Trojaner-Board - Exploit.Drop.GS

FRST.txt:
FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-09-2013 02

Ran by Jonas (ATTENTION: The logged in user is not administrator) on FAMILIEWEBER on 29-09-2013 17:12:29

Running from C:\Users\Jonas.FamilieWeber\Downloads

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Spotify Ltd) C:\Users\Jonas.FamilieWeber\AppData\Roaming\Spotify\spotify.exe

(Spotify Ltd) C:\Users\Jonas.FamilieWeber\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe

(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe

(Sony Corporation) C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe

(Nikon Corporation) C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Ask) C:\Program Files (x86)\Ask.com\Updater\Updater.exe

(Inbox.com, Inc.) C:\Program Files (x86)\Inbox Toolbar\Inbox.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

() C:\Users\Jonas.FamilieWeber\AppData\Roaming\Spotify\Data\SpotifyHelper.exe

() C:\Users\Jonas.FamilieWeber\AppData\Roaming\Spotify\Data\SpotifyHelper.exe

() C:\Users\Jonas.FamilieWeber\AppData\Roaming\Spotify\Data\SpotifyHelper.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

() C:\Users\Jonas.FamilieWeber\AppData\Roaming\Spotify\Data\SpotifyHelper.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe

() C:\Users\Jonas.FamilieWeber\AppData\Roaming\Spotify\Data\SpotifyHelper.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe

(Microsoft Corporation) C:\Windows\splwow64.exe

(SEIKO EPSON CORPORATION) C:\Windows\system32\spool\DRIVERS\x64\3\E_IAMTEGE.EXE

(SEIKO EPSON CORPORATION) C:\Windows\system32\spool\DRIVERS\x64\3\E_IARNEGE.EXE
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [7938080 2009-07-24] (Realtek Semiconductor)

HKLM\...\Run: [Skytel] - C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2009-07-24] (Realtek Semiconductor Corp.)

HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1815848 2009-08-03] (Synaptics Incorporated)

HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-04] (Intel Corporation)

HKLM-x32\...\Runonce: [Del545114] - cmd.exe /Q /D /c del "C:\Users\JONAS~1.FAM\AppData\Local\Temp\0.del" [x]

HKCU\...\Run: [Spotify] - C:\Users\Jonas.FamilieWeber\AppData\Roaming\Spotify\Spotify.exe [4728320 2013-09-24] (Spotify Ltd)

HKCU\...\Run: [Spotify Web Helper] - C:\Users\Jonas.FamilieWeber\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-09-24] (Spotify Ltd)

HKCU\...\Runonce: [Del545114] - cmd.exe /Q /D /c del "C:\Users\JONAS~1.FAM\AppData\Local\Temp\0.del"

HKLM-x32\...\Run: [ISBMgr.exe] - C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [317288 2009-05-26] (Sony Corporation)

HKLM-x32\...\Run: [NortonOnlineBackupReminder] - C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe [538472 2009-06-17] (Symantec Corporation)

HKLM-x32\...\Run: [MarketingTools] - C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe [26624 2009-09-06] (Sony Corporation)

HKLM-x32\...\Run: [AdobeCS4ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Adobe_ID0ENQBO] - C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4Tray.exe [378224 2008-08-15] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35760 2010-06-20] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [976832 2010-06-09] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [AppleSyncNotifier] - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [47904 2010-09-08] (Apple Inc.)

HKLM-x32\...\Run: [Nikon Transfer Monitor] - C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe [479232 2008-12-16] (Nikon Corporation)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-04] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [] - [x]

HKLM-x32\...\Run: [ApnUpdater] - C:\Program Files (x86)\Ask.com\Updater\Updater.exe [1646216 2013-04-01] (Ask)

HKLM-x32\...\Run: [InboxToolbar] - C:\Program Files (x86)\Inbox Toolbar\Inbox.exe [1712264 2013-04-25] (Inbox.com, Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)

HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)

HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-09-17] (Apple Inc.)

AppInit_DLLs-x32: c:\progra~3\bitguard\261673~1.238\{c16c1~1\bitguard.dll  [2700768 2013-09-10] ()
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = iGoogle

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = iGoogle

SearchScopes: HKCU - {1576BEE8-ACAD-4A8F-A308-6B9323179076} URL = hxxp://services.zinio.com/search?s={selection}&rf=sonyslices

SearchScopes: HKCU - {6FF60DE0-63F5-4193-9FDC-579022A69187} URL = hxxp://www.google.de/search?hl=de&q={searchTerms}&meta

SearchScopes: HKCU - {A9A150DE-5FF1-4169-B569-52B25D774EA4} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-0/4?satitle={searchTerms}

BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: No Name - {DBC80044-A445-435b-BC74-9C25C1C588A9} -  No File

BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.24.6\bh\delta.dll (Delta-search.com)

BHO-x32: Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)

Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

Toolbar: HKLM-x32 - EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)

Toolbar: HKLM-x32 - Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)

Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

Toolbar: HKLM-x32 - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.24.6\deltaTlbr.dll (Delta-search.com)

Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

Handler: inbox - {37540F19-DD4C-478B-B2DF-C19281BCAF27} -  No File

Handler-x32: inbox - {37540F19-DD4C-478B-B2DF-C19281BCAF27} - C:\Program Files (x86)\Inbox Toolbar\Inbox.dll (Inbox.com, Inc.)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\Jonas.FamilieWeber\AppData\Roaming\Mozilla\Firefox\Profiles\gr5xx3xr.default

FF DefaultSearchEngine: Ask.com

FF SearchEngineOrder.1: Ask.com

FF SelectedSearchEngine: Ask.com

FF Homepage: hxxp://search.avira.com/?l=dis&o=APN10261&gct=hp&dc=EU&locale=de_DE

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
 

Chrome: 

=======

CHR HomePage: hxxp://www.google.com/ig/redirectdomain?brand=SVEA&bmod=SVEA

CHR RestoreOnStartup: "hxxp://www.facebook.com/", "hxxp://youtube.de/", "hxxp://gymnasium-dresden-plauen.de/", "hxxp://skydrive.com/"

CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}

CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Java Deployment Toolkit 6.0.310.5) - C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll No File

CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll No File

CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll No File

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File

CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll No File

CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()

CHR Extension: (Google Docs) - C:\Users\JONAS~1.FAM\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0

CHR Extension: (Google Drive) - C:\Users\JONAS~1.FAM\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0

CHR Extension: (YouTube) - C:\Users\JONAS~1.FAM\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0

CHR Extension: (Google Search) - C:\Users\JONAS~1.FAM\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0

CHR Extension: (Chrome In-App Payments service) - C:\Users\JONAS~1.FAM\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0

CHR Extension: (Gmail) - C:\Users\JONAS~1.FAM\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

CHR HKLM-x32\...\Chrome\Extension: [aaaaabfjnbeinlpljodiajipidiompfl] - C:\Users\Familie Weber\AppData\Local\APN\GoogleCRXs\aaaaabfjnbeinlpljodiajipidiompfl_7.15.18.0.crx

CHR HKLM-x32\...\Chrome\Extension: [eooncjejnppfjjklapaamhcdmjbilmde] - C:\Users\Familie Weber\AppData\Roaming\BabSolution\CR\Delta.crx

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)

S3 Adobe Version Cue CS4; C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [284016 2008-08-15] (Adobe Systems Incorporated)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-04] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-04] (Avira Operations GmbH & Co. KG)

R2 BitGuard; C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe [2845152 2013-09-10] ()

R2 lmhosts; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

R2 NlaSvc; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R2 nsi; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

S3 Roxio UPnP Renderer 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [313840 2009-06-26] (Sonic Solutions)

S2 Roxio Upnp Server 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [362992 2009-06-26] (Sonic Solutions)

S3 SOHDBSvr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [70952 2009-07-27] (Sony Corporation)

S3 SOHPlMgr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [91432 2009-07-27] (Sony Corporation)

R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2100024 2013-08-30] (TuneUp Software)

R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)

S3 VAIO Entertainment TV Device Arbitration Service; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe [69632 2009-07-23] (Sony Corporation)

R2 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [642920 2009-07-22] (Sony Corporation)

R3 Vcsw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe [313264 2009-07-23] (Sony Corporation)

R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1286784 2012-10-26] (Sony Corporation)

R2 VzCdbSvc; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [206336 2009-07-23] (Sony Corporation)

R2 yksvc; C:\Windows\System32\yk62x64.dll [382976 2009-07-31] (Marvell)
 

==================== Drivers (Whitelisted) ====================
 

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-04] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-09-04] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-04-03] (Avira Operations GmbH & Co. KG)

S3 JMCR_CFS; C:\Windows\System32\DRIVERS\jmcr_cfs.sys [73128 2009-07-31] (JMicron Technology Corporation)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R2 risdptsk; C:\Windows\system32\DRIVERS\risdsn64.sys [76288 2009-07-31] (REDC)

R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)

S3 ListOpenedFileDrv; \??\C:\Users\FAMILI~1\AppData\Local\Temp\ListOpenedFileDrv_64.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-09-29 17:12 - 2013-09-29 17:12 - 00000000 ____D C:\FRST

2013-09-29 17:10 - 2013-09-29 17:10 - 01953880 _____ (Farbar) C:\Users\Jonas.FamilieWeber\Downloads\FRST64.exe

2013-09-29 17:10 - 2013-09-29 17:10 - 01086873 _____ (Farbar) C:\Users\Jonas.FamilieWeber\Downloads\FRST.exe

2013-09-29 17:10 - 2013-09-29 17:10 - 01086873 _____ (Farbar) C:\Users\Jonas.FamilieWeber\Downloads\FRST (1).exe

2013-09-29 17:07 - 2013-09-29 17:07 - 00001106 _____ C:\Users\Public\Desktop\Open It!.lnk

2013-09-29 17:07 - 2013-09-29 17:07 - 00000304 _____ C:\Windows\Tasks\DigitalSite.job

2013-09-29 17:07 - 2013-09-29 17:07 - 00000000 ____D C:\Program Files (x86)\OpenIt

2013-09-29 17:06 - 2013-09-29 17:06 - 00749248 _____ C:\Users\Jonas.FamilieWeber\Downloads\ZipExtractorSetup.exe

2013-09-29 17:06 - 2013-09-29 17:06 - 00749248 _____ C:\Users\Jonas.FamilieWeber\Downloads\ZipExtractorSetup (1).exe

2013-09-29 17:06 - 2013-09-29 17:06 - 00000000 ____D C:\Users\Jonas.FamilieWeber\AppData\Roaming\DigitalSite

2013-09-29 17:05 - 2013-09-29 17:05 - 00000000 ____D C:\Users\Jonas.FamilieWeber\AppData\Roaming\TuneUp Software

2013-09-28 19:36 - 2013-09-28 19:36 - 00002205 _____ C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk

2013-09-28 19:36 - 2013-09-28 19:36 - 00002185 _____ C:\Users\Public\Desktop\TuneUp Utilities 2014.lnk

2013-09-28 19:36 - 2013-09-28 19:36 - 00000000 ____D C:\Users\Familie Weber\AppData\Roaming\TuneUp Software

2013-09-28 19:36 - 2013-09-28 19:36 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014

2013-09-28 19:36 - 2013-08-30 09:51 - 00040760 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe

2013-09-28 19:36 - 2013-08-30 09:51 - 00029496 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll

2013-09-28 19:36 - 2013-08-30 09:51 - 00025400 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll

2013-09-28 19:35 - 2013-09-28 19:36 - 00000000 ____D C:\ProgramData\TuneUp Software

2013-09-28 19:35 - 2013-09-28 19:35 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}

2013-09-28 19:35 - 2013-09-28 19:35 - 00000000 ____D C:\Users\Jonas.FamilieWeber\Documents\DVDVideoSoft

2013-09-28 19:35 - 2013-09-28 19:35 - 00000000 ____D C:\Users\Jonas.FamilieWeber\AppData\Roaming\DVDVideoSoft

2013-09-28 19:35 - 2013-09-28 19:35 - 00000000 ____D C:\Users\Familie Weber\AppData\Roaming\Delta

2013-09-28 19:35 - 2013-09-28 19:35 - 00000000 ____D C:\Users\Familie Weber\AppData\Roaming\BabSolution

2013-09-28 19:35 - 2013-09-28 19:35 - 00000000 ____D C:\ProgramData\DSearchLink

2013-09-28 19:35 - 2013-09-28 19:35 - 00000000 ____D C:\ProgramData\BitGuard

2013-09-28 19:35 - 2013-09-28 19:35 - 00000000 ____D C:\Program Files (x86)\Delta

2013-09-28 19:34 - 2013-09-28 19:34 - 00001339 _____ C:\Users\Public\Desktop\Free DVD Video Converter.lnk

2013-09-28 19:34 - 2013-09-28 19:34 - 00001235 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk

2013-09-28 19:34 - 2013-09-28 19:34 - 00000000 ____D C:\Users\Familie Weber\AppData\Roaming\OpenCandy

2013-09-28 19:34 - 2013-09-28 19:34 - 00000000 ____D C:\Users\Familie Weber\AppData\Roaming\DVDVideoSoft

2013-09-28 19:34 - 2013-09-28 19:34 - 00000000 ____D C:\Users\Familie Weber\AppData\Roaming\Babylon

2013-09-28 19:34 - 2013-09-28 19:34 - 00000000 ____D C:\ProgramData\Babylon

2013-09-28 19:34 - 2013-09-28 19:34 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft

2013-09-28 19:31 - 2013-09-28 19:31 - 31107528 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Jonas.FamilieWeber\Downloads\FreeDVDVideoConverter2.0.14.827.exe

2013-09-26 17:44 - 2013-09-26 17:44 - 97961477 _____ C:\Windows\SysWOW64\ݧ�璬,

2013-09-21 18:48 - 2013-09-21 18:48 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk

2013-09-21 18:47 - 2013-09-21 18:48 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-09-21 18:47 - 2013-09-21 18:48 - 00000000 ____D C:\Program Files\iTunes

2013-09-21 18:47 - 2013-09-21 18:48 - 00000000 ____D C:\Program Files (x86)\iTunes

2013-09-21 18:47 - 2013-09-21 18:47 - 00000000 ____D C:\Program Files\iPod

2013-09-21 18:38 - 2013-09-21 18:38 - 00001845 _____ C:\Users\Public\Desktop\QuickTime Player.lnk

2013-09-21 18:38 - 2013-09-21 18:38 - 00000000 ____D C:\Program Files (x86)\QuickTime

2013-09-21 14:31 - 2013-09-21 14:31 - 05826000 _____ (TeamViewer GmbH) C:\Users\Jonas.FamilieWeber\Downloads\TeamViewer_Setup_de-ckc (1).exe

2013-09-21 14:30 - 2013-09-21 14:30 - 05826000 _____ (TeamViewer GmbH) C:\Users\Jonas.FamilieWeber\Downloads\TeamViewer_Setup_de-ckc.exe

2013-09-20 17:23 - 2013-09-20 17:23 - 98481651 _____ C:\Windows\SysWOW64\ꀤຸ璬®

2013-09-18 18:31 - 2013-09-28 21:43 - 00000000 ____D C:\Users\Familie Weber\AppData\Roaming\Spotify

2013-09-15 19:38 - 2013-09-29 17:10 - 00000000 ____D C:\Users\Jonas.FamilieWeber\AppData\Roaming\Spotify

2013-09-15 19:38 - 2013-09-23 21:55 - 00000000 ____D C:\Users\Jonas.FamilieWeber\AppData\Local\Spotify

2013-09-15 19:38 - 2013-09-15 19:38 - 00092776 _____ (Spotify Ltd) C:\Users\Jonas.FamilieWeber\Downloads\SpotifySetup.exe

2013-09-15 19:38 - 2013-09-15 19:38 - 00001874 _____ C:\Users\Jonas.FamilieWeber\Desktop\Spotify.lnk

2013-09-15 19:38 - 2013-09-15 19:38 - 00001860 _____ C:\Users\Jonas.FamilieWeber\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk

2013-09-12 18:44 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-09-12 18:44 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-09-12 18:44 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-09-12 18:44 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-09-12 18:44 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-09-12 18:44 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-09-12 18:44 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-09-12 18:44 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-09-12 18:44 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-09-12 18:44 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-09-12 18:44 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-09-12 18:44 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-09-12 18:44 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-09-12 18:44 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-09-12 18:44 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-09-12 18:44 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-09-12 18:44 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-09-12 18:44 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-09-12 18:44 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-09-12 18:44 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-09-12 18:44 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-09-12 18:44 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-09-12 18:44 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-09-12 18:44 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-09-12 18:44 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-09-12 18:44 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-09-12 18:44 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-09-12 18:44 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-09-12 18:43 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-09-12 18:43 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-09-12 18:43 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-09-12 14:50 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys

2013-09-12 14:49 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-09-12 14:49 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-09-12 14:49 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2013-09-12 14:49 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2013-09-12 14:49 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2013-09-12 14:49 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2013-09-12 14:49 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2013-09-12 14:49 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2013-09-12 14:49 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2013-09-12 14:49 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2013-09-12 14:49 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2013-09-12 14:49 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2013-09-12 14:49 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2013-09-12 14:49 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2013-09-12 14:49 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2013-09-12 14:49 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2013-09-12 14:49 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2013-09-12 14:49 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2013-09-12 14:49 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2013-09-12 14:49 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2013-09-12 14:49 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2013-09-12 14:49 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2013-09-12 14:49 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll

2013-09-12 14:49 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2013-09-12 14:49 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
 

==================== One Month Modified Files and Folders =======
 

2013-09-29 17:12 - 2013-09-29 17:12 - 00000000 ____D C:\FRST

2013-09-29 17:11 - 2009-12-14 11:00 - 01847545 _____ C:\Windows\WindowsUpdate.log

2013-09-29 17:10 - 2013-09-29 17:10 - 01953880 _____ (Farbar) C:\Users\Jonas.FamilieWeber\Downloads\FRST64.exe

2013-09-29 17:10 - 2013-09-29 17:10 - 01086873 _____ (Farbar) C:\Users\Jonas.FamilieWeber\Downloads\FRST.exe

2013-09-29 17:10 - 2013-09-29 17:10 - 01086873 _____ (Farbar) C:\Users\Jonas.FamilieWeber\Downloads\FRST (1).exe

2013-09-29 17:10 - 2013-09-15 19:38 - 00000000 ____D C:\Users\Jonas.FamilieWeber\AppData\Roaming\Spotify

2013-09-29 17:07 - 2013-09-29 17:07 - 00001106 _____ C:\Users\Public\Desktop\Open It!.lnk

2013-09-29 17:07 - 2013-09-29 17:07 - 00000304 _____ C:\Windows\Tasks\DigitalSite.job

2013-09-29 17:07 - 2013-09-29 17:07 - 00000000 ____D C:\Program Files (x86)\OpenIt

2013-09-29 17:06 - 2013-09-29 17:06 - 00749248 _____ C:\Users\Jonas.FamilieWeber\Downloads\ZipExtractorSetup.exe

2013-09-29 17:06 - 2013-09-29 17:06 - 00749248 _____ C:\Users\Jonas.FamilieWeber\Downloads\ZipExtractorSetup (1).exe

2013-09-29 17:06 - 2013-09-29 17:06 - 00000000 ____D C:\Users\Jonas.FamilieWeber\AppData\Roaming\DigitalSite

2013-09-29 17:05 - 2013-09-29 17:05 - 00000000 ____D C:\Users\Jonas.FamilieWeber\AppData\Roaming\TuneUp Software

2013-09-29 17:00 - 2013-02-20 18:21 - 00035640 _____ C:\Windows\setupact.log

2013-09-29 17:00 - 2009-09-06 11:06 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-09-29 16:59 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-09-28 21:57 - 2011-06-06 19:09 - 00000000 ____D C:\ProgramData\tmp

2013-09-28 21:43 - 2013-09-18 18:31 - 00000000 ____D C:\Users\Familie Weber\AppData\Roaming\Spotify

2013-09-28 21:37 - 2009-12-26 19:53 - 00000000 ____D C:\Users\Familie Weber\AppData\Roaming\Skype

2013-09-28 21:28 - 2009-09-06 11:06 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-09-28 20:50 - 2009-07-14 06:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-09-28 20:50 - 2009-07-14 06:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-09-28 20:36 - 2013-08-26 18:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-09-28 20:35 - 2013-03-14 18:44 - 00012504 _____ C:\Windows\PFRO.log

2013-09-28 19:36 - 2013-09-28 19:36 - 00002205 _____ C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk

2013-09-28 19:36 - 2013-09-28 19:36 - 00002185 _____ C:\Users\Public\Desktop\TuneUp Utilities 2014.lnk

2013-09-28 19:36 - 2013-09-28 19:36 - 00000000 ____D C:\Users\Familie Weber\AppData\Roaming\TuneUp Software

2013-09-28 19:36 - 2013-09-28 19:36 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014

2013-09-28 19:36 - 2013-09-28 19:35 - 00000000 ____D C:\ProgramData\TuneUp Software

2013-09-28 19:35 - 2013-09-28 19:35 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}

2013-09-28 19:35 - 2013-09-28 19:35 - 00000000 ____D C:\Users\Jonas.FamilieWeber\Documents\DVDVideoSoft

2013-09-28 19:35 - 2013-09-28 19:35 - 00000000 ____D C:\Users\Jonas.FamilieWeber\AppData\Roaming\DVDVideoSoft

2013-09-28 19:35 - 2013-09-28 19:35 - 00000000 ____D C:\Users\Familie Weber\AppData\Roaming\Delta

2013-09-28 19:35 - 2013-09-28 19:35 - 00000000 ____D C:\Users\Familie Weber\AppData\Roaming\BabSolution

2013-09-28 19:35 - 2013-09-28 19:35 - 00000000 ____D C:\ProgramData\DSearchLink

2013-09-28 19:35 - 2013-09-28 19:35 - 00000000 ____D C:\ProgramData\BitGuard

2013-09-28 19:35 - 2013-09-28 19:35 - 00000000 ____D C:\Program Files (x86)\Delta

2013-09-28 19:34 - 2013-09-28 19:34 - 00001339 _____ C:\Users\Public\Desktop\Free DVD Video Converter.lnk

2013-09-28 19:34 - 2013-09-28 19:34 - 00001235 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk

2013-09-28 19:34 - 2013-09-28 19:34 - 00000000 ____D C:\Users\Familie Weber\AppData\Roaming\OpenCandy

2013-09-28 19:34 - 2013-09-28 19:34 - 00000000 ____D C:\Users\Familie Weber\AppData\Roaming\DVDVideoSoft

2013-09-28 19:34 - 2013-09-28 19:34 - 00000000 ____D C:\Users\Familie Weber\AppData\Roaming\Babylon

2013-09-28 19:34 - 2013-09-28 19:34 - 00000000 ____D C:\ProgramData\Babylon

2013-09-28 19:34 - 2013-09-28 19:34 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft

2013-09-28 19:31 - 2013-09-28 19:31 - 31107528 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Jonas.FamilieWeber\Downloads\FreeDVDVideoConverter2.0.14.827.exe

2013-09-28 19:28 - 2013-01-27 16:21 - 00000000 ____D C:\Users\Jonas.FamilieWeber\Documents\Schülerrat

2013-09-27 19:10 - 2009-07-14 19:58 - 00699118 _____ C:\Windows\system32\perfh007.dat

2013-09-27 19:10 - 2009-07-14 19:58 - 00149226 _____ C:\Windows\system32\perfc007.dat

2013-09-27 19:10 - 2009-07-14 07:13 - 01618376 _____ C:\Windows\system32\PerfStringBackup.INI

2013-09-26 17:44 - 2013-09-26 17:44 - 97961477 _____ C:\Windows\SysWOW64\ݧ�璬,

2013-09-25 18:05 - 2013-03-07 18:20 - 00001105 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-09-25 18:05 - 2013-03-07 18:19 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-09-23 21:55 - 2013-09-15 19:38 - 00000000 ____D C:\Users\Jonas.FamilieWeber\AppData\Local\Spotify

2013-09-21 18:48 - 2013-09-21 18:48 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk

2013-09-21 18:48 - 2013-09-21 18:47 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-09-21 18:48 - 2013-09-21 18:47 - 00000000 ____D C:\Program Files\iTunes

2013-09-21 18:48 - 2013-09-21 18:47 - 00000000 ____D C:\Program Files (x86)\iTunes

2013-09-21 18:47 - 2013-09-21 18:47 - 00000000 ____D C:\Program Files\iPod

2013-09-21 18:38 - 2013-09-21 18:38 - 00001845 _____ C:\Users\Public\Desktop\QuickTime Player.lnk

2013-09-21 18:38 - 2013-09-21 18:38 - 00000000 ____D C:\Program Files (x86)\QuickTime

2013-09-21 18:35 - 2010-09-29 13:59 - 00002491 _____ C:\Users\Public\Desktop\Safari.lnk

2013-09-21 18:35 - 2010-09-29 13:58 - 00000000 ____D C:\Program Files (x86)\Safari

2013-09-21 14:31 - 2013-09-21 14:31 - 05826000 _____ (TeamViewer GmbH) C:\Users\Jonas.FamilieWeber\Downloads\TeamViewer_Setup_de-ckc (1).exe

2013-09-21 14:30 - 2013-09-21 14:30 - 05826000 _____ (TeamViewer GmbH) C:\Users\Jonas.FamilieWeber\Downloads\TeamViewer_Setup_de-ckc.exe

2013-09-20 17:23 - 2013-09-20 17:23 - 98481651 _____ C:\Windows\SysWOW64\ꀤຸ璬®

2013-09-16 18:08 - 2009-12-14 11:00 - 00000000 ____D C:\Users\Familie Weber

2013-09-15 19:38 - 2013-09-15 19:38 - 00092776 _____ (Spotify Ltd) C:\Users\Jonas.FamilieWeber\Downloads\SpotifySetup.exe

2013-09-15 19:38 - 2013-09-15 19:38 - 00001874 _____ C:\Users\Jonas.FamilieWeber\Desktop\Spotify.lnk

2013-09-15 19:38 - 2013-09-15 19:38 - 00001860 _____ C:\Users\Jonas.FamilieWeber\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk

2013-09-15 13:35 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-09-14 20:00 - 2009-12-22 20:02 - 00014904 _____ C:\Users\Familie Weber\AppData\Roaming\wklnhst.dat

2013-09-12 20:29 - 2013-01-27 16:07 - 00000000 ____D C:\Users\Jonas.FamilieWeber\AppData\Local\Microsoft Help

2013-09-12 20:25 - 2013-01-27 16:08 - 00000000 ___RD C:\Users\Jonas.FamilieWeber\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-09-12 20:25 - 2013-01-27 16:08 - 00000000 ___RD C:\Users\Jonas.FamilieWeber\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2013-09-12 18:54 - 2009-12-14 11:01 - 00000930 _____ C:\Users\Familie Weber\Downloads.lnk

2013-09-12 18:52 - 2009-07-14 06:45 - 03095120 _____ C:\Windows\system32\FNTCACHE.DAT

2013-09-12 18:43 - 2013-08-15 13:52 - 00000000 ____D C:\Windows\system32\MRT

2013-09-12 18:39 - 2010-03-23 12:03 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-09-12 18:39 - 2009-09-06 11:11 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-09-04 16:03 - 2013-05-07 17:47 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2013-09-04 16:03 - 2013-04-03 11:32 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-09-04 16:03 - 2013-04-03 11:32 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-08-30 09:51 - 2013-09-28 19:36 - 00040760 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe

2013-08-30 09:51 - 2013-09-28 19:36 - 00029496 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll

2013-08-30 09:51 - 2013-09-28 19:36 - 00025400 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll
 

Files to move or delete:

====================

C:\ProgramData\PKP_DLdu.DAT

C:\ProgramData\PKP_DLdw.DAT
 
 

Some content of TEMP:

====================

C:\Users\Jonas.FamilieWeber\AppData\Local\Temp\SkypeSetup.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 

==================== End Of Log ============================

--- --- ---

Addition.txt:FRST Additions Logfile:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-09-2013 02

Ran by Jonas at 2013-09-29 17:14:43

Running from C:\Users\Jonas.FamilieWeber\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Avira Desktop (Disabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

AS: Avira Desktop (Disabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

ABBYY FineReader 6.0 Sprint (x32 Version: 6.00.1395.4512)

Acrobat.com (x32 Version: 0.0.0)

Acrobat.com (x32 Version: 1.2.443)

Adobe After Effects CS4 (x32 Version: 9)

Adobe After Effects CS4 Presets (x32 Version: 9)

Adobe After Effects CS4 Third Party Content (x32 Version: 9)

Adobe AIR (x32 Version: 1.1.0.5790)

Adobe Anchor Service CS4 (x32 Version: 2.0)

Adobe Anchor Service x64 CS4 (Version: 2.0)

Adobe Asset Services CS4 (x32 Version: 4)

Adobe Bridge CS4 (x32 Version: 3)

Adobe CMaps CS4 (x32 Version: 2.0)

Adobe CMaps x64 CS4 (Version: 2.0)

Adobe Color - Photoshop Specific CS4 (x32 Version: 2.0)

Adobe Color EU Recommended Settings CS4 (x32 Version: 2.0)

Adobe Color JA Extra Settings CS4 (x32 Version: 2.0)

Adobe Color NA Extra Settings CS4 (x32 Version: 2.0)

Adobe Color Video Profiles AE CS4 (x32 Version: 2.0)

Adobe Color Video Profiles CS CS4 (x32 Version: 2.0)

Adobe Creative Suite 4 Master Collection (x32 Version: 4.0)

Adobe CS4 American English Speech Analysis Models (x32 Version: 1)

Adobe CSI CS4 (x32 Version: 1)

Adobe CSI CS4 x64 (Version: 1)

Adobe Default Language CS4 (x32 Version: 2.0)

Adobe Device Central CS4 (x32 Version: 2)

Adobe Dreamweaver CS4 (x32 Version: 10.0)

Adobe Drive CS4 (x32 Version: 1)

Adobe Drive CS4 x64 (Version: 1)

Adobe Dynamiclink Support (x32 Version: 1)

Adobe Encore CS4 Codecs (x32 Version: 4)

Adobe ExtendScript Toolkit CS4 (x32 Version: 3.0.0)

Adobe Extension Manager CS4 (x32 Version: 2.0)

Adobe Fireworks CS4 (x32 Version: 10.0)

Adobe Flash CS4 (x32 Version: 10.0)

Adobe Flash CS4 Extension - Flash Lite STI others (x32 Version: 3.0)

Adobe Flash CS4 STI-other (x32 Version: 10.0)

Adobe Flash Player 10 ActiveX (x32 Version: 10.0.12.36)

Adobe Flash Player 10 ActiveX (x32 Version: 10.0.2.54)

Adobe Flash Player 11 Plugin (x32 Version: 11.1.102.55)

Adobe Fonts All (x32 Version: 2.0)

Adobe Fonts All x64 (Version: 2.0)

Adobe Illustrator CS4 (x32 Version: 14.0)

Adobe InDesign CS4 (x32 Version: 6.0)

Adobe InDesign CS4 Application Feature Set Files (Roman) (x32 Version: 6.0)

Adobe InDesign CS4 Common Base Files (x32 Version: 6.0)

Adobe InDesign CS4 Icon Handler (x32 Version: 6.0)

Adobe InDesign CS4 Icon Handler x64 (Version: 6.0)

Adobe Linguistics CS4 (x32 Version: 4.0.0)

Adobe Linguistics CS4 x64 (Version: 4.0.0)

Adobe Media Encoder CS4 Additional Exporter (x32 Version: 1.0)

Adobe Media Encoder CS4 Exporter (x32 Version: 1.0)

Adobe Media Encoder CS4 Importer (x32 Version: 1.0)

Adobe Media Player (x32 Version: 0.0.0)

Adobe Media Player (x32 Version: 1.1)

Adobe MotionPicture Color Files CS4 (x32 Version: 2.0)

Adobe OnLocation CS4 (x32 Version: 4)

Adobe Output Module (x32 Version: 2.0)

Adobe PDF Library Files CS4 (x32 Version: 9.0)

Adobe PDF Library Files x64 CS4 (Version: 9.0)

Adobe Photoshop CS4 (64 Bit) (Version: 11.0)

Adobe Photoshop CS4 (x32 Version: 11.0)

Adobe Photoshop CS4 Support (x32 Version: 11.0)

Adobe Photoshop Elements 7.0 (x32 Version: 7.0.1)

Adobe Premiere Elements 7.0 (x32 Version: 7.0.1)

Adobe Premiere Pro CS4 Third Party Content (x32 Version: 4)

Adobe Reader 9.3.4 - Deutsch (x32 Version: 9.3.4)

Adobe Search for Help (x32 Version: 1.0)

Adobe Service Manager Extension (x32 Version: 1.0)

Adobe Setup (x32 Version: 2.0)

Adobe SGM CS4 (x32 Version: 3.0)

Adobe SING CS4 (x32 Version: 2.0)

Adobe Soundbooth CS4 (x32 Version: 2)

Adobe Soundbooth CS4 Codecs (x32 Version: 2)

Adobe Type Support CS4 (x32 Version: 9.0)

Adobe Type Support x64 CS4 (Version: 9.0)

Adobe Update Manager CS4 (x32 Version: 6.0.0)

Adobe Version Cue CS4 Server (x32 Version: 4.0)

Adobe WinSoft Linguistics Plugin (x32 Version: 1.1)

Adobe WinSoft Linguistics Plugin x64 (Version: 1.1)

Adobe XMP Panels CS4 (x32 Version: 2.0)

AdobeColorCommonSetCMYK (x32 Version: 2.0)

AdobeColorCommonSetRGB (x32 Version: 2.0)

Apple Application Support (x32 Version: 2.3.6)

Apple Mobile Device Support (Version: 7.0.0.117)

Apple Software Update (x32 Version: 2.1.3.127)

ArcSoft Magic-i Visual Effects 2 (x32 Version: 2.0.1.85)

ArcSoft WebCam Companion 3 (x32 Version: 3.0.21.193)

Ask Toolbar (x32 Version: 1.15.24.0)

Avid License Control (x32 Version: 3.0.0)

Avira Free Antivirus (x32 Version: 13.0.0.4052)

Avira SearchFree Toolbar plus Web Protection Updater (HKCU Version: 1.2.5.42066)

BitGuard (x32)

Bonjour (Version: 3.0.0.10)

Camera RAW Plug-In for EPSON Creativity Suite (x32 Version: 2.3.0.0)

CCleaner (Version: 3.27)

Click to Disc (x32 Version: 1.2.70.06160)

Click to Disc Editor (x32 Version: 2.0.02)

Compatibility Pack für 2007 Office System (x32 Version: 12.0.6612.1000)

Connect (x32 Version: 1.0.0.1)

Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)

Delta Chrome Toolbar (x32)

Delta toolbar   (x32 Version: 1.8.24.6)

dm-Fotowelt (x32 Version: 5.0.4)

Dolby Control Center (Version: 1.2.0702)

Einstellungen für VAIO-Inhaltsüberwachung (x32 Version: 2.4.0.06120)

ElsterFormular (x32 Version: 14.1.20130301)

EPSON Attach To Email (x32 Version: 1.01.0000)

EPSON Easy Photo Print (x32 Version: 1.5.1.0)

EPSON File Manager (x32 Version: 1.3.1.0)

EPSON Scan (x32)

EPSON Scan Assistant (x32 Version: 1.10.00)

EPSON Stylus SX200_SX400_TX200_TX400 Handbuch (x32)

EPSON Stylus SX400 Series Printer Uninstall

EPSON Web-To-Page (x32)

File Uploader (x32 Version: 1.2.0)

Free DVD Video Converter version 2.0.14.827 (x32 Version: 2.0.14.827)

Google Chrome (x32 Version: 29.0.1547.76)

Google Toolbar for Internet Explorer (x32 Version: 1.0.0)

Google Toolbar for Internet Explorer (x32 Version: 7.5.4413.1752)

Google Update Helper (x32 Version: 1.3.21.153)

GPL Ghostscript (x32 Version: 9.07)

Ideal DVD to AVI Converter V2.0.7 (x32)

Ideal DVD to iPad Converter V2.0 (x32)

Inbox Toolbar (x32 Version: 2.0.0.62)

Intel PROSet Wireless

Intel(R) PROSet/Wireless WiFi-Software (Version: 13.00.0000)

Intel® Matrix Storage Manager

iTunes (Version: 11.1.0.126)

Java 7 Update 25 (x32 Version: 7.0.250)

Java Auto Updater (x32 Version: 2.1.9.5)

JMicron JMB368 CF Host Controller Driver (x32 Version: 1.01.07.00)

kuler (x32 Version: 2.0)

Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)

Microsoft .NET Framework 4.5 (Version: 4.5.50709)

Microsoft Age of Empires (x32)

Microsoft Age of Empires Expansion (x32)

Microsoft Age of Empires II (x32)

Microsoft Age of Empires II: The Conquerors Expansion (x32)

Microsoft Office 2010 Service Pack 1 (SP1) (x32)

Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Home and Student 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)

Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office PowerPoint Viewer 2007 (German) (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)

Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Single Image 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Suite Activation Assistant (x32 Version: 2.9)

Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft SQL Server Compact 3.5 SP1 English (x32 Version: 3.5.5692.0)

Microsoft SQL Server Compact 3.5 SP1 x64 English (Version: 3.5.5692.0)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)

Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

Microsoft Works (x32 Version: 9.7.0621)

MobileMe Control Panel (Version: 3.1.2.0)

Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)

Mozilla Maintenance Service (x32 Version: 23.0.1)

MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)

MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)

Music Transfer (x32 Version: 1.3.01.13160)

MusicStation (x32 Version: 1.2.2.180)

Neuratron PhotoScore Ultimate Demo (D) (x32 Version: 6.0.0)

Nikon Message Center (x32 Version: 0.92.000)

Nikon Transfer (x32 Version: 1.4.0)

Norton Online Backup (x32 Version: 1.2.20.0)

NVIDIA Drivers (Version: 1.5)

OMSI - Der Omnibussimulator (x32 Version: 1.00)

Open It! (x32 Version: 1.1.1)

PC-Sprachtraining (x32)

PDF Settings CS4 (x32 Version: 9.0)

Photoshop Camera Raw (x32 Version: 5.0)

Photoshop Camera Raw_x64 (Version: 5.0)

Picture Control Utility (x32 Version: 1.1.5)

Pixel Bender Toolkit (x32 Version: 1.0)

Primo (x32 Version: 1.00.0000)

PVSonyDll (Version: 1.00.0001)

QuickTime (x32 Version: 7.74.80.86)

Realtek High Definition Audio Driver (x32 Version: 6.0.1.5886)

Roxio Central Audio (x32 Version: 3.8.0)

Roxio Central Copy (x32 Version: 3.8.0)

Roxio Central Core (x32 Version: 3.8.0)

Roxio Central Data (x32 Version: 3.8.0)

Roxio Central Tools (x32 Version: 3.8.0)

Roxio Easy Media Creator 10 LJ (x32 Version: 10.3)

Roxio Easy Media Creator Home (x32 Version: 10.3.121)

Runtime (x32 Version: 1.00.0000)

Safari (x32 Version: 5.34.57.2)

Setting Utility Series (x32 Version: 5.0.0.07300)

Sibelius 7 First 7.1.3.78 (Version: 7.1.3.78)

Sibelius 7 OpenType Fonts (x32 Version: 7.1.3)

Skype™ 6.6 (x32 Version: 6.6.106)

Sony Home Network Library (x32 Version: 2.0.0.07280)

Sony Picture Utility (x32 Version: 4.2.12.16210)

Spotify (HKCU Version: 0.9.4.169.gc0399df6)

Suite Shared Configuration CS4 (x32 Version: 1.0)

Synaptics Pointing Device Driver (Version: 13.2.6.1)

TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.89)

TuneUp Utilities 2014 (x32 Version: 14.0.1000.89)

Unterstützung für VAIO-Präsentation (x32 Version: 2.0.0.05270)

Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1)

Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1)

Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1)

Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32)

Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2553065) (x32)

Update for Microsoft Office 2010 (KB2553157) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2566458) (x32)

Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2589370) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2760758) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32)

Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)

Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32)

Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)

Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)

Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32)

Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)

Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32)

Update for Zip Extractor (HKCU)

VAIO AW screensaver (x32 Version: 1.0.0.0)

VAIO Content Metadata Intelligent Analyzing Manager (x32 Version: 3.5.0.06261)

VAIO Content Metadata Intelligent Network Service Manager (x32 Version: 3.5.0.06260)

VAIO Content Metadata Manager Settings (x32 Version: 3.5.0.06260)

VAIO Content Metadata XML Interface Library (x32 Version: 3.5.0.06180)

VAIO Content Monitoring Settings (x32 Version: 2.4.0.06120)

VAIO Control Center (x32 Version: 4.0.0.06120)

VAIO Data Restore Tool (x32 Version: 1.1.01.06290)

VAIO DVD Menu Data Basic (x32 Version: 1.0.00.08130)

VAIO Energie Verwaltung (x32 Version: 4.0.0.07160)

VAIO Entertainment Platform (x32 Version: 3.5.0.07230)

VAIO Event Service (x32 Version: 5.0.0.07010)

VAIO Gate (x32 Version: 1.0.1.10190)

VAIO Marketing Tools (x32)

VAIO Media plus (x32 Version: 2.0.0.07280)

VAIO Media plus Opening Movie (x32 Version: 1.2.0.09100)

VAIO Movie Story (x32 Version: 1.5.00.06191)

VAIO Movie Story Template Data (x32 Version: 1.5.00.06010)

VAIO Original Function Settings (x32 Version: 2.0.0.07010)

VAIO Original Funktion Einstellungen (x32 Version: 2.0.0.07010)

VAIO Premium Partners 1.00 (x32)

VAIO Smart Network (x32 Version: 3.0.2.12280)

VAIO Update (x32 Version: 6.1.1.10250)

VAIO Wallpaper Contents (x32 Version: 2.0.0.06010)

VAIO-Support für Übertragungen (x32 Version: 1.1.2.06030)

VD64Inst (Version: 1.00.0000)

ViewNX (x32 Version: 1.3.0)

VU5x64 (Version: 1.1.0)

VU5x86 (x32 Version: 1.0.0)

VU5x86 (x32 Version: 1.1.0)

WIDCOMM Bluetooth Software (Version: 6.2.0.9600)

Windows Live-Uploadtool (x32 Version: 14.0.8014.1029)

Windows Phone (x32 Version: 0.9.3606.0)
 

==================== Restore Points  =========================
 

Could not list Restore Points.
 
 

==================== Hosts content: ==========================
 

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: C:\Windows\Tasks\DigitalSite.job => C:\Users\JONAS~1.FAM\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => ?

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => ?
 

==================== Loaded Modules (whitelisted) =============
 
 

==================== Alternate Data Streams (whitelisted) =========
 
 

==================== Safe Mode (whitelisted) ===================
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (09/29/2013 05:01:46 PM) (Source: VzCdbSvc) (User: )

Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5}) (Fehlercode = 0x80042019)
 

Error: (09/29/2013 05:01:19 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: avnotify.exe, Version: 13.6.20.2100, Zeitstempel: 0x51e6b921

Name des fehlerhaften Moduls: avnotify.exe, Version: 13.6.20.2100, Zeitstempel: 0x51e6b921

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00001487

ID des fehlerhaften Prozesses: 0x1074

Startzeit der fehlerhaften Anwendung: 0xavnotify.exe0

Pfad der fehlerhaften Anwendung: avnotify.exe1

Pfad des fehlerhaften Moduls: avnotify.exe2

Berichtskennung: avnotify.exe3
 

Error: (09/28/2013 08:38:47 PM) (Source: VzCdbSvc) (User: )

Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5}) (Fehlercode = 0x80042019)
 

Error: (09/28/2013 07:21:24 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: AcroRd32.exe, Version: 9.3.3.177, Zeitstempel: 0x4c1d77af

Name des fehlerhaften Moduls: AcroRd32.dll, Version: 9.3.4.218, Zeitstempel: 0x4c6584e8

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00294d79

ID des fehlerhaften Prozesses: 0xe8c

Startzeit der fehlerhaften Anwendung: 0xAcroRd32.exe0

Pfad der fehlerhaften Anwendung: AcroRd32.exe1

Pfad des fehlerhaften Moduls: AcroRd32.exe2

Berichtskennung: AcroRd32.exe3
 

Error: (09/28/2013 06:32:01 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 7270
 

Error: (09/28/2013 06:32:01 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 7270
 

Error: (09/28/2013 06:32:01 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (09/28/2013 06:32:00 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 6240
 

Error: (09/28/2013 06:32:00 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 6240
 

Error: (09/28/2013 06:32:00 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 
 

System errors:

=============

Error: (09/29/2013 05:07:09 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.
 

Error: (09/29/2013 05:01:44 PM) (Source: Service Control Manager) (User: )

Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Avira Echtzeit-Scanner" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 

%%1056
 

Error: (09/29/2013 05:01:34 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Avira Echtzeit-Scanner" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (09/29/2013 05:01:33 PM) (Source: Service Control Manager) (User: )

Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 

%%5
 

Error: (09/29/2013 05:01:29 PM) (Source: Service Control Manager) (User: )

Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 

%%5
 

Error: (09/29/2013 05:00:26 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "VAIO Power Management" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (09/29/2013 05:00:26 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst VAIO Power Management erreicht.
 

Error: (09/29/2013 04:59:53 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Roxio Upnp Server 10 erreicht.
 

Error: (09/28/2013 08:43:49 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.
 

Error: (09/28/2013 08:36:06 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Roxio Upnp Server 10 erreicht.
 
 

Microsoft Office Sessions:

=========================

Error: (09/29/2013 05:01:46 PM) (Source: VzCdbSvc)(User: )

Description: {56F9312C-C989-4E04-8C23-299DEE3A36F5}0x80042019
 

Error: (09/29/2013 05:01:19 PM) (Source: Application Error)(User: )

Description: avnotify.exe13.6.20.210051e6b921avnotify.exe13.6.20.210051e6b921c000000500001487107401cebd24b53b4aedC:\Program Files (x86)\Avira\AntiVir Desktop\avnotify.exeC:\Program Files (x86)\Avira\AntiVir Desktop\avnotify.exefe7dc863-2917-11e3-9d6a-002643ab5ffe
 

Error: (09/28/2013 08:38:47 PM) (Source: VzCdbSvc)(User: )

Description: {56F9312C-C989-4E04-8C23-299DEE3A36F5}0x80042019
 

Error: (09/28/2013 07:21:24 PM) (Source: Application Error)(User: )

Description: AcroRd32.exe9.3.3.1774c1d77afAcroRd32.dll9.3.4.2184c6584e8c000000500294d79e8c01cebc67eebac80fC:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exeC:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.dll66037b6d-2862-11e3-b767-002643ab5ffe
 

Error: (09/28/2013 06:32:01 PM) (Source: Bonjour Service)(User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 7270
 

Error: (09/28/2013 06:32:01 PM) (Source: Bonjour Service)(User: )

Description: Task Scheduling Error: m->NextScheduledEvent 7270
 

Error: (09/28/2013 06:32:01 PM) (Source: Bonjour Service)(User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (09/28/2013 06:32:00 PM) (Source: Bonjour Service)(User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 6240
 

Error: (09/28/2013 06:32:00 PM) (Source: Bonjour Service)(User: )

Description: Task Scheduling Error: m->NextScheduledEvent 6240
 

Error: (09/28/2013 06:32:00 PM) (Source: Bonjour Service)(User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 
 

CodeIntegrity Errors:

===================================

  Date: 2012-10-22 13:29:21.049

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\FAMILI~1\AppData\Local\Temp\ListOpenedFileDrv_64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2012-10-22 13:29:20.944

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\FAMILI~1\AppData\Local\Temp\ListOpenedFileDrv_64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2011-10-21 15:39:03.542

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2011-10-21 15:39:03.479

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2011-10-21 15:38:16.694

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2011-10-21 15:38:16.632

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2011-10-21 15:37:21.505

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2011-10-21 15:37:21.443

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2011-10-21 15:37:12.479

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2011-10-21 15:37:12.417

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 67%

Total physical RAM: 4063.06 MB

Available physical RAM: 1336.44 MB

Total Pagefile: 8124.3 MB

Available Pagefile: 4546.66 MB

Total Virtual: 8192 MB

Available Virtual: 8191.82 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:454.83 GB) (Free:278.93 GB) NTFS
 

==================== MBR & Partition Table ==================
 

==================== End Of Log ============================

--- --- ---

ADW Cleaner:AdwCleaner Logfile:

Code:

# AdwCleaner v3.006 - Bericht erstellt am 06/10/2013 um 19:01:47

# Updated 01/10/2013 von Xplode

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

# Benutzername : Familie Weber - FAMILIEWEBER

# Gestartet von : C:\Users\Jonas.FamilieWeber\Downloads\adwcleaner.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\ProgramData\Babylon

Ordner Gelöscht : C:\ProgramData\BitGuard

Ordner Gelöscht : C:\ProgramData\DSearchLink

Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inbox Toolbar

Ordner Gelöscht : C:\Program Files (x86)\Ask.com

Ordner Gelöscht : C:\Program Files (x86)\Delta

Ordner Gelöscht : C:\Program Files (x86)\openit

Ordner Gelöscht : C:\Users\FAMILI~1\AppData\Local\Temp\AskSearch

Ordner Gelöscht : C:\Users\FAMILI~1\AppData\Local\Temp\boost_interprocess

Ordner Gelöscht : C:\Users\Familie Weber\AppData\LocalLow\AskToolbar

Ordner Gelöscht : C:\Users\Familie Weber\AppData\LocalLow\Inbox Toolbar

Ordner Gelöscht : C:\Users\Familie Weber\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard

Ordner Gelöscht : C:\Users\Jonas.FamilieWeber\AppData\LocalLow\AskToolbar

Ordner Gelöscht : C:\Users\Jonas.FamilieWeber\AppData\Roaming\digitalsite

Ordner Gelöscht : C:\Users\Familie Weber\AppData\Roaming\Mozilla\Firefox\Profiles\d9pkxf3b.default\Inbox Toolbar

Ordner Gelöscht : C:\Users\Familie Weber\AppData\Roaming\Mozilla\Firefox\Profiles\d9pkxf3b.default\Extensions\ffxtlbr@delta.com

Ordner Gelöscht : C:\Users\Familie Weber\AppData\Roaming\Mozilla\Firefox\Profiles\d9pkxf3b.default\Extensions\inboxcomtoolbar@inbox.com

Ordner Gelöscht : C:\Users\Familie Weber\AppData\Roaming\Mozilla\Firefox\Profiles\d9pkxf3b.default\Extensions\toolbar@ask.com

Datei Gelöscht : C:\Users\Familie Weber\AppData\Roaming\Mozilla\Firefox\Profiles\d9pkxf3b.default\bProtector_extensions.rdf

Datei Gelöscht : C:\Users\Familie Weber\AppData\Roaming\Mozilla\Firefox\Profiles\d9pkxf3b.default\bprotector_extensions.sqlite

Datei Gelöscht : C:\Users\Jonas.FamilieWeber\AppData\Roaming\Mozilla\Firefox\Profiles\gr5xx3xr.default\bprotector_extensions.sqlite

Datei Gelöscht : C:\Users\Familie Weber\AppData\Roaming\Mozilla\Firefox\Profiles\d9pkxf3b.default\bprotector_prefs.js

Datei Gelöscht : C:\Users\Jonas.FamilieWeber\AppData\Roaming\Mozilla\Firefox\Profiles\gr5xx3xr.default\bprotector_prefs.js

Datei Gelöscht : C:\Users\Familie Weber\AppData\Roaming\Mozilla\Firefox\Profiles\d9pkxf3b.default\searchplugins\Askcom.xml

Datei Gelöscht : C:\Users\Familie Weber\AppData\Roaming\Mozilla\Firefox\Profiles\d9pkxf3b.default\user.js

Datei Gelöscht : C:\Windows\System32\Tasks\BitGuard

Datei Gelöscht : C:\Windows\System32\Tasks\Scheduled Update for Ask Toolbar
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escort.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Inbox.AppServer

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Inbox.IBX404

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\inbox

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHost.Tool

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHost.Tool.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater]

Schlüssel Gelöscht : HKCU\Software\5f08adbb26ae817

Schlüssel Gelöscht : HKLM\SOFTWARE\5f08adbb26ae817

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C17DC5CF-54FF-4E63-8AC7-94335D6DA231}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D14D0EE2-2DD1-4230-BE70-3F3AD6172C40}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{05366194-3126-4601-AC1A-DDE573E093DC}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{061F450C-37B9-4330-9235-0F25D9F75B33}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{19D2F415-D58B-46BC-9390-C03DCBC21EB2}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22FEB0F5-0BA0-4D4B-8A66-55A21667BC31}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{26249267-15F4-4DA3-8247-C5A78E4FA918}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{37540F19-DD4C-478B-B2DF-C19281BCAF27}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{39B217B4-8C69-4E45-A8DC-8CC4DAD3CF0A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3CB4CE45-8849-4638-9226-D6B615A15827}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{43AB7B5D-4C40-4103-A549-7002A116A7D5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{612AD33D-9824-4E87-8396-92374E91C4BB}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6E45F3E8-2683-4824-A6BE-08108022FB36}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{996ED20F-A740-47A2-A7EF-9620D422BB4E}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{9F0F16DD-4E76-4049-A9B1-7A91E48F0323}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D2B79F7D-2D7D-4420-B2A9-ECE52C7C83A0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F4288797-CB12-49CE-9DF8-7CDFA1143BEA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{061F450C-37B9-4330-9235-0F25D9F75B33}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{22FEB0F5-0BA0-4D4B-8A66-55A21667BC31}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2B79F7D-2D7D-4420-B2A9-ECE52C7C83A0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{1D55DAA5-04AC-4036-B0BE-DA81EE9676CD}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{212C2C4F-C845-4FBC-9561-C833A13D8DCE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{3C5D1D57-16C8-473C-A552-37B8D88596FE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4A115D8A-6A7B-4C72-92B1-2E2D01F36979}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{58CBF821-A0C7-4AE8-9430-77DD1AF38E99}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{72BCBFF7-2837-4CA0-B3B5-3DAED7F54601}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{824125FD-7732-4DA2-9277-3A7D0A0A0813}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{99DF8440-814E-497F-BDDD-FB93E9E9DF96}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{612AD33D-9824-4E87-8396-92374E91C4BB}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C17DC5CF-54FF-4E63-8AC7-94335D6DA231}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D14D0EE2-2DD1-4230-BE70-3F3AD6172C40}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F994E0D9-8335-48F1-99C2-A712C21F8D5F}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{28C3737A-32D1-492D-B76B-8D75EBBFB887}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{CE057E0D-2D7E-4DFF-A890-07BA69B8C762}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{612AD33D-9824-4E87-8396-92374E91C4BB}

Schlüssel Gelöscht : HKCU\Software\Ask.com

Schlüssel Gelöscht : HKCU\Software\BabSolution

Schlüssel Gelöscht : HKCU\Software\Delta

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\AskToolbar

Schlüssel Gelöscht : HKLM\Software\AskToolbar

Schlüssel Gelöscht : HKLM\Software\DataMngr

Schlüssel Gelöscht : HKLM\Software\Delta

Schlüssel Gelöscht : HKLM\Software\Inbox Toolbar

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OpenIt Open It!
 

***** [ Browser ] *****
 

-\\ Internet Explorer v10.0.9200.16686
 
 

-\\ Mozilla Firefox v23.0.1 (de)
 

[ Datei : C:\Users\Familie Weber\AppData\Roaming\Mozilla\Firefox\Profiles\d9pkxf3b.default\prefs.js ]
 

Zeile gelöscht : user_pref("browser.newtabpage.pinned", "[null,null,null,{\"url\":\"hxxps://mail.google.com/mail/?tab=nm#inbox\",\"title\":\"Posteingang (6) - weber.leubnitz@googlemail.com - Gmail\"}]");

Zeile gelöscht : user_pref("extensions.asktb.apn_dbr", "ff_19.0");

Zeile gelöscht : user_pref("extensions.asktb.autofill-text-highlight-enabled", true);

Zeile gelöscht : user_pref("extensions.asktb.cbid", "^AGS");

Zeile gelöscht : user_pref("extensions.asktb.config-updated", false);

Zeile gelöscht : user_pref("extensions.asktb.cr-o", "APN10261");

Zeile gelöscht : user_pref("extensions.asktb.crumb", "2013.03.07+08.06.46-toolbar006iad-DE-RHJlc2RlbixHZXJtYW55");

Zeile gelöscht : user_pref("extensions.asktb.default-channel-url-mask", "hxxp://avira-int.ask.com/web?q={query}&qsrc={qsrc}&o={o}&l={l}&gct=bar&locale={locale}");

Zeile gelöscht : user_pref("extensions.asktb.domain", "avira-int.ask.com");

Zeile gelöscht : user_pref("extensions.asktb.domainName", "avira-int.ask.com");

Zeile gelöscht : user_pref("extensions.asktb.dtid", "^YYYYYY^YY^DE");

Zeile gelöscht : user_pref("extensions.asktb.ff-original-keyword-url", "");

Zeile gelöscht : user_pref("extensions.asktb.first-restart-after-config-update", true);

Zeile gelöscht : user_pref("extensions.asktb.guid", "2bf702fc-23a4-45d2-b2ac-ad3c93513017");

Zeile gelöscht : user_pref("extensions.asktb.hpr", "YES");

Zeile gelöscht : user_pref("extensions.asktb.hxxp-header-whitelist-hosts", "[\"static-dev.en.dev.ask.com\", \"ask.com\", \"www.facebook.com\", \"www.playsushi.com\", \"WWW.google.com\", \"hxxps://websearch.ask.com\", [...]

Zeile gelöscht : user_pref("extensions.asktb.if", "first");

Zeile gelöscht : user_pref("extensions.asktb.InstallDir", "C:\\Program Files (x86)\\Ask.com\\");

Zeile gelöscht : user_pref("extensions.asktb.keyword-toggled-in-session", false);

Zeile gelöscht : user_pref("extensions.asktb.l", "dis");

Zeile gelöscht : user_pref("extensions.asktb.last-config-req", "1362824876083");

Zeile gelöscht : user_pref("extensions.asktb.locale", "de_DE");

Zeile gelöscht : user_pref("extensions.asktb.localePref", true);

Zeile gelöscht : user_pref("extensions.asktb.location", "Dresden,Germany");

Zeile gelöscht : user_pref("extensions.asktb.new-tab-opt-out", true);

Zeile gelöscht : user_pref("extensions.asktb.o", "APN10261");

Zeile gelöscht : user_pref("extensions.asktb.qsrc", "2871");

Zeile gelöscht : user_pref("extensions.asktb.sa", "YES");

Zeile gelöscht : user_pref("extensions.asktb.saguid", "E11ADD27-748B-4E55-AE99-8943F5EF4ED9");

Zeile gelöscht : user_pref("extensions.asktb.search-suggestions-enabled", true);

Zeile gelöscht : user_pref("extensions.asktb.silent-upgrade-from-pre-newtabs-build", false);

Zeile gelöscht : user_pref("extensions.asktb.socialmini-first", true);

Zeile gelöscht : user_pref("extensions.asktb.socialmini-interval", "1200000");

Zeile gelöscht : user_pref("extensions.asktb.socialmini-max-char-ticker", "33");

Zeile gelöscht : user_pref("extensions.asktb.socialmini-max-items", "30");

Zeile gelöscht : user_pref("extensions.asktb.socialmini-native-on", true);

Zeile gelöscht : user_pref("extensions.asktb.socialmini-speed", "5000");

Zeile gelöscht : user_pref("extensions.asktb.themeid", "");

Zeile gelöscht : user_pref("extensions.asktb.timeinstalled", "07.03.2013 17:07:55");

Zeile gelöscht : user_pref("extensions.asktb.to", "");

Zeile gelöscht : user_pref("extensions.delta.admin", false);

Zeile gelöscht : user_pref("extensions.delta.aflt", "babsst");

Zeile gelöscht : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");

Zeile gelöscht : user_pref("extensions.delta.autoRvrt", "false");

Zeile gelöscht : user_pref("extensions.delta.dfltLng", "de");

Zeile gelöscht : user_pref("extensions.delta.excTlbr", false);

Zeile gelöscht : user_pref("extensions.delta.ffxUnstlRst", true);

Zeile gelöscht : user_pref("extensions.delta.id", "46d26f4f0000000000000024d6194679");

Zeile gelöscht : user_pref("extensions.delta.instlDay", "15976");

Zeile gelöscht : user_pref("extensions.delta.instlRef", "sst");

Zeile gelöscht : user_pref("extensions.delta.newTab", false);

Zeile gelöscht : user_pref("extensions.delta.prdct", "delta");

Zeile gelöscht : user_pref("extensions.delta.prtnrId", "delta");

Zeile gelöscht : user_pref("extensions.delta.rvrt", "false");

Zeile gelöscht : user_pref("extensions.delta.smplGrp", "none");

Zeile gelöscht : user_pref("extensions.delta.tlbrId", "base");

Zeile gelöscht : user_pref("extensions.delta.tlbrSrchUrl", "");

Zeile gelöscht : user_pref("extensions.delta.vrsn", "1.8.24.6");

Zeile gelöscht : user_pref("extensions.delta.vrsni", "1.8.24.6");

Zeile gelöscht : user_pref("extensions.delta.vrsnTs", "1.8.24.619:35:17");

Zeile gelöscht : user_pref("extensions.delta_i.babExt", "");

Zeile gelöscht : user_pref("extensions.delta_i.babTrack", "affID=121565&tt=240913_91215&tsp=5019");

Zeile gelöscht : user_pref("extensions.delta_i.srcExt", "ss");
 

[ Datei : C:\Users\Jonas.FamilieWeber\AppData\Roaming\Mozilla\Firefox\Profiles\gr5xx3xr.default\prefs.js ]
 

Zeile gelöscht : user_pref("extensions.asktb.ff-original-keyword-url", "");
 

-\\ Google Chrome v30.0.1599.69
 

[ Datei : C:\Users\Familie Weber\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

[ Datei : C:\Users\Jonas.FamilieWeber\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

*************************
 

AdwCleaner[R0].txt - [20331 octets] - [06/10/2013 19:00:34]

AdwCleaner[S0].txt - [19712 octets] - [06/10/2013 19:01:47]
 

########## EOF - \AdwCleaner\AdwCleaner[S0].txt - [19773 octets] ##########

--- --- ---

JRT.txt:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.4 (10.06.2013:1)
OS: Windows 7 Home Premium x64
Ran by Familie Weber on 06.10.2013 at 19:10:40,24
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

~~~ Registry Keys

~~~ Files

~~~ Folders

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 06.10.2013 at 19:10:40,87
End of JRT log

FRST:
FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013

Ran by Jonas (ATTENTION: The logged in user is not administrator) on FAMILIEWEBER on 06-10-2013 19:14:01

Running from C:\Users\Jonas.FamilieWeber\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DO048F3S

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Spotify Ltd) C:\Users\Jonas.FamilieWeber\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

(Nikon Corporation) C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE

(Microsoft Corporation) C:\Windows\splwow64.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Google Inc.) C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe

(Adobe Systems, Inc.) C:\Windows\SysWow64\Macromed\Flash\FlashUtil10a.exe

(Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [7938080 2009-07-24] (Realtek Semiconductor)

HKLM\...\Run: [Skytel] - C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2009-07-24] (Realtek Semiconductor Corp.)

HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1815848 2009-08-03] (Synaptics Incorporated)

HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-04] (Intel Corporation)

HKLM-x32\...\RunOnce: [Malwarebytes Anti-Malware] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation)

HKLM-x32\...\RunOnce: [Malwarebytes Anti-Malware (cleanup)] - rundll32.exe "C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll",ProcessCleanupScript [1127496 2013-04-04] (Malwarebytes Corporation)

HKCU\...\Run: [Spotify] - C:\Users\Jonas.FamilieWeber\AppData\Roaming\Spotify\Spotify.exe [4736000 2013-10-04] (Spotify Ltd)

HKCU\...\Run: [Spotify Web Helper] - C:\Users\Jonas.FamilieWeber\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-10-04] (Spotify Ltd)

HKLM-x32\...\Run: [AdobeCS4ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Adobe_ID0ENQBO] - C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4Tray.exe [378224 2008-08-15] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [AppleSyncNotifier] - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [47904 2010-09-08] (Apple Inc.)

HKLM-x32\...\Run: [Nikon Transfer Monitor] - C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe [479232 2008-12-16] (Nikon Corporation)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-04] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [] - [x]

AppInit_DLLs-x32: c:\progra~3\bitguard\261673~1.238\{c16c1~1\bitguard.dll [ ] ()
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = iGoogle

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = iGoogle

SearchScopes: HKCU - {1576BEE8-ACAD-4A8F-A308-6B9323179076} URL = hxxp://services.zinio.com/search?s={selection}&rf=sonyslices

SearchScopes: HKCU - {6FF60DE0-63F5-4193-9FDC-579022A69187} URL = hxxp://www.google.de/search?hl=de&q={searchTerms}&meta

SearchScopes: HKCU - {A9A150DE-5FF1-4169-B569-52B25D774EA4} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-0/4?satitle={searchTerms}

BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)

Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

Toolbar: HKLM-x32 - EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)

Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\Jonas.FamilieWeber\AppData\Roaming\Mozilla\Firefox\Profiles\gr5xx3xr.default

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
 

Chrome: 

=======

Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION

CHR Extension: (Google Docs) - C:\Users\JONAS~1.FAM\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0

CHR Extension: (Google Drive) - C:\Users\JONAS~1.FAM\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0

CHR Extension: (YouTube) - C:\Users\JONAS~1.FAM\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0

CHR Extension: (Google Search) - C:\Users\JONAS~1.FAM\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0

CHR Extension: (Chrome In-App Payments service) - C:\Users\JONAS~1.FAM\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0

CHR Extension: (Gmail) - C:\Users\JONAS~1.FAM\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

CHR HKLM-x32\...\Chrome\Extension: [aaaaabfjnbeinlpljodiajipidiompfl] - C:\Users\Familie Weber\AppData\Local\APN\GoogleCRXs\aaaaabfjnbeinlpljodiajipidiompfl_7.15.18.0.crx

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)

S3 Adobe Version Cue CS4; C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [284016 2008-08-15] (Adobe Systems Incorporated)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-04] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-04] (Avira Operations GmbH & Co. KG)

R2 lmhosts; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

R2 NlaSvc; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R2 nsi; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

S3 Roxio UPnP Renderer 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [313840 2009-06-26] (Sonic Solutions)

S2 Roxio Upnp Server 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [362992 2009-06-26] (Sonic Solutions)

S3 SOHDBSvr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [70952 2009-07-27] (Sony Corporation)

S3 SOHPlMgr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [91432 2009-07-27] (Sony Corporation)

R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2100024 2013-09-09] (TuneUp Software)

R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)

S3 VAIO Entertainment TV Device Arbitration Service; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe [69632 2009-07-23] (Sony Corporation)

R2 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [642920 2009-07-22] (Sony Corporation)

R3 Vcsw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe [313264 2009-07-23] (Sony Corporation)

R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1286784 2012-10-26] (Sony Corporation)

R2 VzCdbSvc; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [206336 2009-07-23] (Sony Corporation)

R2 yksvc; C:\Windows\System32\yk62x64.dll [382976 2009-07-31] (Marvell)
 

==================== Drivers (Whitelisted) ====================
 

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-04] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-09-04] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-04-03] (Avira Operations GmbH & Co. KG)

S3 JMCR_CFS; C:\Windows\System32\DRIVERS\jmcr_cfs.sys [73128 2009-07-31] (JMicron Technology Corporation)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R2 risdptsk; C:\Windows\system32\DRIVERS\risdsn64.sys [76288 2009-07-31] (REDC)

R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)

S3 ListOpenedFileDrv; \??\C:\Users\FAMILI~1\AppData\Local\Temp\ListOpenedFileDrv_64.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-10-06 19:10 - 2013-10-06 19:10 - 01032220 _____ (Thisisu) C:\Users\Jonas.FamilieWeber\Downloads\JRT.exe

2013-10-06 18:59 - 2013-10-06 19:02 - 00000000 ____D C:\AdwCleaner

2013-10-06 18:59 - 2013-10-06 18:59 - 01045226 _____ C:\Users\Jonas.FamilieWeber\Downloads\adwcleaner.exe

2013-10-06 18:30 - 2013-10-06 18:30 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Jonas.FamilieWeber\Downloads\mbam-setup-1.75.0.1300.exe

2013-10-06 14:38 - 2013-10-06 14:38 - 99463930 _____ C:\Windows\SysWOW64\冎샘璬±

2013-10-04 16:47 - 2013-10-04 16:48 - 93324560 _____ (Microsoft Corporation) C:\Users\Jonas.FamilieWeber\Downloads\msert(1).exe

2013-10-04 16:46 - 2013-10-04 16:47 - 93324560 _____ (Microsoft Corporation) C:\Users\Jonas.FamilieWeber\Downloads\msert.exe

2013-10-02 16:49 - 2013-10-02 16:49 - 98743931 _____ C:\Windows\SysWOW64\ऺ抏璬€

2013-09-30 19:51 - 2013-09-30 19:51 - 00000000 ____D C:\Windows\SysWOW64\searchplugins

2013-09-30 19:51 - 2013-09-30 19:51 - 00000000 ____D C:\Windows\SysWOW64\Extensions

2013-09-30 18:24 - 2013-09-09 15:29 - 00043320 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll

2013-09-30 18:24 - 2013-09-09 15:29 - 00036152 _____ (TuneUp Software) C:\Windows\SysWOW64\uxtuneup.dll

2013-09-29 18:47 - 2013-09-29 19:10 - 00000000 ____D C:\Users\Jonas.FamilieWeber\AppData\Roaming\HandBrake

2013-09-29 18:46 - 2013-09-29 18:46 - 13883252 _____ C:\Users\Jonas.FamilieWeber\Downloads\HandBrake-0.9.9-i686-Win_GUI.exe

2013-09-29 18:46 - 2013-09-29 18:46 - 13883252 _____ C:\Users\Jonas.FamilieWeber\Downloads\HandBrake-0.9.9-i686-Win_GUI (1).exe

2013-09-29 18:06 - 2013-10-06 17:41 - 00000092 _____ C:\Users\Jonas.FamilieWeber\AppData\Roaming\WB.CFG

2013-09-29 18:06 - 2013-10-06 17:41 - 00000006 _____ C:\Users\Jonas.FamilieWeber\AppData\Roaming\WBPU-TTL.DAT

2013-09-29 17:15 - 2013-09-29 17:15 - 00050097 _____ C:\Users\Jonas.FamilieWeber\Downloads\FRST.txt

2013-09-29 17:14 - 2013-09-29 17:15 - 00028408 _____ C:\Users\Jonas.FamilieWeber\Downloads\Addition.txt

2013-09-29 17:12 - 2013-09-29 17:12 - 00000000 ____D C:\FRST

2013-09-29 17:07 - 2013-10-06 19:06 - 00000304 _____ C:\Windows\Tasks\DigitalSite.job

2013-09-29 17:05 - 2013-09-29 17:05 - 00000000 ____D C:\Users\Jonas.FamilieWeber\AppData\Roaming\TuneUp Software

2013-09-28 19:36 - 2013-09-30 18:23 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014

2013-09-28 19:36 - 2013-09-28 19:36 - 00000000 ____D C:\Users\Familie Weber\AppData\Roaming\TuneUp Software

2013-09-28 19:36 - 2013-09-09 15:29 - 00040760 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe

2013-09-28 19:36 - 2013-09-09 15:29 - 00029496 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll

2013-09-28 19:36 - 2013-09-09 15:29 - 00025400 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll

2013-09-28 19:35 - 2013-09-30 19:21 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}

2013-09-28 19:35 - 2013-09-30 18:25 - 00000000 ____D C:\ProgramData\TuneUp Software

2013-09-28 19:35 - 2013-09-28 19:35 - 00000000 ____D C:\Users\Jonas.FamilieWeber\Documents\DVDVideoSoft

2013-09-28 19:35 - 2013-09-28 19:35 - 00000000 ____D C:\Users\Jonas.FamilieWeber\AppData\Roaming\DVDVideoSoft

2013-09-28 19:34 - 2013-09-30 18:16 - 00000000 ____D C:\Users\Familie Weber\AppData\Roaming\DVDVideoSoft

2013-09-26 17:44 - 2013-09-26 17:44 - 97961477 _____ C:\Windows\SysWOW64\ݧ�璬,

2013-09-21 18:48 - 2013-09-21 18:48 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk

2013-09-21 18:47 - 2013-09-21 18:48 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-09-21 18:47 - 2013-09-21 18:48 - 00000000 ____D C:\Program Files\iTunes

2013-09-21 18:47 - 2013-09-21 18:48 - 00000000 ____D C:\Program Files (x86)\iTunes

2013-09-21 18:47 - 2013-09-21 18:47 - 00000000 ____D C:\Program Files\iPod

2013-09-21 18:38 - 2013-09-21 18:38 - 00001845 _____ C:\Users\Public\Desktop\QuickTime Player.lnk

2013-09-21 18:38 - 2013-09-21 18:38 - 00000000 ____D C:\Program Files (x86)\QuickTime

2013-09-21 14:31 - 2013-09-21 14:31 - 05826000 _____ (TeamViewer GmbH) C:\Users\Jonas.FamilieWeber\Downloads\TeamViewer_Setup_de-ckc (1).exe

2013-09-21 14:30 - 2013-09-21 14:30 - 05826000 _____ (TeamViewer GmbH) C:\Users\Jonas.FamilieWeber\Downloads\TeamViewer_Setup_de-ckc.exe

2013-09-20 17:23 - 2013-09-20 17:23 - 98481651 _____ C:\Windows\SysWOW64\ꀤຸ璬®

2013-09-18 18:31 - 2013-10-05 14:00 - 00000000 ____D C:\Users\Familie Weber\AppData\Roaming\Spotify

2013-09-15 19:38 - 2013-10-06 19:05 - 00000000 ____D C:\Users\Jonas.FamilieWeber\AppData\Roaming\Spotify

2013-09-15 19:38 - 2013-10-03 10:10 - 00000000 ____D C:\Users\Jonas.FamilieWeber\AppData\Local\Spotify

2013-09-15 19:38 - 2013-09-15 19:38 - 00092776 _____ (Spotify Ltd) C:\Users\Jonas.FamilieWeber\Downloads\SpotifySetup.exe

2013-09-15 19:38 - 2013-09-15 19:38 - 00001874 _____ C:\Users\Jonas.FamilieWeber\Desktop\Spotify.lnk

2013-09-15 19:38 - 2013-09-15 19:38 - 00001860 _____ C:\Users\Jonas.FamilieWeber\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk

2013-09-12 18:44 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-09-12 18:44 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-09-12 18:44 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-09-12 18:44 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-09-12 18:44 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-09-12 18:44 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-09-12 18:44 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-09-12 18:44 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-09-12 18:44 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-09-12 18:44 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-09-12 18:44 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-09-12 18:44 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-09-12 18:44 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-09-12 18:44 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-09-12 18:44 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-09-12 18:44 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-09-12 18:44 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-09-12 18:44 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-09-12 18:44 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-09-12 18:44 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-09-12 18:44 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-09-12 18:44 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-09-12 18:44 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-09-12 18:44 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-09-12 18:44 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-09-12 18:44 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-09-12 18:44 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-09-12 18:44 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-09-12 18:43 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-09-12 18:43 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-09-12 18:43 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-09-12 14:50 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys

2013-09-12 14:49 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-09-12 14:49 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-09-12 14:49 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2013-09-12 14:49 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2013-09-12 14:49 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2013-09-12 14:49 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2013-09-12 14:49 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2013-09-12 14:49 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2013-09-12 14:49 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2013-09-12 14:49 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2013-09-12 14:49 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2013-09-12 14:49 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2013-09-12 14:49 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2013-09-12 14:49 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2013-09-12 14:49 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2013-09-12 14:49 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2013-09-12 14:49 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2013-09-12 14:49 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2013-09-12 14:49 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2013-09-12 14:49 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2013-09-12 14:49 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2013-09-12 14:49 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2013-09-12 14:49 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2013-09-12 14:49 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll

2013-09-12 14:49 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2013-09-12 14:49 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
 

==================== One Month Modified Files and Folders =======
 

2013-10-06 19:13 - 2013-01-27 16:54 - 00000000 ____D C:\Users\Jonas.FamilieWeber\AppData\Local\Google

2013-10-06 19:10 - 2013-10-06 19:10 - 01032220 _____ (Thisisu) C:\Users\Jonas.FamilieWeber\Downloads\JRT.exe

2013-10-06 19:06 - 2013-09-29 17:07 - 00000304 _____ C:\Windows\Tasks\DigitalSite.job

2013-10-06 19:05 - 2013-09-15 19:38 - 00000000 ____D C:\Users\Jonas.FamilieWeber\AppData\Roaming\Spotify

2013-10-06 19:04 - 2009-09-06 11:06 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-10-06 19:03 - 2013-02-20 18:21 - 00036536 _____ C:\Windows\setupact.log

2013-10-06 19:03 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-10-06 19:02 - 2013-10-06 18:59 - 00000000 ____D C:\AdwCleaner

2013-10-06 19:02 - 2009-12-14 11:00 - 01250499 _____ C:\Windows\WindowsUpdate.log

2013-10-06 19:02 - 2009-07-14 06:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-10-06 19:02 - 2009-07-14 06:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-10-06 18:59 - 2013-10-06 18:59 - 01045226 _____ C:\Users\Jonas.FamilieWeber\Downloads\adwcleaner.exe

2013-10-06 18:51 - 2013-03-14 18:44 - 01020428 _____ C:\Windows\PFRO.log

2013-10-06 18:31 - 2013-03-07 18:20 - 00001105 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-10-06 18:31 - 2013-03-07 18:19 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-10-06 18:30 - 2013-10-06 18:30 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Jonas.FamilieWeber\Downloads\mbam-setup-1.75.0.1300.exe

2013-10-06 18:28 - 2009-09-06 11:06 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-10-06 17:41 - 2013-09-29 18:06 - 00000092 _____ C:\Users\Jonas.FamilieWeber\AppData\Roaming\WB.CFG

2013-10-06 17:41 - 2013-09-29 18:06 - 00000006 _____ C:\Users\Jonas.FamilieWeber\AppData\Roaming\WBPU-TTL.DAT

2013-10-06 14:38 - 2013-10-06 14:38 - 99463930 _____ C:\Windows\SysWOW64\冎샘璬±

2013-10-05 18:48 - 2009-12-26 19:53 - 00000000 ____D C:\Users\Familie Weber\AppData\Roaming\Skype

2013-10-05 17:16 - 2013-08-26 18:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-10-05 16:49 - 2011-06-06 19:09 - 00000000 ____D C:\ProgramData\tmp

2013-10-05 14:00 - 2013-09-18 18:31 - 00000000 ____D C:\Users\Familie Weber\AppData\Roaming\Spotify

2013-10-05 11:48 - 2009-07-14 19:58 - 00699118 _____ C:\Windows\system32\perfh007.dat

2013-10-05 11:48 - 2009-07-14 19:58 - 00149226 _____ C:\Windows\system32\perfc007.dat

2013-10-05 11:48 - 2009-07-14 07:13 - 01618376 _____ C:\Windows\system32\PerfStringBackup.INI

2013-10-04 16:48 - 2013-10-04 16:47 - 93324560 _____ (Microsoft Corporation) C:\Users\Jonas.FamilieWeber\Downloads\msert(1).exe

2013-10-04 16:47 - 2013-10-04 16:46 - 93324560 _____ (Microsoft Corporation) C:\Users\Jonas.FamilieWeber\Downloads\msert.exe

2013-10-03 10:10 - 2013-09-15 19:38 - 00000000 ____D C:\Users\Jonas.FamilieWeber\AppData\Local\Spotify

2013-10-02 16:49 - 2013-10-02 16:49 - 98743931 _____ C:\Windows\SysWOW64\ऺ抏璬€

2013-09-30 19:51 - 2013-09-30 19:51 - 00000000 ____D C:\Windows\SysWOW64\searchplugins

2013-09-30 19:51 - 2013-09-30 19:51 - 00000000 ____D C:\Windows\SysWOW64\Extensions

2013-09-30 19:50 - 2009-08-17 19:22 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2013-09-30 19:21 - 2013-09-28 19:35 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}

2013-09-30 19:21 - 2010-05-10 20:05 - 00000000 ____D C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}

2013-09-30 18:25 - 2013-09-28 19:35 - 00000000 ____D C:\ProgramData\TuneUp Software

2013-09-30 18:23 - 2013-09-28 19:36 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014

2013-09-30 18:16 - 2013-09-28 19:34 - 00000000 ____D C:\Users\Familie Weber\AppData\Roaming\DVDVideoSoft

2013-09-29 19:25 - 2013-01-27 16:21 - 00000000 ____D C:\Users\Jonas.FamilieWeber\Documents\Schülerrat

2013-09-29 19:10 - 2013-09-29 18:47 - 00000000 ____D C:\Users\Jonas.FamilieWeber\AppData\Roaming\HandBrake

2013-09-29 18:46 - 2013-09-29 18:46 - 13883252 _____ C:\Users\Jonas.FamilieWeber\Downloads\HandBrake-0.9.9-i686-Win_GUI.exe

2013-09-29 18:46 - 2013-09-29 18:46 - 13883252 _____ C:\Users\Jonas.FamilieWeber\Downloads\HandBrake-0.9.9-i686-Win_GUI (1).exe

2013-09-29 17:15 - 2013-09-29 17:15 - 00050097 _____ C:\Users\Jonas.FamilieWeber\Downloads\FRST.txt

2013-09-29 17:15 - 2013-09-29 17:14 - 00028408 _____ C:\Users\Jonas.FamilieWeber\Downloads\Addition.txt

2013-09-29 17:12 - 2013-09-29 17:12 - 00000000 ____D C:\FRST

2013-09-29 17:05 - 2013-09-29 17:05 - 00000000 ____D C:\Users\Jonas.FamilieWeber\AppData\Roaming\TuneUp Software

2013-09-28 19:36 - 2013-09-28 19:36 - 00000000 ____D C:\Users\Familie Weber\AppData\Roaming\TuneUp Software

2013-09-28 19:35 - 2013-09-28 19:35 - 00000000 ____D C:\Users\Jonas.FamilieWeber\Documents\DVDVideoSoft

2013-09-28 19:35 - 2013-09-28 19:35 - 00000000 ____D C:\Users\Jonas.FamilieWeber\AppData\Roaming\DVDVideoSoft

2013-09-26 17:44 - 2013-09-26 17:44 - 97961477 _____ C:\Windows\SysWOW64\ݧ�璬,

2013-09-21 18:48 - 2013-09-21 18:48 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk

2013-09-21 18:48 - 2013-09-21 18:47 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-09-21 18:48 - 2013-09-21 18:47 - 00000000 ____D C:\Program Files\iTunes

2013-09-21 18:48 - 2013-09-21 18:47 - 00000000 ____D C:\Program Files (x86)\iTunes

2013-09-21 18:47 - 2013-09-21 18:47 - 00000000 ____D C:\Program Files\iPod

2013-09-21 18:38 - 2013-09-21 18:38 - 00001845 _____ C:\Users\Public\Desktop\QuickTime Player.lnk

2013-09-21 18:38 - 2013-09-21 18:38 - 00000000 ____D C:\Program Files (x86)\QuickTime

2013-09-21 18:35 - 2010-09-29 13:59 - 00002491 _____ C:\Users\Public\Desktop\Safari.lnk

2013-09-21 18:35 - 2010-09-29 13:58 - 00000000 ____D C:\Program Files (x86)\Safari

2013-09-21 14:31 - 2013-09-21 14:31 - 05826000 _____ (TeamViewer GmbH) C:\Users\Jonas.FamilieWeber\Downloads\TeamViewer_Setup_de-ckc (1).exe

2013-09-21 14:30 - 2013-09-21 14:30 - 05826000 _____ (TeamViewer GmbH) C:\Users\Jonas.FamilieWeber\Downloads\TeamViewer_Setup_de-ckc.exe

2013-09-20 17:23 - 2013-09-20 17:23 - 98481651 _____ C:\Windows\SysWOW64\ꀤຸ璬®

2013-09-16 18:08 - 2009-12-14 11:00 - 00000000 ____D C:\Users\Familie Weber

2013-09-15 19:38 - 2013-09-15 19:38 - 00092776 _____ (Spotify Ltd) C:\Users\Jonas.FamilieWeber\Downloads\SpotifySetup.exe

2013-09-15 19:38 - 2013-09-15 19:38 - 00001874 _____ C:\Users\Jonas.FamilieWeber\Desktop\Spotify.lnk

2013-09-15 19:38 - 2013-09-15 19:38 - 00001860 _____ C:\Users\Jonas.FamilieWeber\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk

2013-09-15 13:35 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-09-14 20:00 - 2009-12-22 20:02 - 00014904 _____ C:\Users\Familie Weber\AppData\Roaming\wklnhst.dat

2013-09-12 20:29 - 2013-01-27 16:07 - 00000000 ____D C:\Users\Jonas.FamilieWeber\AppData\Local\Microsoft Help

2013-09-12 20:25 - 2013-01-27 16:08 - 00000000 ___RD C:\Users\Jonas.FamilieWeber\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-09-12 20:25 - 2013-01-27 16:08 - 00000000 ___RD C:\Users\Jonas.FamilieWeber\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2013-09-12 18:54 - 2009-12-14 11:01 - 00000930 _____ C:\Users\Familie Weber\Downloads.lnk

2013-09-12 18:52 - 2009-07-14 06:45 - 03095120 _____ C:\Windows\system32\FNTCACHE.DAT

2013-09-12 18:43 - 2013-08-15 13:52 - 00000000 ____D C:\Windows\system32\MRT

2013-09-12 18:39 - 2010-03-23 12:03 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-09-12 18:39 - 2009-09-06 11:11 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-09-09 15:29 - 2013-09-30 18:24 - 00043320 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll

2013-09-09 15:29 - 2013-09-30 18:24 - 00036152 _____ (TuneUp Software) C:\Windows\SysWOW64\uxtuneup.dll

2013-09-09 15:29 - 2013-09-28 19:36 - 00040760 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe

2013-09-09 15:29 - 2013-09-28 19:36 - 00029496 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll

2013-09-09 15:29 - 2013-09-28 19:36 - 00025400 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll
 

Files to move or delete:

====================

C:\ProgramData\PKP_DLdu.DAT

C:\ProgramData\PKP_DLdw.DAT
 
 

Some content of TEMP:

====================

C:\Users\Jonas.FamilieWeber\AppData\Local\Temp\SkypeSetup.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 

==================== End Of Log ============================

--- --- ---