13:16:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Terminator 2012
[2013.05.27 13:16:35 | 000,000,000 | ---D | C] -- C:\Program Files\Spyware Terminator
[2013.05.17 09:26:03 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\Desktop\Scan bearbetungen
[2013.05.15 13:50:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2013.05.15 13:49:08 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2013.05.15 13:49:05 | 000,000,000 | ---D | C] -- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2013.05.12 15:29:41 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\Desktop\Teilnahmebestätigung
[2013.05.12 15:26:22 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\Desktop\Neuer Ordner
[2013.05.06 20:51:12 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\AppData\Roaming\Verbindungsassistent
[2013.05.06 20:34:42 | 000,860,928 | ---- | C] (DiBcom SA) -- C:\Windows\System32\drivers\mod7700.sys
[2013.05.06 20:34:42 | 000,102,784 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ew_hwusbdev.sys
[2013.05.06 20:34:42 | 000,011,136 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ew_usbenumfilter.sys
[2013.05.06 20:34:41 | 000,116,736 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ewusbnet.sys
[2013.05.06 20:34:41 | 000,106,880 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ewusbmdm.sys
[2013.05.06 20:34:41 | 000,023,424 | ---- | C] (Huawei Tech. Co., Ltd.) -- C:\Windows\System32\drivers\ewdcsc.sys
[2013.05.06 20:33:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Verbindungsassistent
[2013.05.06 20:33:10 | 000,000,000 | ---D | C] -- C:\Program Files\Verbindungsassistent
[2013.05.03 19:17:48 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\Desktop\melanie
[2013.05.02 17:35:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free PDF to Word Doc Converter
[2013.05.02 17:35:11 | 000,000,000 | ---D | C] -- C:\Program Files\Free PDF to Word Doc Converter
 
========== Files - Modified Within 30 Days ==========
 
[2013.05.28 15:29:59 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GinyasBrowserCompanion Chrome Watcher.job
[2013.05.28 15:26:00 | 000,001,140 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3503688316-1715030885-4232805651-1000UA.job
[2013.05.28 15:21:12 | 000,000,000 | ---- | M] () -- C:\Users\Mobil-Star\defogger_reenable
[2013.05.28 15:20:09 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GinyasBrowserCompanion Stats Report.job
[2013.05.28 15:20:00 | 000,001,000 | ---- | M] () -- C:\Windows\tasks\GinyasBrowserCompanion Runner.job
[2013.05.28 15:19:01 | 000,001,106 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.05.28 15:03:05 | 000,000,274 | ---- | M] () -- C:\Windows\tasks\PC Performer_DEFAULT.job
[2013.05.28 14:38:01 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.05.28 13:45:29 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2013.05.28 13:45:29 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2013.05.28 09:29:06 | 000,001,088 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3503688316-1715030885-4232805651-1000Core.job
[2013.05.28 09:20:11 | 000,000,932 | ---- | M] () -- C:\Windows\tasks\GinyasBrowserCompanion Update Checker.job
[2013.05.28 08:27:47 | 000,000,873 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013.05.28 08:18:23 | 000,000,282 | ---- | M] () -- C:\Windows\tasks\PC Performer_UPDATES.job
[2013.05.28 08:17:33 | 000,000,814 | ---- | M] () -- C:\Users\Public\Desktop\PC Performer.lnk
[2013.05.28 08:17:18 | 000,000,737 | ---- | M] () -- C:\Users\Mobil-Star\Desktop\77zip.lnk
[2013.05.28 08:17:09 | 000,001,106 | ---- | M] () -- C:\Users\Mobil-Star\Desktop\SpeedAnalysis.lnk
[2013.05.28 08:11:49 | 000,000,933 | ---- | M] () -- C:\Users\Mobil-Star\Desktop\Check for Updates.lnk
[2013.05.28 07:43:39 | 000,001,000 | ---- | M] () -- C:\Windows\tasks\GinyasBrowserCompanion FireFox Watcher.job
[2013.05.28 07:43:36 | 000,001,102 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.05.28 07:43:28 | 000,065,536 | ---- | M] () -- C:\Windows\System32\Ikeext.etl
[2013.05.28 07:43:15 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.05.28 07:43:12 | 2138,300,416 | -HS- | M] () -- C:\hiberfil.sys
[2013.05.27 12:38:12 | 000,001,854 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2013.05.26 23:02:19 | 000,045,056 | ---- | M] () -- C:\Windows\System32\acovcnt.exe
[2013.05.23 18:26:17 | 000,637,090 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2013.05.23 18:26:17 | 000,603,042 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013.05.23 18:26:17 | 000,130,000 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2013.05.23 18:26:17 | 000,106,858 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013.05.16 12:55:23 | 000,505,472 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2013.05.15 13:50:57 | 000,001,631 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2013.05.06 20:33:12 | 000,860,928 | ---- | M] (DiBcom SA) -- C:\Windows\System32\drivers\mod7700.sys
[2013.05.06 20:33:12 | 000,011,136 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ew_usbenumfilter.sys
[2013.05.06 20:33:11 | 000,116,736 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ewusbnet.sys
[2013.05.06 20:33:11 | 000,106,880 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ewusbmdm.sys
[2013.05.06 20:33:11 | 000,102,784 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ew_hwusbdev.sys
[2013.05.06 20:33:11 | 000,023,424 | ---- | M] (Huawei Tech. Co., Ltd.) -- C:\Windows\System32\drivers\ewdcsc.sys
[2013.05.02 17:35:11 | 000,000,829 | ---- | M] () -- C:\Users\Mobil-Star\Desktop\Free PDF to Word Doc Converter.lnk
 
========== Files Created - No Company Name ==========
 
[2013.05.28 15:21:12 | 000,000,000 | ---- | C] () -- C:\Users\Mobil-Star\defogger_reenable
[2013.05.28 08:27:47 | 000,000,873 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013.05.28 08:18:26 | 000,000,274 | ---- | C] () -- C:\Windows\tasks\PC Performer_DEFAULT.job
[2013.05.28 08:18:23 | 000,000,282 | ---- | C] () -- C:\Windows\tasks\PC Performer_UPDATES.job
[2013.05.28 08:17:33 | 000,000,814 | ---- | C] () -- C:\Users\Public\Desktop\PC Performer.lnk
[2013.05.28 08:17:18 | 000,000,737 | ---- | C] () -- C:\Users\Mobil-Star\Desktop\77zip.lnk
[2013.05.28 08:17:09 | 000,001,106 | ---- | C] () -- C:\Users\Mobil-Star\Desktop\SpeedAnalysis.lnk
[2013.05.28 08:11:49 | 000,000,933 | ---- | C] () -- C:\Users\Mobil-Star\Desktop\Check for Updates.lnk
[2013.05.27 13:16:43 | 000,032,768 | ---- | C] () -- C:\Windows\System32\drivers\sp_rsdrv2.sys
[2013.05.15 13:50:57 | 000,001,631 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2013.05.02 17:35:11 | 000,000,829 | ---- | C] () -- C:\Users\Mobil-Star\Desktop\Free PDF to Word Doc Converter.lnk
[2012.12.07 18:18:18 | 000,030,208 | ---- | C] () -- C:\Windows\System32\WNASPI32.DLL
[2012.12.07 18:18:18 | 000,000,291 | ---- | C] () -- C:\Windows\msfsetup.ini
[2012.05.18 15:17:39 | 000,093,499 | ---- | C] () -- C:\Users\Mobil-Star\Currency.thmx
[2012.03.28 22:11:08 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2012.03.28 22:11:06 | 000,974,848 | ---- | C] () -- C:\Windows\System32\cis-2.4.dll
[2012.03.28 22:11:06 | 000,081,920 | ---- | C] () -- C:\Windows\System32\issacapi_bs-2.3.dll
[2012.03.28 22:11:06 | 000,065,536 | ---- | C] () -- C:\Windows\System32\issacapi_pe-2.3.dll
[2012.03.28 22:11:06 | 000,057,344 | ---- | C] () -- C:\Windows\System32\issacapi_se-2.3.dll
[2010.04.08 21:33:44 | 000,000,680 | ---- | C] () -- C:\Users\Mobil-Star\AppData\Local\d3d9caps.dat
[2009.10.02 03:20:48 | 000,000,202 | ---- | C] () -- C:\Users\Mobil-Star\CD-Laufwerk - Verknüpfung.lnk
[2009.05.28 17:57:20 | 000,000,306 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2009.05.02 10:02:37 | 000,130,048 | ---- | C] () -- C:\Users\Mobil-Star\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.04.26 11:53:16 | 000,029,239 | ---- | C] () -- C:\Users\Mobil-Star\AppData\Roaming\UserTile.png
 
========== ZeroAccess Check ==========
 
[2006.11.02 14:51:16 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.08 19:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009.04.11 08:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.04.11 08:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
========== LOP Check ==========
 
[2011.08.16 22:09:13 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\Amazon
[2013.05.28 07:44:24 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\BrowserCompanion
[2010.01.12 22:05:47 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\Desktopicon
[2012.06.19 15:46:16 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\DMCache
[2013.05.28 10:07:57 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\Dropbox
[2013.04.04 16:31:18 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\DVDVideoSoft
[2013.05.28 08:17:11 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\File Scout
[2013.03.23 19:09:18 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\FILEminimizerPictures
[2009.04.18 14:21:10 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\FileZilla
[2013.03.04 14:33:19 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\FreemakeVideoDownloader
[2013.04.04 12:27:52 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\MAGIX
[2013.03.04 11:11:03 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\OpenCandy
[2009.04.18 14:15:35 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\OpenOffice.org
[2009.06.04 17:31:40 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\Panasonic
[2010.06.20 13:08:38 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\PC Suite
[2009.04.26 11:53:16 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\PeerNetworking
[2013.05.28 08:17:46 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\PerformerSoft
[2012.05.09 20:39:03 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\Samsung
[2013.05.28 08:17:43 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\SpecialSavings
[2013.05.28 08:17:47 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\SpeedAnalysis2
[2013.05.27 13:16:41 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\Spyware Terminator
[2009.04.18 13:24:25 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\Toolbars
[2013.03.04 11:19:15 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\TuneUp Software
[2013.05.06 21:10:12 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\Verbindungsassistent
 
========== Purity Check ==========
 
 

< End of report >
--- --- ---

Makr 28.05.2013 14:57
OTL EXTRAS Logfile:
Code:
OTL Extras logfile created on: 28.05.2013 15:26:08 - Run 1
OTL by OldTimer - Version 3.2.69.0    Folder = C:\Users\Mobil-Star\Downloads
Windows Vista Home Basic Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1,99 Gb Total Physical Memory | 0,79 Gb Available Physical Memory | 39,60% Memory free
5,85 Gb Paging File | 3,65 Gb Available in Paging File | 62,52% Paging File free
Paging file location(s): c:\pagefile.sys 4004 4004 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 116,44 Gb Total Space | 46,21 Gb Free Space | 39,69% Space Free | Partition Type: NTFS
Drive D: | 104,73 Gb Total Space | 42,46 Gb Free Space | 40,54% Space Free | Partition Type: NTFS
Drive F: | 465,64 Gb Total Space | 380,85 Gb Free Space | 81,79% Space Free | Partition Type: FAT32
 
Computer Name: MOBIL-STAR-03 | User Name: Mobil-Star | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = ChromeHTML] -- C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
https [open] -- "C:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- "C:\Users\Mobil-Star\AppData\Roaming\File Scout\filescout.exe" /open "%1" ()
Directory [AddToPlaylistVLC] -- C:\Program Files\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- C:\Program Files\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{10004B5D-C2E0-40F4-AB4E-DBB7300484BC}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{269E3A8B-FE0F-445B-8B9C-0E816248F656}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{2D46E75E-115F-48A1-86CC-E0B97B94C78A}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{41577337-F7A5-4659-A1E1-D80BA06471D1}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{5CD8A3BE-FC37-4678-BEAD-4101FEB54F76}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{74C3A962-BB57-49A8-B659-DC1C2D452330}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{B144D3AF-C561-4C5D-85E9-D4571008BF2C}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe |
"{B39AAB41-1815-44E6-A4BE-6C826109B47E}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{D15D39FF-C400-4898-903E-203B7BBE75EB}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{DC933136-FB1D-4C6C-808C-90C52746A6B2}" = lport=2869 | protocol=6 | dir=in | app=system |
"{E37EFF74-1DAA-42CA-9C72-80E293751614}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{E73CC17F-D426-47DC-9D64-8E9495ED8650}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{F0E5D4ED-C9AF-4806-9B62-AA9FFD98DAF2}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0E6D56C1-4C93-43E7-B19D-DBDA28DF9EFD}" = dir=in | app=c:\program files\itunes\itunes.exe |
"{10640AD7-70D2-4B3C-803D-6017BE6FD592}" = protocol=6 | dir=in | app=c:\program files\searchcore toolbar\datamngr\toolbar\dtuser.exe |
"{12CC2561-596D-491F-BB13-9B5F226BB24A}" = dir=in | app=c:\users\mobil-~1\appdata\local\temp\ibtmp9d3c207\driver hunter.exe |
"{14F57290-E37B-48E1-B04F-7B3D9E4917D6}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{17760648-B254-4236-BFC2-F846F2352BA2}" = protocol=6 | dir=in | app=c:\program files\samsung\samsung new pc studio\npsvsvr.exe |
"{20F8CE78-1BA4-442E-9C81-7AD95E470F35}" = protocol=6 | dir=in | app=c:\windows\system32\muzapp.exe |
"{228F40BE-BC3E-4949-9B15-4E6FC45DE87B}" = protocol=6 | dir=in | app=c:\program files\samsung\samsung new pc studio\npsasvr.exe |
"{27D10FB4-A972-4AE8-81F3-159B221B0AB9}" = dir=in | app=c:\users\mobil-~1\appdata\local\temp\ibtmpc810619\component_342 |
"{2D96AEE6-055A-4072-A79A-4A8B0E0E755E}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{3048EC26-EADB-4085-B6DE-897078A9219E}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{322BFF40-8E50-4B2A-B55D-1CECA7AD3094}" = dir=in | app=c:\users\mobil-~1\appdata\local\temp\ibtmpc810619\component_600 |
"{40BF2768-1A05-4D1F-8A6C-6D8AB526242C}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"{4526578C-D31B-4B27-969A-12BF3E90EC1B}" = protocol=6 | dir=in | app=c:\program files\spyware terminator\spywareterminator.exe |
"{4C4A6492-C9B8-4AB9-9C77-857F5710C453}" = protocol=17 | dir=in | app=c:\program files\spyware terminator\spywareterminator.exe |
"{5320DA9C-EFF5-4021-A07E-D567D6178A80}" = dir=in | app=c:\users\mobil-~1\appdata\local\temp\ibtmpc810619\component_358.decrpt |
"{5D53280D-440A-4DB0-986E-1E10EE121CD1}" = dir=in | app=c:\program files\cyberlink\powerdvd\powerdvd.exe |
"{619988C8-C259-41E4-B442-37BCA7E2173D}" = dir=in | app=c:\users\mobil-~1\appdata\local\temp\ibtmp9d3c207\component_129.decrpt |
"{63E83599-9319-4861-B46F-594FA87213D9}" = protocol=17 | dir=in | app=c:\program files\samsung\samsung new pc studio\npsvsvr.exe |
"{680301B8-1605-4155-ABC4-95D4F487F229}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{6AD22562-CA17-4425-B299-AB257A595A43}" = protocol=17 | dir=in | app=c:\program files\samsung\samsung new pc studio\npsasvr.exe |
"{6D1C61B9-DCCD-4D69-9178-D0105B9E6004}" = protocol=6 | dir=in | app=c:\users\mobil-star\appdata\roaming\dropbox\bin\dropbox.exe |
"{7C891E4E-F3D6-4B8A-B035-B65BE392511C}" = protocol=6 | dir=in | app=c:\program files\spyware terminator\spywareterminatorupdate.exe |
"{84A5D9F9-ACDF-4E7C-A972-12EACCD44FC8}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe |
"{884849BF-2368-480D-8F4F-3D750026CF85}" = dir=in | app=c:\users\mobil-~1\appdata\local\temp\ibtmpc810619\component_613 |
"{9468671A-EA8A-4A2F-92AF-A15F8B492411}" = dir=in | app=c:\program files\cyberlink\powerdirector\pdr.exe |
"{A5888109-F5DD-447D-91DF-05CA9944DDB2}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe |
"{AF0908C7-BCEE-4A27-9769-E942BE6EC0E1}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{CA131D51-03CB-443B-B726-7E338FFF32F0}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{CE4EB543-0923-4FE0-8621-8B4B6DB12E56}" = protocol=17 | dir=in | app=c:\windows\system32\muzapp.exe |
"{CFAC5552-2C40-4E44-8435-4A180676D676}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe |
"{D15BB174-85B8-4C62-A823-7920F44F7579}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{D188172E-DFF4-4AAF-8E95-55B233B94DF1}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"{D84AA535-0ECF-47AD-93F8-2643CFEFC94D}" = protocol=17 | dir=in | app=c:\program files\spyware terminator\spywareterminatorupdate.exe |
"{DAE9D0EA-04E9-4D56-8F22-EB2DE43D5A06}" = protocol=17 | dir=in | app=c:\program files\searchcore toolbar\datamngr\toolbar\dtuser.exe |
"{E5707822-0E3C-4390-A0A9-96E75087D9CA}" = protocol=17 | dir=in | app=c:\users\mobil-star\appdata\roaming\dropbox\bin\dropbox.exe |
"{ECE112E3-1F40-403B-8592-F87BEFADFF14}" = dir=in | app=c:\program files\windows live\mesh\moe.exe |
"{F836BE95-9951-4061-BAEB-7F52E2AFF033}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{FB36FB67-1E75-4730-BF91-1C4C5A2CE28B}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{FBB682A8-077C-4E03-B5A3-049FDE7E6A32}" = dir=in | app=c:\users\mobil-~1\appdata\local\temp\ibtmpc810619\component_604 |
"TCP Query User{0B064B84-1B4C-433A-ADED-00F6250F7696}C:\users\mobil-star\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=6 | dir=in | app=c:\users\mobil-star\appdata\roaming\dropbox\bin\dropbox.exe |
"TCP Query User{24EB0681-2950-4553-AE85-5DD1201CE405}C:\program files\quicktime\quicktimeplayer.exe" = protocol=6 | dir=in | app=c:\program files\quicktime\quicktimeplayer.exe |
"TCP Query User{B53CD43F-A673-4529-81A6-C05EE51DA391}C:\program files\spyware terminator\spywareterminatorupdate.exe" = protocol=6 | dir=in | app=c:\program files\spyware terminator\spywareterminatorupdate.exe |
"UDP Query User{02AEA5CF-DC33-4ACB-AD75-C1E434E44F5B}C:\users\mobil-star\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=17 | dir=in | app=c:\users\mobil-star\appdata\roaming\dropbox\bin\dropbox.exe |
"UDP Query User{03DA3E4E-6E05-4D5D-A9E4-C723E5280821}C:\program files\spyware terminator\spywareterminatorupdate.exe" = protocol=17 | dir=in | app=c:\program files\spyware terminator\spywareterminatorupdate.exe |
"UDP Query User{B1F6E30C-F1E1-40D6-9CE1-6537FE120A9E}C:\program files\quicktime\quicktimeplayer.exe" = protocol=17 | dir=in | app=c:\program files\quicktime\quicktimeplayer.exe |
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{02602409-9189-4567-BC07-562605243B69}" = Windows Live Remote Client Resources
"{0481A2EA-DA1D-4D10-A7C3-F8237948F6B5}" = Messenger Companion
"{04830D0F-F980-4EC0-89F1-594F2FD2A1B5}" = ElsterFormular 2008/2009
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{0969AF05-4FF6-4C00-9406-43599238DE0D}" = ASUS Splendid Video Enhancement Technology
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0E7DBD52-B097-4F2B-A7C7-F105B0D20FDB}" = LightScribe System Software  1.14.17.1
"{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client
"{1B4AA674-F5CA-4BB5-831A-CD37B4021959}" = ImageMixer for Sony
"{1BA1DBDC-5431-46FD-A66F-A17EB1C439EE}" = Windows Live Messenger
"{1C3DA126-D523-4089-BCCA-FA46FE34D6F8}" = Google Drive
"{1C8521E5-5A7B-4A4E-A9CD-AD53116EAEE0}" = ASUS Data Security Manager
"{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}" = ASUS LifeFrame3
"{1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}" = Windows Live Writer Resources
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service
"{268278CF-FB69-4D98-B70E-BFEC1CDCA225}" = iTunes
"{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java(TM) 6 Update 11
"{28006915-2739-4EBE-B5E8-49B25D32EB33}" = Atheros Client Installation Program
"{2D6E3D97-1FDF-4993-AC75-72F59EC445C5}" = Windows Live Family Safety
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack
"{395AB8C5-F3A8-4380-8718-7A11EC5829F9}" = 3GU USB Modem
"{3A65A74A-5B6E-451A-92D8-50F1182BBE9A}" = Windows Live Remote Service Resources
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"{415B2719-AD3A-4944-B404-C472DB6085B3}" = Cisco EAP-FAST Module
"{43DCF766-6838-4F9A-8C91-D92DA586DFA7}" = Microsoft Windows-Journal-Viewer
"{45C56AA7-ED1B-4800-A97F-EDDF3F3520B1}" = Apple Application Support
"{56736259-613E-4A3B-B428-6235F2E76F44}_is1" = Spyware Terminator 2012
"{59F6A514-9813-47A3-948C-8A155460CC2A}" = RICOH R5C83x/84x Flash Media Controller Driver Ver.3.55.03
"{5C1DB4ED-E9B4-402D-BB14-D75D97D6C1A6}" = ATKOSD2
"{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI
"{5EDDD103-CF66-40DF-A0B9-DECDC0F017D5}" = MAGIX Video deluxe 2013
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{62CF8923-31DC-4285-A23C-17CE5AA6A679}" = Express Gate
"{64452561-169F-4A36-A2FF-B5E118EC65F5}" = ASUS SmartLogon
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
"{669C7BD8-DAA2-49B6-966C-F1E2AAE6B17E}" = Cisco PEAP Module
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6C5F8503-55D2-4398-858C-362B7A7AF51C}" = Firebird SQL Server - MAGIX Edition
"{6D172D0A-B9F1-4046-AFAB-8599288545BF}" = Safari
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"{76618402-179D-4699-A66B-D351C59436BC}" = Windows Live Sync
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{7BE15435-2D3E-4B58-867F-9C75BED0208C}" = QuickTime
"{7C05592D-424B-46CB-B505-E0013E8E75C9}" = ATK Hotkey
"{7C5B4583-7CBF-4289-B195-03B553959DEA}" = VoiceOver Kit
"{7E84FAC8-C518-40F9-9807-7455301D6D25}" = SamsungConnectivityCableDriver
"{7EC19307-7C22-47A8-922B-3FA965291260}" = OpenOffice.org 3.0
"{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1" = PDF24 Creator 5.4.0
"{83770D14-21B9-44B3-8689-F7B523F94560}" = Cisco LEAP Module
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{859D4022-B76D-40DE-96EF-C90CDA263F44}" = Windows Live Writer
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007
"{90120000-0015-0407-0000-0000000FF1CE}_ENTERPRISER_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0015-0407-0000-0000000FF1CE}_PROHYBRIDR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_PROHYBRIDR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0015-040C-0000-0000000FF1CE}" = Microsoft Office Access MUI (French) 2007
"{90120000-0015-040C-0000-0000000FF1CE}_PROHYBRIDR_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0015-0410-0000-0000000FF1CE}" = Microsoft Office Access MUI (Italian) 2007
"{90120000-0015-0410-0000-0000000FF1CE}_PROHYBRIDR_{7F40286D-09A7-4DC0-A2A4-AA18D026D369}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0015-0413-0000-0000000FF1CE}" = Microsoft Office Access MUI (Dutch) 2007
"{90120000-0015-0413-0000-0000000FF1CE}_PROHYBRIDR_{26257879-B20D-4D30-A429-B387A4890929}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISER_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0407-0000-0000000FF1CE}_PROHYBRIDR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_PROHYBRIDR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-040C-0000-0000000FF1CE}" = Microsoft Office Excel MUI (French) 2007
"{90120000-0016-040C-0000-0000000FF1CE}_PROHYBRIDR_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0410-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Italian) 2007
"{90120000-0016-0410-0000-0000000FF1CE}_PROHYBRIDR_{7F40286D-09A7-4DC0-A2A4-AA18D026D369}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0413-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Dutch) 2007
"{90120000-0016-0413-0000-0000000FF1CE}_PROHYBRIDR_{26257879-B20D-4D30-A429-B387A4890929}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISER_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0407-0000-0000000FF1CE}_PROHYBRIDR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_PROHYBRIDR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-040C-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (French) 2007
"{90120000-0018-040C-0000-0000000FF1CE}_PROHYBRIDR_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0410-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Italian) 2007
"{90120000-0018-0410-0000-0000000FF1CE}_PROHYBRIDR_{7F40286D-09A7-4DC0-A2A4-AA18D026D369}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0413-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Dutch) 2007
"{90120000-0018-0413-0000-0000000FF1CE}_PROHYBRIDR_{26257879-B20D-4D30-A429-B387A4890929}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}_ENTERPRISER_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0407-0000-0000000FF1CE}_PROHYBRIDR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_PROHYBRIDR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-040C-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (French) 2007
"{90120000-0019-040C-0000-0000000FF1CE}_PROHYBRIDR_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0410-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Italian) 2007
"{90120000-0019-0410-0000-0000000FF1CE}_PROHYBRIDR_{7F40286D-09A7-4DC0-A2A4-AA18D026D369}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0413-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Dutch) 2007
"{90120000-0019-0413-0000-0000000FF1CE}_PROHYBRIDR_{26257879-B20D-4D30-A429-B387A4890929}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISER_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0407-0000-0000000FF1CE}_PROHYBRIDR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_PROHYBRIDR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-040C-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (French) 2007
"{90120000-001A-040C-0000-0000000FF1CE}_PROHYBRIDR_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0410-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Italian) 2007
"{90120000-001A-0410-0000-0000000FF1CE}_PROHYBRIDR_{7F40286D-09A7-4DC0-A2A4-AA18D026D369}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0413-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Dutch) 2007
"{90120000-001A-0413-0000-0000000FF1CE}_PROHYBRIDR_{26257879-B20D-4D30-A429-B387A4890929}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISER_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0407-0000-0000000FF1CE}_PROHYBRIDR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_PROHYBRIDR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-040C-0000-0000000FF1CE}" = Microsoft Office Word MUI (French) 2007
"{90120000-001B-040C-0000-0000000FF1CE}_PROHYBRIDR_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0410-0000-0000000FF1CE}" = Microsoft Office Word MUI (Italian) 2007
"{90120000-001B-0410-0000-0000000FF1CE}_PROHYBRIDR_{7F40286D-09A7-4DC0-A2A4-AA18D026D369}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0413-0000-0000000FF1CE}" = Microsoft Office Word MUI (Dutch) 2007
"{90120000-001B-0413-0000-0000000FF1CE}_PROHYBRIDR_{26257879-B20D-4D30-A429-B387A4890929}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0401-0000-0000000FF1CE}" = Microsoft Office Proof (Arabic) 2007
"{90120000-001F-0401-0000-0000000FF1CE}_PROHYBRIDR_{3E8EA473-ECCE-405F-A9CA-59446AEADD3A}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISER_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}_PROHYBRIDR_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISER_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}_PROHYBRIDR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISER_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}_PROHYBRIDR_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_ENTERPRISER_{A23BFC95-4A73-410F-9248-4C2B48E38C49}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0410-0000-0000000FF1CE}_PROHYBRIDR_{A23BFC95-4A73-410F-9248-4C2B48E38C49}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0413-0000-0000000FF1CE}" = Microsoft Office Proof (Dutch) 2007
"{90120000-001F-0413-0000-0000000FF1CE}_PROHYBRIDR_{2C95E7EE-FEA7-4B3A-A6E5-DF90A88B816A}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-002C-040C-0000-0000000FF1CE}" = Microsoft Office Proofing (French) 2007
"{90120000-002C-0410-0000-0000000FF1CE}" = Microsoft Office Proofing (Italian) 2007
"{90120000-002C-0413-0000-0000000FF1CE}" = Microsoft Office Proofing (Dutch) 2007
"{90120000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2007
"{90120000-0044-0407-0000-0000000FF1CE}_ENTERPRISER_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_ENTERPRISER_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0407-0000-0000000FF1CE}_PROHYBRIDR_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_PROHYBRIDR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-040C-0000-0000000FF1CE}" = Microsoft Office Shared MUI (French) 2007
"{90120000-006E-040C-0000-0000000FF1CE}_PROHYBRIDR_{8283FD64-6A3B-4104-9E12-7CA25EF29A1A}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0410-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Italian) 2007
"{90120000-006E-0410-0000-0000000FF1CE}_PROHYBRIDR_{C0C7E58F-D0A1-4102-855B-0B7AA2E8F1C1}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0413-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Dutch) 2007
"{90120000-006E-0413-0000-0000000FF1CE}_PROHYBRIDR_{1D12BC91-360E-424C-97C4-813651313660}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_ENTERPRISER_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00B2-0407-0000-0000000FF1CE}" = Microsoft – Speichern als PDF oder XPS – Add-In für 2007 Microsoft Office-Programme
"{90120000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2007
"{90120000-00BA-0407-0000-0000000FF1CE}_ENTERPRISER_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_PROHYBRIDR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_PROHYBRIDR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{91120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{91120000-0031-0000-0000-0000000FF1CE}" = Microsoft Office Professional Hybrid 2007
"{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{91B9368F-6C6F-3DB5-9CBA-6CAD56035B26}" = Google Talk Plugin
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95140000-007A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9A9DBEBC-C800-4776-A970-D76D6AA405B1}" = PHOTOfunSTUDIO -viewer-
"{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}" = ASUS Power4Gear Hybrid
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D48531D-2135-49FC-BC29-ACCDA5396A76}" = ASUS MultiFrame
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A3A1D6DC-7CB4-4894-8E54-3A48493EF488}" = MAGIX Speed burnR (MSI)
"{A71D5E81-B967-43DB-93D7-FD31BFB95748}" = MobileMe Control Panel
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AC599724-5755-48C1-ABE7-ABB857652930}" = PC Connectivity Solution
"{AC76BA86-7AD7-1031-7B44-A95000000001}" = Adobe Reader 9.5.5 - Deutsch
"{AC76BA86-7AD7-5464-3428-900000000004}" = Spelling Dictionaries Support For Adobe Reader 9
"{ACFBE99B-6981-4513-B17E-A2683CEB9EE5}" = Windows Live Mesh
"{AE46ABD3-D625-467F-B5A7-8D3FFF077F0D}" = Realtek 8139 and 8139C+ Ethernet Network Card Driver for Windows Vista
"{AF7E85DC-317C-47F5-810E-B82EE093A612}" = Samsung New PC Studio USB Driver Installer
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{B113D18C-67B0-4FB7-B329-E89B66194AE6}" = Windows Live Fotogalerie
"{B1239994-A850-44E2-BED8-E70A21124E16}" = Windows Live Mail
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B7A0CE06-068E-11D6-97FD-0050BACBF861}" = PowerProducer
"{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
"{C5398A89-516C-4DAF-BA07-EE7949090E56}" = Windows Live Mesh ActiveX control for remote connections
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"{C6150D8A-86ED-41D3-87BB-F3BB51B0B77F}" = Windows Live ID Sign-in Assistant
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{D36DD326-7280-11D8-97C8-000129760CBE}" = PhotoNow!
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D5A9B7C0-8751-11D8-9D75-000129760D75}" = MediaShow
"{DC905847-D537-427F-BF91-47CC7ACCDE58}" = ASUS FancyStart
"{DE10AB76-4756-4913-BE25-55D1C1051F9A}" = WinFlash
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E14ADE0E-75F3-4A46-87E5-26692DD626EC}" = Apple Mobile Device Support
"{E4E88B54-4777-4659-967A-2EED1E6AFD83}" = Windows Live Movie Maker
"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger
"{E7C6D565-2E48-4303-A114-AFE7B2E561AF}_is1" = FotoSketcher 2.35
"{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}" = ASUS Virtual Camera
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F193FC0E-9E18-40FC-A974-509A1BDD240A}" = Samsung New PC Studio
"{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}" = Microsoft Office Live Add-in 1.5
"{F4811919-F252-4B25-9AB2-8859A85810B5}" = TuneUp Utilities Language Pack (de-DE)
"{F5A4F780-DF0C-444F-BA82-637CCF5C8052}" = Windows Live Family Safety
"{F9000000-0015-0000-0000-074957833700}" = ABBYY Screenshot Reader
"{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
"3A5DEFA413DDE699DBA6EBE0A63534ACA524D30F" = Windows-Treiberpaket - Nokia pccsmcfd  (10/12/2007 6.85.4.0)
"77zip" = 77zip
"7-Zip" = 7-Zip 9.20
"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
"Ad-aware 6 Personal" = Ad-aware 6 Personal
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Amazon MP3-Downloader" = Amazon MP3-Downloader 1.0.17
"Asus_Camera_ScreenSaver" = Asus_Camera_ScreenSaver
"Audiograbber" = Audiograbber 1.83 SE
"Audiograbber-Lame" = Audiograbber Lame-MP3-Plugin
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"bi_uninstaller" = Bundled software uninstaller
"BrowserCompanion" = BrowserCompanion
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"DivX Setup.divx.com" = DivX-Setup
"ENTERPRISER" = Microsoft Office Enterprise 2007
"FILEminimizer Pictures_is1" = FILEminimizer Pictures
"FilesFrog Update Checker" = FilesFrog Update Checker
"FileZilla Client" = FileZilla Client 3.2.3.1
"FormatFactory" = FormatFactory 3.0.1
"Free PDF to Word Doc Converter_is1" = Free PDF to Word Doc Converter v1.1
"Free Video Dub_is1" = Free Video Dub version 2.0.17.320
"GinyasBrowserCompanion" = GinyasBrowserCompanion
"Google Chrome" = Google Chrome
"Google Desktop" = Google Desktop
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"InstallShield_{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"InstallShield_{AF7E85DC-317C-47F5-810E-B82EE093A612}" = Samsung New PC Studio USB Driver Installer
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"InstallShield_{F193FC0E-9E18-40FC-A974-509A1BDD240A}" = Samsung New PC Studio
"KLiteCodecPack_is1" = K-Lite Codec Pack 6.2.0 (Full)
"MAGIX_{5EDDD103-CF66-40DF-A0B9-DECDC0F017D5}" = MAGIX Video deluxe 2013
"MAGIX_{A3A1D6DC-7CB4-4894-8E54-3A48493EF488}" = MAGIX Speed burnR (MSI)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.75.0.1300
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Mobile Partner" = Mobile Partner
"Mozilla Firefox (3.5.16)" = Mozilla Firefox (3.5.16)
"MWASPI" = MicroStaff WINASPI
"PC Performer_is1" = PC Performer
"Picasa 3" = Picasa 3
"Picasa2" = Picasa 2
"PROHYBRIDR" = 2007 Microsoft Office system
"softonic-de3 Toolbar" = softonic-de3 Toolbar
"SpecialSavings" = SpecialSavings
"Speed Analysis 2" = Speed Analysis 2
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"TVWiz" = Intel(R) TV Wizard
"Updater Service" = Updater Service
"USB 2.0 UVC 1.3M WebCam" = USB 2.0 UVC 1.3M WebCam
"Verbindungsassistent" = Verbindungsassistent
"VLC media player" = VLC media player 0.9.4
"Windows Searchcore Toolbar" = Searchcore Toolbar
"WinLiveSuite" = Windows Live Essentials
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 28.05.2013 02:19:21 | Computer Name = Mobil-Star-03 | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung iexplore.exe, Version 9.0.8112.16483, Zeitstempel
 0x515df825, fehlerhaftes Modul ButtonSite.dll, Version 0.9.11.19, Zeitstempel 0x50ad919e,
 Ausnahmecode 0xc0000005, Fehleroffset 0x00004e52,  Prozess-ID 0x12dc, Anwendungsstartzeit
 01ce5b6b166c585f.
 
Error - 28.05.2013 02:20:11 | Computer Name = Mobil-Star-03 | Source = Application Hang | ID = 1002
Description = Programm iexplore.exe, Version 9.0.8112.16483 arbeitet nicht mehr
mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet
 "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen
über das Problem zu suchen.  Prozess-ID: 15d0  Anfangszeit: 01ce5b6b533011ff  Zeitpunkt
 der Beendigung: 4
 
Error - 28.05.2013 02:35:54 | Computer Name = Mobil-Star-03 | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung tbhcn.exe, Version 1.0.0.9, Zeitstempel 0x5121f458,
 fehlerhaftes Modul ntdll.dll, Version 6.0.6002.18541, Zeitstempel 0x4ec3e3d5, Ausnahmecode
 0xc0000005, Fehleroffset 0x000665c9,  Prozess-ID 0x14e4, Anwendungsstartzeit 01ce5b6cc7b2ec9f.
 
Error - 28.05.2013 03:00:01 | Computer Name = Mobil-Star-03 | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung tbhcn.exe, Version 1.0.0.9, Zeitstempel 0x5121f458,
 fehlerhaftes Modul ntdll.dll, Version 6.0.6002.18541, Zeitstempel 0x4ec3e3d5, Ausnahmecode
 0xc0000005, Fehleroffset 0x000665c9,  Prozess-ID 0xd70, Anwendungsstartzeit 01ce5b70f84be29f.
 
Error - 28.05.2013 03:30:07 | Computer Name = Mobil-Star-03 | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung tbhcn.exe, Version 1.0.0.9, Zeitstempel 0x5121f458,
 fehlerhaftes Modul ntdll.dll, Version 6.0.6002.18541, Zeitstempel 0x4ec3e3d5, Ausnahmecode
 0xc0000005, Fehleroffset 0x000665c9,  Prozess-ID 0x13d8, Anwendungsstartzeit 01ce5b752928714f.
 
Error - 28.05.2013 04:00:02 | Computer Name = Mobil-Star-03 | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung tbhcn.exe, Version 1.0.0.9, Zeitstempel 0x5121f458,
 fehlerhaftes Modul ntdll.dll, Version 6.0.6002.18541, Zeitstempel 0x4ec3e3d5, Ausnahmecode
 0xc0000005, Fehleroffset 0x000665c9,  Prozess-ID 0x1298, Anwendungsstartzeit 01ce5b795a0a301f.
 
Error - 28.05.2013 04:30:07 | Computer Name = Mobil-Star-03 | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung tbhcn.exe, Version 1.0.0.9, Zeitstempel 0x5121f458,
 fehlerhaftes Modul ntdll.dll, Version 6.0.6002.18541, Zeitstempel 0x4ec3e3d5, Ausnahmecode
 0xc0000005, Fehleroffset 0x000665c9,  Prozess-ID 0x1368, Anwendungsstartzeit 01ce5b7d8afeb39f.
 
Error - 28.05.2013 05:00:03 | Computer Name = Mobil-Star-03 | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung tbhcn.exe, Version 1.0.0.9, Zeitstempel 0x5121f458,
 fehlerhaftes Modul ntdll.dll, Version 6.0.6002.18541, Zeitstempel 0x4ec3e3d5, Ausnahmecode
 0xc0000005, Fehleroffset 0x000665c9,  Prozess-ID 0xd80, Anwendungsstartzeit 01ce5b81bbd6393f.
 
Error - 28.05.2013 05:30:07 | Computer Name = Mobil-Star-03 | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung tbhcn.exe, Version 1.0.0.9, Zeitstempel 0x5121f458,
 fehlerhaftes Modul ntdll.dll, Version 6.0.6002.18541, Zeitstempel 0x4ec3e3d5, Ausnahmecode
 0xc0000005, Fehleroffset 0x000665c9,  Prozess-ID 0xb68, Anwendungsstartzeit 01ce5b85ecb3160f.
 
Error - 28.05.2013 06:00:03 | Computer Name = Mobil-Star-03 | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung tbhcn.exe, Version 1.0.0.9, Zeitstempel 0x5121f458,
 fehlerhaftes Modul ntdll.dll, Version 6.0.6002.18541, Zeitstempel 0x4ec3e3d5, Ausnahmecode
 0xc0000005, Fehleroffset 0x000665c9,  Prozess-ID 0x1474, Anwendungsstartzeit 01ce5b8a1d9a2c0f.
 
[ OSession Events ]
Error - 26.04.2009 04:05:48 | Computer Name = Mobil-Star-03 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
 12.0.6331.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 4788
 seconds with 1080 seconds of active time.  This session ended with a crash.
 
Error - 13.05.2009 12:15:06 | Computer Name = Mobil-Star-03 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6423.1000, Microsoft Office Version: 12.0.6425.1000. This session lasted 3
 seconds with 0 seconds of active time.  This session ended with a crash.
 
Error - 13.05.2009 12:15:31 | Computer Name = Mobil-Star-03 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6423.1000, Microsoft Office Version: 12.0.6425.1000. This session lasted 3
 seconds with 0 seconds of active time.  This session ended with a crash.
 
Error - 16.08.2012 13:57:07 | Computer Name = Mobil-Star-03 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 8664
 seconds with 4080 seconds of active time.  This session ended with a crash.
 
Error - 29.01.2013 06:55:32 | Computer Name = Mobil-Star-03 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 4698
 seconds with 3780 seconds of active time.  This session ended with a crash.
 
Error - 22.03.2013 07:40:15 | Computer Name = Mobil-Star-03 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 5503
 seconds with 480 seconds of active time.  This session ended with a crash.
 
[ System Events ]
Error - 27.05.2013 06:37:59 | Computer Name = Mobil-Star-03 | Source = Service Control Manager | ID = 7000
Description =
 
Error - 27.05.2013 06:49:38 | Computer Name = Mobil-Star-03 | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001
Description =
 
Error - 27.05.2013 06:52:37 | Computer Name = Mobil-Star-03 | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description =
 
Error - 27.05.2013 07:01:29 | Computer Name = Mobil-Star-03 | Source = DCOM | ID = 10010
Description =
 
Error - 27.05.2013 07:02:09 | Computer Name = Mobil-Star-03 | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description =
 
Error - 28.05.2013 01:45:18 | Computer Name = Mobil-Star-03 | Source = Service Control Manager | ID = 7009
Description =
 
Error - 28.05.2013 01:45:18 | Computer Name = Mobil-Star-03 | Source = Service Control Manager | ID = 7000
Description =
 
Error - 28.05.2013 01:50:33 | Computer Name = Mobil-Star-03 | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001
Description =
 
Error - 28.05.2013 01:56:47 | Computer Name = Mobil-Star-03 | Source = DCOM | ID = 10010
Description =
 
Error - 28.05.2013 02:00:08 | Computer Name = Mobil-Star-03 | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description =
 
 
< End of report >
--- --- ---


Ich hoffe das war richtig so, wie ich es gemacht habe.
Ich bin total froh dass ich hier Hilfe bekomme!

aharonov 28.05.2013 15:24
Ja, der OTL-Scan passt so. :daumenhoc
Jetzt fehlt nur noch das Gmer-Log.

Makr 28.05.2013 17:03
Irgendetwas muss ich falsch gemacht haben. Es kam die Meldung:

gmer_2.1.19163 (1).exe funktioniert nicht mehr. Das Programm wird aufgrund eines Problems nicht richtig ausgeführt.

Ich denke mal ich habe den zweiten Haken nicht richtig entfernt, weil ich es nicht ganz verstanden habe.
"Alle Festplatten ausser die Systemplatte (normalerweise ist nur C:\ angehackt)"

kann das sein?

Ich hatte auch Schwieirgkeiten alle scanner und co zu deaktivieren, weil ich leider nicht ganz weiß wo ich sie alle finde. Ich habe diejneigen, die in meiner Taskleiste zu sehen sind ohne Probleme deaktivieren können. Die Sicherheitseinstellungen zu "Firewall", "Automatische Updates", "Windows-Defender" "Internetsicherheitseinstellungen" und "Benutzerkontensteuerung" ließen sich nicht daktivieren, allerdings weiß ich nicht ob ich das überhaupt muss.

Was sagen Sie dazu?
Herzlich Makr

aharonov 28.05.2013 17:06
Hi,

Zitat:
Die Sicherheitseinstellungen zu "Firewall", "Automatische Updates", "Windows-Defender" "Internetsicherheitseinstellungen" und "Benutzerkontensteuerung" ließen sich nicht daktivieren, allerdings weiß ich nicht ob ich das überhaupt muss.
Nein, dieses Zeugs musst du nicht deaktivieren. Nur den Echtzeitschutz deines Antivirenscanner (und nur dann, wenn es explizit in der Anleitung verlangt wird).
Geht in deinem Fall so: Recktsklick in der Taskleiste rechts unten auf das rote Symbol mit Schirm von Avira und dort den Haken bei "Echtzeit Scanner aktivieren" entfernen. (Aktivieren zum Schluss dann genau gleich.)

Gmer bockt schon mal. Nimm stattdessen aswMBR:


Schritt 1

Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.
  • Starte die aswMBR.exe - (aswMBR.exe Anleitung)
    Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten".
  • Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen )
    Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
  • Klicke auf Scan.
  • Warte bitte bis Scan finished successfully im DOS-Fenster steht.
  • Drücke auf Save Log und speichere diese auf dem Desktop.
Poste mir die aswMBR.txt in deiner nächsten Antwort.

Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung

Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte der Scan abbrechen und das Programm abstürzen, dann teile mir das mit und wähle unter AV Scan die Einstellung (none).




Bitte poste in deiner nächsten Antwort:
  • Log von aswMBR

Makr 29.05.2013 07:56
aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2013-05-29 07:43:43
-----------------------------
07:43:43.322 OS Version: Windows 6.0.6002 Service Pack 2
07:43:43.322 Number of processors: 2 586 0xF0D
07:43:43.323 ComputerName: MOBIL-STAR-03 UserName: Mobil-Star
07:43:46.087 Initialize success
07:44:36.110 AVAST engine defs: 13052800
07:44:49.327 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0
07:44:49.330 Disk 0 Vendor: ST925032 0303 Size: 238475MB BusType: 3
07:44:50.089 Disk 0 MBR read successfully
07:44:50.091 Disk 0 MBR scan
07:44:51.314 Disk 0 unknown MBR code
07:44:51.351 Disk 0 Partition 1 00 1C Hidd FAT32 LBA MSDOS5.0 12001 MB offset 63
07:44:51.818 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 119232 MB offset 24579450
07:44:52.270 Disk 0 Partition - 00 0F Extended LBA 107238 MB offset 268767450
07:44:52.298 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 107238 MB offset 268767513
07:44:52.739 Disk 0 scanning sectors +488392065
07:44:53.666 Disk 0 scanning C:\Windows\system32\drivers
07:46:54.972 Service scanning
07:47:52.282 Modules scanning
07:48:35.136 Disk 0 trace - called modules:
07:48:35.171 ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll iaStor.sys
07:48:35.176 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x865b1968]
07:48:35.182 3 CLASSPNP.SYS[885a18b3] -> nt!IofCallDriver -> [0x85a4b828]
07:48:35.187 5 acpi.sys[806976bc] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-0[0x85a51028]
07:48:36.783 AVAST engine scan C:\Windows
07:49:03.541 AVAST engine scan C:\Windows\system32
08:03:08.594 AVAST engine scan C:\Windows\system32\drivers
08:04:07.464 AVAST engine scan C:\Users\Mobil-Star
08:42:59.593 AVAST engine scan C:\ProgramData
08:49:31.329 Scan finished successfully
08:50:57.438 Disk 0 MBR has been saved successfully to "C:\Users\Mobil-Star\Downloads\MBR.dat"
08:50:57.469 The log file has been saved successfully to "C:\Users\Mobil-Star\Downloads\aswMBR 1.txt"
08:51:56.331 Disk 0 MBR has been saved successfully to "C:\Users\Mobil-Star\Desktop\für troja board\MBR.dat"
08:51:56.338 The log file has been saved successfully to "C:\Users\Mobil-Star\Desktop\für troja board\aswMBR.txt"

tut mir leid, dass es so lange gedauert hat, ich musste gestern dann leider weg.

aharonov 29.05.2013 11:20
Kein Problem. Dann weiter:


Schritt 1
  • Gehe zu Start --> Systemsteuerung und öffne Programme und Funktionen.
  • Suche und deinstalliere dort der Reihe nach folgende Einträge:
    • BrowserCompanion
    • softonic-de3 Toolbar
    • SpecialSavings
    • Searchcore Toolbar
  • Schliesse das Fenster wieder und führe einen Neustart durch, wenn das gefordert wurde.



Schritt 2

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).



Schritt 3

Starte bitte die OTL.exe.
  • Setze den Haken bei Scan all Users.
  • Drücke auf den Quick Scan Button.
  • Poste den Inhalt von OTL.txt hier in den Thread.



Bitte poste in deiner nächsten Antwort:
  • Log von AdwCleaner
  • Log von OTL

Makr 29.05.2013 15:06
Der BrowserCompanion lässt sich nicht deinstallieren. da heißt es:

"Die Benutzerkontoeinstellungen trägt dazu bei, dass nicht autorisierte Änderungen an dem Computer verhindert werden"

aharonov 29.05.2013 15:34
Dann mach mit dem nächsten weiter.

Makr 29.05.2013 16:44
AdwCleaner v2.301 - Datei am 29/05/2013 um 17:30:08 erstellt
# Aktualisiert am 16/05/2013 von Xplode
# Betriebssystem : Windows Vista (TM) Home Basic Service Pack 2 (32 bits)
# Benutzer : Mobil-Star - MOBIL-STAR-03
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Mobil-Star\Downloads\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****

Gestoppt & Gelöscht : IBUpdaterService

***** [Dateien / Ordner] *****

Datei Gelöscht : C:\END
Datei Gelöscht : C:\Program Files\Mozilla Firefox\.autoreg
Datei Gelöscht : C:\Program Files\Mozilla FireFox\searchplugins\Search_Results.xml
Datei Gelöscht : C:\Users\Mobil-Star\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_apps.conduit.com_0.localstorage
Datei Gelöscht : C:\Users\Mobil-Star\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_apps.conduit.com_0.localstorage-journal
Datei Gelöscht : C:\Users\Mobil-Star\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.conduit.com_0.localstorage
Datei Gelöscht : C:\Users\Mobil-Star\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.conduit.com_0.localstorage-journal
Datei Gelöscht : C:\Users\Mobil-Star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tcbhn.lnk
Datei Gelöscht : C:\Users\Mobil-Star\AppData\Roaming\Mozilla\Firefox\Profiles\i0htsn1x.default\searchplugins\Conduit.xml
Datei Gelöscht : C:\Users\Mobil-Star\AppData\Roaming\Mozilla\Firefox\Profiles\i0htsn1x.default\searchplugins\Search_Results.xml
Datei Gelöscht : C:\Users\Mobil-Star\Desktop\Check for Updates.lnk
Datei Gelöscht : C:\Windows\Tasks\GinyasBrowserCompanion Chrome Watcher.job
Datei Gelöscht : C:\Windows\Tasks\GinyasBrowserCompanion FireFox Watcher.job
Datei Gelöscht : C:\Windows\Tasks\GinyasBrowserCompanion Runner.job
Datei Gelöscht : C:\Windows\Tasks\GinyasBrowserCompanion Stats Report.job
Datei Gelöscht : C:\Windows\Tasks\GinyasBrowserCompanion Update Checker.job
Datei Gelöscht : C:\Windows\Tasks\PC Performer_DEFAULT.job
Gelöscht mit Neustart : C:\Program Files\BrowserCompanion
Gelöscht mit Neustart : C:\ProgramData\GinyasBrowserCompanion
Gelöscht mit Neustart : C:\Users\Mobil-Star\AppData\Roaming\Mozilla\Firefox\Profiles\i0htsn1x.default\extensions\{1fd91a9c-410c-4090-bbcc-55d3450ef433}
Ordner Gelöscht : C:\Program Files\Common Files\DVDVideoSoft\TB
Ordner Gelöscht : C:\Program Files\Conduit
Ordner Gelöscht : C:\Program Files\FilesFrog Update Checker
Ordner Gelöscht : C:\Program Files\searchcore toolbar
Ordner Gelöscht : C:\Program Files\Speed Analysis 2
Ordner Gelöscht : C:\ProgramData\boost_interprocess
Ordner Gelöscht : C:\ProgramData\IBUpdaterService
Ordner Gelöscht : C:\Users\MOBIL-~1\AppData\Local\Temp\CT3281675
Ordner Gelöscht : C:\Users\Mobil-Star\AppData\Local\Conduit
Ordner Gelöscht : C:\Users\Mobil-Star\AppData\Local\Google\Chrome\User Data\Default\Extensions\bodddioamolcibagionmmobehnbhiakf
Ordner Gelöscht : C:\Users\Mobil-Star\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf
Ordner Gelöscht : C:\Users\Mobil-Star\AppData\LocalLow\bbrs_002.tb
Ordner Gelöscht : C:\Users\Mobil-Star\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\Mobil-Star\AppData\LocalLow\PriceGong
Ordner Gelöscht : C:\Users\Mobil-Star\AppData\Roaming\BrowserCompanion
Ordner Gelöscht : C:\Users\Mobil-Star\AppData\Roaming\Desktopicon
Ordner Gelöscht : C:\Users\Mobil-Star\AppData\Roaming\file scout
Ordner Gelöscht : C:\Users\Mobil-Star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker
Ordner Gelöscht : C:\Users\Mobil-Star\AppData\Roaming\Mozilla\Firefox\Profiles\i0htsn1x.default\Conduit
Ordner Gelöscht : C:\Users\Mobil-Star\AppData\Roaming\Mozilla\Firefox\Profiles\i0htsn1x.default\ConduitCommon
Ordner Gelöscht : C:\Users\Mobil-Star\AppData\Roaming\Mozilla\Firefox\Profiles\i0htsn1x.default\CT2405727
Ordner Gelöscht : C:\Users\Mobil-Star\AppData\Roaming\Mozilla\Firefox\Profiles\i0htsn1x.default\CT2431245
Ordner Gelöscht : C:\Users\Mobil-Star\AppData\Roaming\Mozilla\Firefox\Profiles\i0htsn1x.default\CT3281675
Ordner Gelöscht : C:\Users\Mobil-Star\AppData\Roaming\Mozilla\Firefox\Profiles\i0htsn1x.default\extensions\{9bb815eb-3f9f-4e11-9150-cb70e29b40fc}
Ordner Gelöscht : C:\Users\Mobil-Star\AppData\Roaming\Mozilla\Firefox\Profiles\i0htsn1x.default\extensions\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}
Ordner Gelöscht : C:\Users\Mobil-Star\AppData\Roaming\Mozilla\Firefox\Profiles\i0htsn1x.default\extensions\{e44a1809-4d10-4ab8-b343-3326b64c7cdd}
Ordner Gelöscht : C:\Users\Mobil-Star\AppData\Roaming\Mozilla\Firefox\Profiles\i0htsn1x.default\extensions\bbrs_002@blabbers.com
Ordner Gelöscht : C:\Users\Mobil-Star\AppData\Roaming\Mozilla\Firefox\Profiles\i0htsn1x.default\extensions\speedanalysis02@SpeedAnalysis.com
Ordner Gelöscht : C:\Users\Mobil-Star\AppData\Roaming\OpenCandy
Ordner Gelöscht : C:\Users\Mobil-Star\AppData\Roaming\PerformerSoft
Ordner Gelöscht : C:\Users\Mobil-Star\AppData\Roaming\SpecialSavings
Ordner Gelöscht : C:\Users\Mobil-Star\AppData\Roaming\SpeedAnalysis2

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKCU\Software\APN PIP
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\PriceGong
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar
Schlüssel Gelöscht : HKCU\Software\BI
Schlüssel Gelöscht : HKCU\Software\Blabbers
Schlüssel Gelöscht : HKCU\Software\BrowserCompanion
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\DataMngr
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{70D46D94-BF1E-45ED-B567-48701376298E}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2426}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\bi_uninstaller
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\FilesFrog Update Checker
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\GinyasBrowserCompanion
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\PC Performer_is1
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Speed Analysis 2
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Updater Service
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{18DBB6CE-3148-4FEC-B481-103CB3290427}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7DA17D5A-5718-4130-A605-FC316C827836}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{963B125B-8B21-49A2-A3A8-E37092276531}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AF6AC4F2-9825-4FB6-A600-92BC5361F209}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00CBB66B-1D3B-46D3-9577-323A336ACB50}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{18DBB6CE-3148-4FEC-B481-103CB3290427}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7DA17D5A-5718-4130-A605-FC316C827836}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{963B125B-8B21-49A2-A3A8-E37092276531}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AF6AC4F2-9825-4FB6-A600-92BC5361F209}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\grusskartencenter.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\grusskartencenter.com
Schlüssel Gelöscht : HKCU\Software\PerformerSoft
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\Somoto
Schlüssel Gelöscht : HKLM\Software\BrowserCompanion
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{20EDC024-43C5-423E-B7F5-FD93523E0D9F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{373ED12D-B306-43AC-9485-A7C5133DC34C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{ED6535E7-F778-48A5-A060-549D30024511}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\PropertySync.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\tdataprotocol.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\updatebho.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\wit4ie.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00CBB66B-1D3B-46D3-9577-323A336ACB50}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{18DBB6CE-3148-4FEC-B481-103CB3290427}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5ACE96C0-C70A-4A4D-AF14-2E7B869345E1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{963B125B-8B21-49A2-A3A8-E37092276531}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AF6AC4F2-9825-4FB6-A600-92BC5361F209}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{817923CB-4744-4216-B250-CF7EDA8F1767}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9F0C17EB-EF2C-4278-9136-2D547656BC03}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\base64
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\chrome
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\prox
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\tdataprotocol.CTData
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\tdataprotocol.CTData.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT2431245
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT3281675
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{830B56CB-FD22-44AA-9887-7898F4F4158D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{8830DDF0-3042-404D-A62C-384A85E34833}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{955B782E-CDC8-4CEE-B6F6-AD7D541A8D8A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\updatebho.TimerBHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\updatebho.TimerBHO.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wit4ie.WitBHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wit4ie.WitBHO.2
Schlüssel Gelöscht : HKLM\Software\Conduit
Schlüssel Gelöscht : HKLM\Software\DeviceVM
Schlüssel Gelöscht : HKLM\Software\GinyasBrowserCompanion
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\bodddioamolcibagionmmobehnbhiakf
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2426}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00CBB66B-1D3B-46D3-9577-323A336ACB50}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DBB6CE-3148-4FEC-B481-103CB3290427}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{963B125B-8B21-49A2-A3A8-E37092276531}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF6AC4F2-9825-4FB6-A600-92BC5361F209}
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\063A857434EDED11A893800002C0A966
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BrowserCompanion
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FilesFrog Update Checker
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GinyasBrowserCompanion
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PC Performer_is1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Speed Analysis 2
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Updater Service
Schlüssel Gelöscht : HKLM\Software\PerformerSoft
Schlüssel Gelöscht : HKLM\SOFTWARE\Software
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [SDP]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AF6AC4F2-9825-4FB6-A600-92BC5361F209}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [10]

***** [Internet Browser] *****

-\\ Internet Explorer v9.0.8112.16483

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Mozilla Firefox v3.5.16 (de)

Datei : C:\Users\Mobil-Star\AppData\Roaming\Mozilla\Firefox\Profiles\i0htsn1x.default\prefs.js

Gelöscht : user_pref("CT2405727.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Gelöscht : user_pref("CT2405727.CTID", "CT2405727");
Gelöscht : user_pref("CT2405727.CurrentServerDate", "21-6-2010");
Gelöscht : user_pref("CT2405727.DialogsAlignMode", "LTR");
Gelöscht : user_pref("CT2405727.DownloadReferralCookieData", "");
Gelöscht : user_pref("CT2405727.EMailNotifierPollDate", "Mon Jun 21 2010 17:11:13 GMT+0200");
Gelöscht : user_pref("CT2405727.ExternalComponentPollDate129078516974368471", "Mon Jun 21 2010 00:59:24 GMT+020[...]
Gelöscht : user_pref("CT2405727.ExternalComponentPollDate129194330389937839", "Mon Jun 21 2010 00:59:24 GMT+020[...]
Gelöscht : user_pref("CT2405727.FirstServerDate", "21-6-2010");
Gelöscht : user_pref("CT2405727.FirstTime", true);
Gelöscht : user_pref("CT2405727.FirstTimeFF3", true);
Gelöscht : user_pref("CT2405727.FirstTimeSettingsDone", true);
Gelöscht : user_pref("CT2405727.FixPageNotFoundErrors", true);
Gelöscht : user_pref("CT2405727.GroupingServerCheckInterval", 1440);
Gelöscht : user_pref("CT2405727.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Gelöscht : user_pref("CT2405727.Initialize", true);
Gelöscht : user_pref("CT2405727.InitializeCommonPrefs", true);
Gelöscht : user_pref("CT2405727.InstallationAndCookieDataSentCount", 1);
Gelöscht : user_pref("CT2405727.InstalledDate", "Mon Jun 21 2010 14:38:49 GMT+0200");
Gelöscht : user_pref("CT2405727.InvalidateCache", false);
Gelöscht : user_pref("CT2405727.IsGrouping", false);
Gelöscht : user_pref("CT2405727.IsMulticommunity", false);
Gelöscht : user_pref("CT2405727.IsOpenThankYouPage", true);
Gelöscht : user_pref("CT2405727.IsOpenUninstallPage", true);
Gelöscht : user_pref("CT2405727.LanguagePackLastCheckTime", "Mon Jun 21 2010 14:38:49 GMT+0200");
Gelöscht : user_pref("CT2405727.LanguagePackReloadIntervalMM", 1440);
Gelöscht : user_pref("CT2405727.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Gelöscht : user_pref("CT2405727.LastLogin_2.7.1.3", "Mon Jun 21 2010 14:38:58 GMT+0200");
Gelöscht : user_pref("CT2405727.LatestVersion", "2.1.0.18");
Gelöscht : user_pref("CT2405727.Locale", "en");
Gelöscht : user_pref("CT2405727.LoginCache", 4);
Gelöscht : user_pref("CT2405727.MCDetectTooltipHeight", "83");
Gelöscht : user_pref("CT2405727.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Gelöscht : user_pref("CT2405727.MCDetectTooltipWidth", "295");
Gelöscht : user_pref("CT2405727.RadioIsPodcast", false);
Gelöscht : user_pref("CT2405727.RadioLastCheckTime", "Mon Jun 21 2010 14:38:48 GMT+0200");
Gelöscht : user_pref("CT2405727.RadioLastUpdateIPServer", "3");
Gelöscht : user_pref("CT2405727.RadioLastUpdateServer", "3");
Gelöscht : user_pref("CT2405727.RadioMediaID", "9962");
Gelöscht : user_pref("CT2405727.RadioMediaType", "Media Player");
Gelöscht : user_pref("CT2405727.RadioMenuSelectedID", "EBRadioMenu_CT24057279962");
Gelöscht : user_pref("CT2405727.RadioStationName", "California%20Rock");
Gelöscht : user_pref("CT2405727.RadioStationURL", "hxxp://feedlive.net/california.asx");
Gelöscht : user_pref("CT2405727.SHRINK_TOOLBAR", 1);
Gelöscht : user_pref("CT2405727.SavedHomepage", "hxxp://go.microsoft.com/fwlink/?LinkId=69157");
Gelöscht : user_pref("CT2405727.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER[...]
Gelöscht : user_pref("CT2405727.SearchFromAddressBarIsInit", true);
Gelöscht : user_pref("CT2405727.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT240[...]
Gelöscht : user_pref("CT2405727.SearchInNewTabEnabled", true);
Gelöscht : user_pref("CT2405727.SearchInNewTabIntervalMM", 1440);
Gelöscht : user_pref("CT2405727.SearchInNewTabLastCheckTime", "Mon Jun 21 2010 14:38:59 GMT+0200");
Gelöscht : user_pref("CT2405727.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Gelöscht : user_pref("CT2405727.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Gelöscht : user_pref("CT2405727.SettingsCheckIntervalMin", 120);
Gelöscht : user_pref("CT2405727.SettingsLastCheckTime", "Mon Jun 21 2010 14:38:47 GMT+0200");
Gelöscht : user_pref("CT2405727.SettingsLastUpdate", "1276854324");
Gelöscht : user_pref("CT2405727.ThirdPartyComponentsInterval", 504);
Gelöscht : user_pref("CT2405727.ThirdPartyComponentsLastCheck", "Fri Jun 18 2010 13:58:59 GMT+0200");
Gelöscht : user_pref("CT2405727.ThirdPartyComponentsLastUpdate", "1276854324");
Gelöscht : user_pref("CT2405727.TrusteLinkUrl", "hxxp://www.truste.org/pvr.php?page=validate&softwareProgramId=[...]
Gelöscht : user_pref("CT2405727.UserID", "UN02900831177796259");
Gelöscht : user_pref("CT2405727.ValidationData_Toolbar", 2);
Gelöscht : user_pref("CT2405727.WeatherNetwork", "");
Gelöscht : user_pref("CT2405727.WeatherPollDate", "Mon Jun 21 2010 17:04:16 GMT+0200");
Gelöscht : user_pref("CT2405727.WeatherUnit", "C");
Gelöscht : user_pref("CT2405727.alertChannelId", "800210");
Gelöscht : user_pref("CT2405727.clientLogIsEnabled", true);
Gelöscht : user_pref("CT2405727.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm[...]
Gelöscht : user_pref("CT2405727.components.1000034", true);
Gelöscht : user_pref("CT2405727.myStuffEnabled", true);
Gelöscht : user_pref("CT2405727.myStuffPublihserMinWidth", 400);
Gelöscht : user_pref("CT2405727.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Gelöscht : user_pref("CT2405727.myStuffServiceIntervalMM", 1440);
Gelöscht : user_pref("CT2405727.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Gelöscht : user_pref("CT2405727.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg[...]
Gelöscht : user_pref("CT2431245.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Gelöscht : user_pref("CT2431245.CTID", "CT2431245");
Gelöscht : user_pref("CT2431245.CurrentServerDate", "19-4-2013");
Gelöscht : user_pref("CT2431245.DialogsAlignMode", "LTR");
Gelöscht : user_pref("CT2431245.DownloadReferralCookieData", "");
Gelöscht : user_pref("CT2431245.EMailNotifierPollDate", "Fri Apr 19 2013 09:16:21 GMT+0200");
Gelöscht : user_pref("CT2431245.FeedLastCount129009402595187825", 1205);
Gelöscht : user_pref("CT2431245.FeedPollDate7470634014180506963", "Thu Nov 17 2011 13:19:03 GMT+0100");
Gelöscht : user_pref("CT2431245.FeedPollDate7470634014269327586", "Thu Nov 17 2011 13:19:02 GMT+0100");
Gelöscht : user_pref("CT2431245.FeedPollDate7470634014329599698", "Thu Nov 17 2011 13:19:02 GMT+0100");
Gelöscht : user_pref("CT2431245.FeedPollDate7470634014537505092", "Thu Nov 17 2011 13:19:02 GMT+0100");
Gelöscht : user_pref("CT2431245.FeedPollDate7470634014970726540", "Thu Nov 17 2011 13:19:02 GMT+0100");
Gelöscht : user_pref("CT2431245.FeedPollDate7470634015410831318", "Thu Nov 17 2011 13:19:03 GMT+0100");
Gelöscht : user_pref("CT2431245.FeedPollDate7470634015483395460", "Thu Nov 17 2011 13:19:03 GMT+0100");
Gelöscht : user_pref("CT2431245.FeedPollDate7470634015636754705", "Thu Nov 17 2011 13:19:03 GMT+0100");
Gelöscht : user_pref("CT2431245.FeedPollDate7470634015768347545", "Thu Nov 17 2011 13:19:02 GMT+0100");
Gelöscht : user_pref("CT2431245.FeedPollDate7470634015855543602", "Thu Nov 17 2011 13:19:02 GMT+0100");
Gelöscht : user_pref("CT2431245.FeedPollDate7470634016030710453", "Thu Nov 17 2011 13:19:02 GMT+0100");
Gelöscht : user_pref("CT2431245.FeedPollDate7470634016114705611", "Thu Nov 17 2011 13:19:03 GMT+0100");
Gelöscht : user_pref("CT2431245.FeedPollDate7470634016129205152", "Thu Nov 17 2011 13:19:03 GMT+0100");
Gelöscht : user_pref("CT2431245.FeedPollDate7470634016143724791", "Thu Nov 17 2011 13:19:03 GMT+0100");
Gelöscht : user_pref("CT2431245.FeedPollDate7470634016271239162", "Thu Nov 17 2011 13:19:04 GMT+0100");
Gelöscht : user_pref("CT2431245.FeedPollDate7470634016568520719", "Thu Nov 17 2011 13:19:03 GMT+0100");
Gelöscht : user_pref("CT2431245.FeedPollDate7470634016726993788", "Thu Nov 17 2011 13:19:02 GMT+0100");
Gelöscht : user_pref("CT2431245.FeedPollDate7470634017109031809", "Thu Nov 17 2011 13:19:03 GMT+0100");
Gelöscht : user_pref("CT2431245.FeedPollDate7470634017132743740", "Thu Nov 17 2011 13:19:02 GMT+0100");
Gelöscht : user_pref("CT2431245.FeedPollDate7470634017299547668", "Thu Nov 17 2011 13:19:03 GMT+0100");
Gelöscht : user_pref("CT2431245.FeedPollDate7470634017302327846", "Thu Nov 17 2011 13:19:02 GMT+0100");
Gelöscht : user_pref("CT2431245.FeedPollDate7470634017344111490", "Thu Nov 17 2011 13:19:02 GMT+0100");
Gelöscht : user_pref("CT2431245.FeedPollDate7470634017478360748", "Thu Nov 17 2011 13:19:04 GMT+0100");
Gelöscht : user_pref("CT2431245.FeedPollDate7470634017732797593", "Thu Nov 17 2011 13:19:02 GMT+0100");
Gelöscht : user_pref("CT2431245.FeedPollDate7470634017821686064", "Thu Nov 17 2011 13:19:03 GMT+0100");
Gelöscht : user_pref("CT2431245.FeedPollDate7470634018090228721", "Thu Nov 17 2011 13:19:03 GMT+0100");
Gelöscht : user_pref("CT2431245.FeedTTL7470634014269327586", 5);
Gelöscht : user_pref("CT2431245.FeedTTL7470634014537505092", 5);
Gelöscht : user_pref("CT2431245.FeedTTL7470634014970726540", 2);
Gelöscht : user_pref("CT2431245.FeedTTL7470634015636754705", 5);
Gelöscht : user_pref("CT2431245.FeedTTL7470634016568520719", 30);
Gelöscht : user_pref("CT2431245.FeedTTL7470634017109031809", 30);
Gelöscht : user_pref("CT2431245.FeedTTL7470634017299547668", 2);
Gelöscht : user_pref("CT2431245.FirstServerDate", "17-7-2010");
Gelöscht : user_pref("CT2431245.FirstTime", true);
Gelöscht : user_pref("CT2431245.FirstTimeFF3", true);
Gelöscht : user_pref("CT2431245.FirstTimeSettingsDone", true);
Gelöscht : user_pref("CT2431245.FixPageNotFoundErrors", true);
Gelöscht : user_pref("CT2431245.GroupingServerCheckInterval", 1440);
Gelöscht : user_pref("CT2431245.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Gelöscht : user_pref("CT2431245.Initialize", true);
Gelöscht : user_pref("CT2431245.InitializeCommonPrefs", true);
Gelöscht : user_pref("CT2431245.InstallationAndCookieDataSentCount", 3);
Gelöscht : user_pref("CT2431245.InstallationType", "UnknownIntegration");
Gelöscht : user_pref("CT2431245.InstalledDate", "Sat Jul 17 2010 10:14:25 GMT+0200");
Gelöscht : user_pref("CT2431245.InvalidateCache", false);
Gelöscht : user_pref("CT2431245.IsGrouping", false);
Gelöscht : user_pref("CT2431245.IsMulticommunity", false);
Gelöscht : user_pref("CT2431245.IsOpenThankYouPage", false);
Gelöscht : user_pref("CT2431245.IsOpenUninstallPage", true);
Gelöscht : user_pref("CT2431245.LanguagePackLastCheckTime", "Fri Apr 19 2013 09:11:05 GMT+0200");
Gelöscht : user_pref("CT2431245.LanguagePackReloadIntervalMM", 1440);
Gelöscht : user_pref("CT2431245.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Gelöscht : user_pref("CT2431245.LastLogin_2.7.1.3", "Fri Apr 19 2013 09:11:05 GMT+0200");
Gelöscht : user_pref("CT2431245.LatestVersion", "3.18.0.7");
Gelöscht : user_pref("CT2431245.Locale", "de-de");
Gelöscht : user_pref("CT2431245.LoginCache", 4);
Gelöscht : user_pref("CT2431245.MCDetectTooltipHeight", "83");
Gelöscht : user_pref("CT2431245.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Gelöscht : user_pref("CT2431245.MCDetectTooltipWidth", "295");
Gelöscht : user_pref("CT2431245.RadioIsPodcast", false);
Gelöscht : user_pref("CT2431245.RadioLastCheckTime", "Fri Apr 19 2013 09:11:21 GMT+0200");
Gelöscht : user_pref("CT2431245.RadioLastUpdateIPServer", "3");
Gelöscht : user_pref("CT2431245.RadioLastUpdateServer", "129167771525870000");
Gelöscht : user_pref("CT2431245.RadioMediaID", "20503672");
Gelöscht : user_pref("CT2431245.RadioMediaType", "Media Player");
Gelöscht : user_pref("CT2431245.RadioMenuSelectedID", "EBRadioMenu_CT243124520503672");
Gelöscht : user_pref("CT2431245.RadioStationName", "Team%20Radio%20Deutschland");
Gelöscht : user_pref("CT2431245.RadioStationURL", "hxxp://trd.stream.w-u-s.org:6666/dsl.m3u");
Gelöscht : user_pref("CT2431245.SavedHomepage", "hxxp://search.conduit.com/?ctid=CT2405727&SearchSource=13");
Gelöscht : user_pref("CT2431245.SearchEngine", "Web%20Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEAR[...]
Gelöscht : user_pref("CT2431245.SearchFromAddressBarIsInit", true);
Gelöscht : user_pref("CT2431245.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT243[...]
Gelöscht : user_pref("CT2431245.SearchInNewTabEnabled", true);
Gelöscht : user_pref("CT2431245.SearchInNewTabIntervalMM", 1440);
Gelöscht : user_pref("CT2431245.SearchInNewTabLastCheckTime", "Fri Apr 19 2013 09:11:05 GMT+0200");
Gelöscht : user_pref("CT2431245.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Gelöscht : user_pref("CT2431245.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usa[...]
Gelöscht : user_pref("CT2431245.SettingsCheckIntervalMin", 120);
Gelöscht : user_pref("CT2431245.SettingsLastCheckTime", "Fri Apr 19 2013 09:11:04 GMT+0200");
Gelöscht : user_pref("CT2431245.SettingsLastUpdate", "1336554513");
Gelöscht : user_pref("CT2431245.ThirdPartyComponentsInterval", 504);
Gelöscht : user_pref("CT2431245.ThirdPartyComponentsLastCheck", "Fri Apr 19 2013 09:11:03 GMT+0200");
Gelöscht : user_pref("CT2431245.ThirdPartyComponentsLastUpdate", "1331806000");
Gelöscht : user_pref("CT2431245.TrusteLinkUrl", "hxxp://trust.conduit.com/EB_ORIGINAL_CTID");
Gelöscht : user_pref("CT2431245.UserID", "UN84422332588041206");
Gelöscht : user_pref("CT2431245.ValidationData_Search", 2);
Gelöscht : user_pref("CT2431245.ValidationData_Toolbar", 2);
Gelöscht : user_pref("CT2431245.WeatherNetwork", "");
Gelöscht : user_pref("CT2431245.WeatherPollDate", "Fri Apr 19 2013 09:11:21 GMT+0200");
Gelöscht : user_pref("CT2431245.WeatherUnit", "C");
Gelöscht : user_pref("CT2431245.alertChannelId", "825452");
Gelöscht : user_pref("CT2431245.backendstorage./9b+7e+x305", "247E27413334363379453A3D2A722C797A7E7A3128333B474[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b+7e,x305", "247E28412F3F3E3779453A3D2A722C797B787D3128333C474[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b+7e-x305", "247E2936303C363679453A3D2A722C797A207B3128333D462[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b+7e.:2z527", "2423");
Gelöscht : user_pref("CT2431245.backendstorage./9b+7e.x305", "247E2A4137374434337A463B3E2B732D7A7D7C213229343F5[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b+7e/x305", "247E2B413536327844393C29712B787C7B773027323E4C434[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b+7e06cg5el8:", "6E6D6C6E6C706D6D7171");
Gelöscht : user_pref("CT2431245.backendstorage./9b+7e06cg5el;8i:k", "247E2D2F226A74737274727673737777242F4B4947[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b+7e0x305", "247E2C403A407743383B28702A777C757D2F26313E4129554[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b+7e1x305", "247E2D41313D403279453A3D2A722C7A77797E31283341473[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b+7e2x305", "247E2E3542313D3D393A7B473C3F2C742E79207D322934435[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b+7e3x305", "247E2F413F3B36333F47463F7D493E412E76307E222421352[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b+7e4x305", "247E302C407642373A276F29777B74762E2530413E4F494A5[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b+7e5x305", "247E3136422B7743383B28702A79757A772F2631434B3D495[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b+7e6x305", "247E322C3E32323238453E7C483D402D752F7E7B2424342B3[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b+7e7x305", "247E333D2C3F3E3F79453A3D2A722C7B7A797A31283347513[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b+7e8x305", "247E343D3F3B35373B3F367C47472C742E7E7823322934495[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b+7e9x305", "247E35332C3F327844393C29712B7B757979302732484C4F4[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b+7e:x305", "247E36333B38327844393C29712B7B76797A3027324948554[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b+7e;x305", "247E373F333F3738422F7B473C3F2C742E7E7A7A22332A354[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b+7e<x305", "247E38343030442F463644377D493E412E7630217D2426352[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b+7e=x305", "247E3933363F41413739357C483D402D752F207E2022342B3[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b+7e>x305", "247E3A41363F323238387B473C3F2C742E7E20217C332A355[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b+7e?x305", "247E3B2D2F2F334134403A3A7D494C2D752F2023207E342B3[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b+7e@x305", "247E3C40422B7743383B28702A7B767E782F26314E52543D2[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b+7eax305", "247E3D3D37387743383B28702A7B7A757E2F26314F4F544A5[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b+7ebe3g=;d9n9=d", "372C2D326975762E3A3C7B3A39434A494841434B26[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b+7ebx305", "247E3E393141303D33454036327E4A3F422F77317B7D23352[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b+7ecx305", "247E3F3D303043312E7A463B3E2B732D7B207E31283353515[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b+7edx305", "247E4035422A363879453A3D2A722C7D202F26315247543C4[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b+7etx305", "247E6E2F2E3B323342357B44392B732D7A7B7B7C322934235[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b-0?3g>d", "393C3E6B6B4243717A7176487B204C797621255152237D2A56[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b-0?3g@6:5;", "");
Gelöscht : user_pref("CT2431245.backendstorage./9b-0?3gfa7ef", "2B2E2C3D");
Gelöscht : user_pref("CT2431245.backendstorage./9b-3=3eccja=f>", "247E333D2C452F4135276F292A212C393D44307832332[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b/>01=9a6k6<im;krie@pdawm", "6A696B7273747576");
Gelöscht : user_pref("CT2431245.backendstorage./9b3=>@44i48?", "372C2D326975763342363341484775213F3E484F4E4D464[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b5ba==9cjag", "3A686B706A6C70417A73477A7B76777E7C204F214E");
Gelöscht : user_pref("CT2431245.backendstorage./9b6b11g4c56b>f;p;anr@p", "6E6D6C6E6C706C75776F75777B");
Gelöscht : user_pref("CT2431245.backendstorage./9b9643g3/9e", "6A");
Gelöscht : user_pref("CT2431245.backendstorage./9b<:222h64<", "393F352F3E");
Gelöscht : user_pref("CT2431245.backendstorage./9b=+03eh8h8j?:", "4443");
Gelöscht : user_pref("CT2431245.backendstorage./9b?+e2a52d8", "372C2D326975762E3A3C7B3A39434A494841434B26514649[...]
Gelöscht : user_pref("CT2431245.backendstorage./9b?b0d:8aj62<h", "6D");
Gelöscht : user_pref("CT2431245.backendstorage./9ba@0<0bi6a7gn:6@l?", "6E6B");
Gelöscht : user_pref("CT2431245.backendstorage._fb_dailyactivity", "31323939393433343636363535");
Gelöscht : user_pref("CT2431245.backendstorage._fb_lifetimesent", "54525545");
Gelöscht : user_pref("CT2431245.backendstorage.active", "796573");
Gelöscht : user_pref("CT2431245.backendstorage.ct2431245ads1", "25374225323261647325323225334125354225374225323[...]
Gelöscht : user_pref("CT2431245.backendstorage.ct2431245current_term", "6469656261686E2E6465");
Gelöscht : user_pref("CT2431245.backendstorage.ct2431245isadsdisabled", "66616C7365");
Gelöscht : user_pref("CT2431245.backendstorage.ct2431245sdate", "3139");
Gelöscht : user_pref("CT2431245.backendstorage.ctid", "435432343331323435");
Gelöscht : user_pref("CT2431245.backendstorage.eule_tb_id", "46383037343332333736343336393738544734383133323837[...]
Gelöscht : user_pref("CT2431245.backendstorage.facebook_ctid_connect_send", "73656E646564");
Gelöscht : user_pref("CT2431245.backendstorage.fb_dailyactivity", "31333033373432343936373133");
Gelöscht : user_pref("CT2431245.backendstorage.fb_lifetimesent", "54525545");
Gelöscht : user_pref("CT2431245.backendstorage.firstinstall", "796573");
Gelöscht : user_pref("CT2431245.backendstorage.for_aoi", "31333131373039313239");
Gelöscht : user_pref("CT2431245.backendstorage.for_ccid", "4672656962757267");
Gelöscht : user_pref("CT2431245.backendstorage.for_cdtr2", "31333137343131303631");
Gelöscht : user_pref("CT2431245.backendstorage.for_cdtr5", "31333131373039313239");
Gelöscht : user_pref("CT2431245.backendstorage.for_cdtr6", "31333137343131303534");
Gelöscht : user_pref("CT2431245.backendstorage.for_cid", "4445");
Gelöscht : user_pref("CT2431245.backendstorage.for_ip", "34362E352E3138302E313632");
Gelöscht : user_pref("CT2431245.backendstorage.for_lcut", "31333636333535343837");
Gelöscht : user_pref("CT2431245.backendstorage.for_pid", "31303130");
Gelöscht : user_pref("CT2431245.backendstorage.for_rid", "3031");
Gelöscht : user_pref("CT2431245.backendstorage.for_zoneid", "39353933");
Gelöscht : user_pref("CT2431245.backendstorage.gsdomain", "");
Gelöscht : user_pref("CT2431245.backendstorage.hxxp://cmg1_conduit-widgets_com/pitsi.state", "4F50454E");
Gelöscht : user_pref("CT2431245.backendstorage.lastrun", "31333137343131303338373937");
Gelöscht : user_pref("CT2431245.backendstorage.partner_id", "3937346665643236");
Gelöscht : user_pref("CT2431245.backendstorage.printitgreenstatus", "74727565");
Gelöscht : user_pref("CT2431245.backendstorage.shoppingapp.gk.exipres", "5475652044656320313120323031322030303A[...]
Gelöscht : user_pref("CT2431245.backendstorage.shoppingapp.gk.geolocation", "6765726D616E79");
Gelöscht : user_pref("CT2431245.backendstorage.shopupdate", "323031312D30382D3330");
Gelöscht : user_pref("CT2431245.backendstorage.shopversionv2", "3130303039");
Gelöscht : user_pref("CT2431245.backendstorage.short", "30");
Gelöscht : user_pref("CT2431245.backendstorage.tbready", "74727565");
Gelöscht : user_pref("CT2431245.clientLogIsEnabled", false);
Gelöscht : user_pref("CT2431245.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm[...]
Gelöscht : user_pref("CT2431245.myStuffEnabled", true);
Gelöscht : user_pref("CT2431245.myStuffPublihserMinWidth", 400);
Gelöscht : user_pref("CT2431245.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Gelöscht : user_pref("CT2431245.myStuffServiceIntervalMM", 1440);
Gelöscht : user_pref("CT2431245.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Gelöscht : user_pref("CT2431245.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg[...]
Gelöscht : user_pref("CT3281675..clientLogIsEnabled", false);
Gelöscht : user_pref("CT3281675..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Gelöscht : user_pref("CT3281675..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Gelöscht : user_pref("CT3281675.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Gelöscht : user_pref("CT3281675.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Gelöscht : user_pref("CT3281675.BrowserCompStateIsOpen_2274282660967397264", true);
Gelöscht : user_pref("CT3281675.BrowserCompStateIsOpen_2605104608100257811", true);
Gelöscht : user_pref("CT3281675.BrowserCompStateIsOpen_6183937840863950736", true);
Gelöscht : user_pref("CT3281675.BrowserCompStateIsOpen_7458649612699480435", true);
Gelöscht : user_pref("CT3281675.BrowserCompStateIsOpen_8184868709279119248", true);
Gelöscht : user_pref("CT3281675.CTID", "CT3281675");
Gelöscht : user_pref("CT3281675.CurrentServerDate", "19-4-2013");
Gelöscht : user_pref("CT3281675.DSInstall", true);
Gelöscht : user_pref("CT3281675.DialogsAlignMode", "LTR");
Gelöscht : user_pref("CT3281675.DialogsGetterLastCheckTime", "Fri Apr 19 2013 09:11:12 GMT+0200");
Gelöscht : user_pref("CT3281675.DownloadReferralCookieData", "");
Gelöscht : user_pref("CT3281675.ExternalComponentPollDate130065498732663454", "Fri Apr 19 2013 09:11:08 GMT+020[...]
Gelöscht : user_pref("CT3281675.FF19Solved", "true");
Gelöscht : user_pref("CT3281675.FirstServerDate", "4-3-2013");
Gelöscht : user_pref("CT3281675.FirstTime", true);
Gelöscht : user_pref("CT3281675.FirstTimeFF3", true);
Gelöscht : user_pref("CT3281675.FirstTimeHiddenVer", true);
Gelöscht : user_pref("CT3281675.FixPageNotFoundErrors", true);
Gelöscht : user_pref("CT3281675.GroupingServerCheckInterval", 1440);
Gelöscht : user_pref("CT3281675.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Gelöscht : user_pref("CT3281675.HPChangedManually", false);
Gelöscht : user_pref("CT3281675.HPInstall", true);
Gelöscht : user_pref("CT3281675.HPProtectChoice", true);
Gelöscht : user_pref("CT3281675.HPProtectCount", 34);
Gelöscht : user_pref("CT3281675.HasUserGlobalKeys", true);
Gelöscht : user_pref("CT3281675.HomePageProtectorEnabled", false);
Gelöscht : user_pref("CT3281675.HomepageBeforeUnload", "hxxp://www.searchcore.net/426");
Gelöscht : user_pref("CT3281675.Initialize", true);
Gelöscht : user_pref("CT3281675.InitializeCommonPrefs", true);
Gelöscht : user_pref("CT3281675.InstallationAndCookieDataSentCount", 3);
Gelöscht : user_pref("CT3281675.InstallationId", "conduitinstaller.exe");
Gelöscht : user_pref("CT3281675.InstallationType", "conduitnsisintegration");
Gelöscht : user_pref("CT3281675.InstalledDate", "Mon Mar 04 2013 13:48:50 GMT+0100");
Gelöscht : user_pref("CT3281675.InvalidateCache", false);
Gelöscht : user_pref("CT3281675.IsAlertDBUpdated", true);
Gelöscht : user_pref("CT3281675.IsGrouping", false);
Gelöscht : user_pref("CT3281675.IsInitSetupIni", true);
Gelöscht : user_pref("CT3281675.IsMulticommunity", false);
Gelöscht : user_pref("CT3281675.IsOpenThankYouPage", false);
Gelöscht : user_pref("CT3281675.IsOpenUninstallPage", true);
Gelöscht : user_pref("CT3281675.IsProtectorsInit", true);
Gelöscht : user_pref("CT3281675.LanguagePackLastCheckTime", "Fri Apr 19 2013 09:11:12 GMT+0200");
Gelöscht : user_pref("CT3281675.LanguagePackReloadIntervalMM", 1440);
Gelöscht : user_pref("CT3281675.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Gelöscht : user_pref("CT3281675.LastLogin_3.18.0.7", "Fri Apr 19 2013 09:11:12 GMT+0200");
Gelöscht : user_pref("CT3281675.LatestVersion", "3.18.0.7");
Gelöscht : user_pref("CT3281675.Locale", "en");
Gelöscht : user_pref("CT3281675.MCDetectTooltipHeight", "83");
Gelöscht : user_pref("CT3281675.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Gelöscht : user_pref("CT3281675.MCDetectTooltipWidth", "295");
Gelöscht : user_pref("CT3281675.MyStuffEnabledAtInstallation", true);
Gelöscht : user_pref("CT3281675.OriginalFirstVersion", "3.18.0.7");
Gelöscht : user_pref("CT3281675.RadioIsPodcast", false);
Gelöscht : user_pref("CT3281675.RadioLastCheckTime", "Fri Apr 19 2013 09:11:23 GMT+0200");
Gelöscht : user_pref("CT3281675.RadioLastUpdateIPServer", "3");
Gelöscht : user_pref("CT3281675.RadioLastUpdateServer", "130036213494800000");
Gelöscht : user_pref("CT3281675.RadioMediaID", "22167604");
Gelöscht : user_pref("CT3281675.RadioMediaType", "Media Player");
Gelöscht : user_pref("CT3281675.RadioMenuSelectedID", "EBRadioMenu_CT328167522167604");
Gelöscht : user_pref("CT3281675.RadioShrinkedFromSetup", false);
Gelöscht : user_pref("CT3281675.RadioStationName", "California%20Rock%20-%20Rock");
Gelöscht : user_pref("CT3281675.RadioStationURL", "hxxp://www.feedlive.net/california.asx");
Gelöscht : user_pref("CT3281675.SavedHomepage", "hxxp://www.searchcore.net/426");
Gelöscht : user_pref("CT3281675.SearchCaption", "Pokki Customized Web Search");
Gelöscht : user_pref("CT3281675.SearchEngineBeforeUnload", "Pokki Customized Web Search");
Gelöscht : user_pref("CT3281675.SearchFromAddressBarIsInit", true);
Gelöscht : user_pref("CT3281675.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT328[...]
Gelöscht : user_pref("CT3281675.SearchInNewTabEnabled", true);
Gelöscht : user_pref("CT3281675.SearchInNewTabIntervalMM", 1440);
Gelöscht : user_pref("CT3281675.SearchInNewTabLastCheckTime", "Fri Apr 19 2013 09:11:11 GMT+0200");
Gelöscht : user_pref("CT3281675.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Gelöscht : user_pref("CT3281675.SearchProtectorEnabled", true);
Gelöscht : user_pref("CT3281675.SearchProtectorToolbarDisabled", false);
Gelöscht : user_pref("CT3281675.SendProtectorDataViaLogin", true);
Gelöscht : user_pref("CT3281675.ServiceMapLastCheckTime", "Fri Apr 19 2013 09:11:07 GMT+0200");
Gelöscht : user_pref("CT3281675.SettingsLastCheckTime", "Fri Apr 19 2013 09:11:08 GMT+0200");
Gelöscht : user_pref("CT3281675.SettingsLastUpdate", "1366283218");
Gelöscht : user_pref("CT3281675.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT3281675&SearchSource=13");
Gelöscht : user_pref("CT3281675.ThirdPartyComponentsInterval", 504);
Gelöscht : user_pref("CT3281675.ThirdPartyComponentsLastCheck", "Fri Apr 19 2013 09:11:07 GMT+0200");
Gelöscht : user_pref("CT3281675.ThirdPartyComponentsLastUpdate", "1331805997");
Gelöscht : user_pref("CT3281675.ToolbarShrinkedFromSetup", false);
Gelöscht : user_pref("CT3281675.TrusteLinkUrl", "hxxp://trust.conduit.com/CT3281675");
Gelöscht : user_pref("CT3281675.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Gelöscht : user_pref("CT3281675.UserID", "UN65735181239903965");
Gelöscht : user_pref("CT3281675.WeatherNetwork", "");
Gelöscht : user_pref("CT3281675.WeatherPollDate", "Fri Apr 19 2013 09:11:26 GMT+0200");
Gelöscht : user_pref("CT3281675.WeatherUnit", "C");
Gelöscht : user_pref("CT3281675.alertChannelId", "1766805");
Gelöscht : user_pref("CT3281675.autoDisableScopes", -1);
Gelöscht : user_pref("CT3281675.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Gelöscht : user_pref("CT3281675.globalFirstTimeInfoLastCheckTime", "Fri Apr 19 2013 09:11:12 GMT+0200");
Gelöscht : user_pref("CT3281675.homepageProtectorEnableByLogin", true);
Gelöscht : user_pref("CT3281675.initDone", true);
Gelöscht : user_pref("CT3281675.installDate", "4/3/2013 10:19:37");
Gelöscht : user_pref("CT3281675.isAppTrackingManagerOn", false);
Gelöscht : user_pref("CT3281675.isFirstRadioInstallation", false);
Gelöscht : user_pref("CT3281675.myStuffEnabled", true);
Gelöscht : user_pref("CT3281675.myStuffPublihserMinWidth", 400);
Gelöscht : user_pref("CT3281675.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Gelöscht : user_pref("CT3281675.myStuffServiceIntervalMM", 1440);
Gelöscht : user_pref("CT3281675.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Gelöscht : user_pref("CT3281675.navigateToUrlOnSearch", false);
Gelöscht : user_pref("CT3281675.revertSettingsEnabled", true);
Gelöscht : user_pref("CT3281675.searchProtectorDialogDelayInSec", 10);
Gelöscht : user_pref("CT3281675.searchProtectorEnableByLogin", true);
Gelöscht : user_pref("CT3281675.testingCtid", "");
Gelöscht : user_pref("CT3281675.toolbarAppMetaDataLastCheckTime", "Fri Apr 19 2013 09:11:12 GMT+0200");
Gelöscht : user_pref("CT3281675.toolbarContextMenuLastCheckTime", "Fri Apr 19 2013 09:11:12 GMT+0200");
Gelöscht : user_pref("CT3281675.usagesFlag", 2);
Gelöscht : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3281675&Search[...]
Gelöscht : user_pref("CommunityToolbar.ConduitSearchList", "Pokki Customized Web Search");
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT3281675/CT3281675[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1766805/1757346/DE", "\"0\"[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT3281675", [...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.18[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT3281675",[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"110[...]
Gelöscht : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Mobil-Star\\AppData\\Roaming\\Mozil[...]
Gelöscht : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.18.0.7");
Gelöscht : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://pgcff.pricegong.com/agreement/agree.html#pg_e[...]
Gelöscht : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.pr[...]
Gelöscht : user_pref("CommunityToolbar.ToolbarsList", "CT2405727,CT2431245,CT3281675");
Gelöscht : user_pref("CommunityToolbar.ToolbarsList2", "CT2405727,CT2431245,CT3281675");
Gelöscht : user_pref("CommunityToolbar.ToolbarsList4", "CT3281675");
Gelöscht : user_pref("CommunityToolbar.alert.alertInfoInterval", 60);
Gelöscht : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Mon Jun 21 2010 17:33:58 GMT+0200");
Gelöscht : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Gelöscht : user_pref("CommunityToolbar.alert.locale", "en");
Gelöscht : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Gelöscht : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Mon Jun 21 2010 14:38:47 GMT+0200");
Gelöscht : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1234796400");
Gelöscht : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Gelöscht : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Gelöscht : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Gelöscht : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Gelöscht : user_pref("CommunityToolbar.alert.userId", "{4bbf08ed-1bd1-4351-a2ec-d4dc641e7345}");
Gelöscht : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Wed Jan 05 2011 11:52:43 GMT+0100");
Gelöscht : user_pref("CommunityToolbar.globalUserId", "9cf073c0-02df-41d8-a587-caa42e3ada4c");
Gelöscht : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Gelöscht : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Gelöscht : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT3281675");
Gelöscht : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Fri Apr 19 2013 09:11:2[...]
Gelöscht : user_pref("CommunityToolbar.notifications.alertEnabled", true);
Gelöscht : user_pref("CommunityToolbar.notifications.alertInfoInterval", 60);
Gelöscht : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Fri Apr 19 2013 09:11:32 GMT+020[...]
Gelöscht : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Gelöscht : user_pref("CommunityToolbar.notifications.locale", "en");
Gelöscht : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Gelöscht : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Fri Apr 19 2013 09:11:24 GMT+0200");
Gelöscht : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Gelöscht : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Gelöscht : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Gelöscht : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Gelöscht : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Gelöscht : user_pref("CommunityToolbar.notifications.userId", "1be7ae77-6e1c-454a-9e72-3db3aa7599a4");
Gelöscht : user_pref("CommunityToolbar.originalHomepage", "hxxp://www.searchcore.net/426");
Gelöscht : user_pref("CommunityToolbar.originalSearchEngine", "Search Results");
Gelöscht : user_pref("browser.search.defaultenginename", "Search Results");
Gelöscht : user_pref("browser.search.defaultthis.engineName", "Pokki Customized Web Search");
Gelöscht : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3281675&Sea[...]
Gelöscht : user_pref("browser.search.order.1", "Search Results");
Gelöscht : user_pref("browser.search.selectedEngine", "Pokki Customized Web Search");
Gelöscht : user_pref("browser.startup.homepage", "hxxp://www.searchcore.net/426");
Gelöscht : user_pref("keyword.URL", "hxxp://dts.search-results.com/sr?src=ffb&appid=131133&systemid=426&sr=0&q=[...]

-\\ Google Chrome v27.0.1453.94

Datei : C:\Users\Mobil-Star\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Die Datei ist sauber.

*************************

AdwCleaner[S1].txt - [51287 octets] - [29/05/2013 17:30:08]

########## EOF - C:\AdwCleaner[S1].txt - [51348 octets] ##########

OTL Logfile:
Code:
OTL logfile created on: 29.05.2013 17:55:22 - Run 2
OTL by OldTimer - Version 3.2.69.0    Folder = c:\users\mobil-star\downloads
Windows Vista Home Basic Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1,99 Gb Total Physical Memory | 0,69 Gb Available Physical Memory | 34,66% Memory free
5,84 Gb Paging File | 4,44 Gb Available in Paging File | 75,96% Paging File free
Paging file location(s): c:\pagefile.sys 4004 4004 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 116,44 Gb Total Space | 47,83 Gb Free Space | 41,08% Space Free | Partition Type: NTFS
Drive D: | 104,73 Gb Total Space | 42,52 Gb Free Space | 40,60% Space Free | Partition Type: NTFS
Drive F: | 465,64 Gb Total Space | 380,85 Gb Free Space | 81,79% Space Free | Partition Type: FAT32
 
Computer Name: MOBIL-STAR-03 | User Name: Mobil-Star | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2013.05.27 13:14:34 | 000,602,112 | ---- | M] (OldTimer Tools) -- c:\users\mobil-star\downloads\otl.exe
PRC - [2013.04.16 16:10:44 | 019,662,744 | ---- | M] (Google) -- C:\Program Files\Google\Drive\googledrivesync.exe
PRC - [2013.04.04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2013.04.03 03:06:10 | 000,587,912 | ---- | M] (Crawler.com) -- C:\Program Files\Spyware Terminator\st_rsser.exe
PRC - [2013.04.03 03:06:06 | 003,684,488 | ---- | M] (Crawler.com) -- C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
PRC - [2013.04.03 03:05:58 | 002,777,736 | ---- | M] (Crawler.com) -- C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
PRC - [2013.03.20 13:55:48 | 000,162,856 | ---- | M] (Geek Software GmbH) -- C:\Program Files\PDF24\pdf24.exe
PRC - [2013.03.12 09:05:50 | 029,106,336 | ---- | M] (Dropbox, Inc.) -- C:\Users\Mobil-Star\AppData\Roaming\Dropbox\bin\Dropbox.exe
PRC - [2012.05.04 07:37:10 | 000,021,392 | ---- | M] () -- C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
PRC - [2012.05.04 07:37:00 | 003,521,424 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
PRC - [2011.05.24 10:33:30 | 001,840,128 | ---- | M] (MAGIX AG) -- C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe
PRC - [2010.11.18 13:09:24 | 000,330,696 | ---- | M] () -- C:\Program Files\Verbindungsassistent\WTGService.exe
PRC - [2010.08.20 21:45:26 | 001,164,584 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
PRC - [2009.10.27 01:07:42 | 000,959,752 | ---- | M] (ABBYY) -- C:\Program Files\ABBYY Screenshot Reader\ScreenshotReader.exe
PRC - [2009.08.05 18:08:26 | 000,185,089 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2009.06.10 18:06:09 | 000,108,289 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2009.05.14 16:07:12 | 000,759,048 | ---- | M] (ABBYY) -- C:\Program Files\ABBYY Screenshot Reader\NetworkLicenseServer.exe
PRC - [2009.04.18 18:23:23 | 006,265,376 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
PRC - [2009.04.11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009.04.11 08:27:28 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conime.exe
PRC - [2009.03.31 09:39:36 | 000,233,472 | ---- | M] (Teruten) -- C:\Windows\System32\FsUsbExService.Exe
PRC - [2009.03.02 12:08:43 | 000,209,153 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2009.01.09 20:14:48 | 007,418,368 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin
PRC - [2009.01.09 20:14:42 | 007,424,000 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe
PRC - [2008.11.27 04:54:00 | 000,211,512 | ---- | M] (ATK) -- C:\Program Files\P4G\BatteryLife.exe
PRC - [2008.08.09 06:00:40 | 000,217,088 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Hotkey\HControl.exe
PRC - [2008.06.24 05:16:24 | 002,482,176 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Hotkey\ATKOSD.exe
PRC - [2008.06.18 07:10:34 | 000,424,504 | ---- | M] (ASUS) -- C:\Program Files\ASUS\SmartLogon\smartlogon.exe
PRC - [2008.06.18 07:10:24 | 000,297,528 | ---- | M] (ASUS) -- C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
PRC - [2008.06.04 02:29:08 | 000,851,968 | ---- | M] (ATK) -- C:\Program Files\ASUS\Splendid\ACMON.exe
PRC - [2008.04.07 09:17:30 | 000,430,592 | ---- | M] (Nokia.) -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
PRC - [2008.03.31 11:55:48 | 000,225,280 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
PRC - [2008.03.10 09:58:18 | 000,130,560 | ---- | M] () -- C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
PRC - [2008.02.22 09:11:02 | 000,120,320 | ---- | M] () -- C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
PRC - [2008.01.23 19:51:28 | 000,151,552 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\WDC.exe
PRC - [2008.01.21 04:33:00 | 001,008,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MSASCui.exe
PRC - [2007.11.05 04:48:06 | 000,106,496 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe
PRC - [2007.10.03 06:53:00 | 000,094,208 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\AsLdrSrv.exe
PRC - [2007.08.15 20:20:16 | 000,106,496 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\KBFiltr.exe
PRC - [2006.11.03 11:01:16 | 000,319,488 | ---- | M] (PixArt Imaging Incorporation) -- C:\Windows\PixArt\Pac207\Monitor.exe
PRC - [2005.07.07 00:43:42 | 000,155,648 | ---- | M] (ASUSTeK) -- C:\Windows\System32\ACEngSvr.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2013.05.29 17:41:53 | 000,128,512 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\_elementtree.pyd
MOD - [2013.05.29 17:41:53 | 000,044,032 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\_socket.pyd
MOD - [2013.05.29 17:41:52 | 000,098,816 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\win32api.pyd
MOD - [2013.05.29 17:41:52 | 000,022,528 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\win32ts.pyd
MOD - [2013.05.29 17:41:51 | 000,557,056 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\pysqlite2._sqlite.pyd
MOD - [2013.05.29 17:41:51 | 000,320,512 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\win32com.shell.shell.pyd
MOD - [2013.05.29 17:41:51 | 000,070,656 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\wx._html2.pyd
MOD - [2013.05.29 17:41:51 | 000,026,624 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\_multiprocessing.pyd
MOD - [2013.05.29 17:41:50 | 000,805,888 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\wx._gdi_.pyd
MOD - [2013.05.29 17:41:50 | 000,011,264 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\win32crypt.pyd
MOD - [2013.05.29 17:41:49 | 001,022,416 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\windows._cacheinvalidation.pyd
MOD - [2013.05.29 17:41:49 | 000,087,040 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\_ctypes.pyd
MOD - [2013.05.29 17:41:49 | 000,017,408 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\win32profile.pyd
MOD - [2013.05.29 17:41:48 | 000,364,544 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\pythoncom27.dll
MOD - [2013.05.29 17:41:47 | 000,735,232 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\wx._misc_.pyd
MOD - [2013.05.29 17:41:47 | 000,110,080 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\pywintypes27.dll
MOD - [2013.05.29 17:41:46 | 000,108,544 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\win32security.pyd
MOD - [2013.05.29 17:41:44 | 001,175,040 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\wx._core_.pyd
MOD - [2013.05.29 17:41:43 | 001,153,024 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\_ssl.pyd
MOD - [2013.05.29 17:41:42 | 000,025,600 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\win32pdh.pyd
MOD - [2013.05.29 17:41:41 | 000,035,840 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\win32process.pyd
MOD - [2013.05.29 17:41:40 | 000,711,680 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\_hashlib.pyd
MOD - [2013.05.29 17:41:39 | 000,811,008 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\wx._windows_.pyd
MOD - [2013.05.29 17:41:38 | 000,122,368 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\wx._wizard.pyd
MOD - [2013.05.29 17:41:37 | 000,119,808 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\win32file.pyd
MOD - [2013.05.29 17:41:36 | 000,038,912 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\win32inet.pyd
MOD - [2013.05.29 17:41:24 | 001,062,400 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\wx._controls_.pyd
MOD - [2013.05.29 17:41:21 | 000,018,432 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\win32event.pyd
MOD - [2013.05.29 17:41:20 | 000,127,488 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\pyexpat.pyd
MOD - [2013.05.29 17:41:18 | 000,686,080 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\unicodedata.pyd
MOD - [2013.05.29 17:41:17 | 000,010,240 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\select.pyd
MOD - [2013.05.16 11:04:10 | 018,022,400 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\1f0bb5336d1706c9b8ad2330f3642760\PresentationFramework.ni.dll
MOD - [2013.05.16 11:03:36 | 011,522,560 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\9b2940478ec555990b37af5448b8f509\PresentationCore.ni.dll
MOD - [2013.05.16 11:03:02 | 003,883,008 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\a1949f57d2ec260e09768e98fecb0559\WindowsBase.ni.dll
MOD - [2013.05.16 11:02:42 | 013,199,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\6ded1c6dbf61d19f839da66c951d8fa9\System.Windows.Forms.ni.dll
MOD - [2013.05.16 11:02:25 | 007,070,208 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\93a17ba6cb6753328f25466bc0bf1cb1\System.Core.ni.dll
MOD - [2013.04.11 18:04:33 | 001,218,560 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Management\5d5b1b0c6e8a714de39a06e3b61f35fe\System.Management.ni.dll
MOD - [2013.04.04 08:11:11 | 000,762,880 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\b454f5723ec86048063fe19d4267d9e8\System.Runtime.Remoting.ni.dll
MOD - [2013.04.04 08:10:59 | 001,812,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\40c7a89fe2cbf3c12a2c39e034da54cf\System.Xaml.ni.dll
MOD - [2013.04.04 08:07:24 | 000,595,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\60674dde4b56087c189f576f36f6720f\PresentationFramework.Aero.ni.dll
MOD - [2013.04.04 08:02:24 | 001,667,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\78ecbee4a7444353dce52afb9d9d795c\System.Drawing.ni.dll
MOD - [2013.04.04 08:02:21 | 005,617,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\fc476bbac36944e352c2f547352ffa64\System.Xml.ni.dll
MOD - [2013.04.04 08:02:01 | 009,095,168 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\f93dca0e4baa1dcb37cf75392b7c89da\System.ni.dll
MOD - [2013.04.04 08:01:54 | 014,416,896 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\6a1ccc1e1a79ce267d3d1808af382cd6\mscorlib.ni.dll
MOD - [2012.05.09 21:25:23 | 000,115,137 | ---- | M] () -- C:\Users\Mobil-Star\AppData\Local\Temp\c25e8b3d-33a7-42bf-85e6-6880c6753136\CliSecureRT.dll
MOD - [2012.05.04 07:37:10 | 000,021,392 | ---- | M] () -- C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
MOD - [2011.11.02 00:26:32 | 000,087,912 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011.11.02 00:26:12 | 001,242,472 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2010.08.20 21:45:36 | 000,095,528 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
MOD - [2010.08.20 21:45:26 | 001,164,584 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
MOD - [2010.06.15 17:56:25 | 000,034,816 | ---- | M] () -- C:\Program Files\Google\Google Desktop Search\gzlib.dll
MOD - [2009.03.25 17:15:00 | 000,094,720 | ---- | M] () -- C:\Program Files\FileZilla FTP Client\fzshellext.dll
MOD - [2008.10.31 00:37:04 | 000,015,360 | ---- | M] () -- C:\Program Files\P4G\OvrClk.dll
MOD - [2008.08.21 00:49:56 | 000,016,384 | ---- | M] () -- C:\Program Files\P4G\DevMng.dll
MOD - [2008.07.29 13:55:14 | 000,969,728 | ---- | M] () -- C:\Program Files\OpenOffice.org 3\program\libxml2.dll
MOD - [2007.06.15 19:28:36 | 000,147,456 | ---- | M] () -- C:\Program Files\ASUS\ASUS Data Security Manager\OverlayIconShlExt.dll
MOD - [2007.06.02 02:08:18 | 000,143,360 | ---- | M] () -- C:\Program Files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll
 
 
========== Services (SafeList) ==========
 
SRV - [2013.05.15 12:38:26 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013.04.04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2013.04.04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2013.04.03 03:06:10 | 000,587,912 | ---- | M] (Crawler.com) [Auto | Running] -- C:\Program Files\Spyware Terminator\st_rsser.exe -- (ST2012_Svc)
SRV - [2012.07.13 13:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2011.11.16 18:23:44 | 000,377,344 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- winhttp.dll -- (WinHttpAutoProxySvc)
SRV - [2011.05.24 10:33:30 | 001,840,128 | ---- | M] (MAGIX AG) [Auto | Running] -- C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe -- (Fabs)
SRV - [2011.04.26 13:54:12 | 002,702,848 | ---- | M] (MAGIX®) [On_Demand | Stopped] -- C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance)
SRV - [2010.11.18 13:09:24 | 000,330,696 | ---- | M] () [Auto | Running] -- C:\Program Files\Verbindungsassistent\WTGService.exe -- (WTGService)
SRV - [2009.08.05 18:08:26 | 000,185,089 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2009.06.10 18:06:09 | 000,108,289 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2009.05.14 16:07:12 | 000,759,048 | ---- | M] (ABBYY) [Auto | Running] -- C:\Program Files\ABBYY Screenshot Reader\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.ScreenshotReader.9.0)
SRV - [2009.03.31 09:39:36 | 000,233,472 | ---- | M] (Teruten) [Auto | Running] -- C:\Windows\System32\FsUsbExService.Exe -- (FsUsbExService)
SRV - [2008.04.07 09:17:30 | 000,430,592 | ---- | M] (Nokia.) [On_Demand | Running] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2008.03.31 11:55:48 | 000,225,280 | ---- | M] (ASUSTek Computer Inc.) [Auto | Running] -- C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe -- (ADSMService)
SRV - [2008.01.21 04:33:00 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007.10.03 06:53:00 | 000,094,208 | ---- | M] () [Auto | Running] -- C:\Program Files\ASUS\ATK Hotkey\AsLdrSrv.exe -- (ASLDRService)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ewusbfake.sys -- (hwusbfake)
DRV - [2013.05.06 20:33:11 | 000,106,880 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2013.05.06 20:33:11 | 000,102,784 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ew_hwusbdev.sys -- (ew_hwusbdev)
DRV - [2013.04.04 14:50:32 | 000,022,856 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2011.06.21 11:24:06 | 000,032,768 | ---- | M] () [Kernel | System | Running] -- C:\Windows\System32\drivers\sp_rsdrv2.sys -- (sp_rsdrv2)
DRV - [2011.06.02 07:47:22 | 000,136,808 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadmdm.sys -- (ssadmdm)
DRV - [2011.06.02 07:47:22 | 000,121,064 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadbus.sys -- (ssadbus)
DRV - [2011.06.02 07:47:22 | 000,012,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadmdfl.sys -- (ssadmdfl)
DRV - [2009.12.08 08:47:21 | 000,056,816 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2009.06.10 18:06:09 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009.05.01 11:03:06 | 000,096,104 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2009.03.31 09:39:36 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2009.02.13 11:35:01 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2009.01.13 09:45:00 | 000,954,368 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2008.07.23 01:59:59 | 001,772,544 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\snp2uvc.sys -- (SNP2UVC)
DRV - [2008.06.25 00:55:12 | 000,047,104 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2008.01.23 17:08:58 | 000,099,456 | ---- | M] (QUALCOMM Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\alusbser.sys -- (alusbser)
DRV - [2007.09.17 15:53:26 | 000,021,632 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2007.08.11 05:19:26 | 000,029,752 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [File_System | Boot | Running] -- C:\Windows\System32\drivers\AsDsm.sys -- (AsDsm)
DRV - [2007.07.30 19:42:58 | 000,043,008 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2007.07.12 19:18:19 | 000,050,688 | ---- | M] (Realtek Semiconductor Corporation                          ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2007.01.24 05:08:39 | 000,005,632 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\kbfiltr.sys -- (kbfiltr)
DRV - [2006.12.13 11:11:57 | 000,007,680 | ---- | M] (ATK0100) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ATKACPI.sys -- (MTsensor)
DRV - [2006.12.05 11:34:42 | 000,507,136 | ---- | M] (PixArt Imaging Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\PFC027.SYS -- (PAC207)
DRV - [2006.11.02 09:41:49 | 001,010,560 | ---- | M] (Motorola Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\smserial.sys -- (smserial)
DRV - [2000.03.29 18:11:20 | 000,008,096 | ---- | M] (MicroStaff Co.,Ltd.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\MASPINT.SYS -- (MASPINT)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = iGoogle
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = iGoogle
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
 
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
 
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
 
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = iGoogle
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = Upgrade to Google Chrome
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Upgrade to Google Chrome
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Google
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = iGoogle
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = E0 94 C8 4C A1 13 CB 01  [binary data]
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = Upgrade to Google Chrome
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = Upgrade to Google Chrome
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledItems: bbrs_002@blabbers.com:1.0.5
FF - prefs.js..extensions.enabledItems: {1FD91A9C-410C-4090-BBCC-55D3450EF433}:1.0
FF - prefs.js..extensions.enabledItems: {e44a1809-4d10-4ab8-b343-3326b64c7cdd}:3.18.0.7
FF - prefs.js..extensions.enabledItems: {9bb815eb-3f9f-4e11-9150-cb70e29b40fc}:2.7.1.3
FF - prefs.js..extensions.enabledItems: {af6ac4f2-9825-4fb6-a600-92bc5361f209}:4.6.0.1
FF - prefs.js..extensions.enabledItems: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065}:2.7.1.3
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa2,version=2.0.0: C:\Program Files\Picasa2\npPicasa2.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Picasa2\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Mobil-Star\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O1DPlugin: C:\Users\Mobil-Star\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\Mobil-Star\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Mobil-Star\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Mobil-Star\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\amazon.com/AmazonMP3DownloaderPlugin: C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101721.dll (Amazon.com, Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.5.16\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013.03.05 22:38:59 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.5.16\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013.05.27 12:38:12 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\Mobil-Star\AppData\Roaming\IDM\idmmzcc5
 
[2013.05.29 16:04:41 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\Extensions
[2013.05.29 17:30:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\Firefox\Profiles\i0htsn1x.default\extensions
[2013.03.03 11:18:15 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\Firefox\Profiles\i0htsn1x.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2009.07.06 13:51:46 | 000,001,632 | ---- | M] () -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\searchplugins\live-search.xml
[2013.05.29 16:04:41 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011.12.07 16:39:19 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
File not found (No name found) -- C:\PROGRAM FILES\SEARCHCORE TOOLBAR\DATAMNGR\FIREFOXEXTENSION
File not found (No name found) -- C:\USERS\MOBIL-STAR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\I0HTSN1X.DEFAULT\EXTENSIONS\{9BB815EB-3F9F-4E11-9150-CB70E29B40FC}
File not found (No name found) -- C:\USERS\MOBIL-STAR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\I0HTSN1X.DEFAULT\EXTENSIONS\{AF6AC4F2-9825-4FB6-A600-92BC5361F209}
File not found (No name found) -- C:\USERS\MOBIL-STAR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\I0HTSN1X.DEFAULT\EXTENSIONS\{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}
File not found (No name found) -- C:\USERS\MOBIL-STAR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\I0HTSN1X.DEFAULT\EXTENSIONS\{E44A1809-4D10-4AB8-B343-3326B64C7CDD}
File not found (No name found) -- C:\USERS\MOBIL-STAR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\I0HTSN1X.DEFAULT\EXTENSIONS\BBRS_002@BLABBERS.COM
[2011.01.05 22:11:57 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.01.05 22:11:57 | 000,002,344 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2011.01.05 22:11:57 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.01.05 22:11:57 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.01.05 22:11:57 | 000,000,801 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR - homepage: Aktuelle Nachrichten - Inland Ausland Wirtschaft Kultur Sport - ARD Tagesschau
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\27.0.1453.94\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\27.0.1453.94\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\27.0.1453.94\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin:  (Enabled) = C:\Users\Mobil-Star\AppData\Local\Google\Chrome\User Data\Default\Extensions\bodddioamolcibagionmmobehnbhiakf\1.0.5_0\chromeNPAPI.dll
CHR - plugin: Skype Toolbars (Enabled) = C:\Users\Mobil-Star\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\npSkypeChromePlugin.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: DivX Player Netscape Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: Google Talk Plugin (Enabled) = C:\Users\Mobil-Star\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
CHR - plugin: Google Talk Plugin Video Accelerator (Enabled) = C:\Users\Mobil-Star\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
CHR - plugin: DivX Web Player (Enabled) = C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files\Microsoft\Office Live\npOLW.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files\Picasa2\npPicasa2.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files\Picasa2\npPicasa3.dll
CHR - plugin: Windows Live\u00AE Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: Google Drive = C:\Users\Mobil-Star\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\Mobil-Star\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Google Mail = C:\Users\Mobil-Star\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
 
O1 HOSTS File: ([2009.04.18 14:33:46 | 000,305,200 | R--- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1      localhost
O1 - Hosts: ::1            localhost
O1 - Hosts: 127.0.0.1        www.007guard.com
O1 - Hosts: 127.0.0.1        007guard.com
O1 - Hosts: 127.0.0.1        008i.com
O1 - Hosts: 127.0.0.1        www.008k.com
O1 - Hosts: 127.0.0.1        008k.com
O1 - Hosts: 127.0.0.1        00hq.com
O1 - Hosts: 127.0.0.1        00hq.com
O1 - Hosts: 127.0.0.1        010402.com
O1 - Hosts: 127.0.0.1        www.032439.com
O1 - Hosts: 127.0.0.1        032439.com
O1 - Hosts: 127.0.0.1        ???,????,????cr67com,????,??????,?????112scg,tt???8bc8,?????
O1 - Hosts: 127.0.0.1        0scan.com
O1 - Hosts: 127.0.0.1        1000gratisproben.com
O1 - Hosts: 127.0.0.1        1000gratisproben.com
O1 - Hosts: 127.0.0.1        1001namen.com - Informationen zum Thema 1001namen.
O1 - Hosts: 127.0.0.1        1001namen.com
O1 - Hosts: 127.0.0.1        100888290cs.com
O1 - Hosts: 127.0.0.1        ²©²Êͨ,²©²ÊÍø,½ð±¦²©188,²©²ÊͨÆÀ¼¶,°Ù¼ÒÀÖ,°ÂÃî°Ù¼ÒÀÖ
O1 - Hosts: 127.0.0.1        100sexlinks.com
O1 - Hosts: 127.0.0.1        www.100sexlinks.com
O1 - Hosts: 127.0.0.1        10sek.com
O1 - Hosts: 127.0.0.1        10sek.com - Informationen zum Thema 10sek.
O1 - Hosts: 127.0.0.1        1-2005-search.com
O1 - Hosts: 10510 more lines...
O2 - BHO: (no name) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - No CLSID value found.
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3 - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKLM..\Run: [Monitor] C:\Windows\PixArt\Pac207\Monitor.exe (PixArt Imaging Incorporation)
O4 - HKLM..\Run: [PDFPrint] C:\Program Files\PDF24\pdf24.exe (Geek Software GmbH)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [SpywareTerminatorShield] C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe (Crawler.com)
O4 - HKLM..\Run: [SpywareTerminatorUpdater] C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe (Crawler.com)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000..\Run: [ABBYY Screenshot Reader Retail] C:\Program Files\ABBYY Screenshot Reader\ScreenshotReader.exe (ABBYY)
O4 - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000..\Run: [GoogleDriveSync] C:\Program Files\Google\Drive\googledrivesync.exe (Google)
O4 - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000..\Run: [KiesHelper] C:\Program Files\Samsung\Kies\KiesHelper.exe (Samsung)
O4 - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000..\Run: [KiesPDLR] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe ()
O4 - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000..\Run: [MyWirelessCard] C:\Program Files\A-Link\3GU USB Modem\Connection Manager.exe ()
O4 - Startup: C:\Users\Mobil-Star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Mobil-Star\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O4 - Startup: C:\Users\Mobil-Star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote Inhaltsverzeichnis.onetoc2 ()
O4 - Startup: C:\Users\Mobil-Star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\..Trusted Domains: localhost ([]http in Local intranet)
O15 - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\..Trusted Ranges: GD ([http] in Local intranet)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 78.42.43.62 82.212.62.62
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0DA3776B-E400-479E-92D4-D55E133397BE}: DhcpNameServer = 78.42.43.62 82.212.62.62
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A7BE9011-A25E-4992-9472-2B8B84B58768}: DhcpNameServer = 192.168.42.129
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DCB0ACEF-B69E-48FA-8EB4-EC18E4A0EA94}: DhcpNameServer = 78.42.43.62 82.212.62.62
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL) - C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - igfxdev.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Users\Mobil-Star\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O24 - Desktop BackupWallPaper: C:\Users\Mobil-Star\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{1bb13412-b668-11e2-99f5-00248c785b79}\Shell - "" = AutoRun
O33 - MountPoints2\{1bb13412-b668-11e2-99f5-00248c785b79}\Shell\AutoRun\command - "" = H:\.\Autorun.exe AUTORUN=1
O33 - MountPoints2\{2070fca0-8c3f-11df-b304-00248c785b79}\Shell - "" = AutoRun
O33 - MountPoints2\{2070fca0-8c3f-11df-b304-00248c785b79}\Shell\AutoRun\command - "" = F:\QsSetup.exe
O33 - MountPoints2\{3acea333-e9b1-11df-8318-00248c785b79}\Shell - "" = AutoRun
O33 - MountPoints2\{3acea333-e9b1-11df-8318-00248c785b79}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{3acea3b0-e9b1-11df-8318-00248c785b79}\Shell - "" = AutoRun
O33 - MountPoints2\{3acea3b0-e9b1-11df-8318-00248c785b79}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{5238f0c0-a35b-11e1-ae24-00248c785b79}\Shell - "" = AutoRun
O33 - MountPoints2\{5238f0c0-a35b-11e1-ae24-00248c785b79}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{5238f0d3-a35b-11e1-ae24-00248c785b79}\Shell - "" = AutoRun
O33 - MountPoints2\{5238f0d3-a35b-11e1-ae24-00248c785b79}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{5238f0ed-a35b-11e1-ae24-00248c785b79}\Shell - "" = AutoRun
O33 - MountPoints2\{5238f0ed-a35b-11e1-ae24-00248c785b79}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{7a3b7d65-3f36-11de-988d-00248c785b79}\Shell - "" = AutoRun
O33 - MountPoints2\{7a3b7d65-3f36-11de-988d-00248c785b79}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O33 - MountPoints2\{c679fe05-e8e3-11df-89b2-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{c679fe05-e8e3-11df-89b2-806e6f6e6963}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{c679fe6f-e8e3-11df-89b2-00248c785b79}\Shell - "" = AutoRun
O33 - MountPoints2\{c679fe6f-e8e3-11df-89b2-00248c785b79}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.05.29 17:44:18 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\AppData\Roaming\PerformerSoft
[2013.05.29 08:51:23 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\Desktop\für troja board
[2013.05.28 08:28:24 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\AppData\Roaming\Malwarebytes
[2013.05.28 08:27:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013.05.28 08:27:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013.05.28 08:27:40 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2013.05.28 08:27:39 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2013.05.28 08:17:34 | 000,018,096 | ---- | C] (PerformerSoft LLC) -- C:\Windows\System32\roboot.exe
[2013.05.28 08:17:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Performer
[2013.05.28 08:17:18 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\77zip
[2013.05.28 08:17:14 | 000,000,000 | ---D | C] -- C:\Program Files\PC Performer
[2013.05.28 08:17:13 | 000,000,000 | ---D | C] -- C:\Program Files\77zip
[2013.05.28 08:11:58 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\Local Settings
[2013.05.28 08:11:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
[2013.05.28 08:11:53 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip
[2013.05.27 13:16:41 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\AppData\Roaming\Spyware Terminator
[2013.05.27 13:16:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Spyware Terminator
[2013.05.27 13:16:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Terminator 2012
[2013.05.27 13:16:35 | 000,000,000 | ---D | C] -- C:\Program Files\Spyware Terminator
[2013.05.17 09:26:03 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\Desktop\Scan bearbetungen
[2013.05.15 13:50:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2013.05.15 13:49:08 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2013.05.15 13:49:05 | 000,000,000 | ---D | C] -- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2013.05.12 15:29:41 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\Desktop\Teilnahmebestätigung
[2013.05.12 15:26:22 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\Desktop\Neuer Ordner
[2013.05.06 20:51:12 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\AppData\Roaming\Verbindungsassistent
[2013.05.06 20:34:42 | 000,860,928 | ---- | C] (DiBcom SA) -- C:\Windows\System32\drivers\mod7700.sys
[2013.05.06 20:34:42 | 000,102,784 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ew_hwusbdev.sys
[2013.05.06 20:34:42 | 000,011,136 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ew_usbenumfilter.sys
[2013.05.06 20:34:41 | 000,116,736 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ewusbnet.sys
[2013.05.06 20:34:41 | 000,106,880 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ewusbmdm.sys
[2013.05.06 20:34:41 | 000,023,424 | ---- | C] (Huawei Tech. Co., Ltd.) -- C:\Windows\System32\drivers\ewdcsc.sys
[2013.05.06 20:33:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Verbindungsassistent
[2013.05.06 20:33:10 | 000,000,000 | ---D | C] -- C:\Program Files\Verbindungsassistent
[2013.05.03 19:17:48 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\Desktop\melanie
[2013.05.02 17:35:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free PDF to Word Doc Converter
[2013.05.02 17:35:11 | 000,000,000 | ---D | C] -- C:\Program Files\Free PDF to Word Doc Converter
 
========== Files - Modified Within 30 Days ==========
 
[2013.05.29 17:53:21 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2013.05.29 17:53:21 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2013.05.29 17:51:31 | 000,000,274 | ---- | M] () -- C:\Windows\tasks\PC Performer_DEFAULT.job
[2013.05.29 17:38:15 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.05.29 17:37:59 | 000,045,056 | ---- | M] () -- C:\Windows\System32\acovcnt.exe
[2013.05.29 17:37:47 | 000,001,102 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.05.29 17:37:46 | 000,065,536 | ---- | M] () -- C:\Windows\System32\Ikeext.etl
[2013.05.29 17:37:32 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.05.29 17:37:20 | 2138,300,416 | -HS- | M] () -- C:\hiberfil.sys
[2013.05.29 17:33:10 | 000,000,297 | ---- | M] () -- C:\Windows\DeleteOnReboot.bat
[2013.05.29 17:26:00 | 000,001,140 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3503688316-1715030885-4232805651-1000UA.job
[2013.05.29 17:19:00 | 000,001,106 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.05.29 09:26:01 | 000,001,088 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3503688316-1715030885-4232805651-1000Core.job
[2013.05.29 08:18:40 | 000,000,282 | ---- | M] () -- C:\Windows\tasks\PC Performer_UPDATES.job
[2013.05.28 18:50:23 | 000,000,512 | ---- | M] () -- C:\Users\Mobil-Star\Desktop\MBR.dat
[2013.05.28 17:36:33 | 000,377,856 | ---- | M] () -- C:\Users\Mobil-Star\Desktop\gmer_2.1.19163 (1).exe
[2013.05.28 15:21:12 | 000,000,000 | ---- | M] () -- C:\Users\Mobil-Star\defogger_reenable
[2013.05.28 08:27:47 | 000,000,873 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013.05.28 08:17:33 | 000,000,814 | ---- | M] () -- C:\Users\Public\Desktop\PC Performer.lnk
[2013.05.28 08:17:18 | 000,000,737 | ---- | M] () -- C:\Users\Mobil-Star\Desktop\77zip.lnk
[2013.05.28 08:17:09 | 000,001,106 | ---- | M] () -- C:\Users\Mobil-Star\Desktop\SpeedAnalysis.lnk
[2013.05.27 12:38:12 | 000,001,854 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2013.05.23 18:26:17 | 000,637,090 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2013.05.23 18:26:17 | 000,603,042 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013.05.23 18:26:17 | 000,130,000 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2013.05.23 18:26:17 | 000,106,858 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013.05.16 12:55:23 | 000,505,472 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2013.05.15 13:50:57 | 000,001,631 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2013.05.06 20:33:12 | 000,860,928 | ---- | M] (DiBcom SA) -- C:\Windows\System32\drivers\mod7700.sys
[2013.05.06 20:33:12 | 000,011,136 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ew_usbenumfilter.sys
[2013.05.06 20:33:11 | 000,116,736 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ewusbnet.sys
[2013.05.06 20:33:11 | 000,106,880 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ewusbmdm.sys
[2013.05.06 20:33:11 | 000,102,784 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ew_hwusbdev.sys
[2013.05.06 20:33:11 | 000,023,424 | ---- | M] (Huawei Tech. Co., Ltd.) -- C:\Windows\System32\drivers\ewdcsc.sys
[2013.05.02 17:35:11 | 000,000,829 | ---- | M] () -- C:\Users\Mobil-Star\Desktop\Free PDF to Word Doc Converter.lnk
 
========== Files Created - No Company Name ==========
 
[2013.05.29 17:51:31 | 000,000,274 | ---- | C] () -- C:\Windows\tasks\PC Performer_DEFAULT.job
[2013.05.29 17:30:28 | 000,000,297 | ---- | C] () -- C:\Windows\DeleteOnReboot.bat
[2013.05.28 18:50:23 | 000,000,512 | ---- | C] () -- C:\Users\Mobil-Star\Desktop\MBR.dat
[2013.05.28 17:35:56 | 000,377,856 | ---- | C] () -- C:\Users\Mobil-Star\Desktop\gmer_2.1.19163 (1).exe
[2013.05.28 15:21:12 | 000,000,000 | ---- | C] () -- C:\Users\Mobil-Star\defogger_reenable
[2013.05.28 08:27:47 | 000,000,873 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013.05.28 08:18:23 | 000,000,282 | ---- | C] () -- C:\Windows\tasks\PC Performer_UPDATES.job
[2013.05.28 08:17:33 | 000,000,814 | ---- | C] () -- C:\Users\Public\Desktop\PC Performer.lnk
[2013.05.28 08:17:18 | 000,000,737 | ---- | C] () -- C:\Users\Mobil-Star\Desktop\77zip.lnk
[2013.05.28 08:17:09 | 000,001,106 | ---- | C] () -- C:\Users\Mobil-Star\Desktop\SpeedAnalysis.lnk
[2013.05.27 13:16:43 | 000,032,768 | ---- | C] () -- C:\Windows\System32\drivers\sp_rsdrv2.sys
[2013.05.15 13:50:57 | 000,001,631 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2013.05.02 17:35:11 | 000,000,829 | ---- | C] () -- C:\Users\Mobil-Star\Desktop\Free PDF to Word Doc Converter.lnk
[2012.12.07 18:18:18 | 000,030,208 | ---- | C] () -- C:\Windows\System32\WNASPI32.DLL
[2012.12.07 18:18:18 | 000,000,291 | ---- | C] () -- C:\Windows\msfsetup.ini
[2012.05.18 15:17:39 | 000,093,499 | ---- | C] () -- C:\Users\Mobil-Star\Currency.thmx
[2012.03.28 22:11:08 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2012.03.28 22:11:06 | 000,974,848 | ---- | C] () -- C:\Windows\System32\cis-2.4.dll
[2012.03.28 22:11:06 | 000,081,920 | ---- | C] () -- C:\Windows\System32\issacapi_bs-2.3.dll
[2012.03.28 22:11:06 | 000,065,536 | ---- | C] () -- C:\Windows\System32\issacapi_pe-2.3.dll
[2012.03.28 22:11:06 | 000,057,344 | ---- | C] () -- C:\Windows\System32\issacapi_se-2.3.dll
[2010.04.08 21:33:44 | 000,000,680 | ---- | C] () -- C:\Users\Mobil-Star\AppData\Local\d3d9caps.dat
[2009.10.02 03:20:48 | 000,000,202 | ---- | C] () -- C:\Users\Mobil-Star\CD-Laufwerk - Verknüpfung.lnk
[2009.05.28 17:57:20 | 000,000,306 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2009.05.02 10:02:37 | 000,130,048 | ---- | C] () -- C:\Users\Mobil-Star\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.04.26 11:53:16 | 000,029,239 | ---- | C] () -- C:\Users\Mobil-Star\AppData\Roaming\UserTile.png
 
========== ZeroAccess Check ==========
 
[2006.11.02 14:51:16 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.08 19:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009.04.11 08:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.04.11 08:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
========== LOP Check ==========
 
[2011.08.16 22:09:13 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\Amazon
[2012.06.19 15:46:16 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\DMCache
[2013.05.29 17:41:46 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\Dropbox
[2013.04.04 16:31:18 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\DVDVideoSoft
[2013.03.23 19:09:18 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\FILEminimizerPictures
[2009.04.18 14:21:10 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\FileZilla
[2013.03.04 14:33:19 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\FreemakeVideoDownloader
[2013.04.04 12:27:52 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\MAGIX
[2009.04.18 14:15:35 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\OpenOffice.org
[2009.06.04 17:31:40 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\Panasonic
[2010.06.20 13:08:38 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\PC Suite
[2009.04.26 11:53:16 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\PeerNetworking
[2013.05.29 17:44:18 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\PerformerSoft
[2012.05.09 20:39:03 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\Samsung
[2013.05.27 13:16:41 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\Spyware Terminator
[2009.04.18 13:24:25 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\Toolbars
[2013.03.04 11:19:15 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\TuneUp Software
[2013.05.06 21:10:12 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\Verbindungsassistent
 
========== Purity Check ==========
 
 

< End of report >
--- --- ---

Makr 29.05.2013 17:21
OTL Logfile:
Code:
OTL logfile created on: 29.05.2013 17:55:22 - Run 2
OTL by OldTimer - Version 3.2.69.0    Folder = c:\users\mobil-star\downloads
Windows Vista Home Basic Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1,99 Gb Total Physical Memory | 0,69 Gb Available Physical Memory | 34,66% Memory free
5,84 Gb Paging File | 4,44 Gb Available in Paging File | 75,96% Paging File free
Paging file location(s): c:\pagefile.sys 4004 4004 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 116,44 Gb Total Space | 47,83 Gb Free Space | 41,08% Space Free | Partition Type: NTFS
Drive D: | 104,73 Gb Total Space | 42,52 Gb Free Space | 40,60% Space Free | Partition Type: NTFS
Drive F: | 465,64 Gb Total Space | 380,85 Gb Free Space | 81,79% Space Free | Partition Type: FAT32
 
Computer Name: MOBIL-STAR-03 | User Name: Mobil-Star | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2013.05.27 13:14:34 | 000,602,112 | ---- | M] (OldTimer Tools) -- c:\users\mobil-star\downloads\otl.exe
PRC - [2013.04.16 16:10:44 | 019,662,744 | ---- | M] (Google) -- C:\Program Files\Google\Drive\googledrivesync.exe
PRC - [2013.04.04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2013.04.03 03:06:10 | 000,587,912 | ---- | M] (Crawler.com) -- C:\Program Files\Spyware Terminator\st_rsser.exe
PRC - [2013.04.03 03:06:06 | 003,684,488 | ---- | M] (Crawler.com) -- C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
PRC - [2013.04.03 03:05:58 | 002,777,736 | ---- | M] (Crawler.com) -- C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
PRC - [2013.03.20 13:55:48 | 000,162,856 | ---- | M] (Geek Software GmbH) -- C:\Program Files\PDF24\pdf24.exe
PRC - [2013.03.12 09:05:50 | 029,106,336 | ---- | M] (Dropbox, Inc.) -- C:\Users\Mobil-Star\AppData\Roaming\Dropbox\bin\Dropbox.exe
PRC - [2012.05.04 07:37:10 | 000,021,392 | ---- | M] () -- C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
PRC - [2012.05.04 07:37:00 | 003,521,424 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
PRC - [2011.05.24 10:33:30 | 001,840,128 | ---- | M] (MAGIX AG) -- C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe
PRC - [2010.11.18 13:09:24 | 000,330,696 | ---- | M] () -- C:\Program Files\Verbindungsassistent\WTGService.exe
PRC - [2010.08.20 21:45:26 | 001,164,584 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
PRC - [2009.10.27 01:07:42 | 000,959,752 | ---- | M] (ABBYY) -- C:\Program Files\ABBYY Screenshot Reader\ScreenshotReader.exe
PRC - [2009.08.05 18:08:26 | 000,185,089 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2009.06.10 18:06:09 | 000,108,289 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2009.05.14 16:07:12 | 000,759,048 | ---- | M] (ABBYY) -- C:\Program Files\ABBYY Screenshot Reader\NetworkLicenseServer.exe
PRC - [2009.04.18 18:23:23 | 006,265,376 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
PRC - [2009.04.11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009.04.11 08:27:28 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conime.exe
PRC - [2009.03.31 09:39:36 | 000,233,472 | ---- | M] (Teruten) -- C:\Windows\System32\FsUsbExService.Exe
PRC - [2009.03.02 12:08:43 | 000,209,153 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2009.01.09 20:14:48 | 007,418,368 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin
PRC - [2009.01.09 20:14:42 | 007,424,000 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe
PRC - [2008.11.27 04:54:00 | 000,211,512 | ---- | M] (ATK) -- C:\Program Files\P4G\BatteryLife.exe
PRC - [2008.08.09 06:00:40 | 000,217,088 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Hotkey\HControl.exe
PRC - [2008.06.24 05:16:24 | 002,482,176 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Hotkey\ATKOSD.exe
PRC - [2008.06.18 07:10:34 | 000,424,504 | ---- | M] (ASUS) -- C:\Program Files\ASUS\SmartLogon\smartlogon.exe
PRC - [2008.06.18 07:10:24 | 000,297,528 | ---- | M] (ASUS) -- C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
PRC - [2008.06.04 02:29:08 | 000,851,968 | ---- | M] (ATK) -- C:\Program Files\ASUS\Splendid\ACMON.exe
PRC - [2008.04.07 09:17:30 | 000,430,592 | ---- | M] (Nokia.) -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
PRC - [2008.03.31 11:55:48 | 000,225,280 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
PRC - [2008.03.10 09:58:18 | 000,130,560 | ---- | M] () -- C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
PRC - [2008.02.22 09:11:02 | 000,120,320 | ---- | M] () -- C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
PRC - [2008.01.23 19:51:28 | 000,151,552 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\WDC.exe
PRC - [2008.01.21 04:33:00 | 001,008,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MSASCui.exe
PRC - [2007.11.05 04:48:06 | 000,106,496 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe
PRC - [2007.10.03 06:53:00 | 000,094,208 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\AsLdrSrv.exe
PRC - [2007.08.15 20:20:16 | 000,106,496 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\KBFiltr.exe
PRC - [2006.11.03 11:01:16 | 000,319,488 | ---- | M] (PixArt Imaging Incorporation) -- C:\Windows\PixArt\Pac207\Monitor.exe
PRC - [2005.07.07 00:43:42 | 000,155,648 | ---- | M] (ASUSTeK) -- C:\Windows\System32\ACEngSvr.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2013.05.29 17:41:53 | 000,128,512 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\_elementtree.pyd
MOD - [2013.05.29 17:41:53 | 000,044,032 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\_socket.pyd
MOD - [2013.05.29 17:41:52 | 000,098,816 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\win32api.pyd
MOD - [2013.05.29 17:41:52 | 000,022,528 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\win32ts.pyd
MOD - [2013.05.29 17:41:51 | 000,557,056 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\pysqlite2._sqlite.pyd
MOD - [2013.05.29 17:41:51 | 000,320,512 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\win32com.shell.shell.pyd
MOD - [2013.05.29 17:41:51 | 000,070,656 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\wx._html2.pyd
MOD - [2013.05.29 17:41:51 | 000,026,624 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\_multiprocessing.pyd
MOD - [2013.05.29 17:41:50 | 000,805,888 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\wx._gdi_.pyd
MOD - [2013.05.29 17:41:50 | 000,011,264 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\win32crypt.pyd
MOD - [2013.05.29 17:41:49 | 001,022,416 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\windows._cacheinvalidation.pyd
MOD - [2013.05.29 17:41:49 | 000,087,040 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\_ctypes.pyd
MOD - [2013.05.29 17:41:49 | 000,017,408 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\win32profile.pyd
MOD - [2013.05.29 17:41:48 | 000,364,544 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\pythoncom27.dll
MOD - [2013.05.29 17:41:47 | 000,735,232 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\wx._misc_.pyd
MOD - [2013.05.29 17:41:47 | 000,110,080 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\pywintypes27.dll
MOD - [2013.05.29 17:41:46 | 000,108,544 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\win32security.pyd
MOD - [2013.05.29 17:41:44 | 001,175,040 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\wx._core_.pyd
MOD - [2013.05.29 17:41:43 | 001,153,024 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\_ssl.pyd
MOD - [2013.05.29 17:41:42 | 000,025,600 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\win32pdh.pyd
MOD - [2013.05.29 17:41:41 | 000,035,840 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\win32process.pyd
MOD - [2013.05.29 17:41:40 | 000,711,680 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\_hashlib.pyd
MOD - [2013.05.29 17:41:39 | 000,811,008 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\wx._windows_.pyd
MOD - [2013.05.29 17:41:38 | 000,122,368 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\wx._wizard.pyd
MOD - [2013.05.29 17:41:37 | 000,119,808 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\win32file.pyd
MOD - [2013.05.29 17:41:36 | 000,038,912 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\win32inet.pyd
MOD - [2013.05.29 17:41:24 | 001,062,400 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\wx._controls_.pyd
MOD - [2013.05.29 17:41:21 | 000,018,432 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\win32event.pyd
MOD - [2013.05.29 17:41:20 | 000,127,488 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\pyexpat.pyd
MOD - [2013.05.29 17:41:18 | 000,686,080 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\unicodedata.pyd
MOD - [2013.05.29 17:41:17 | 000,010,240 | ---- | M] () -- C:\Users\MOBIL-~1\AppData\Local\Temp\_MEI14802\select.pyd
MOD - [2013.05.16 11:04:10 | 018,022,400 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\1f0bb5336d1706c9b8ad2330f3642760\PresentationFramework.ni.dll
MOD - [2013.05.16 11:03:36 | 011,522,560 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\9b2940478ec555990b37af5448b8f509\PresentationCore.ni.dll
MOD - [2013.05.16 11:03:02 | 003,883,008 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\a1949f57d2ec260e09768e98fecb0559\WindowsBase.ni.dll
MOD - [2013.05.16 11:02:42 | 013,199,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\6ded1c6dbf61d19f839da66c951d8fa9\System.Windows.Forms.ni.dll
MOD - [2013.05.16 11:02:25 | 007,070,208 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\93a17ba6cb6753328f25466bc0bf1cb1\System.Core.ni.dll
MOD - [2013.04.11 18:04:33 | 001,218,560 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Management\5d5b1b0c6e8a714de39a06e3b61f35fe\System.Management.ni.dll
MOD - [2013.04.04 08:11:11 | 000,762,880 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\b454f5723ec86048063fe19d4267d9e8\System.Runtime.Remoting.ni.dll
MOD - [2013.04.04 08:10:59 | 001,812,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\40c7a89fe2cbf3c12a2c39e034da54cf\System.Xaml.ni.dll
MOD - [2013.04.04 08:07:24 | 000,595,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\60674dde4b56087c189f576f36f6720f\PresentationFramework.Aero.ni.dll
MOD - [2013.04.04 08:02:24 | 001,667,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\78ecbee4a7444353dce52afb9d9d795c\System.Drawing.ni.dll
MOD - [2013.04.04 08:02:21 | 005,617,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\fc476bbac36944e352c2f547352ffa64\System.Xml.ni.dll
MOD - [2013.04.04 08:02:01 | 009,095,168 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\f93dca0e4baa1dcb37cf75392b7c89da\System.ni.dll
MOD - [2013.04.04 08:01:54 | 014,416,896 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\6a1ccc1e1a79ce267d3d1808af382cd6\mscorlib.ni.dll
MOD - [2012.05.09 21:25:23 | 000,115,137 | ---- | M] () -- C:\Users\Mobil-Star\AppData\Local\Temp\c25e8b3d-33a7-42bf-85e6-6880c6753136\CliSecureRT.dll
MOD - [2012.05.04 07:37:10 | 000,021,392 | ---- | M] () -- C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
MOD - [2011.11.02 00:26:32 | 000,087,912 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011.11.02 00:26:12 | 001,242,472 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2010.08.20 21:45:36 | 000,095,528 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
MOD - [2010.08.20 21:45:26 | 001,164,584 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
MOD - [2010.06.15 17:56:25 | 000,034,816 | ---- | M] () -- C:\Program Files\Google\Google Desktop Search\gzlib.dll
MOD - [2009.03.25 17:15:00 | 000,094,720 | ---- | M] () -- C:\Program Files\FileZilla FTP Client\fzshellext.dll
MOD - [2008.10.31 00:37:04 | 000,015,360 | ---- | M] () -- C:\Program Files\P4G\OvrClk.dll
MOD - [2008.08.21 00:49:56 | 000,016,384 | ---- | M] () -- C:\Program Files\P4G\DevMng.dll
MOD - [2008.07.29 13:55:14 | 000,969,728 | ---- | M] () -- C:\Program Files\OpenOffice.org 3\program\libxml2.dll
MOD - [2007.06.15 19:28:36 | 000,147,456 | ---- | M] () -- C:\Program Files\ASUS\ASUS Data Security Manager\OverlayIconShlExt.dll
MOD - [2007.06.02 02:08:18 | 000,143,360 | ---- | M] () -- C:\Program Files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll
 
 
========== Services (SafeList) ==========
 
SRV - [2013.05.15 12:38:26 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013.04.04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2013.04.04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2013.04.03 03:06:10 | 000,587,912 | ---- | M] (Crawler.com) [Auto | Running] -- C:\Program Files\Spyware Terminator\st_rsser.exe -- (ST2012_Svc)
SRV - [2012.07.13 13:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2011.11.16 18:23:44 | 000,377,344 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- winhttp.dll -- (WinHttpAutoProxySvc)
SRV - [2011.05.24 10:33:30 | 001,840,128 | ---- | M] (MAGIX AG) [Auto | Running] -- C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe -- (Fabs)
SRV - [2011.04.26 13:54:12 | 002,702,848 | ---- | M] (MAGIX®) [On_Demand | Stopped] -- C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance)
SRV - [2010.11.18 13:09:24 | 000,330,696 | ---- | M] () [Auto | Running] -- C:\Program Files\Verbindungsassistent\WTGService.exe -- (WTGService)
SRV - [2009.08.05 18:08:26 | 000,185,089 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2009.06.10 18:06:09 | 000,108,289 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2009.05.14 16:07:12 | 000,759,048 | ---- | M] (ABBYY) [Auto | Running] -- C:\Program Files\ABBYY Screenshot Reader\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.ScreenshotReader.9.0)
SRV - [2009.03.31 09:39:36 | 000,233,472 | ---- | M] (Teruten) [Auto | Running] -- C:\Windows\System32\FsUsbExService.Exe -- (FsUsbExService)
SRV - [2008.04.07 09:17:30 | 000,430,592 | ---- | M] (Nokia.) [On_Demand | Running] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2008.03.31 11:55:48 | 000,225,280 | ---- | M] (ASUSTek Computer Inc.) [Auto | Running] -- C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe -- (ADSMService)
SRV - [2008.01.21 04:33:00 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007.10.03 06:53:00 | 000,094,208 | ---- | M] () [Auto | Running] -- C:\Program Files\ASUS\ATK Hotkey\AsLdrSrv.exe -- (ASLDRService)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ewusbfake.sys -- (hwusbfake)
DRV - [2013.05.06 20:33:11 | 000,106,880 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2013.05.06 20:33:11 | 000,102,784 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ew_hwusbdev.sys -- (ew_hwusbdev)
DRV - [2013.04.04 14:50:32 | 000,022,856 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2011.06.21 11:24:06 | 000,032,768 | ---- | M] () [Kernel | System | Running] -- C:\Windows\System32\drivers\sp_rsdrv2.sys -- (sp_rsdrv2)
DRV - [2011.06.02 07:47:22 | 000,136,808 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadmdm.sys -- (ssadmdm)
DRV - [2011.06.02 07:47:22 | 000,121,064 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadbus.sys -- (ssadbus)
DRV - [2011.06.02 07:47:22 | 000,012,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadmdfl.sys -- (ssadmdfl)
DRV - [2009.12.08 08:47:21 | 000,056,816 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2009.06.10 18:06:09 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009.05.01 11:03:06 | 000,096,104 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2009.03.31 09:39:36 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2009.02.13 11:35:01 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2009.01.13 09:45:00 | 000,954,368 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2008.07.23 01:59:59 | 001,772,544 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\snp2uvc.sys -- (SNP2UVC)
DRV - [2008.06.25 00:55:12 | 000,047,104 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2008.01.23 17:08:58 | 000,099,456 | ---- | M] (QUALCOMM Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\alusbser.sys -- (alusbser)
DRV - [2007.09.17 15:53:26 | 000,021,632 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2007.08.11 05:19:26 | 000,029,752 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [File_System | Boot | Running] -- C:\Windows\System32\drivers\AsDsm.sys -- (AsDsm)
DRV - [2007.07.30 19:42:58 | 000,043,008 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2007.07.12 19:18:19 | 000,050,688 | ---- | M] (Realtek Semiconductor Corporation                          ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2007.01.24 05:08:39 | 000,005,632 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\kbfiltr.sys -- (kbfiltr)
DRV - [2006.12.13 11:11:57 | 000,007,680 | ---- | M] (ATK0100) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ATKACPI.sys -- (MTsensor)
DRV - [2006.12.05 11:34:42 | 000,507,136 | ---- | M] (PixArt Imaging Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\PFC027.SYS -- (PAC207)
DRV - [2006.11.02 09:41:49 | 001,010,560 | ---- | M] (Motorola Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\smserial.sys -- (smserial)
DRV - [2000.03.29 18:11:20 | 000,008,096 | ---- | M] (MicroStaff Co.,Ltd.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\MASPINT.SYS -- (MASPINT)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = iGoogle
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = iGoogle
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
 
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
 
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
 
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = iGoogle
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = Upgrade to Google Chrome
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Upgrade to Google Chrome
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Google
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = iGoogle
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = E0 94 C8 4C A1 13 CB 01  [binary data]
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = Upgrade to Google Chrome
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = Upgrade to Google Chrome
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledItems: bbrs_002@blabbers.com:1.0.5
FF - prefs.js..extensions.enabledItems: {1FD91A9C-410C-4090-BBCC-55D3450EF433}:1.0
FF - prefs.js..extensions.enabledItems: {e44a1809-4d10-4ab8-b343-3326b64c7cdd}:3.18.0.7
FF - prefs.js..extensions.enabledItems: {9bb815eb-3f9f-4e11-9150-cb70e29b40fc}:2.7.1.3
FF - prefs.js..extensions.enabledItems: {af6ac4f2-9825-4fb6-a600-92bc5361f209}:4.6.0.1
FF - prefs.js..extensions.enabledItems: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065}:2.7.1.3
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa2,version=2.0.0: C:\Program Files\Picasa2\npPicasa2.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Picasa2\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Mobil-Star\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O1DPlugin: C:\Users\Mobil-Star\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\Mobil-Star\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Mobil-Star\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Mobil-Star\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\amazon.com/AmazonMP3DownloaderPlugin: C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101721.dll (Amazon.com, Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.5.16\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013.03.05 22:38:59 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.5.16\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013.05.27 12:38:12 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\Mobil-Star\AppData\Roaming\IDM\idmmzcc5
 
[2013.05.29 16:04:41 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\Extensions
[2013.05.29 17:30:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\Firefox\Profiles\i0htsn1x.default\extensions
[2013.03.03 11:18:15 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\Firefox\Profiles\i0htsn1x.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2009.07.06 13:51:46 | 000,001,632 | ---- | M] () -- C:\Users\Mobil-Star\AppData\Roaming\mozilla\firefox\profiles\i0htsn1x.default\searchplugins\live-search.xml
[2013.05.29 16:04:41 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011.12.07 16:39:19 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
File not found (No name found) -- C:\PROGRAM FILES\SEARCHCORE TOOLBAR\DATAMNGR\FIREFOXEXTENSION
File not found (No name found) -- C:\USERS\MOBIL-STAR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\I0HTSN1X.DEFAULT\EXTENSIONS\{9BB815EB-3F9F-4E11-9150-CB70E29B40FC}
File not found (No name found) -- C:\USERS\MOBIL-STAR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\I0HTSN1X.DEFAULT\EXTENSIONS\{AF6AC4F2-9825-4FB6-A600-92BC5361F209}
File not found (No name found) -- C:\USERS\MOBIL-STAR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\I0HTSN1X.DEFAULT\EXTENSIONS\{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}
File not found (No name found) -- C:\USERS\MOBIL-STAR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\I0HTSN1X.DEFAULT\EXTENSIONS\{E44A1809-4D10-4AB8-B343-3326B64C7CDD}
File not found (No name found) -- C:\USERS\MOBIL-STAR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\I0HTSN1X.DEFAULT\EXTENSIONS\BBRS_002@BLABBERS.COM
[2011.01.05 22:11:57 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.01.05 22:11:57 | 000,002,344 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2011.01.05 22:11:57 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.01.05 22:11:57 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.01.05 22:11:57 | 000,000,801 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR - homepage: Aktuelle Nachrichten - Inland Ausland Wirtschaft Kultur Sport - ARD Tagesschau
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\27.0.1453.94\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\27.0.1453.94\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\27.0.1453.94\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin:  (Enabled) = C:\Users\Mobil-Star\AppData\Local\Google\Chrome\User Data\Default\Extensions\bodddioamolcibagionmmobehnbhiakf\1.0.5_0\chromeNPAPI.dll
CHR - plugin: Skype Toolbars (Enabled) = C:\Users\Mobil-Star\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\npSkypeChromePlugin.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: DivX Player Netscape Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: Google Talk Plugin (Enabled) = C:\Users\Mobil-Star\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
CHR - plugin: Google Talk Plugin Video Accelerator (Enabled) = C:\Users\Mobil-Star\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
CHR - plugin: DivX Web Player (Enabled) = C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files\Microsoft\Office Live\npOLW.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files\Picasa2\npPicasa2.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files\Picasa2\npPicasa3.dll
CHR - plugin: Windows Live\u00AE Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: Google Drive = C:\Users\Mobil-Star\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\Mobil-Star\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Google Mail = C:\Users\Mobil-Star\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
 
O1 HOSTS File: ([2009.04.18 14:33:46 | 000,305,200 | R--- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1      localhost
O1 - Hosts: ::1            localhost
O1 - Hosts: 127.0.0.1        www.007guard.com
O1 - Hosts: 127.0.0.1        007guard.com
O1 - Hosts: 127.0.0.1        008i.com
O1 - Hosts: 127.0.0.1        008k.com
O1 - Hosts: 127.0.0.1        008k.com
O1 - Hosts: 127.0.0.1        00hq.com
O1 - Hosts: 127.0.0.1        00hq.com
O1 - Hosts: 127.0.0.1        010402.com
O1 - Hosts: 127.0.0.1        www.032439.com
O1 - Hosts: 127.0.0.1        032439.com
O1 - Hosts: 127.0.0.1        ???,????,????cr67com,????,??????,?????112scg,tt???8bc8,?????
O1 - Hosts: 127.0.0.1        0scan.com
O1 - Hosts: 127.0.0.1        1000gratisproben.com
O1 - Hosts: 127.0.0.1        1000gratisproben.com
O1 - Hosts: 127.0.0.1        1001namen.com - Informationen zum Thema 1001namen.
O1 - Hosts: 127.0.0.1        1001namen.com
O1 - Hosts: 127.0.0.1        100888290cs.com
O1 - Hosts: 127.0.0.1        ²©²Êͨ,²©²ÊÍø,½ð±¦²©188,²©²ÊͨÆÀ¼¶,°Ù¼ÒÀÖ,°ÂÃî°Ù¼ÒÀÖ
O1 - Hosts: 127.0.0.1        100sexlinks.com
O1 - Hosts: 127.0.0.1        www.100sexlinks.com
O1 - Hosts: 127.0.0.1        10sek.com
O1 - Hosts: 127.0.0.1        10sek.com - Informationen zum Thema 10sek.
O1 - Hosts: 127.0.0.1        1-2005-search.com
O1 - Hosts: 10510 more lines...
O2 - BHO: (no name) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - No CLSID value found.
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3 - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKLM..\Run: [Monitor] C:\Windows\PixArt\Pac207\Monitor.exe (PixArt Imaging Incorporation)
O4 - HKLM..\Run: [PDFPrint] C:\Program Files\PDF24\pdf24.exe (Geek Software GmbH)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [SpywareTerminatorShield] C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe (Crawler.com)
O4 - HKLM..\Run: [SpywareTerminatorUpdater] C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe (Crawler.com)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000..\Run: [ABBYY Screenshot Reader Retail] C:\Program Files\ABBYY Screenshot Reader\ScreenshotReader.exe (ABBYY)
O4 - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000..\Run: [GoogleDriveSync] C:\Program Files\Google\Drive\googledrivesync.exe (Google)
O4 - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000..\Run: [KiesHelper] C:\Program Files\Samsung\Kies\KiesHelper.exe (Samsung)
O4 - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000..\Run: [KiesPDLR] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe ()
O4 - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000..\Run: [MyWirelessCard] C:\Program Files\A-Link\3GU USB Modem\Connection Manager.exe ()
O4 - Startup: C:\Users\Mobil-Star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Mobil-Star\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O4 - Startup: C:\Users\Mobil-Star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote Inhaltsverzeichnis.onetoc2 ()
O4 - Startup: C:\Users\Mobil-Star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\..Trusted Domains: localhost ([]http in Local intranet)
O15 - HKU\S-1-5-21-3503688316-1715030885-4232805651-1000\..Trusted Ranges: GD ([http] in Local intranet)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 78.42.43.62 82.212.62.62
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0DA3776B-E400-479E-92D4-D55E133397BE}: DhcpNameServer = 78.42.43.62 82.212.62.62
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A7BE9011-A25E-4992-9472-2B8B84B58768}: DhcpNameServer = 192.168.42.129
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DCB0ACEF-B69E-48FA-8EB4-EC18E4A0EA94}: DhcpNameServer = 78.42.43.62 82.212.62.62
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL) - C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - igfxdev.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Users\Mobil-Star\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O24 - Desktop BackupWallPaper: C:\Users\Mobil-Star\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{1bb13412-b668-11e2-99f5-00248c785b79}\Shell - "" = AutoRun
O33 - MountPoints2\{1bb13412-b668-11e2-99f5-00248c785b79}\Shell\AutoRun\command - "" = H:\.\Autorun.exe AUTORUN=1
O33 - MountPoints2\{2070fca0-8c3f-11df-b304-00248c785b79}\Shell - "" = AutoRun
O33 - MountPoints2\{2070fca0-8c3f-11df-b304-00248c785b79}\Shell\AutoRun\command - "" = F:\QsSetup.exe
O33 - MountPoints2\{3acea333-e9b1-11df-8318-00248c785b79}\Shell - "" = AutoRun
O33 - MountPoints2\{3acea333-e9b1-11df-8318-00248c785b79}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{3acea3b0-e9b1-11df-8318-00248c785b79}\Shell - "" = AutoRun
O33 - MountPoints2\{3acea3b0-e9b1-11df-8318-00248c785b79}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{5238f0c0-a35b-11e1-ae24-00248c785b79}\Shell - "" = AutoRun
O33 - MountPoints2\{5238f0c0-a35b-11e1-ae24-00248c785b79}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{5238f0d3-a35b-11e1-ae24-00248c785b79}\Shell - "" = AutoRun
O33 - MountPoints2\{5238f0d3-a35b-11e1-ae24-00248c785b79}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{5238f0ed-a35b-11e1-ae24-00248c785b79}\Shell - "" = AutoRun
O33 - MountPoints2\{5238f0ed-a35b-11e1-ae24-00248c785b79}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{7a3b7d65-3f36-11de-988d-00248c785b79}\Shell - "" = AutoRun
O33 - MountPoints2\{7a3b7d65-3f36-11de-988d-00248c785b79}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O33 - MountPoints2\{c679fe05-e8e3-11df-89b2-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{c679fe05-e8e3-11df-89b2-806e6f6e6963}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{c679fe6f-e8e3-11df-89b2-00248c785b79}\Shell - "" = AutoRun
O33 - MountPoints2\{c679fe6f-e8e3-11df-89b2-00248c785b79}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.05.29 17:44:18 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\AppData\Roaming\PerformerSoft
[2013.05.29 08:51:23 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\Desktop\für troja board
[2013.05.28 08:28:24 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\AppData\Roaming\Malwarebytes
[2013.05.28 08:27:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013.05.28 08:27:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013.05.28 08:27:40 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2013.05.28 08:27:39 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2013.05.28 08:17:34 | 000,018,096 | ---- | C] (PerformerSoft LLC) -- C:\Windows\System32\roboot.exe
[2013.05.28 08:17:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Performer
[2013.05.28 08:17:18 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\77zip
[2013.05.28 08:17:14 | 000,000,000 | ---D | C] -- C:\Program Files\PC Performer
[2013.05.28 08:17:13 | 000,000,000 | ---D | C] -- C:\Program Files\77zip
[2013.05.28 08:11:58 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\Local Settings
[2013.05.28 08:11:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
[2013.05.28 08:11:53 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip
[2013.05.27 13:16:41 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\AppData\Roaming\Spyware Terminator
[2013.05.27 13:16:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Spyware Terminator
[2013.05.27 13:16:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Terminator 2012
[2013.05.27 13:16:35 | 000,000,000 | ---D | C] -- C:\Program Files\Spyware Terminator
[2013.05.17 09:26:03 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\Desktop\Scan bearbetungen
[2013.05.15 13:50:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2013.05.15 13:49:08 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2013.05.15 13:49:05 | 000,000,000 | ---D | C] -- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2013.05.12 15:29:41 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\Desktop\Teilnahmebestätigung
[2013.05.12 15:26:22 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\Desktop\Neuer Ordner
[2013.05.06 20:51:12 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\AppData\Roaming\Verbindungsassistent
[2013.05.06 20:34:42 | 000,860,928 | ---- | C] (DiBcom SA) -- C:\Windows\System32\drivers\mod7700.sys
[2013.05.06 20:34:42 | 000,102,784 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ew_hwusbdev.sys
[2013.05.06 20:34:42 | 000,011,136 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ew_usbenumfilter.sys
[2013.05.06 20:34:41 | 000,116,736 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ewusbnet.sys
[2013.05.06 20:34:41 | 000,106,880 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ewusbmdm.sys
[2013.05.06 20:34:41 | 000,023,424 | ---- | C] (Huawei Tech. Co., Ltd.) -- C:\Windows\System32\drivers\ewdcsc.sys
[2013.05.06 20:33:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Verbindungsassistent
[2013.05.06 20:33:10 | 000,000,000 | ---D | C] -- C:\Program Files\Verbindungsassistent
[2013.05.03 19:17:48 | 000,000,000 | ---D | C] -- C:\Users\Mobil-Star\Desktop\melanie
[2013.05.02 17:35:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free PDF to Word Doc Converter
[2013.05.02 17:35:11 | 000,000,000 | ---D | C] -- C:\Program Files\Free PDF to Word Doc Converter
 
========== Files - Modified Within 30 Days ==========
 
[2013.05.29 17:53:21 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2013.05.29 17:53:21 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2013.05.29 17:51:31 | 000,000,274 | ---- | M] () -- C:\Windows\tasks\PC Performer_DEFAULT.job
[2013.05.29 17:38:15 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.05.29 17:37:59 | 000,045,056 | ---- | M] () -- C:\Windows\System32\acovcnt.exe
[2013.05.29 17:37:47 | 000,001,102 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.05.29 17:37:46 | 000,065,536 | ---- | M] () -- C:\Windows\System32\Ikeext.etl
[2013.05.29 17:37:32 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.05.29 17:37:20 | 2138,300,416 | -HS- | M] () -- C:\hiberfil.sys
[2013.05.29 17:33:10 | 000,000,297 | ---- | M] () -- C:\Windows\DeleteOnReboot.bat
[2013.05.29 17:26:00 | 000,001,140 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3503688316-1715030885-4232805651-1000UA.job
[2013.05.29 17:19:00 | 000,001,106 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.05.29 09:26:01 | 000,001,088 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3503688316-1715030885-4232805651-1000Core.job
[2013.05.29 08:18:40 | 000,000,282 | ---- | M] () -- C:\Windows\tasks\PC Performer_UPDATES.job
[2013.05.28 18:50:23 | 000,000,512 | ---- | M] () -- C:\Users\Mobil-Star\Desktop\MBR.dat
[2013.05.28 17:36:33 | 000,377,856 | ---- | M] () -- C:\Users\Mobil-Star\Desktop\gmer_2.1.19163 (1).exe
[2013.05.28 15:21:12 | 000,000,000 | ---- | M] () -- C:\Users\Mobil-Star\defogger_reenable
[2013.05.28 08:27:47 | 000,000,873 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013.05.28 08:17:33 | 000,000,814 | ---- | M] () -- C:\Users\Public\Desktop\PC Performer.lnk
[2013.05.28 08:17:18 | 000,000,737 | ---- | M] () -- C:\Users\Mobil-Star\Desktop\77zip.lnk
[2013.05.28 08:17:09 | 000,001,106 | ---- | M] () -- C:\Users\Mobil-Star\Desktop\SpeedAnalysis.lnk
[2013.05.27 12:38:12 | 000,001,854 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2013.05.23 18:26:17 | 000,637,090 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2013.05.23 18:26:17 | 000,603,042 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013.05.23 18:26:17 | 000,130,000 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2013.05.23 18:26:17 | 000,106,858 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013.05.16 12:55:23 | 000,505,472 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2013.05.15 13:50:57 | 000,001,631 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2013.05.06 20:33:12 | 000,860,928 | ---- | M] (DiBcom SA) -- C:\Windows\System32\drivers\mod7700.sys
[2013.05.06 20:33:12 | 000,011,136 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ew_usbenumfilter.sys
[2013.05.06 20:33:11 | 000,116,736 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ewusbnet.sys
[2013.05.06 20:33:11 | 000,106,880 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ewusbmdm.sys
[2013.05.06 20:33:11 | 000,102,784 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ew_hwusbdev.sys
[2013.05.06 20:33:11 | 000,023,424 | ---- | M] (Huawei Tech. Co., Ltd.) -- C:\Windows\System32\drivers\ewdcsc.sys
[2013.05.02 17:35:11 | 000,000,829 | ---- | M] () -- C:\Users\Mobil-Star\Desktop\Free PDF to Word Doc Converter.lnk
 
========== Files Created - No Company Name ==========
 
[2013.05.29 17:51:31 | 000,000,274 | ---- | C] () -- C:\Windows\tasks\PC Performer_DEFAULT.job
[2013.05.29 17:30:28 | 000,000,297 | ---- | C] () -- C:\Windows\DeleteOnReboot.bat
[2013.05.28 18:50:23 | 000,000,512 | ---- | C] () -- C:\Users\Mobil-Star\Desktop\MBR.dat
[2013.05.28 17:35:56 | 000,377,856 | ---- | C] () -- C:\Users\Mobil-Star\Desktop\gmer_2.1.19163 (1).exe
[2013.05.28 15:21:12 | 000,000,000 | ---- | C] () -- C:\Users\Mobil-Star\defogger_reenable
[2013.05.28 08:27:47 | 000,000,873 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013.05.28 08:18:23 | 000,000,282 | ---- | C] () -- C:\Windows\tasks\PC Performer_UPDATES.job
[2013.05.28 08:17:33 | 000,000,814 | ---- | C] () -- C:\Users\Public\Desktop\PC Performer.lnk
[2013.05.28 08:17:18 | 000,000,737 | ---- | C] () -- C:\Users\Mobil-Star\Desktop\77zip.lnk
[2013.05.28 08:17:09 | 000,001,106 | ---- | C] () -- C:\Users\Mobil-Star\Desktop\SpeedAnalysis.lnk
[2013.05.27 13:16:43 | 000,032,768 | ---- | C] () -- C:\Windows\System32\drivers\sp_rsdrv2.sys
[2013.05.15 13:50:57 | 000,001,631 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2013.05.02 17:35:11 | 000,000,829 | ---- | C] () -- C:\Users\Mobil-Star\Desktop\Free PDF to Word Doc Converter.lnk
[2012.12.07 18:18:18 | 000,030,208 | ---- | C] () -- C:\Windows\System32\WNASPI32.DLL
[2012.12.07 18:18:18 | 000,000,291 | ---- | C] () -- C:\Windows\msfsetup.ini
[2012.05.18 15:17:39 | 000,093,499 | ---- | C] () -- C:\Users\Mobil-Star\Currency.thmx
[2012.03.28 22:11:08 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2012.03.28 22:11:06 | 000,974,848 | ---- | C] () -- C:\Windows\System32\cis-2.4.dll
[2012.03.28 22:11:06 | 000,081,920 | ---- | C] () -- C:\Windows\System32\issacapi_bs-2.3.dll
[2012.03.28 22:11:06 | 000,065,536 | ---- | C] () -- C:\Windows\System32\issacapi_pe-2.3.dll
[2012.03.28 22:11:06 | 000,057,344 | ---- | C] () -- C:\Windows\System32\issacapi_se-2.3.dll
[2010.04.08 21:33:44 | 000,000,680 | ---- | C] () -- C:\Users\Mobil-Star\AppData\Local\d3d9caps.dat
[2009.10.02 03:20:48 | 000,000,202 | ---- | C] () -- C:\Users\Mobil-Star\CD-Laufwerk - Verknüpfung.lnk
[2009.05.28 17:57:20 | 000,000,306 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2009.05.02 10:02:37 | 000,130,048 | ---- | C] () -- C:\Users\Mobil-Star\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.04.26 11:53:16 | 000,029,239 | ---- | C] () -- C:\Users\Mobil-Star\AppData\Roaming\UserTile.png
 
========== ZeroAccess Check ==========
 
[2006.11.02 14:51:16 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.08 19:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009.04.11 08:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.04.11 08:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
========== LOP Check ==========
 
[2011.08.16 22:09:13 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\Amazon
[2012.06.19 15:46:16 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\DMCache
[2013.05.29 17:41:46 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\Dropbox
[2013.04.04 16:31:18 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\DVDVideoSoft
[2013.03.23 19:09:18 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\FILEminimizerPictures
[2009.04.18 14:21:10 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\FileZilla
[2013.03.04 14:33:19 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\FreemakeVideoDownloader
[2013.04.04 12:27:52 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\MAGIX
[2009.04.18 14:15:35 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\OpenOffice.org
[2009.06.04 17:31:40 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\Panasonic
[2010.06.20 13:08:38 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\PC Suite
[2009.04.26 11:53:16 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\PeerNetworking
[2013.05.29 17:44:18 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\PerformerSoft
[2012.05.09 20:39:03 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\Samsung
[2013.05.27 13:16:41 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\Spyware Terminator
[2009.04.18 13:24:25 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\Toolbars
[2013.03.04 11:19:15 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\TuneUp Software
[2013.05.06 21:10:12 | 000,000,000 | ---D | M] -- C:\Users\Mobil-Star\AppData\Roaming\Verbindungsassistent
 
========== Purity Check ==========
 
 

< End of report >
--- --- ---


oh ups, da hab ich die OTL ausversehen zweimal gesendet.

aharonov 29.05.2013 17:53
Kein Problem. :)
Wie läuft der Rechner im Moment? Noch eine Kontrolle:


Schritt 1
  • Gehe zu Start --> Systemsteuerung und öffne Programme und Funktionen.
  • Suche und deinstalliere dort folgenden Eintrag:
    • PC Performer
  • Schliesse das Fenster wieder und führe einen Neustart durch, wenn das gefordert wurde.



Schritt 2

Fixen mit OTL

  • Starte bitte die OTL.exe.
  • Kopiere nun den Inhalt aus der Codebox in die Textbox.
Code:
:OTL
FF - prefs.js..extensions.enabledItems: bbrs_002@blabbers.com:1.0.5
FF - prefs.js..extensions.enabledItems: {1FD91A9C-410C-4090-BBCC-55D3450EF433}:1.0
FF - prefs.js..extensions.enabledItems: {e44a1809-4d10-4ab8-b343-3326b64c7cdd}:3.18.0.7
FF - prefs.js..extensions.enabledItems: {9bb815eb-3f9f-4e11-9150-cb70e29b40fc}:2.7.1.3
FF - prefs.js..extensions.enabledItems: {af6ac4f2-9825-4fb6-a600-92bc5361f209}:4.6.0.1
FF - prefs.js..extensions.enabledItems: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065}:2.7.1.3

:commands
[emptytemp]
  • Solltest du deinen Benutzernamen z. B. durch "*****" unkenntlich gemacht haben, so füge an entsprechender Stelle deinen richtigen Benutzernamen ein. Andernfalls wird der Fix nicht funktionieren.
  • Schließe bitte nun alle Programme.
  • Klicke nun bitte auf den Fix Button.
  • OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
  • Nach dem Neustart findest Du ein Textdokument auf deinem Desktop.
    ( Auch zu finden unter C:\_OTL\MovedFiles\<Uhrzeit_Datum>.txt)
    Kopiere nun den Inhalt hier in Deinen Thread



Schritt 3
  • Öffne das Programm Malwarebytes Anti-Malware.
    Vista und Win7 User mit Rechtsklick "als Administrator starten".
  • Klicke auf Aktualisierung --> Suche nach Aktualisierung.
  • Wenn das Update beendet wurde, aktiviere im Reiter Suchlauf die Option Quick-Scan durchführen und drücke auf Scannen.
  • Wenn der Scan fertig ist, klicke auf Ergebnisse anzeigen.
  • Versichere dich, dass alle Funde markiert sind und drücke Entferne Auswahl.
  • Poste das Logfile, welches sich in Notepad öffnet, hier in den Thread.
  • Nachträglich kannst du den Bericht unter dem Reiter Logdateien finden.



Schritt 4


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset




Schritt 5

Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.



Schritt 6

Starte bitte die OTL.exe.
  • Setze den Haken bei Scan all Users.
  • Drücke auf den Quick Scan Button.
  • Poste den Inhalt von OTL.txt hier in den Thread.



Bitte poste in deiner nächsten Antwort:
  • Fixlog von OTL
  • Log von MBAM
  • Log von ESET
  • Log von SecurityCheck
  • Log von OTL

Makr 30.05.2013 07:31
Der PC Performer ist ein ganz fieses Ding. Er wird nicht in den Programmen der Systemsteuerung angezeigt. Ich habe Ihn aber im Pfad C:\Program Files\PC Performer gefunden. Löschen lässt er sich von mir nicht. Kann es sein, dass er sich irgendwie tarnt?

Beste Grüße
Maren


Alle Zeitangaben in WEZ +1. Es ist jetzt 09:58 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131