Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Verdsacht auf maleware rechner extrem lamgsamer (https://www.trojaner-board.de/147136-verdsacht-maleware-rechner-extrem-lamgsamer.html)

Puky88 02.01.2014 17:03
Verdsacht auf maleware rechner extrem lamgsamer
 
Hallo

ich habe den verdacht das mein computer voll mit maleware ist (win7)
Er ist deutlich langsamer als vorher und im internettbrowser ist viel werbung wo ich unteranderen auch umgeleitet werde. die startseite (igoogle.de) ist ständig weg und es dauert ewig bis eine seite geladen wird.

hier dier logfiles
frst
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-01-2014 01
Ran by genz (administrator) on GENZ-PC on 02-01-2014 16:39:11
Running from C:\Users\genz\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(Logitech Inc.) C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\Logishrd\LVMVFM\LVPrS64H.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIIVE.EXE
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Dropbox, Inc.) C:\Users\genz\AppData\Roaming\Dropbox\bin\Dropbox.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\Logishrd\LComMgr\Communications_Helper.exe
() C:\Program Files (x86)\Logitech\QuickCam10\QuickCam10.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\Logishrd\LComMgr\LVComSX.exe
(ScanSoft, Inc.) C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12673128 2011-08-16] (Realtek Semiconductor)
HKLM\...\Run: [MedionReminder] - C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe [443688 2011-05-26] (CyberLink)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE [2780776 2011-07-19] (CANON INC.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-05-20] (Intel Corporation)
HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2010-08-03] (CyberLink)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2011-09-08] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [LogitechCommunicationsManager] - C:\Program Files (x86)\Common Files\Logishrd\LComMgr\Communications_Helper.exe [488984 2007-02-08] (Logitech Inc.)
HKLM-x32\...\Run: [LogitechQuickCamRibbon] - C:\Program Files (x86)\Logitech\QuickCam10\QuickCam10.exe [774168 2007-02-08] ()
HKLM-x32\...\Run: [SSBkgdUpdate] - C:\Program Files (x86)\Common Files\ScanSoft Shared\SSBkgdUpdate\SSBkgdUpdate.exe [155648 2003-10-14] (Scansoft, Inc.)
HKLM-x32\...\Run: [PaperPort PTD] - C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe [57393 2005-03-17] (ScanSoft, Inc.)
HKLM-x32\...\Run: [IndexSearch] - C:\Program Files (x86)\ScanSoft\PaperPort\IndexSearch.exe [40960 2005-03-17] (ScanSoft, Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-19] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-15] (Apple Inc.)
HKLM-x32\...\Run: [FUFAXRCV] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [502952 2012-07-09] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [FUFAXSTM] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [863400 2012-07-09] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [EEventManager] - C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058912 2012-04-02] (SEIKO EPSON CORPORATION)
HKLM\...\RunOnce: [MedionReminder] - C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe /DeleteRunKey [443688 2011-05-26] (CyberLink)
HKCU\...\Run: [EPLTarget\P0000000000000000] - C:\Windows\System32\spool\drivers\x64\3\E_YATIIVE.EXE [283232 2012-02-27] (SEIKO EPSON CORPORATION)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
Startup: C:\Users\genz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\genz\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\genz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.msn.com/?pc=UP97&ocid=UP97DHP
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=MDNF&bmod=MDNF
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - URL hxxp://search.chatzum.com/?orig=DS&affid=61&cztbid=372675200&q={searchTerms}
SearchScopes: HKLM-x32 - TopResultURLFallback hxxp://search.chatzum.com/?orig=DS&affid=61&cztbid=372675200&q={searchTerms}
SearchScopes: HKLM-x32 - TopResultURL hxxp://search.chatzum.com/?orig=DS&affid=61&cztbid=372675200&q={searchTerms}
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - 28171594C2124079986D38D7A0A44D98 URL = hxxp://search.chatzum.com/?orig=DS&affid=61&cztbid=372675200&q={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=56B78C89A5689D9F&affID=124247&tsp=5026
SearchScopes: HKCU - {F833DE03-F826-4465-A306-8AB51CBDE323} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=51d7e2ba-592c-41f4-84bd-550caed3e31d&apn_sauid=BE6909FF-6F99-4D5B-893A-1E740FE7B7D6
BHO: Plus-HD-2.6 - {11111111-1111-1111-1111-110311341140} - C:\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-bho64.dll (Plus HD)
BHO: Pricora - {11111111-1111-1111-1111-110311531129} - C:\Program Files (x86)\Pricora\Pricora-bho64.dll (Corporate Inc)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
BHO-x32: Plus-HD-2.6 - {11111111-1111-1111-1111-110311341140} - C:\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-bho.dll (Plus HD)
BHO-x32: Pricora - {11111111-1111-1111-1111-110311531129} - C:\Program Files (x86)\Pricora\Pricora-bho.dll (Corporate Inc)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default
FF user.js: detected! => C:\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\user.js
FF SearchEngineOrder.3: Bing
FF Homepage: hxxp://de.msn.com/?pc=UP97&ocid=UP97DHP
FF Keyword.URL: hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\genz\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\searchplugins\bingp.xml
FF SearchPlugin: C:\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\searchplugins\ChatZum.xml
FF SearchPlugin: C:\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\searchplugins\delta.xml
FF SearchPlugin: C:\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\searchplugins\Firefox.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: LyricsContainer - C:\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\Extensions\125
FF Extension: Plus-HD-2.6 - C:\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com
FF Extension: Pricora - C:\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\Extensions\94ae0976-89df-4347-9771-5371c6e203bf@3796dc63-d06d-4575-a997-9b5c935fe915.com
FF Extension: Adblock Plus - C:\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA}
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
FF HKCU\...\Firefox\Extensions: [{cd288a68-7b21-4f14-b789-82cc44992259}] - C:\Program Files (x86)\LyricsContainer\133.xpi
FF Extension: LyricsContainer - C:\Program Files (x86)\LyricsContainer\133.xpi
FF Extension: LyricsContainer - C:\Program Files (x86)\LyricsContainer\133.xpi

Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (LyricsContainer) - C:\Users\genz\AppData\Local\Google\Chrome\User Data\Default\Extensions\abfmigjiaapipflmopkaaooigcjjdojh\1.122
CHR Extension: (Pricora) - C:\Users\genz\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.84_0
CHR Extension: (Delta Toolbar) - C:\Users\genz\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.4
CHR Extension: (Plus-HD-2.6) - C:\Users\genz\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.24.50_0
CHR HKLM-x32\...\Chrome\Extension: [abfmigjiaapipflmopkaaooigcjjdojh] - C:\Program Files (x86)\LyricsContainer\133.crx

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-30] (Avira Operations GmbH & Co. KG)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-11] (Seiko Epson Corporation)
S2 LVSrvLauncher; C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe [173344 2007-02-06] (Logitech Inc.)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-30] (Avira Operations GmbH & Co. KG)
S3 LVcKap64; C:\Windows\System32\DRIVERS\LVcKap64.sys [1013024 2007-02-06] (Logitech Inc.)
R3 LVMVDrv; C:\Windows\System32\DRIVERS\LVMVDrv.sys [2346016 2007-02-06] (Logitech Inc.)
R3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2Mon.sys [31520 2007-02-06] ()

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-02 16:39 - 2014-01-02 16:39 - 00018110 _____ C:\Users\genz\Downloads\FRST.txt
2014-01-02 16:39 - 2014-01-02 16:39 - 00000000 ____D C:\FRST
2014-01-02 16:38 - 2014-01-02 16:38 - 00377856 _____ C:\Users\genz\Downloads\gmer_2.1.19163.exe
2014-01-02 16:37 - 2014-01-02 16:38 - 01931426 _____ (Farbar) C:\Users\genz\Downloads\FRST64.exe
2014-01-02 16:36 - 2014-01-02 16:36 - 00000470 _____ C:\Users\genz\Downloads\defogger_disable.log
2014-01-02 16:36 - 2014-01-02 16:36 - 00000000 _____ C:\Users\genz\defogger_reenable
2014-01-02 16:34 - 2014-01-02 16:34 - 00050477 _____ C:\Users\genz\Downloads\Defogger.exe
2013-12-30 14:32 - 2013-12-30 14:32 - 00000000 ____D C:\Users\genz\AppData\Local\{4BB5F4A6-14A4-468F-B963-AE1C2E9FB505}
2013-12-30 14:29 - 2013-12-30 14:29 - 00000000 ____D C:\Users\genz\AppData\Local\{ED536C90-B241-4273-8F82-012173305681}
2013-12-17 19:12 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-17 19:12 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-17 19:12 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-17 19:12 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-17 19:12 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-17 19:12 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-17 19:12 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-17 19:12 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-17 19:12 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-17 19:12 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-17 19:12 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-17 19:12 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-17 19:12 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-17 19:12 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-17 19:12 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-17 19:12 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-17 19:12 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-17 19:12 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-17 19:12 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-17 19:12 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-17 19:12 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-17 19:12 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-17 19:12 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-17 19:12 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-17 19:12 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-17 19:12 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-17 19:12 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-17 19:12 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-17 19:12 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-17 19:12 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-17 19:12 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-17 18:40 - 2013-12-17 18:41 - 01069568 _____ (Solid State Networks) C:\Users\genz\Downloads\install_reader11_de_mssa_aaa_aih.exe
2013-12-14 19:12 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-12-14 19:10 - 2013-12-14 19:10 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-14 19:10 - 2013-12-14 19:10 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-14 19:09 - 2013-12-14 19:09 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-14 19:09 - 2013-12-14 19:09 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-14 19:09 - 2013-12-14 19:09 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-14 19:09 - 2013-12-14 19:09 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-14 19:09 - 2013-12-14 19:09 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-14 19:09 - 2013-12-14 19:09 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-14 19:08 - 2013-12-14 19:13 - 00010277 _____ C:\Windows\IE11_main.log
2013-12-14 15:01 - 2013-12-14 15:01 - 00000000 ____D C:\Users\genz\AppData\Local\{7BA168D4-15A6-4C21-8D01-76F7F8AAD975}
2013-12-13 10:11 - 2013-12-13 10:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-12 16:31 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-12 16:31 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-12 16:31 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-12 16:31 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-12 16:11 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-12 16:11 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-12 16:11 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-12 16:10 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-12 16:10 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-12 16:10 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-12 16:10 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-12 16:10 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-12 16:10 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-12 16:10 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-12 16:10 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-12 16:10 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-12 16:10 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-12 16:10 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-12 16:10 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-12 16:10 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-12 16:10 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-12 16:10 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-12 16:10 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

==================== One Month Modified Files and Folders =======

2014-01-02 16:39 - 2014-01-02 16:39 - 00018110 _____ C:\Users\genz\Downloads\FRST.txt
2014-01-02 16:39 - 2014-01-02 16:39 - 00000000 ____D C:\FRST
2014-01-02 16:38 - 2014-01-02 16:38 - 00377856 _____ C:\Users\genz\Downloads\gmer_2.1.19163.exe
2014-01-02 16:38 - 2014-01-02 16:37 - 01931426 _____ (Farbar) C:\Users\genz\Downloads\FRST64.exe
2014-01-02 16:36 - 2014-01-02 16:36 - 00000470 _____ C:\Users\genz\Downloads\defogger_disable.log
2014-01-02 16:36 - 2014-01-02 16:36 - 00000000 _____ C:\Users\genz\defogger_reenable
2014-01-02 16:36 - 2011-12-27 16:44 - 00000000 ____D C:\Users\genz
2014-01-02 16:34 - 2014-01-02 16:34 - 00050477 _____ C:\Users\genz\Downloads\Defogger.exe
2014-01-02 16:20 - 2011-12-27 17:14 - 00000000 ____D C:\Users\genz\AppData\Roaming\Skype
2014-01-02 16:14 - 2012-05-02 07:22 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-02 15:31 - 2011-12-27 16:39 - 01937933 _____ C:\Windows\WindowsUpdate.log
2014-01-02 15:01 - 2013-07-13 14:05 - 00000406 _____ C:\Windows\Tasks\LyricsContainer Update.job
2014-01-02 14:25 - 2013-01-10 19:56 - 00000000 ____D C:\Users\genz\Desktop\Feuerwehr
2014-01-02 14:25 - 2009-07-14 05:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-02 14:25 - 2009-07-14 05:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-02 14:19 - 2013-04-05 11:39 - 00000000 ____D C:\Users\genz\AppData\Roaming\Dropbox
2014-01-02 14:19 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2014-01-02 14:18 - 2013-10-05 18:56 - 00001288 _____ C:\Windows\Tasks\Plus-HD-2.6-updater.job
2014-01-02 14:18 - 2013-04-05 11:43 - 00000000 ___RD C:\Users\genz\Dropbox
2014-01-02 14:17 - 2013-10-05 18:56 - 00001900 _____ C:\Windows\Tasks\Plus-HD-2.6-chromeinstaller.job
2014-01-02 14:17 - 2013-10-05 18:56 - 00001824 _____ C:\Windows\Tasks\Plus-HD-2.6-firefoxinstaller.job
2014-01-02 14:17 - 2013-10-05 18:56 - 00001264 _____ C:\Windows\Tasks\Pricora-updater.job
2014-01-02 14:17 - 2013-10-05 18:56 - 00001192 _____ C:\Windows\Tasks\Plus-HD-2.6-codedownloader.job
2014-01-02 14:17 - 2013-10-05 18:56 - 00001168 _____ C:\Windows\Tasks\Pricora-codedownloader.job
2014-01-02 14:17 - 2013-10-05 18:56 - 00001092 _____ C:\Windows\Tasks\Plus-HD-2.6-enabler.job
2014-01-02 14:17 - 2013-10-05 18:56 - 00001068 _____ C:\Windows\Tasks\Pricora-enabler.job
2014-01-02 14:17 - 2013-10-05 18:55 - 00001868 _____ C:\Windows\Tasks\Pricora-chromeinstaller.job
2014-01-02 14:17 - 2013-10-05 18:55 - 00001792 _____ C:\Windows\Tasks\Pricora-firefoxinstaller.job
2014-01-02 14:17 - 2011-12-31 14:46 - 00000000 _____ C:\Windows\system32\Drivers\lvuvc.hs
2014-01-02 14:17 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-02 14:17 - 2009-07-14 05:51 - 00186411 _____ C:\Windows\setupact.log
2013-12-30 18:26 - 2013-09-29 13:46 - 00000000 ____D C:\Users\genz\AppData\Roaming\Epson
2013-12-30 14:32 - 2013-12-30 14:32 - 00000000 ____D C:\Users\genz\AppData\Local\{4BB5F4A6-14A4-468F-B963-AE1C2E9FB505}
2013-12-30 14:29 - 2013-12-30 14:29 - 00000000 ____D C:\Users\genz\AppData\Local\{ED536C90-B241-4273-8F82-012173305681}
2013-12-26 21:17 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-26 15:23 - 2011-03-11 10:20 - 00654602 _____ C:\Windows\system32\perfh007.dat
2013-12-26 15:23 - 2011-03-11 10:20 - 00130216 _____ C:\Windows\system32\perfc007.dat
2013-12-26 15:23 - 2009-07-14 06:13 - 01500294 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-19 18:34 - 2013-05-07 15:23 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-19 18:34 - 2013-03-29 13:05 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-19 18:34 - 2013-03-29 13:05 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-17 19:12 - 2013-08-15 19:44 - 00000000 ____D C:\Windows\system32\MRT
2013-12-17 19:11 - 2011-03-14 15:08 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-17 18:41 - 2013-12-17 18:40 - 01069568 _____ (Solid State Networks) C:\Users\genz\Downloads\install_reader11_de_mssa_aaa_aih.exe
2013-12-17 16:44 - 2011-12-27 16:45 - 00001425 _____ C:\Users\genz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-17 16:42 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-14 19:13 - 2013-12-14 19:08 - 00010277 _____ C:\Windows\IE11_main.log
2013-12-14 19:10 - 2013-12-14 19:10 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-14 19:10 - 2013-12-14 19:10 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-14 19:09 - 2013-12-14 19:09 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-14 19:09 - 2013-12-14 19:09 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-14 19:09 - 2013-12-14 19:09 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-14 19:09 - 2013-12-14 19:09 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-14 19:09 - 2013-12-14 19:09 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-14 19:09 - 2013-12-14 19:09 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-14 15:01 - 2013-12-14 15:01 - 00000000 ____D C:\Users\genz\AppData\Local\{7BA168D4-15A6-4C21-8D01-76F7F8AAD975}
2013-12-14 14:53 - 2013-04-05 11:24 - 00000367 _____ C:\Users\genz\Sti_Trace.log
2013-12-14 14:50 - 2012-04-28 07:57 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-13 10:11 - 2013-12-13 10:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-13 09:48 - 2012-01-30 12:04 - 00000000 ____D C:\Users\genz\AppData\Local\Windows Live
2013-12-13 08:14 - 2012-05-02 07:22 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-13 08:14 - 2012-05-02 07:22 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-13 08:14 - 2011-08-22 18:09 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-13 07:43 - 2009-07-14 05:45 - 00309512 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-12 15:55 - 2011-12-27 17:14 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-12-12 15:55 - 2011-12-27 17:14 - 00000000 ____D C:\ProgramData\Skype

Some content of TEMP:
====================
C:\Users\genz\AppData\Local\Temp\ApnStub.exe
C:\Users\genz\AppData\Local\Temp\avgnt.exe
C:\Users\genz\AppData\Local\Temp\bootstrapper.exe
C:\Users\genz\AppData\Local\Temp\chatzum_softonic_yahoo_61.exe
C:\Users\genz\AppData\Local\Temp\contentDATs.exe
C:\Users\genz\AppData\Local\Temp\install_reader10_de_mssa_aih.exe
C:\Users\genz\AppData\Local\Temp\jre-6u31-windows-i586-iftw-rv.exe
C:\Users\genz\AppData\Local\Temp\jre-6u32-windows-i586-iftw.exe
C:\Users\genz\AppData\Local\Temp\jre-6u34-windows-i586-iftw.exe
C:\Users\genz\AppData\Local\Temp\jre-6u35-windows-i586-iftw.exe
C:\Users\genz\AppData\Local\Temp\jre-6u37-windows-i586-iftw.exe
C:\Users\genz\AppData\Local\Temp\jre-6u39-windows-i586-iftw.exe
C:\Users\genz\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\genz\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\genz\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\genz\AppData\Local\Temp\SecurityScan_Release.exe
C:\Users\genz\AppData\Local\Temp\setup.exe
C:\Users\genz\AppData\Local\Temp\SHSetup.exe
C:\Users\genz\AppData\Local\Temp\silent_pricora_DE.exe
C:\Users\genz\AppData\Local\Temp\SkypeSetup.exe
C:\Users\genz\AppData\Local\Temp\SymcPCCUInstaller.exe
C:\Users\genz\AppData\Local\Temp\uninst1.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-30 16:32

==================== End Of Log ============================
addition

Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-01-2014 01
Ran by genz at 2014-01-02 16:40:06
Running from C:\Users\genz\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Adobe Acrobat 4.0 (x32 Version:  - )
Adobe AIR (x32 Version: 2.7.1.19610 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 2.7.1.19610 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Reader X (10.1.8) - Deutsch (x32 Version: 10.1.8 - Adobe Systems Incorporated)
AMD APP SDK Runtime (Version: 2.5.732.1 - Advanced Micro Devices Inc.) Hidden
AMD AVIVO64 Codecs (Version: 11.6.0.10914 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Install Manager (Version: 3.0.842.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.60914.1136 - Advanced Micro Devices, Inc.) Hidden
Apple Application Support (x32 Version: 2.3.4 - Apple Inc.)
Apple Mobile Device Support (Version: 6.1.0.13 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
Asmedia ASM104x USB 3.0 Host Controller Driver (x32 Version: 1.12.5.0 - Asmedia Technology)
Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)
Bejeweled Twist (x32 Version:  - PopCap Games)
BEWERBUNGSMASTER (C:\Program Files (x86)\BEWERBUNGSMASTER\) (x32 Version:  - )
BEWERBUNGSMASTER (x32 Version:  - )
Bonjour (Version: 3.0.0.10 - Apple Inc.)
Canon Inkjet Printer Driver Add-On Module V2.00 (Version:  - )
Canon MP510 (Version:  - )
Canon My Printer (x32 Version:  - )
Catalyst Control Center (x32 Version: 2011.0908.1355.23115 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2011.0908.1355.23115 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2011.0908.1355.23115 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2011.0908.1354.23115 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2011.0908.1354.23115 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2011.0908.1354.23115 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2011.0908.1354.23115 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2011.0908.1354.23115 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2011.0908.1354.23115 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2011.0908.1354.23115 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2011.0908.1354.23115 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2011.0908.1354.23115 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2011.0908.1354.23115 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2011.0908.1354.23115 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2011.0908.1355.23115 - Advanced Micro Devices, Inc.) Hidden
CyberLink LabelPrint (x32 Version: 2.5.3624 - CyberLink Corp.)
CyberLink LabelPrint (x32 Version: 2.5.3624 - CyberLink Corp.) Hidden
CyberLink Power2Go (x32 Version: 7.0.0.1327 - CyberLink Corp.)
CyberLink Power2Go (x32 Version: 7.0.0.1327 - CyberLink Corp.) Hidden
CyberLink PowerDVD Copy (x32 Version: 1.5.1306 - CyberLink Corp.)
CyberLink PowerDVD Copy (x32 Version: 1.5.1306 - CyberLink Corp.) Hidden
CyberLink PowerRecover (x32 Version: 5.5.4125 - CyberLink Corp.)
CyberLink PowerRecover (x32 Version: 5.5.4125 - CyberLink Corp.) Hidden
CyberLink WaveEditor (x32 Version: 1.0.1.2821 - CyberLink Corp.)
CyberLink WaveEditor (x32 Version: 1.0.1.2821 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DriverBoost (x32 Version: 7 - DriverBoost)
Dropbox (HKCU Version: 2.0.22 - Dropbox, Inc.)
Einstellungstest-Trainer 6.0 (x32 Version: 6.0.0.126 - BestLogic)
Epson Benutzerhandbuch WF-2530 Series (x32 Version:  - )
Epson Connect Guide (x32 Version:  - )
Epson Easy Photo Print 2 (x32 Version: 2.4.0.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (x32 Version: 1.00.0000 - SEIKO EPSON CORPORATION2)
Epson Event Manager (x32 Version: 3.01.0005 - Seiko Epson Corporation)
Epson FAX Utility (x32 Version: 1.31.00 - SEIKO EPSON CORPORATION)
Epson Netzwerkhandbuch WF-2530 Series (x32 Version:  - )
Epson PC-FAX Driver (x32 Version:  - )
EPSON Scan (x32 Version:  - Seiko Epson Corporation)
EPSON WF-2530 Series Printer Uninstall (Version:  - SEIKO EPSON Corporation)
EpsonNet Print (x32 Version: 2.6.0 - SEIKO EPSON CORPORATION)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
GalerÃ*a fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
iCloud (Version: 2.1.2.8 - Apple Inc.)
Intel(R) Control Center (x32 Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Rapid Storage Technology (x32 Version: 10.6.0.1002 - Intel Corporation)
iTunes (Version: 11.0.3.42 - Apple Inc.)
Jagen 2011 (x32 Version: 1.00.0000 - Valusoft)
Java 7 Update 25 (x32 Version: 7.0.250 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden
Landwirtschafts-Simulator 2009 Gold (x32 Version:  - GIANTS Software)
Logitech Audio Echo Cancellation Component for 64-bit Windows (Version: 10.51.2027 - Logitech Inc.) Hidden
Logitech QuickCam (Version: 10.51.2029 - Logitech Inc.)
Logitech Video Enumerator (x32 Version: 10.51.2027 - Logitech Inc.) Hidden
Logitech® Camera-Treiber (x32 Version:  - )
LyricsContainer (x32 Version:  - RYD Software) <==== ATTENTION
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Medion Home Cinema (x32 Version: 8.0.3216 - CyberLink Corp.)
Medion Home Cinema (x32 Version: 8.0.3216 - CyberLink Corp.) Hidden
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
MVisn64 (Version: 10.51.2027 - Logitech Inc.) Hidden
NVIDIA PhysX (x32 Version: 9.10.0513 - NVIDIA Corporation)
OpenOffice.org 3.3 (x32 Version: 3.3.9567 - OpenOffice.org)
PaperPort (x32 Version: 9.02.0823 - ScanSoft, Inc.)
Pflanzen gegen Zombies (x32 Version:  - PopCap Games)
PhotoScape (x32 Version:  - )
PlayReady PC Runtime amd64 (Version: 1.3.0 - Microsoft Corporation)
Plus-HD-2.6 (x32 Version: 1.28.153.1 - Plus HD) <==== ATTENTION
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Pricora (x32 Version: 1.28.153.2 - Corporate Inc) <==== ATTENTION
ProtectDisc Driver, Version 11 (x32 Version: 11.0.0.14 - ProtectDisc Software GmbH)
QuickTime (x32 Version: 7.73.80.64 - Apple Inc.)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (x32 Version: 7.46.610.2011 - Realtek)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6438 - Realtek Semiconductor Corp.)
Skype Click to Call (x32 Version: 5.9.9216 - Skype Technologies S.A.)
Skypeâ„¢ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)
TeamViewer 7 (x32 Version: 7.0.15723 - TeamViewer)
Unity Web Player (HKCU Version:  - Unity Technologies ApS)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
VLC media player 1.1.11 (x32 Version: 1.1.11 - VideoLAN)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3538.0513 - Microsoft Corporation)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live FotoÄŸraf Galerisi (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotótár (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
WinRAR 4.01 (32-Bit) (x32 Version: 4.01.0 - win.rar GmbH)
Zuma (x32 Version:  - PopCap Games)
Συλλογή φωτογ�αφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Restore Points  =========================

20-10-2013 15:10:37 Geplanter Prüfpunkt
02-11-2013 14:47:07 Geplanter Prüfpunkt
10-11-2013 10:30:13 Geplanter Prüfpunkt
18-11-2013 18:23:50 Geplanter Prüfpunkt
18-11-2013 18:28:34 Windows Update
30-11-2013 16:08:09 Geplanter Prüfpunkt
12-12-2013 15:29:17 Windows Update
14-12-2013 18:07:48 Windows Update
17-12-2013 18:10:51 Windows Update
26-12-2013 20:16:21 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {070F1EFB-F1ED-43EE-9F27-927CCF1157B9} - System32\Tasks\Pricora-codedownloader => C:\Program Files (x86)\Pricora\Pricora-codedownloader.exe [2013-10-05] (Corporate Inc) <==== ATTENTION
Task: {11FB1A62-C720-45F9-A5C1-830B5A7C3C47} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-13] (Adobe Systems Incorporated)
Task: {1D6A162B-4337-476B-B7B9-F37E64814E44} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {24D3A466-8B19-40CB-B3E8-6332EEBEC444} - System32\Tasks\LyricsContainer Update => C:\Program Files (x86)\LyricsContainer\LrcsCtrUpdr.exe <==== ATTENTION
Task: {70510374-F12E-4562-B4AB-5960736FF107} - System32\Tasks\Pricora-firefoxinstaller => C:\Program Files (x86)\Pricora\Pricora-firefoxinstaller.exe [2013-10-05] (Corporate Inc) <==== ATTENTION
Task: {79446154-5327-4F36-934D-298A18D07D3E} - System32\Tasks\Pricora-enabler => C:\Program Files (x86)\Pricora\Pricora-enabler.exe [2013-10-16] (Corporate Inc) <==== ATTENTION
Task: {95F80218-43FD-4A89-BDA0-A87242F57629} - System32\Tasks\Plus-HD-2.6-codedownloader => C:\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-codedownloader.exe [2013-10-05] (Plus HD) <==== ATTENTION
Task: {AA9FC572-9B1B-4544-BCCA-98E82C1D90A2} - System32\Tasks\Plus-HD-2.6-enabler => C:\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-enabler.exe <==== ATTENTION
Task: {B326316C-6648-47C6-9333-DCD5787718F4} - System32\Tasks\Plus-HD-2.6-firefoxinstaller => C:\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-firefoxinstaller.exe [2013-10-05] (Plus HD) <==== ATTENTION
Task: {B4A7EC0B-1232-4DC4-8877-76FD5D109B12} - System32\Tasks\Pricora-chromeinstaller => C:\Program Files (x86)\Pricora\Pricora-chromeinstaller.exe [2013-10-05] (Corporate Inc) <==== ATTENTION
Task: {CAB10BAA-6AC6-4750-88D2-6A3FB2269D12} - System32\Tasks\Pricora-updater => C:\Program Files (x86)\Pricora\Pricora-updater.exe [2013-10-05] (Corporate Inc) <==== ATTENTION
Task: {F53A4B1D-764E-44FB-81B8-99A1D609CB48} - System32\Tasks\Plus-HD-2.6-chromeinstaller => C:\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-chromeinstaller.exe [2013-10-05] (Plus HD) <==== ATTENTION
Task: {F8B8EAFA-813A-4215-8047-FA62EF087053} - System32\Tasks\Plus-HD-2.6-updater => C:\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-updater.exe [2013-10-05] (Plus HD) <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe <==== ATTENTION
Task: C:\Windows\Tasks\LyricsContainer Update.job => C:\Program Files (x86)\LyricsContainer\LrcsCtrUpdr.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-2.6-chromeinstaller.job => C:\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-chromeinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-2.6-codedownloader.job => C:\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-2.6-enabler.job => C:\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-2.6-firefoxinstaller.job => C:\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-firefoxinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-2.6-updater.job => C:\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-updater.exe <==== ATTENTION
Task: C:\Windows\Tasks\Pricora-chromeinstaller.job => C:\Program Files (x86)\Pricora\Pricora-chromeinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Pricora-codedownloader.job => C:\Program Files (x86)\Pricora\Pricora-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\Pricora-enabler.job => C:\Program Files (x86)\Pricora\Pricora-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\Pricora-firefoxinstaller.job => C:\Program Files (x86)\Pricora\Pricora-firefoxinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Pricora-updater.job => C:\Program Files (x86)\Pricora\Pricora-updater.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2013-04-05 11:58 - 2013-04-05 11:58 - 00954696 _____ () C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll
2011-12-27 17:44 - 2011-05-28 22:05 - 00164864 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll
2011-09-08 21:53 - 2011-09-08 21:53 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2012-11-07 19:36 - 2012-09-19 19:17 - 00397088 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2012-11-28 14:13 - 2012-11-28 14:13 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-11-28 14:13 - 2012-11-28 14:13 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-03-13 21:48 - 2013-03-13 21:48 - 24978944 _____ () C:\Users\genz\AppData\Roaming\Dropbox\bin\libcef.dll
2010-08-03 23:39 - 2010-08-03 23:39 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2010-08-03 23:39 - 2010-08-03 23:39 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2007-02-08 01:13 - 2007-02-08 01:13 - 00022040 _____ () C:\Program Files (x86)\Common Files\LogiShrd\LComMgr\LCMServerPS.dll
2007-02-08 01:18 - 2007-02-08 01:18 - 01123864 _____ () C:\Program Files (x86)\Logitech\QuickCam10\LAppRes.dll
2011-01-17 15:19 - 2012-04-08 18:23 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2010-11-19 17:45 - 2012-04-08 18:23 - 00170496 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxslt.dll
2013-08-26 15:32 - 2013-08-26 15:32 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\1beb84c27c2edeb38839916524b9df4d\IsdiInterop.ni.dll
2011-08-22 17:03 - 2011-05-20 18:05 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2013-12-13 10:11 - 2013-12-13 10:11 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-12-13 08:14 - 2013-12-13 08:14 - 16242056 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/02/2014 04:37:24 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (01/02/2014 04:37:24 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (01/02/2014 04:37:24 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (01/02/2014 04:37:24 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (01/02/2014 02:19:22 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/30/2013 08:02:13 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/30/2013 02:07:55 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/29/2013 05:36:26 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/28/2013 05:59:14 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/26/2013 03:18:09 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (12/13/2013 07:42:27 AM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT)
Description: Fehler bei der CBS-Clientinitialisierung. Letzter Fehler: 0x8007045b

Error: (11/20/2013 02:14:10 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Microsoft .NET Framework NGEN v4.0.30319_X86" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/20/2013 02:14:04 PM) (Source: WMPNetworkSvc) (User: )
Description: WMPNetworkSvc0x80070420

Error: (11/15/2013 09:13:15 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Diagnosesystemhost" wurde mit folgendem Fehler beendet:
%%1052

Error: (11/15/2013 09:13:14 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Diagnosediensthost" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069

Error: (11/15/2013 09:13:14 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WdiServiceHost" konnte sich nicht als "NT AUTHORITY\LocalService" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%50

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (11/15/2013 09:13:14 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Diagnosediensthost" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069

Error: (11/15/2013 09:13:14 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WdiServiceHost" konnte sich nicht als "NT AUTHORITY\LocalService" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%50

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (11/15/2013 09:13:14 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Diagnosediensthost" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069

Error: (11/15/2013 09:13:14 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WdiServiceHost" konnte sich nicht als "NT AUTHORITY\LocalService" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%50

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).


Microsoft Office Sessions:
=========================
Error: (01/02/2014 04:37:24 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Users\genz\Downloads\SoftonicDownloader_fuer_parents-friend.exe

Error: (01/02/2014 04:37:24 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\genz\Downloads\SoftonicDownloader_fuer_ruschi.exe

Error: (01/02/2014 04:37:24 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Users\genz\Downloads\SoftonicDownloader_fuer_photoscape.exe

Error: (01/02/2014 04:37:24 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Users\genz\Downloads\SoftonicDownloader_fuer_dvdisaster.exe

Error: (01/02/2014 02:19:22 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/30/2013 08:02:13 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/30/2013 02:07:55 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/29/2013 05:36:26 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/28/2013 05:59:14 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/26/2013 03:18:09 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info ===========================

Percentage of memory in use: 63%
Total physical RAM: 4077.64 MB
Available physical RAM: 1506.12 MB
Total Pagefile: 8153.46 MB
Available Pagefile: 5027.13 MB
Total Virtual: 8192 MB
Available Virtual: 8191.79 MB

==================== Drives ================================

Drive c: (Boot) (Fixed) (Total:881.59 GB) (Free:817.67 GB) NTFS
Drive d: (Recover) (Fixed) (Total:48.83 GB) (Free:29.96 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 2BD2C32A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=882 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=49 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1023 MB) - (Type=12)

==================== End Of Log ============================
gmer

Code:
GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2014-01-02 16:50:54
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 WDC_WD10 rev.80.0 931,51GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\genz\AppData\Local\Temp\pwldqpow.sys


---- Kernel code sections - GMER 2.1 ----

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 727                                                                                    fffff800035a20c7 56 bytes {MOV EBX, EAX; JMP 0x9}

---- User code sections - GMER 2.1 ----

.text    C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[2804] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69  0000000075dc1465 2 bytes [DC, 75]
.text    C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[2804] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  0000000075dc14bb 2 bytes [DC, 75]
.text    ...                                                                                                                                                    * 2
.text    C:\Users\genz\AppData\Roaming\Dropbox\bin\Dropbox.exe[1388] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 69                                    0000000075dc1465 2 bytes [DC, 75]
.text    C:\Users\genz\AppData\Roaming\Dropbox\bin\Dropbox.exe[1388] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 155                                  0000000075dc14bb 2 bytes [DC, 75]
.text    ...                                                                                                                                                    * 2
.text    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[4496] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                        0000000075dc1465 2 bytes [DC, 75]
.text    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[4496] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                        0000000075dc14bb 2 bytes [DC, 75]
.text    ...                                                                                                                                                    * 2
.text    C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4828] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                    0000000075dc1465 2 bytes [DC, 75]
.text    C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4828] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                  0000000075dc14bb 2 bytes [DC, 75]
.text    ...                                                                                                                                                    * 2
.text    C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe[3212] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                        0000000075dc1465 2 bytes [DC, 75]
.text    C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe[3212] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                        0000000075dc14bb 2 bytes [DC, 75]
.text    ...                                                                                                                                                    * 2

---- User IAT/EAT - GMER 2.1 ----

IAT      C:\Windows\Explorer.EXE[3160] @ C:\Windows\system32\kernel32.dll[ntdll.dll!NtDuplicateObject]                                                          [2083790] C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll
IAT      C:\Windows\Explorer.EXE[3160] @ C:\Windows\system32\kernel32.dll[ntdll.dll!NtDeviceIoControlFile]                                                      [20836b0] C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll
IAT      C:\Windows\Explorer.EXE[3160] @ C:\Windows\system32\kernel32.dll[ntdll.dll!NtClose]                                                                    [2083820] C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll
IAT      C:\Windows\Explorer.EXE[3160] @ C:\Windows\system32\kernel32.dll[ntdll.dll!NtCreateFile]                                                              [2083be0] C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll
IAT      C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe[3444] @ C:\Windows\system32\kernel32.dll[ntdll.dll!NtDuplicateObject]                                  [323790] C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll
IAT      C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe[3444] @ C:\Windows\system32\kernel32.dll[ntdll.dll!NtDeviceIoControlFile]                              [3236b0] C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll
IAT      C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe[3444] @ C:\Windows\system32\kernel32.dll[ntdll.dll!NtClose]                                            [323820] C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll
IAT      C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe[3444] @ C:\Windows\system32\kernel32.dll[ntdll.dll!NtCreateFile]                                      [323be0] C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll
IAT      C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE[3292] @ C:\Windows\system32\kernel32.dll[ntdll.dll!NtDuplicateObject]                                    [413790] C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll
IAT      C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE[3292] @ C:\Windows\system32\kernel32.dll[ntdll.dll!NtDeviceIoControlFile]                                [4136b0] C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll
IAT      C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE[3292] @ C:\Windows\system32\kernel32.dll[ntdll.dll!NtClose]                                              [413820] C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll
IAT      C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE[3292] @ C:\Windows\system32\kernel32.dll[ntdll.dll!NtCreateFile]                                          [413be0] C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll
IAT      C:\Windows\System32\spool\drivers\x64\3\E_YATIIVE.EXE[2996] @ C:\Windows\system32\kernel32.dll[ntdll.dll!NtDuplicateObject]                            [113790] C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll
IAT      C:\Windows\System32\spool\drivers\x64\3\E_YATIIVE.EXE[2996] @ C:\Windows\system32\kernel32.dll[ntdll.dll!NtDeviceIoControlFile]                        [1136b0] C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll
IAT      C:\Windows\System32\spool\drivers\x64\3\E_YATIIVE.EXE[2996] @ C:\Windows\system32\kernel32.dll[ntdll.dll!NtClose]                                      [113820] C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll
IAT      C:\Windows\System32\spool\drivers\x64\3\E_YATIIVE.EXE[2996] @ C:\Windows\system32\kernel32.dll[ntdll.dll!NtCreateFile]                                [113be0] C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll
IAT      C:\Program Files\Windows Sidebar\sidebar.exe[3008] @ C:\Windows\system32\kernel32.dll[ntdll.dll!NtDuplicateObject]                                    [2453790] C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll
IAT      C:\Program Files\Windows Sidebar\sidebar.exe[3008] @ C:\Windows\system32\kernel32.dll[ntdll.dll!NtDeviceIoControlFile]                                [24536b0] C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll
IAT      C:\Program Files\Windows Sidebar\sidebar.exe[3008] @ C:\Windows\system32\kernel32.dll[ntdll.dll!NtClose]                                              [2453820] C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll
IAT      C:\Program Files\Windows Sidebar\sidebar.exe[3008] @ C:\Windows\system32\kernel32.dll[ntdll.dll!NtCreateFile]                                          [2453be0] C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll
IAT      C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4112] @ C:\Windows\system32\KERNEL32.dll[ntdll.dll!NtDuplicateObject]              [803790] C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll
IAT      C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4112] @ C:\Windows\system32\KERNEL32.dll[ntdll.dll!NtDeviceIoControlFile]          [8036b0] C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll
IAT      C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4112] @ C:\Windows\system32\KERNEL32.dll[ntdll.dll!NtClose]                        [803820] C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll
IAT      C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4112] @ C:\Windows\system32\KERNEL32.dll[ntdll.dll!NtCreateFile]                  [803be0] C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll
IAT      C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[5576] @ C:\Windows\system32\KERNEL32.dll[ntdll.dll!NtDuplicateObject]              [553790] C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll
IAT      C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[5576] @ C:\Windows\system32\KERNEL32.dll[ntdll.dll!NtDeviceIoControlFile]          [5536b0] C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll
IAT      C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[5576] @ C:\Windows\system32\KERNEL32.dll[ntdll.dll!NtClose]                        [553820] C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll
IAT      C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[5576] @ C:\Windows\system32\KERNEL32.dll[ntdll.dll!NtCreateFile]                  [553be0] C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll

---- Disk sectors - GMER 2.1 ----

Disk      \Device\Harddisk0\DR0                                                                                                                                  unknown MBR code

---- EOF - GMER 2.1 ----

M-K-D-B 02.01.2014 17:36
:hallo:


Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.


Bitte beachte folgende Hinweise:
  • Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
  • Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags.
  • Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
  • Solltest du mir nicht innerhalb von 4 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo.
    Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
  • Während der Bereinigung bitte nichts installieren oder deinstallieren, außer ich bitte dich darum!
  • Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort zu starten!
    Ich kann Dir niemals eine Garantie geben, dass auch ich alles finde. Eine Formatierung ist meist der schnellere und immer der sicherste Weg.
    Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis dir jemand vom Team sagt, dass Du clean bist.





Schritt 1
Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).





Schritt 2

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.






Schritt 3
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.






Bitte poste mit deiner nächsten Antwort
  • die Logdatei von AdwCleaner,
  • die Logdatei von JRT,
  • die Logdatei von MBAM.

Puky88 02.01.2014 18:39
Code:
# AdwCleaner v3.016 - Bericht erstellt am 02/01/2014 um 18:02:59
# Aktualisiert 23/12/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : genz - GENZ-PC
# Gestartet von : C:\Users\genz\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Ask
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\DSearchLink
Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\Program Files (x86)\ChatZum Toolbar
Ordner Gelöscht : C:\Program Files (x86)\LyricsContainer
Ordner Gelöscht : C:\Program Files (x86)\Plus-HD-2.6
Ordner Gelöscht : C:\Program Files (x86)\Pricora
Ordner Gelöscht : C:\Users\genz\AppData\Local\Temp\AskSearch
Ordner Gelöscht : C:\Users\genz\AppData\LocalLow\Delta
Ordner Gelöscht : C:\Users\genz\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\Extensions\125
Ordner Gelöscht : C:\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com
Ordner Gelöscht : C:\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\Extensions\94ae0976-89df-4347-9771-5371c6e203bf@3796dc63-d06d-4575-a997-9b5c935fe915.com
Ordner Gelöscht : C:\Users\genz\AppData\Local\Google\Chrome\User Data\Default\Extensions\abfmigjiaapipflmopkaaooigcjjdojh
Ordner Gelöscht : C:\Users\genz\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff
Ordner Gelöscht : C:\Users\genz\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Ordner Gelöscht : C:\Users\genz\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl
Datei Gelöscht : C:\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\invalidprefs.js
Datei Gelöscht : C:\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\searchplugins\Askcom.xml
Datei Gelöscht : C:\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\searchplugins\bingp.xml
Datei Gelöscht : C:\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\searchplugins\ChatZum.xml
Datei Gelöscht : C:\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\searchplugins\delta.xml
Datei Gelöscht : C:\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\user.js
Datei Gelöscht : C:\Windows\Tasks\LyricsContainer Update.job
Datei Gelöscht : C:\Windows\System32\Tasks\LyricsContainer Update
Datei Gelöscht : C:\Windows\Tasks\Plus-HD-2.6-chromeinstaller.job
Datei Gelöscht : C:\Windows\System32\Tasks\Plus-HD-2.6-chromeinstaller
Datei Gelöscht : C:\Windows\Tasks\Plus-HD-2.6-codedownloader.job
Datei Gelöscht : C:\Windows\System32\Tasks\Plus-HD-2.6-codedownloader
Datei Gelöscht : C:\Windows\Tasks\Plus-HD-2.6-enabler.job
Datei Gelöscht : C:\Windows\System32\Tasks\Plus-HD-2.6-enabler
Datei Gelöscht : C:\Windows\Tasks\Plus-HD-2.6-firefoxinstaller.job
Datei Gelöscht : C:\Windows\System32\Tasks\Plus-HD-2.6-firefoxinstaller
Datei Gelöscht : C:\Windows\Tasks\Plus-HD-2.6-updater.job
Datei Gelöscht : C:\Windows\System32\Tasks\Plus-HD-2.6-updater
Datei Gelöscht : C:\Windows\Tasks\Pricora-chromeinstaller.job
Datei Gelöscht : C:\Windows\System32\Tasks\Pricora-chromeinstaller
Datei Gelöscht : C:\Windows\Tasks\Pricora-codedownloader.job
Datei Gelöscht : C:\Windows\System32\Tasks\Pricora-codedownloader
Datei Gelöscht : C:\Windows\Tasks\Pricora-enabler.job
Datei Gelöscht : C:\Windows\System32\Tasks\Pricora-enabler
Datei Gelöscht : C:\Windows\Tasks\Pricora-firefoxinstaller.job
Datei Gelöscht : C:\Windows\System32\Tasks\Pricora-firefoxinstaller
Datei Gelöscht : C:\Windows\Tasks\Pricora-updater.job
Datei Gelöscht : C:\Windows\System32\Tasks\Pricora-updater

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\abfmigjiaapipflmopkaaooigcjjdojh
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0033440.BHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0033440.BHO.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0033440.Sandbox
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0033440.Sandbox.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0035329.BHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0035329.BHO.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0035329.Sandbox
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0035329.Sandbox.1
Schlüssel Gelöscht : HKLM\SOFTWARE\5e08cdebd6ae444
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_dvdisaster_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_dvdisaster_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_parents-friend_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_parents-friend_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_photoscape_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_photoscape_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311341140}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311531129}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322342240}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322532229}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355345540}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355535529}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366346640}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366536629}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344344440}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344534429}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311341140}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311531129}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110311341140}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110311531129}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311341140}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311531129}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0b2ab463-83df-46e4-bba5-66d11cbdbaa4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{46676d01-e04c-4a4c-b80d-1518d915e7d0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{57532951-e538-4834-93f7-67eb9a90c886}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a176f743-1f18-457b-8298-1feb2fc3ef62}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d7269bbf-e187-42a1-b2bf-ff0acd5b135c}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{104cd8ec-506f-49a2-bce3-be826c2c160c}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{231f3752-ff48-4fe3-b890-8aa6075685ea}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c17d4f21-38ad-47d2-bd0e-87674c47c6f7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f708ca83-1257-46eb-9ca6-fd34b3a97510}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{feb8c966-2aaf-4ec9-90b4-b86fcafcc94d}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311341140}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311531129}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322342240}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322532229}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355345540}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355535529}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366346640}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366536629}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311341140}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311531129}
Schlüssel Gelöscht : HKCU\Software\BabSolution
Schlüssel Gelöscht : HKCU\Software\ChatZum Toolbar
Schlüssel Gelöscht : HKCU\Software\DataMngr
Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar
Schlüssel Gelöscht : HKCU\Software\delta LTD
Schlüssel Gelöscht : HKCU\Software\Delta
Schlüssel Gelöscht : HKCU\Software\Iminent
Schlüssel Gelöscht : HKCU\Software\installedbrowserextensions
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\LyricsContainer
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Plus-HD-2.6
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Pricora
Schlüssel Gelöscht : HKLM\Software\ChatZum Toolbar
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\Delta
Schlüssel Gelöscht : HKLM\Software\Iminent
Schlüssel Gelöscht : HKLM\Software\Plus-HD-2.6
Schlüssel Gelöscht : HKLM\Software\Pricora
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-2.6
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Pricora
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Mozilla Firefox v26.0 (de)

[ Datei : C:\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\prefs.js ]

Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.InstallationThankYouPage", false);
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.InstallationTime", 1380995841);
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.active", true);
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.addressbar", "NA");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.addressbarenhanced", "");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.asyncdb_dbWasSet", true);
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.asyncdb_dbWasSet_FF25_FIX", true);
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.asyncinternaldb_dbWasSet", true);
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.asyncinternaldb_dbWasSet_FF25_FIX", true);
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.backgroundver", 34);
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.certdomaininstaller", "");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.changeprevious", false);
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie.InstallationTime.value", "1380995841");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie._GPL_aoi.value", "%221383239871%22");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie._GPL_parent_zoneid.value", "%22406029%22");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie._GPL_zoneid.value", "%22406030%22");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie.jw_token.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie.jw_token.value", "%22968c1208-d800-5f0e-4eee-1ea7e48607e0%22");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie.load_balancer.expiration", "Thu Jan 02 2014 20:26:12 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie.load_balancer.value", "%22%7B%20%5C%22Status%5C%22%3A%201%2C%5C%22Endpoint%5C%22%3A%20%5C%2[...]
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie.previous_page.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie.previous_page.value", "%22hxxp%3A//www.trojaner-board.de/147136-verdsacht-maleware-rechner-[...]
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie.user_id.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie.user_id.value", "%2214189c43c46319b902629e8aabe2848b%22");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.description", "Turn YouTube videos to High Definition by default");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.domain", "");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.enablesearch", false);
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.homepage", "");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.iframe", false);
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3A%22154D442FDB6D447C9F0A42E9AB78C[...]
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.InstallerParamsCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.InstallerParamsCache.value", "%7B%22source_id%22%3A%22000131%22%2C%22sub_id%22%3A%220%2[...]
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.InstallerUserIdentifiersCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.InstallerUserIdentifiersCache.value", "%7B%22installer_bic%22%3A%22154D442FDB6D447C9F0A[...]
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_appVer.value", "191");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_lastVersion.value", "39");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_meta.value", "%7B%22tmp/lightbox.css%22%3A%7B%22id%22%3A354659%2C%22ver%22%3A[...]
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_nextCheck.expiration", "Thu Jan 02 2014 20:26:04 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_nextCheck.value", "true");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_queue.value", "%7B%7D");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_remote_resources.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_remote_resources.value", "%7B%22remoteId%22%3A0%7D");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354659.expiration", "Sat Feb 08 2014 10:45:59 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354659.value", "%22.backdrop%5Cr%5Cn%5Ct%5Ct%7B%5Cr%5Cn%5Ct%5Ct%5Ctp[...]
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354660.expiration", "Sat Feb 08 2014 10:45:59 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354660.value", "%22%3Cdiv%20id%3D%5C%22%3C%25%3DdialogId%25%3E_dialo[...]
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354661.expiration", "Sat Feb 08 2014 10:45:59 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354661.value", "%22/*%21%20jQuery%20UI%20-%20v1.10.3%20-%202013-05-0[...]
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354662.expiration", "Sat Feb 08 2014 10:45:59 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354662.value", "%22%5Cr%5Cn//%5Ctfunction%20close_box%28%29%5Cr%5Cn/[...]
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354663.expiration", "Sat Feb 08 2014 10:45:59 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354663.value", "%22%3F%20Optional%20-%20add%20localization%20support[...]
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354664.expiration", "Sat Feb 08 2014 10:45:59 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354664.value", "%22%5Ct%5Ct//UA-43911980-1%5Cr%5Cn%5Ct%5Ct//appAPI.a[...]
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354666.expiration", "Sat Feb 08 2014 10:45:59 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354666.value", "%22%7B%5Cr%5Cn%5C%22mobile%5C%22%3A%5B%5C%22com.ea.g[...]
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354667.expiration", "Sat Feb 08 2014 10:45:59 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354667.value", "%22%7B%5Cr%5Cn%5C%22youtube.com%5C%22%3A%5B%5C%22com[...]
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354668.expiration", "Sat Feb 08 2014 10:45:59 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354668.value", "%22%5B%5Cr%5Cn%5Ct%5Ct%7B%5Cr%5Cn%5Ct%5Ct%5Ct%5C%22i[...]
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354671.expiration", "Sat Feb 08 2014 10:45:59 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354671.value", "%22%3Cdiv%20class%3D%5C%22w2m_slider_hash2313523ff4w[...]
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354672.expiration", "Sat Feb 08 2014 10:45:59 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354672.value", "%22%3Cdiv%20class%3D%5C%22w2m_slider_hash2313523ff4w[...]
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354674.expiration", "Sat Feb 08 2014 10:45:59 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354674.value", "%22a%20img%2C%20%3Alink%20img%2C%20%3Avisited%20img%[...]
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354676.expiration", "Sat Feb 08 2014 10:45:59 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354676.value", "%22jQuery.easing.jswing%3DjQuery.easing.swing%3B%5Cr[...]
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354678.expiration", "Sat Feb 08 2014 10:45:59 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354678.value", "%22data%3Aimage/png%3Bbase64%2CiVBORw0KGgoAAAANSUhEU[...]
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354679.expiration", "Sat Feb 08 2014 10:45:59 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354679.value", "%22data%3Aimage/png%3Bbase64%2CiVBORw0KGgoAAAANSUhEU[...]
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354680.expiration", "Sat Feb 08 2014 10:45:59 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354680.value", "%22data%3Aimage/png%3Bbase64%2CiVBORw0KGgoAAAANSUhEU[...]
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354681.expiration", "Sat Feb 08 2014 10:45:59 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_354681.value", "%22data%3Aimage/png%3Bbase64%2CiVBORw0KGgoAAAANSUhEU[...]
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__194_lastCheck__.expiration", "Thu Jan 02 2014 18:06:08 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__194_lastCheck__.value", "true");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__GAM__time_to_send_daily_log.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__GAM__time_to_send_daily_log.value", "1388336395618");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__ICM_LITE__country_code.expiration", "Thu Jan 16 2014 16:57:35 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__ICM_LITE__country_code.value", "%22DE%22");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__ICM_LITE__global_rules.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__ICM_LITE__global_rules.value", "%5B%7B%22rules%22%3A%7B%22delay_between_ads_in_second[...]
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__ICM_LITE__global_rules_verion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__ICM_LITE__global_rules_verion.value", "4");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__ICM_LITE__is_send_log.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__ICM_LITE__is_send_log.value", "false");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__ICM_LITE__last_daily_visit.expiration", "Fri Jan 03 2014 05:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__ICM_LITE__last_daily_visit.value", "1388669172467");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__ICM_LITE__last_impression_time.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__ICM_LITE__last_impression_time.value", "1388670345431");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__ICM_LITE__marketing_rules.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__ICM_LITE__marketing_rules.value", "%7B%22rules%22%3A%5B%7B%22ad_type%22%3A%22window%2[...]
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__ICM_LITE__marketing_rules_verion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__ICM_LITE__marketing_rules_verion.value", "2");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__ICM_LITE__pages_visited_count.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__ICM_LITE__pages_visited_count.value", "147");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__ICM_LITE__pagevies_count_29.11.2013.expiration", "Wed Jan 08 2014 05:00:00 GMT+0100")[...]
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__ICM_LITE__pagevies_count_29.11.2013.value", "55");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__ICM_LITE__pagevies_count_3.0.2014.expiration", "Mon Jan 13 2014 05:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__ICM_LITE__pagevies_count_3.0.2014.value", "195");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__ICM_LITE__pagevies_count_31.11.2013.expiration", "Fri Jan 10 2014 05:00:00 GMT+0100")[...]
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__ICM_LITE__pagevies_count_31.11.2013.value", "44");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__ICM_LITE__send_log_percent.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__ICM_LITE__send_log_percent.value", "0.0005");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__ICM_LITE__total_impressions_today.expiration", "Fri Jan 03 2014 05:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__ICM_LITE__total_impressions_today.value", "8");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__ICM_LITE__verions_data.expiration", "Thu Jan 02 2014 20:26:11 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.__ICM_LITE__verions_data.value", "%7B%22global_rules_version%22%3A4%2C%22marketing_rule[...]
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb._country_code_.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb._country_code_.value", "%22DE%22");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.installer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.installer.value", "%7B%22InstallerIdentifiers%22%3A%7B%22installer_bic%22%3A%22154D442F[...]
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.monetization_plugin_last_executable_request.expiration", "Fri Jan 03 2014 04:38:07 GMT+[...]
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.monetization_plugin_last_executable_request.value", "%22hxxp%3A//filepony.de/dl-Z21lcl8[...]
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.lastDailyReport", "1388669163226");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.lastUpdate", "1388669160182");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.manifesturl", "");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.name", "Plus-HD-2.6");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.newtab", "");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.opensearch", "");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.pluginsurl", "hxxps://w9u6a2p6.ssl.hwcdn.net/plugin/apps/33440/plugins/093/ff/plugins.json");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.pluginsversion", 147);
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.publisher", "Plus HD");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.searchstatus", 0);
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.setnewtab", false);
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.thankyou", "");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.updateinterval", 360);
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.ver", 191);
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.apps", "33440");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.bic", "14189c43c46319b902629e8aabe2848b");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.cid", 33440);
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.firstrun", false);
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.hadappinstalled", true);
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.installationdate", 1380995841);
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.modetype", "production");
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.reportInstall", true);
Zeile gelöscht : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.statsDailyCounter", 42);
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.InstallationThankYouPage", false);
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.InstallationTime", 1380995841);
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.active", true);
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.addressbar", "NA");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.addressbarenhanced", "");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.asyncdb_dbWasSet", true);
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.asyncdb_dbWasSet_FF25_FIX", true);
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.asyncinternaldb_dbWasSet", true);
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.asyncinternaldb_dbWasSet_FF25_FIX", true);
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.backgroundver", 6);
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.certdomaininstaller", "");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.changeprevious", false);
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie.InstallationTime.value", "1380995841");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie._GPL_aoi.value", "%221384953373%22");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie._GPL_parent_zoneid.value", "%22427710%22");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie._GPL_zoneid.value", "%22430306%22");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie.jw_token.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie.jw_token.value", "%22dc42d9fd-ed66-d707-e82e-8a3dfdd0cb67%22");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.description", "Services extension");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.domain", "");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.enablesearch", false);
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.homepage", "");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.iframe", false);
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3A%22154D442FDB6D447C9F0A42E9AB78C[...]
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.InstallerParamsCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.InstallerParamsCache.value", "%7B%22source_id%22%3A%22000274%22%2C%22sub_id%22%3A%220%2[...]
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.InstallerUserIdentifiersCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.InstallerUserIdentifiersCache.value", "%7B%22installer_bic%22%3A%22154D442FDB6D447C9F0A[...]
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_appVer.value", "161");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_lastVersion.value", "68");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_meta.value", "%7B%22cssOffre.css%22%3A%7B%22id%22%3A456597%2C%22ver%22%3A68%2[...]
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_nextCheck.expiration", "Thu Jan 02 2014 20:26:10 GMT+0100");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_nextCheck.value", "true");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_queue.value", "%7B%7D");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_remote_resources.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_remote_resources.value", "%7B%22remoteId%22%3A0%7D");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_resource_456597.expiration", "Fri Mar 28 2014 17:59:57 GMT+0100");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_resource_456597.value", "%22%5Cr%5Cn%23offre_conteneur%7B%5Cr%5Cn%5Ct-moz-use[...]
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb._country_code_.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb._country_code_.value", "%22DE%22");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.installer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.installer.value", "%7B%22InstallerIdentifiers%22%3A%7B%22installer_bic%22%3A%22154D442F[...]
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.monetization_plugin_last_executable_request.expiration", "Fri Jan 03 2014 04:38:07 GMT+[...]
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.monetization_plugin_last_executable_request.value", "%22hxxp%3A//filepony.de/dl-Z21lcl8[...]
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.lastDailyReport", "1388669163990");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.lastUpdate", "1388669170897");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.manifesturl", "");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.name", "Pricora");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.newtab", "");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.opensearch", "");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.pluginsurl", "hxxps://w9u6a2p6.ssl.hwcdn.net/plugin/apps/35329/plugins/093/ff/plugins.json");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.pluginsversion", 92);
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.publisher", "Corporate Inc");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.searchstatus", 0);
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.setnewtab", false);
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.thankyou", "");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.updateinterval", 360);
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.ver", 161);
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.apps", "35329");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.bic", "14189c43c46319b902629e8aabe2848b");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.cid", 35329);
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.firstrun", false);
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.hadappinstalled", true);
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.installationdate", 1380995841);
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.modetype", "production");
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.reportInstall", true);
Zeile gelöscht : user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.statsDailyCounter", 42);
Zeile gelöscht : user_pref("extensions.crossrider.bic", "14189c43c46319b902629e8aabe2848b");
Zeile gelöscht : user_pref("extensions.delta.admin", false);
Zeile gelöscht : user_pref("extensions.delta.aflt", "babsst");
Zeile gelöscht : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Zeile gelöscht : user_pref("extensions.delta.autoRvrt", "false");
Zeile gelöscht : user_pref("extensions.delta.bbDpng", "6");
Zeile gelöscht : user_pref("extensions.delta.cntry", "DE");
Zeile gelöscht : user_pref("extensions.delta.dfltLng", "de");
Zeile gelöscht : user_pref("extensions.delta.excTlbr", false);
Zeile gelöscht : user_pref("extensions.delta.ffxUnstlRst", true);
Zeile gelöscht : user_pref("extensions.delta.hdrMd5", "771AEE350EAAB023BDFDE8B20C65967B");
Zeile gelöscht : user_pref("extensions.delta.id", "56b79f850000000000008c89a5689d9f");
Zeile gelöscht : user_pref("extensions.delta.instlDay", "15983");
Zeile gelöscht : user_pref("extensions.delta.instlRef", "sst");
Zeile gelöscht : user_pref("extensions.delta.lastVrsnTs", "1.8.24.619:56:46");
Zeile gelöscht : user_pref("extensions.delta.newTab", false);
Zeile gelöscht : user_pref("extensions.delta.prdct", "delta");
Zeile gelöscht : user_pref("extensions.delta.prtnrId", "delta");
Zeile gelöscht : user_pref("extensions.delta.rvrt", "false");
Zeile gelöscht : user_pref("extensions.delta.sg", "azb");
Zeile gelöscht : user_pref("extensions.delta.smplGrp", "none");
Zeile gelöscht : user_pref("extensions.delta.tlbrId", "base");
Zeile gelöscht : user_pref("extensions.delta.tlbrSrchUrl", "");
Zeile gelöscht : user_pref("extensions.delta.vrsn", "1.8.24.6");
Zeile gelöscht : user_pref("extensions.delta.vrsnTs", "1.8.24.619:56:46");
Zeile gelöscht : user_pref("extensions.delta.vrsni", "1.8.24.6");
Zeile gelöscht : user_pref("extensions.delta_i.babExt", "");
Zeile gelöscht : user_pref("extensions.delta_i.babTrack", "affID=124247&tsp=5026");
Zeile gelöscht : user_pref("extensions.delta_i.srcExt", "ss");
Zeile gelöscht : user_pref("id_chatzum_installed_version", "1.0.20");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.FavLinkSplitTestingClass", "v2");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.LayoutId", "1");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.ROOTEXTENSION", "chrome://iminentwebbooster/content/minibar");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.SOFTONICREFRESHRATE", "140000");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.Services.BHPCode", "01");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.Services.DefaultEvent", "000");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.Services.DefaultWebSite", "000");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.Services.IminentClientCode", "11");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.Services.SmartFavCode", "02");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.ShowThankyouPixel", "0");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.displayFavLinks", "1");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent102", "1374741372721");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent109", "1374506607759");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent111", "1374506607764");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent112", "1373716846573");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent122", "1374506607767");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent134", "1372923733642");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.FavLinkSplitTestingClass", "v1");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.LayoutId", "1");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.ROOTEXTENSION", "chrome://iminentwebbooster/content/minibar");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.SOFTONICREFRESHRATE", "140000");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.Services.BHPCode", "01");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.Services.DefaultEvent", "000");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.Services.DefaultWebSite", "000");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.Services.IminentClientCode", "11");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.Services.SmartFavCode", "02");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.ShowThankyouPixel", "0");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.displayFavLinks", "1");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent101", "1373958541822");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent102", "1374741394329");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent109", "1373716826093");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent111", "1373716826095");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent112", "1373716832189");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent122", "1373716826097");

*************************

AdwCleaner[R0].txt - [69458 octets] - [02/01/2014 18:02:01]
AdwCleaner[S0].txt - [67733 octets] - [02/01/2014 18:02:59]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [67794 octets] ##########
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.9 (01.01.2014:1)
OS: Windows 7 Home Premium x64
Ran by genz on 02.01.2014 at 18:21:08,08
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3395060028-306035869-1869503064-1001\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\chatzum_softonic_yahoo_61_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\chatzum_softonic_yahoo_61_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\chatzum_softonic_yahoo_61_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\chatzum_softonic_yahoo_61_RASMANCS
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{F833DE03-F826-4465-A306-8AB51CBDE323}



~~~ Files



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\genz\appdata\local\{00BB3991-D3CF-430D-8184-DF068BAF71E1}
Successfully deleted: [Empty Folder] C:\Users\genz\appdata\local\{05D7BD70-3976-41C8-B332-FECD468DF238}
Successfully deleted: [Empty Folder] C:\Users\genz\appdata\local\{245552D2-986E-4905-AA4B-F45AC86F940E}
Successfully deleted: [Empty Folder] C:\Users\genz\appdata\local\{26BB73BE-0075-44C4-9F50-0491A8467BC8}
Successfully deleted: [Empty Folder] C:\Users\genz\appdata\local\{2E2AC3F8-8618-4214-8D7D-17B60F1663B6}
Successfully deleted: [Empty Folder] C:\Users\genz\appdata\local\{33A72DCB-BC70-4A68-A915-026A62D995A8}
Successfully deleted: [Empty Folder] C:\Users\genz\appdata\local\{3563FD29-401D-484F-8800-711212661215}
Successfully deleted: [Empty Folder] C:\Users\genz\appdata\local\{3812F829-822E-49BB-97DB-0F7E90EE23DB}
Successfully deleted: [Empty Folder] C:\Users\genz\appdata\local\{38B7AB08-2B25-483C-881D-63035D018427}
Successfully deleted: [Empty Folder] C:\Users\genz\appdata\local\{49CC9499-E5A4-42D7-A3C9-8F401A3779E1}
Successfully deleted: [Empty Folder] C:\Users\genz\appdata\local\{4ADE7BF4-C00A-4D89-A97B-B6AA308000A5}
Successfully deleted: [Empty Folder] C:\Users\genz\appdata\local\{4BB5F4A6-14A4-468F-B963-AE1C2E9FB505}
Successfully deleted: [Empty Folder] C:\Users\genz\appdata\local\{4C253E32-6241-4838-B48C-A52B846095B2}
Successfully deleted: [Empty Folder] C:\Users\genz\appdata\local\{5210C43E-B749-428D-A3F1-5730BC1E2EBB}
Successfully deleted: [Empty Folder] C:\Users\genz\appdata\local\{75B0E241-A44E-460A-AB09-F56501652DE8}
Successfully deleted: [Empty Folder] C:\Users\genz\appdata\local\{79FF80EE-4F30-4AEE-91A4-02A181AABE83}
Successfully deleted: [Empty Folder] C:\Users\genz\appdata\local\{7BA168D4-15A6-4C21-8D01-76F7F8AAD975}
Successfully deleted: [Empty Folder] C:\Users\genz\appdata\local\{81D65BFA-6BF9-42AC-A605-23FC0C367C2E}
Successfully deleted: [Empty Folder] C:\Users\genz\appdata\local\{88730E4C-4A2F-4558-8B3F-C4753FAD83AB}
Successfully deleted: [Empty Folder] C:\Users\genz\appdata\local\{9BE914A8-D864-4173-BF42-584CB7172A7B}
Successfully deleted: [Empty Folder] C:\Users\genz\appdata\local\{A4081A6D-C4F0-46D8-8A79-7A6B70347426}
Successfully deleted: [Empty Folder] C:\Users\genz\appdata\local\{A7C2406B-0282-4936-909F-63C8D0B37EEE}
Successfully deleted: [Empty Folder] C:\Users\genz\appdata\local\{C66DD27E-1365-4EC5-BB86-46781F76D457}
Successfully deleted: [Empty Folder] C:\Users\genz\appdata\local\{C98A9048-DF27-4C0A-A0DA-9868AC5ED20C}
Successfully deleted: [Empty Folder] C:\Users\genz\appdata\local\{E0007225-FA7D-415C-A22A-01F655C55612}
Successfully deleted: [Empty Folder] C:\Users\genz\appdata\local\{ED536C90-B241-4273-8F82-012173305681}
Successfully deleted: [Empty Folder] C:\Users\genz\appdata\local\{F0AF1935-4DF5-4ADF-998F-3FD5EA03D77C}
Successfully deleted: [Empty Folder] C:\Users\genz\appdata\local\{F7C559E2-8F44-447D-B759-91706EA64746}
Successfully deleted: [Empty Folder] C:\Users\genz\appdata\local\{FE6321C3-39B9-49F8-8A36-DF4A93C73A2A}



~~~ FireFox

Emptied folder: C:\Users\genz\AppData\Roaming\mozilla\firefox\profiles\1ast7zep.default\minidumps [219 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 02.01.2014 at 18:25:33,75
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Code:
Malwarebytes Anti-Malware (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.01.02.03

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
genz :: GENZ-PC [Administrator]

Schutz: Aktiviert

02.01.2014 18:34:48
mbam-log-2014-01-02 (18-34-48).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 217197
Laufzeit: 4 Minute(n), 5 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 17
C:\Users\genz\AppData\Local\Temp\C7C3FF5A-BAB0-7891-A714-427D2848385A\Latest\BabMaint.exe (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\genz\AppData\Local\Temp\C7C3FF5A-BAB0-7891-A714-427D2848385A\Latest\BExternal.dll (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\genz\AppData\Local\Temp\C7C3FF5A-BAB0-7891-A714-427D2848385A\Latest\ccp.exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\genz\AppData\Local\Temp\C7C3FF5A-BAB0-7891-A714-427D2848385A\Latest\CrxInstaller.dll (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\genz\AppData\Local\Temp\C7C3FF5A-BAB0-7891-A714-427D2848385A\Latest\DSearchLink.exe (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\genz\AppData\Local\Temp\C7C3FF5A-BAB0-7891-A714-427D2848385A\Latest\MntrDLLInstall.dll (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\genz\AppData\Local\Temp\C7C3FF5A-BAB0-7891-A714-427D2848385A\Latest\MyDeltaTB.exe (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\genz\AppData\Local\Temp\C7C3FF5A-BAB0-7891-A714-427D2848385A\Latest\Setup.exe (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\Temp\33440_updater.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\genz\Downloads\PhotoScape.exe (PUP.Optional.Solimba) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\genz\Downloads\rcpsetup_matomy_my30679(1).exe (PUP.Optional.RegCleanerPro) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\genz\Downloads\rcpsetup_matomy_my30679.exe (PUP.Optional.RegCleanerPro) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\genz\Downloads\Setup.exe (PUP.Adware.Domalq) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\genz\Downloads\SoftonicDownloader_fuer_dvdisaster.exe (PUP.Optional.Softonic.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\genz\Downloads\SoftonicDownloader_fuer_parents-friend.exe (PUP.Optional.Softonic) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\genz\Downloads\SoftonicDownloader_fuer_photoscape.exe (PUP.Optional.Softonic.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\genz\Downloads\SoftonicDownloader_fuer_ruschi.exe (PUP.Optional.Softonic.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

M-K-D-B 02.01.2014 21:12
Servus,



Wir spüren die letzten Reste auf, damit wir sie später entfernen können:





Schritt 1
Kontrollscan mit FRST
Führe wie zuvor beschrieben einen Scan mit FRST aus.
Setze dazu eine Haken bei Addition.txt rechts unten und klicke auf Scan.
Es werden wieder zwei Logdateien erzeugt. Poste mir diese.





Schritt 2
Lade dir die passende Version von SystemLook vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop:
SystemLook (32 bit) | SystemLook (64 bit)
  • Doppelklicke auf die SystemLook.exe, um das Tool zu starten.
  • Kopiere den Inhalt der folgenden Codebox in das Textfeld des Tools:

    Code:
    :filefind
    *DSearchLink*
    *ChatZum*
    *LyricsContainer*
    *Plus-HD-2.6*
    *Crossrider*
    *Pricora*
    *Iminent*

    :folderfind
    *DSearchLink*
    *ChatZum*
    *LyricsContainer*
    *Plus-HD-2.6*
    *Crossrider*
    *Pricora*
    *Iminent*

    :regfind
    DSearchLink
    ChatZum
    LyricsContainer
    Plus-HD-2.6
    Crossrider
    Pricora
    Iminent
  • Klicke nun auf den Button Look, um den Scan zu starten.
  • Der Suchlauf kann einige Zeit dauern.
  • Wenn der Suchlauf beendet ist, wird sich dein Editor mit den Ergebnissen öffnen, poste diese in deinen Thread.
  • Die Ergebnisse werden auch auf dem Desktop als SystemLook.txt gespeichert.








Gibt es noch Probleme mit Malware? Wenn ja, welche?
Wie läuft der Rechner derzeit?





Bitte poste mit deiner nächsten Antwort
  • die beiden Logdateien von FRST,
  • die Logdatei von SystemLook,
  • die Beantwortung der gestellten Fragen.

Puky88 03.01.2014 19:33

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-01-2014
Ran by genz (administrator) on GENZ-PC on 03-01-2014 19:24:33
Running from C:\Users\genz\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(Logitech Inc.) C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\Logishrd\LVMVFM\LVPrS64H.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIIVE.EXE
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Dropbox, Inc.) C:\Users\genz\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\Logishrd\LComMgr\Communications_Helper.exe
() C:\Program Files (x86)\Logitech\QuickCam10\QuickCam10.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\Logishrd\LComMgr\LVComSX.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(ScanSoft, Inc.) C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12673128 2011-08-16] (Realtek Semiconductor)
HKLM\...\Run: [MedionReminder] - C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe [443688 2011-05-26] (CyberLink)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE [2780776 2011-07-19] (CANON INC.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-05-20] (Intel Corporation)
HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2010-08-03] (CyberLink)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2011-09-08] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [LogitechCommunicationsManager] - C:\Program Files (x86)\Common Files\Logishrd\LComMgr\Communications_Helper.exe [488984 2007-02-08] (Logitech Inc.)
HKLM-x32\...\Run: [LogitechQuickCamRibbon] - C:\Program Files (x86)\Logitech\QuickCam10\QuickCam10.exe [774168 2007-02-08] ()
HKLM-x32\...\Run: [SSBkgdUpdate] - C:\Program Files (x86)\Common Files\ScanSoft Shared\SSBkgdUpdate\SSBkgdUpdate.exe [155648 2003-10-14] (Scansoft, Inc.)
HKLM-x32\...\Run: [PaperPort PTD] - C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe [57393 2005-03-17] (ScanSoft, Inc.)
HKLM-x32\...\Run: [IndexSearch] - C:\Program Files (x86)\ScanSoft\PaperPort\IndexSearch.exe [40960 2005-03-17] (ScanSoft, Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-19] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-15] (Apple Inc.)
HKLM-x32\...\Run: [FUFAXRCV] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [502952 2012-07-09] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [FUFAXSTM] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [863400 2012-07-09] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [EEventManager] - C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058912 2012-04-02] (SEIKO EPSON CORPORATION)
HKLM\...\RunOnce: [MedionReminder] - C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe /DeleteRunKey [443688 2011-05-26] (CyberLink)
HKCU\...\Run: [EPLTarget\P0000000000000000] - C:\Windows\System32\spool\drivers\x64\3\E_YATIIVE.EXE [283232 2012-02-27] (SEIKO EPSON CORPORATION)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
Startup: C:\Users\genz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\genz\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\genz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.msn.com/?pc=UP97&ocid=UP97DHP
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=MDNF&bmod=MDNF
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - URL hxxp://search.chatzum.com/?orig=DS&affid=61&cztbid=372675200&q={searchTerms}
SearchScopes: HKLM-x32 - TopResultURLFallback hxxp://search.chatzum.com/?orig=DS&affid=61&cztbid=372675200&q={searchTerms}
SearchScopes: HKLM-x32 - TopResultURL hxxp://search.chatzum.com/?orig=DS&affid=61&cztbid=372675200&q={searchTerms}
SearchScopes: HKCU - 28171594C2124079986D38D7A0A44D98 URL = hxxp://search.chatzum.com/?orig=DS&affid=61&cztbid=372675200&q={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default
FF SearchEngineOrder.3: Bing
FF Homepage: hxxp://de.msn.com/?pc=UP97&ocid=UP97DHP
FF Keyword.URL: hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\genz\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\searchplugins\Firefox.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Adblock Plus - C:\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA}
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
FF HKCU\...\Firefox\Extensions: [{cd288a68-7b21-4f14-b789-82cc44992259}] - C:\Program Files (x86)\LyricsContainer\133.xpi

Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-30] (Avira Operations GmbH & Co. KG)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-11] (Seiko Epson Corporation)
S2 LVSrvLauncher; C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe [173344 2007-02-06] (Logitech Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-30] (Avira Operations GmbH & Co. KG)
S3 LVcKap64; C:\Windows\System32\DRIVERS\LVcKap64.sys [1013024 2007-02-06] (Logitech Inc.)
R3 LVMVDrv; C:\Windows\System32\DRIVERS\LVMVDrv.sys [2346016 2007-02-06] (Logitech Inc.)
R3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2Mon.sys [31520 2007-02-06] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-03 19:24 - 2014-01-03 19:24 - 00000000 ____D C:\Users\genz\Downloads\FRST-OlderVersion
2014-01-02 22:22 - 2014-01-02 22:25 - 00000000 ____D C:\Users\genz\Documents\stick
2014-01-02 18:27 - 2014-01-02 18:27 - 00001113 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-01-02 18:26 - 2014-01-02 18:26 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\genz\Downloads\mbam-setup-1.75.0.1300(1).exe
2014-01-02 18:21 - 2014-01-02 18:21 - 00000000 ____D C:\Windows\ERUNT
2014-01-02 18:20 - 2014-01-02 18:20 - 01036305 _____ (Thisisu) C:\Users\genz\Desktop\JRT.exe
2014-01-02 18:19 - 2014-01-02 18:33 - 00000000 ____D C:\Users\genz\Desktop\Neuer Ordner
2014-01-02 18:14 - 2014-01-02 18:14 - 557418635 _____ C:\Windows\MEMORY.DMP
2014-01-02 18:14 - 2014-01-02 18:14 - 00456968 _____ C:\Windows\Minidump\010214-18142-01.dmp
2014-01-02 18:14 - 2014-01-02 18:14 - 00000000 ____D C:\Windows\Minidump
2014-01-02 18:01 - 2014-01-02 18:19 - 00000000 ____D C:\AdwCleaner
2014-01-02 18:00 - 2014-01-02 18:00 - 01233962 _____ C:\Users\genz\Desktop\adwcleaner.exe
2014-01-02 16:51 - 2014-01-02 16:53 - 00010105 _____ C:\Users\genz\Desktop\gmer.txt
2014-01-02 16:43 - 2014-01-02 16:43 - 00032398 _____ C:\Users\genz\Desktop\Addition.txt
2014-01-02 16:42 - 2014-01-02 16:42 - 00050623 _____ C:\Users\genz\Desktop\FRST.txt
2014-01-02 16:40 - 2014-01-02 16:40 - 00032398 _____ C:\Users\genz\Downloads\Addition.txt
2014-01-02 16:39 - 2014-01-03 19:24 - 00015390 _____ C:\Users\genz\Downloads\FRST.txt
2014-01-02 16:39 - 2014-01-03 19:24 - 00000000 ____D C:\FRST
2014-01-02 16:38 - 2014-01-02 16:38 - 00377856 _____ C:\Users\genz\Downloads\gmer_2.1.19163.exe
2014-01-02 16:37 - 2014-01-03 19:24 - 01931750 _____ (Farbar) C:\Users\genz\Downloads\FRST64.exe
2014-01-02 16:36 - 2014-01-02 16:36 - 00000470 _____ C:\Users\genz\Downloads\defogger_disable.log
2014-01-02 16:36 - 2014-01-02 16:36 - 00000000 _____ C:\Users\genz\defogger_reenable
2014-01-02 16:34 - 2014-01-02 16:34 - 00050477 _____ C:\Users\genz\Downloads\Defogger.exe
2013-12-17 19:12 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-17 19:12 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-17 19:12 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-17 19:12 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-17 19:12 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-17 19:12 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-17 19:12 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-17 19:12 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-17 19:12 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-17 19:12 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-17 19:12 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-17 19:12 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-17 19:12 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-17 19:12 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-17 19:12 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-17 19:12 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-17 19:12 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-17 19:12 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-17 19:12 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-17 19:12 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-17 19:12 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-17 19:12 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-17 19:12 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-17 19:12 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-17 19:12 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-17 19:12 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-17 19:12 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-17 19:12 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-17 19:12 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-17 19:12 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-17 19:12 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-17 18:40 - 2013-12-17 18:41 - 01069568 _____ (Solid State Networks) C:\Users\genz\Downloads\install_reader11_de_mssa_aaa_aih.exe
2013-12-14 19:12 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-12-14 19:10 - 2013-12-14 19:10 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-14 19:10 - 2013-12-14 19:10 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-14 19:09 - 2013-12-14 19:09 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-14 19:09 - 2013-12-14 19:09 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-14 19:09 - 2013-12-14 19:09 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-14 19:09 - 2013-12-14 19:09 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-14 19:09 - 2013-12-14 19:09 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-14 19:09 - 2013-12-14 19:09 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-14 19:08 - 2013-12-14 19:13 - 00010277 _____ C:\Windows\IE11_main.log
2013-12-13 10:11 - 2013-12-13 10:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-12 16:31 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-12 16:31 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-12 16:31 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-12 16:31 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-12 16:11 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-12 16:11 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-12 16:11 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-12 16:10 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-12 16:10 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-12 16:10 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-12 16:10 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-12 16:10 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-12 16:10 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-12 16:10 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-12 16:10 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-12 16:10 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-12 16:10 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-12 16:10 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-12 16:10 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-12 16:10 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-12 16:10 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-12 16:10 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-12 16:10 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

==================== One Month Modified Files and Folders =======

2014-01-03 19:24 - 2014-01-03 19:24 - 00000000 ____D C:\Users\genz\Downloads\FRST-OlderVersion
2014-01-03 19:24 - 2014-01-02 16:39 - 00015390 _____ C:\Users\genz\Downloads\FRST.txt
2014-01-03 19:24 - 2014-01-02 16:39 - 00000000 ____D C:\FRST
2014-01-03 19:24 - 2014-01-02 16:37 - 01931750 _____ (Farbar) C:\Users\genz\Downloads\FRST64.exe
2014-01-03 19:14 - 2012-05-02 07:22 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-03 19:09 - 2011-12-27 17:14 - 00000000 ____D C:\Users\genz\AppData\Roaming\Skype
2014-01-03 18:53 - 2011-12-27 16:39 - 01992369 _____ C:\Windows\WindowsUpdate.log
2014-01-03 16:56 - 2011-03-11 10:20 - 00654602 _____ C:\Windows\system32\perfh007.dat
2014-01-03 16:56 - 2011-03-11 10:20 - 00130216 _____ C:\Windows\system32\perfc007.dat
2014-01-03 16:56 - 2009-07-14 06:13 - 01500294 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-03 16:54 - 2013-04-05 11:39 - 00000000 ____D C:\Users\genz\AppData\Roaming\Dropbox
2014-01-03 16:48 - 2009-07-14 05:51 - 00187430 _____ C:\Windows\setupact.log
2014-01-03 15:08 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2014-01-03 13:14 - 2009-07-14 05:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-03 13:14 - 2009-07-14 05:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-03 13:08 - 2013-04-05 11:43 - 00000000 ___RD C:\Users\genz\Dropbox
2014-01-03 13:06 - 2011-12-31 14:46 - 00000000 _____ C:\Windows\system32\Drivers\lvuvc.hs
2014-01-03 13:06 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-02 22:25 - 2014-01-02 22:22 - 00000000 ____D C:\Users\genz\Documents\stick
2014-01-02 19:29 - 2012-07-22 13:50 - 00392192 ___SH C:\Users\genz\Desktop\Thumbs.db
2014-01-02 19:25 - 2010-11-21 04:47 - 00137598 _____ C:\Windows\PFRO.log
2014-01-02 18:33 - 2014-01-02 18:19 - 00000000 ____D C:\Users\genz\Desktop\Neuer Ordner
2014-01-02 18:27 - 2014-01-02 18:27 - 00001113 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-01-02 18:27 - 2013-10-06 17:15 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-02 18:26 - 2014-01-02 18:26 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\genz\Downloads\mbam-setup-1.75.0.1300(1).exe
2014-01-02 18:21 - 2014-01-02 18:21 - 00000000 ____D C:\Windows\ERUNT
2014-01-02 18:20 - 2014-01-02 18:20 - 01036305 _____ (Thisisu) C:\Users\genz\Desktop\JRT.exe
2014-01-02 18:19 - 2014-01-02 18:01 - 00000000 ____D C:\AdwCleaner
2014-01-02 18:14 - 2014-01-02 18:14 - 557418635 _____ C:\Windows\MEMORY.DMP
2014-01-02 18:14 - 2014-01-02 18:14 - 00456968 _____ C:\Windows\Minidump\010214-18142-01.dmp
2014-01-02 18:14 - 2014-01-02 18:14 - 00000000 ____D C:\Windows\Minidump
2014-01-02 18:02 - 2011-12-27 16:54 - 00000000 ____D C:\Users\genz\AppData\Roaming\SoftGrid Client
2014-01-02 18:01 - 2013-01-10 19:56 - 00000000 ____D C:\Users\genz\Desktop\Feuerwehr
2014-01-02 18:00 - 2014-01-02 18:00 - 01233962 _____ C:\Users\genz\Desktop\adwcleaner.exe
2014-01-02 17:05 - 2012-04-25 10:09 - 00093184 ___SH C:\Users\genz\Documents\Thumbs.db
2014-01-02 16:53 - 2014-01-02 16:51 - 00010105 _____ C:\Users\genz\Desktop\gmer.txt
2014-01-02 16:43 - 2014-01-02 16:43 - 00032398 _____ C:\Users\genz\Desktop\Addition.txt
2014-01-02 16:42 - 2014-01-02 16:42 - 00050623 _____ C:\Users\genz\Desktop\FRST.txt
2014-01-02 16:40 - 2014-01-02 16:40 - 00032398 _____ C:\Users\genz\Downloads\Addition.txt
2014-01-02 16:38 - 2014-01-02 16:38 - 00377856 _____ C:\Users\genz\Downloads\gmer_2.1.19163.exe
2014-01-02 16:36 - 2014-01-02 16:36 - 00000470 _____ C:\Users\genz\Downloads\defogger_disable.log
2014-01-02 16:36 - 2014-01-02 16:36 - 00000000 _____ C:\Users\genz\defogger_reenable
2014-01-02 16:36 - 2011-12-27 16:44 - 00000000 ____D C:\Users\genz
2014-01-02 16:34 - 2014-01-02 16:34 - 00050477 _____ C:\Users\genz\Downloads\Defogger.exe
2013-12-30 18:26 - 2013-09-29 13:46 - 00000000 ____D C:\Users\genz\AppData\Roaming\Epson
2013-12-26 21:17 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-19 18:34 - 2013-05-07 15:23 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-19 18:34 - 2013-03-29 13:05 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-19 18:34 - 2013-03-29 13:05 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-17 19:12 - 2013-08-15 19:44 - 00000000 ____D C:\Windows\system32\MRT
2013-12-17 19:11 - 2011-03-14 15:08 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-17 18:41 - 2013-12-17 18:40 - 01069568 _____ (Solid State Networks) C:\Users\genz\Downloads\install_reader11_de_mssa_aaa_aih.exe
2013-12-17 16:44 - 2011-12-27 16:45 - 00001425 _____ C:\Users\genz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-17 16:42 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-14 19:13 - 2013-12-14 19:08 - 00010277 _____ C:\Windows\IE11_main.log
2013-12-14 19:10 - 2013-12-14 19:10 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-14 19:10 - 2013-12-14 19:10 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-14 19:09 - 2013-12-14 19:09 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-14 19:09 - 2013-12-14 19:09 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-14 19:09 - 2013-12-14 19:09 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-14 19:09 - 2013-12-14 19:09 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-14 19:09 - 2013-12-14 19:09 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-14 19:09 - 2013-12-14 19:09 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-14 19:09 - 2013-12-14 19:09 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-14 19:09 - 2013-12-14 19:09 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-14 14:53 - 2013-04-05 11:24 - 00000367 _____ C:\Users\genz\Sti_Trace.log
2013-12-14 14:50 - 2012-04-28 07:57 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-13 10:11 - 2013-12-13 10:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-13 09:48 - 2012-01-30 12:04 - 00000000 ____D C:\Users\genz\AppData\Local\Windows Live
2013-12-13 08:14 - 2012-05-02 07:22 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-13 08:14 - 2012-05-02 07:22 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-13 08:14 - 2011-08-22 18:09 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-13 07:43 - 2009-07-14 05:45 - 00309512 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-12 15:55 - 2011-12-27 17:14 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-12-12 15:55 - 2011-12-27 17:14 - 00000000 ____D C:\ProgramData\Skype

Some content of TEMP:
====================
C:\Users\genz\AppData\Local\Temp\ApnStub.exe
C:\Users\genz\AppData\Local\Temp\avgnt.exe
C:\Users\genz\AppData\Local\Temp\chatzum_softonic_yahoo_61.exe
C:\Users\genz\AppData\Local\Temp\contentDATs.exe
C:\Users\genz\AppData\Local\Temp\install_reader10_de_mssa_aih.exe
C:\Users\genz\AppData\Local\Temp\jre-6u31-windows-i586-iftw-rv.exe
C:\Users\genz\AppData\Local\Temp\jre-6u32-windows-i586-iftw.exe
C:\Users\genz\AppData\Local\Temp\jre-6u34-windows-i586-iftw.exe
C:\Users\genz\AppData\Local\Temp\jre-6u35-windows-i586-iftw.exe
C:\Users\genz\AppData\Local\Temp\jre-6u37-windows-i586-iftw.exe
C:\Users\genz\AppData\Local\Temp\jre-6u39-windows-i586-iftw.exe
C:\Users\genz\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\genz\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\genz\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\genz\AppData\Local\Temp\SecurityScan_Release.exe
C:\Users\genz\AppData\Local\Temp\setup.exe
C:\Users\genz\AppData\Local\Temp\SHSetup.exe
C:\Users\genz\AppData\Local\Temp\silent_pricora_DE.exe
C:\Users\genz\AppData\Local\Temp\SkypeSetup.exe
C:\Users\genz\AppData\Local\Temp\SymcPCCUInstaller.exe
C:\Users\genz\AppData\Local\Temp\uninst1.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-30 16:32

==================== End Of Log ============================
--- --- ---

Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03-01-2014
Ran by genz at 2014-01-03 19:25:11
Running from C:\Users\genz\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Adobe Acrobat 4.0 (x32 Version:  - )
Adobe AIR (x32 Version: 2.7.1.19610 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 2.7.1.19610 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Reader X (10.1.8) - Deutsch (x32 Version: 10.1.8 - Adobe Systems Incorporated)
AMD APP SDK Runtime (Version: 2.5.732.1 - Advanced Micro Devices Inc.) Hidden
AMD AVIVO64 Codecs (Version: 11.6.0.10914 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Install Manager (Version: 3.0.842.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.60914.1136 - Advanced Micro Devices, Inc.) Hidden
Apple Application Support (x32 Version: 2.3.4 - Apple Inc.)
Apple Mobile Device Support (Version: 6.1.0.13 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
Asmedia ASM104x USB 3.0 Host Controller Driver (x32 Version: 1.12.5.0 - Asmedia Technology)
Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)
Bejeweled Twist (x32 Version:  - PopCap Games)
BEWERBUNGSMASTER (C:\Program Files (x86)\BEWERBUNGSMASTER\) (x32 Version:  - )
BEWERBUNGSMASTER (x32 Version:  - )
Bonjour (Version: 3.0.0.10 - Apple Inc.)
Canon Inkjet Printer Driver Add-On Module V2.00 (Version:  - )
Canon MP510 (Version:  - )
Canon My Printer (x32 Version:  - )
Catalyst Control Center (x32 Version: 2011.0908.1355.23115 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2011.0908.1355.23115 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2011.0908.1355.23115 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2011.0908.1354.23115 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2011.0908.1354.23115 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2011.0908.1354.23115 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2011.0908.1354.23115 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2011.0908.1354.23115 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2011.0908.1354.23115 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2011.0908.1354.23115 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2011.0908.1354.23115 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2011.0908.1354.23115 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2011.0908.1354.23115 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2011.0908.1354.23115 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2011.0908.1355.23115 - Advanced Micro Devices, Inc.) Hidden
CyberLink LabelPrint (x32 Version: 2.5.3624 - CyberLink Corp.)
CyberLink LabelPrint (x32 Version: 2.5.3624 - CyberLink Corp.) Hidden
CyberLink Power2Go (x32 Version: 7.0.0.1327 - CyberLink Corp.)
CyberLink Power2Go (x32 Version: 7.0.0.1327 - CyberLink Corp.) Hidden
CyberLink PowerDVD Copy (x32 Version: 1.5.1306 - CyberLink Corp.)
CyberLink PowerDVD Copy (x32 Version: 1.5.1306 - CyberLink Corp.) Hidden
CyberLink PowerRecover (x32 Version: 5.5.4125 - CyberLink Corp.)
CyberLink PowerRecover (x32 Version: 5.5.4125 - CyberLink Corp.) Hidden
CyberLink WaveEditor (x32 Version: 1.0.1.2821 - CyberLink Corp.)
CyberLink WaveEditor (x32 Version: 1.0.1.2821 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DriverBoost (x32 Version: 7 - DriverBoost)
Dropbox (HKCU Version: 2.0.22 - Dropbox, Inc.)
Einstellungstest-Trainer 6.0 (x32 Version: 6.0.0.126 - BestLogic)
Epson Benutzerhandbuch WF-2530 Series (x32 Version:  - )
Epson Connect Guide (x32 Version:  - )
Epson Easy Photo Print 2 (x32 Version: 2.4.0.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (x32 Version: 1.00.0000 - SEIKO EPSON CORPORATION2)
Epson Event Manager (x32 Version: 3.01.0005 - Seiko Epson Corporation)
Epson FAX Utility (x32 Version: 1.31.00 - SEIKO EPSON CORPORATION)
Epson Netzwerkhandbuch WF-2530 Series (x32 Version:  - )
Epson PC-FAX Driver (x32 Version:  - )
EPSON Scan (x32 Version:  - Seiko Epson Corporation)
EPSON WF-2530 Series Printer Uninstall (Version:  - SEIKO EPSON Corporation)
EpsonNet Print (x32 Version: 2.6.0 - SEIKO EPSON CORPORATION)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
iCloud (Version: 2.1.2.8 - Apple Inc.)
Intel(R) Control Center (x32 Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Rapid Storage Technology (x32 Version: 10.6.0.1002 - Intel Corporation)
iTunes (Version: 11.0.3.42 - Apple Inc.)
Jagen 2011 (x32 Version: 1.00.0000 - Valusoft)
Java 7 Update 25 (x32 Version: 7.0.250 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden
Landwirtschafts-Simulator 2009 Gold (x32 Version:  - GIANTS Software)
Logitech Audio Echo Cancellation Component for 64-bit Windows (Version: 10.51.2027 - Logitech Inc.) Hidden
Logitech QuickCam (Version: 10.51.2029 - Logitech Inc.)
Logitech Video Enumerator (x32 Version: 10.51.2027 - Logitech Inc.) Hidden
Logitech® Camera-Treiber (x32 Version:  - )
LyricsContainer (x32 Version:  - RYD Software) <==== ATTENTION
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Medion Home Cinema (x32 Version: 8.0.3216 - CyberLink Corp.)
Medion Home Cinema (x32 Version: 8.0.3216 - CyberLink Corp.) Hidden
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
MVisn64 (Version: 10.51.2027 - Logitech Inc.) Hidden
NVIDIA PhysX (x32 Version: 9.10.0513 - NVIDIA Corporation)
OpenOffice.org 3.3 (x32 Version: 3.3.9567 - OpenOffice.org)
PaperPort (x32 Version: 9.02.0823 - ScanSoft, Inc.)
Pflanzen gegen Zombies (x32 Version:  - PopCap Games)
PhotoScape (x32 Version:  - )
PlayReady PC Runtime amd64 (Version: 1.3.0 - Microsoft Corporation)
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
ProtectDisc Driver, Version 11 (x32 Version: 11.0.0.14 - ProtectDisc Software GmbH)
QuickTime (x32 Version: 7.73.80.64 - Apple Inc.)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (x32 Version: 7.46.610.2011 - Realtek)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6438 - Realtek Semiconductor Corp.)
Skype Click to Call (x32 Version: 5.9.9216 - Skype Technologies S.A.)
Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)
TeamViewer 7 (x32 Version: 7.0.15723 - TeamViewer)
Unity Web Player (HKCU Version:  - Unity Technologies ApS)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
VLC media player 1.1.11 (x32 Version: 1.1.11 - VideoLAN)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3538.0513 - Microsoft Corporation)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotótár (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
WinRAR 4.01 (32-Bit) (x32 Version: 4.01.0 - win.rar GmbH)
Zuma (x32 Version:  - PopCap Games)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Restore Points  =========================

02-11-2013 14:47:07 Geplanter Prüfpunkt
10-11-2013 10:30:13 Geplanter Prüfpunkt
18-11-2013 18:23:50 Geplanter Prüfpunkt
18-11-2013 18:28:34 Windows Update
30-11-2013 16:08:09 Geplanter Prüfpunkt
12-12-2013 15:29:17 Windows Update
14-12-2013 18:07:48 Windows Update
17-12-2013 18:10:51 Windows Update
26-12-2013 20:16:21 Geplanter Prüfpunkt
03-01-2014 14:13:08 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {070F1EFB-F1ED-43EE-9F27-927CCF1157B9} - \Pricora-codedownloader No Task File
Task: {11FB1A62-C720-45F9-A5C1-830B5A7C3C47} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-13] (Adobe Systems Incorporated)
Task: {1D6A162B-4337-476B-B7B9-F37E64814E44} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {24D3A466-8B19-40CB-B3E8-6332EEBEC444} - \LyricsContainer Update No Task File
Task: {70510374-F12E-4562-B4AB-5960736FF107} - \Pricora-firefoxinstaller No Task File
Task: {79446154-5327-4F36-934D-298A18D07D3E} - \Pricora-enabler No Task File
Task: {95F80218-43FD-4A89-BDA0-A87242F57629} - \Plus-HD-2.6-codedownloader No Task File
Task: {AA9FC572-9B1B-4544-BCCA-98E82C1D90A2} - \Plus-HD-2.6-enabler No Task File
Task: {B326316C-6648-47C6-9333-DCD5787718F4} - \Plus-HD-2.6-firefoxinstaller No Task File
Task: {B4A7EC0B-1232-4DC4-8877-76FD5D109B12} - \Pricora-chromeinstaller No Task File
Task: {CAB10BAA-6AC6-4750-88D2-6A3FB2269D12} - \Pricora-updater No Task File
Task: {F53A4B1D-764E-44FB-81B8-99A1D609CB48} - \Plus-HD-2.6-chromeinstaller No Task File
Task: {F8B8EAFA-813A-4215-8047-FA62EF087053} - \Plus-HD-2.6-updater No Task File
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2013-04-05 11:58 - 2013-04-05 11:58 - 00954696 _____ () C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll
2011-09-08 21:53 - 2011-09-08 21:53 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2012-11-07 19:36 - 2012-09-19 19:17 - 00397088 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2012-11-28 14:13 - 2012-11-28 14:13 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-11-28 14:13 - 2012-11-28 14:13 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-03-13 21:48 - 2013-03-13 21:48 - 24978944 _____ () C:\Users\genz\AppData\Roaming\Dropbox\bin\libcef.dll
2010-08-03 23:39 - 2010-08-03 23:39 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2010-08-03 23:39 - 2010-08-03 23:39 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2007-02-08 01:13 - 2007-02-08 01:13 - 00022040 _____ () C:\Program Files (x86)\Common Files\LogiShrd\LComMgr\LCMServerPS.dll
2007-02-08 01:18 - 2007-02-08 01:18 - 01123864 _____ () C:\Program Files (x86)\Logitech\QuickCam10\LAppRes.dll
2011-01-17 15:19 - 2012-04-08 18:23 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2013-08-26 15:32 - 2013-08-26 15:32 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\1beb84c27c2edeb38839916524b9df4d\IsdiInterop.ni.dll
2011-08-22 17:03 - 2011-05-20 18:05 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2013-12-13 10:11 - 2013-12-13 10:11 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/03/2014 01:07:56 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/02/2014 10:21:17 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/02/2014 07:27:44 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (01/02/2014 10:19:34 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎02.‎01.‎2014 um 22:16:50 unerwartet heruntergefahren.

Error: (01/02/2014 07:31:29 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Search" wurde nicht richtig gestartet.


Microsoft Office Sessions:
=========================
Error: (01/03/2014 01:07:56 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/02/2014 10:21:17 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/02/2014 07:27:44 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info ===========================

Percentage of memory in use: 53%
Total physical RAM: 4077.64 MB
Available physical RAM: 1892.26 MB
Total Pagefile: 8153.46 MB
Available Pagefile: 5494.83 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (Boot) (Fixed) (Total:881.59 GB) (Free:816.2 GB) NTFS
Drive d: (Recover) (Fixed) (Total:48.83 GB) (Free:29.96 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 2BD2C32A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=882 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=49 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1023 MB) - (Type=12)

==================== End Of Log ============================
Code:
SystemLook 30.07.11 by jpshortstuff
Log created at 19:27 on 03/01/2014 by genz
Administrator - Elevation successful

========== filefind ==========

Searching for "*DSearchLink*"
C:\AdwCleaner\Quarantine\C\ProgramData\DSearchLink\DSearchLink.exe.vir        --a---- 154112 bytes        [17:56 05/10/2013]        [11:53 27/08/2013] 30B9BD7CD6F7A4395A22B5D8907F302C
C:\Users\genz\AppData\Local\Temp\C7C3FF5A-BAB0-7891-A714-427D2848385A\Latest\DSearchLink.inf        --a---- 112 bytes        [12:25 08/08/2013]        [12:25 08/08/2013] BBF8C3EC6FF2BC0B66C292020FC7C730
C:\Users\genz\AppData\Local\Temp\C7C3FF5A-BAB0-7891-A714-427D2848385A\Latest\DSearchLink_DT.zpb        --a---- 54481 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] E7998285CC0E9499DF56B6E43C0FAF73

Searching for "*ChatZum*"
C:\AdwCleaner\Quarantine\C\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\searchplugins\ChatZum.xml.vir        --a---- 745 bytes        [18:37 17/02/2013]        [18:37 17/02/2013] DE0801B1A00B7E42B634CC41A82CDA39
C:\Users\genz\AppData\Local\Temp\chatzum.cab        --a---- 1379368 bytes        [04:55 30/01/2013]        [04:55 30/01/2013] 2E544601D5C76985F85F8F82441D47E4
C:\Users\genz\AppData\Local\Temp\chatzum.xpi        --a---- 1355068 bytes        [22:27 29/01/2013]        [22:27 29/01/2013] 6933A3291F69786616214E2D41280D4C
C:\Users\genz\AppData\Local\Temp\chatzum_softonic_yahoo_61.exe        --a---- 3991360 bytes        [18:34 17/02/2013]        [18:36 17/02/2013] B76571269B42A9EAC6B9A69B82E48AD5

Searching for "*LyricsContainer*"
C:\AdwCleaner\Quarantine\C\Windows\System32\Tasks\LyricsContainer Update.vir        --a---- 3052 bytes        [13:05 13/07/2013]        [13:11 15/09/2013] 16BAE107AD616AD62F6C92262397FC7E
C:\AdwCleaner\Quarantine\C\Windows\Tasks\LyricsContainer Update.job.vir        --a---- 406 bytes        [13:05 13/07/2013]        [14:01 02/01/2014] 99C82F1B588AF1A3C1C5F28757A92999

Searching for "*Plus-HD-2.6*"
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-bg.exe.vir        --a---- 742760 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] 44B36F316CDCBFAAE0D4C93BDFF2EDAA
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-bho.dll.vir        --a---- 602984 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] 2162966379BC4DCF426C3F0D0B4985D6
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-bho64.dll.vir        --a---- 945000 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] 9670F438F228639CEF79224E21C77195
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-buttonutil.dll.vir        --a---- 405352 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] 2AD27C3C095EA274551E6BAD36F26707
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-buttonutil.exe.vir        --a---- 343400 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] DE4FC667CBFDFFE01E66300599EE91FA
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-buttonutil64.dll.vir        --a---- 491368 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] 2F223F4556BC586997B923A7D140D4F1
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-buttonutil64.exe.vir        --a---- 447848 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] 61BF54DCA0D1BA9D4E4FC845FEE3F4C2
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-chromeinstaller.exe.vir        --a---- 489320 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] 2C496CB4CEB05A4717147DF9982A6240
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-codedownloader.exe.vir        --a---- 491880 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] 4F84B8AA182058A97A6AFF4840BBC517
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-firefoxinstaller.exe.vir        --a---- 727400 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] D39F801793E1B4868993D01A926D72D2
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-helper.exe.vir        --a---- 315752 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] 0C5CA562B1BAFC2608D8DBAEDFE31A70
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-updater.exe.vir        --a---- 367976 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] DE8CFF001815C660E8F5ADD42C104284
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6.ico.vir        --a---- 9662 bytes        [17:14 02/09/2013]        [17:14 02/09/2013] 739B67DAC0C716F3DA123622BACAB424
C:\AdwCleaner\Quarantine\C\Windows\System32\Tasks\Plus-HD-2.6-chromeinstaller.vir        --a---- 4930 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] 30D4CB8F37E376C1CD09FD0B90F273B0
C:\AdwCleaner\Quarantine\C\Windows\System32\Tasks\Plus-HD-2.6-codedownloader.vir        --a---- 4222 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] 82F0B6F2EC58E70D31BA205B97AA0345
C:\AdwCleaner\Quarantine\C\Windows\System32\Tasks\Plus-HD-2.6-enabler.vir        --a---- 4122 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] 7CDA47F984D092623F46BC54E2C07955
C:\AdwCleaner\Quarantine\C\Windows\System32\Tasks\Plus-HD-2.6-firefoxinstaller.vir        --a---- 4854 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] 57D50A9984EEEDB39CABE7AA189541BB
C:\AdwCleaner\Quarantine\C\Windows\System32\Tasks\Plus-HD-2.6-updater.vir        --a---- 4318 bytes        [17:56 05/10/2013]        [17:56 16/10/2013] D937CE0700F264064A755E10BCC8801C
C:\AdwCleaner\Quarantine\C\Windows\Tasks\Plus-HD-2.6-chromeinstaller.job.vir        --a---- 1900 bytes        [17:56 05/10/2013]        [13:17 02/01/2014] 2C091B8A2A7CA15C91A234770CE5E294
C:\AdwCleaner\Quarantine\C\Windows\Tasks\Plus-HD-2.6-codedownloader.job.vir        --a---- 1192 bytes        [17:56 05/10/2013]        [13:17 02/01/2014] BB365975302950CAF244AB15B0F94668
C:\AdwCleaner\Quarantine\C\Windows\Tasks\Plus-HD-2.6-enabler.job.vir        --a---- 1092 bytes        [17:56 05/10/2013]        [13:17 02/01/2014] 33CCBAAAB355384FE71ABA3927856010
C:\AdwCleaner\Quarantine\C\Windows\Tasks\Plus-HD-2.6-firefoxinstaller.job.vir        --a---- 1824 bytes        [17:56 05/10/2013]        [13:17 02/01/2014] F988EFD82F529BED7720C6A49C2F29E1
C:\AdwCleaner\Quarantine\C\Windows\Tasks\Plus-HD-2.6-updater.job.vir        --a---- 1288 bytes        [17:56 05/10/2013]        [13:18 02/01/2014] EBFECE15D87E1B708D58560F9CF4D913
C:\Users\genz\AppData\Local\Temp\Plus-HD-2.6Installer_1380995790.log        --a---- 300621 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] 15CE60F58D5F3B248DD2522B24DC5334
C:\Windows\Temp\Plus-HD-2.6Installer_1381946172.log        --a---- 925 bytes        [17:56 16/10/2013]        [17:56 16/10/2013] 91408E069C1647F335D08477AD6C5672

Searching for "*Crossrider*"
C:\AdwCleaner\Quarantine\C\Users\genz\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.84_0\crossriderManifest.json.vir        --a---- 737 bytes        [17:55 05/10/2013]        [17:55 05/10/2013] 639C0E2E479D47754C4CBE9657692BE6
C:\AdwCleaner\Quarantine\C\Users\genz\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.84_0\extensionData\plugins\13_CrossriderAppUtils.js.vir        --a---- 5955 bytes        [17:55 05/10/2013]        [17:55 05/10/2013] A15314F10FA928B5C242EDDC4B91F503
C:\AdwCleaner\Quarantine\C\Users\genz\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.84_0\extensionData\plugins\14_CrossriderUtils.js.vir        --a---- 12369 bytes        [17:55 05/10/2013]        [17:55 05/10/2013] 56E07DB48844B5EB4DD57F053D87A38D
C:\AdwCleaner\Quarantine\C\Users\genz\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.84_0\extensionData\plugins\78_CrossriderInfo.js.vir        --a---- 2220 bytes        [17:55 05/10/2013]        [17:55 05/10/2013] EC3226E86137F361EEEF8F1244A0225A
C:\AdwCleaner\Quarantine\C\Users\genz\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.84_0\js\lib\crossriderAPI.js.vir        --a---- 11366 bytes        [17:55 05/10/2013]        [17:55 05/10/2013] 7B3ADEF52BEDD686D98A3C0F45278020
C:\AdwCleaner\Quarantine\C\Users\genz\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.24.50_0\crossriderManifest.json.vir        --a---- 737 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] 55E223F22629C295A9D221672F2DC486
C:\AdwCleaner\Quarantine\C\Users\genz\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.24.50_0\extensionData\plugins\13_CrossriderAppUtils.js.vir        --a---- 5955 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] A15314F10FA928B5C242EDDC4B91F503
C:\AdwCleaner\Quarantine\C\Users\genz\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.24.50_0\extensionData\plugins\14_CrossriderUtils.js.vir        --a---- 12369 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] 56E07DB48844B5EB4DD57F053D87A38D
C:\AdwCleaner\Quarantine\C\Users\genz\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.24.50_0\extensionData\plugins\78_CrossriderInfo.js.vir        --a---- 2220 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] EC3226E86137F361EEEF8F1244A0225A
C:\AdwCleaner\Quarantine\C\Users\genz\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.24.50_0\js\lib\crossriderAPI.js.vir        --a---- 11366 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] 7B3ADEF52BEDD686D98A3C0F45278020
C:\AdwCleaner\Quarantine\C\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\13_CrossriderAppUtils.js.vir        --a---- 7056 bytes        [13:23 20/11/2013]        [08:51 19/11/2013] 5C624086605726A12BFEC9C83F5E0CF2
C:\AdwCleaner\Quarantine\C\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\14_CrossriderUtils.js.vir        --a---- 15110 bytes        [17:52 19/12/2013]        [17:52 19/12/2013] C17846C18C80D961BE6A404046D6FD05
C:\AdwCleaner\Quarantine\C\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\177_crossriderDashboard.js.vir        --a---- 24719 bytes        [14:56 12/12/2013]        [14:56 12/12/2013] 1AA4F5E9AB5EB82C88745AB0F3C79ADF
C:\AdwCleaner\Quarantine\C\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\78_CrossriderInfo.js.vir        --a---- 2234 bytes        [13:23 20/11/2013]        [08:51 19/11/2013] AFC19F46F2798D47DCE5568D444A571A
C:\AdwCleaner\Quarantine\C\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\skin\crossrider_statusbar.png.vir        --a---- 1361 bytes        [13:23 20/11/2013]        [08:51 19/11/2013] 8B1EB9CB80417EC0022D278A44AB1DC7
C:\AdwCleaner\Quarantine\C\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\Extensions\94ae0976-89df-4347-9771-5371c6e203bf@3796dc63-d06d-4575-a997-9b5c935fe915.com\extensionData\plugins\13_CrossriderAppUtils.js.vir        --a---- 7056 bytes        [17:07 28/12/2013]        [10:02 20/12/2013] 5C624086605726A12BFEC9C83F5E0CF2
C:\AdwCleaner\Quarantine\C\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\Extensions\94ae0976-89df-4347-9771-5371c6e203bf@3796dc63-d06d-4575-a997-9b5c935fe915.com\extensionData\plugins\14_CrossriderUtils.js.vir        --a---- 15248 bytes        [17:07 28/12/2013]        [10:02 20/12/2013] 1DCBB4C9F8B444CC98E53992AFE517CB
C:\AdwCleaner\Quarantine\C\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\Extensions\94ae0976-89df-4347-9771-5371c6e203bf@3796dc63-d06d-4575-a997-9b5c935fe915.com\extensionData\plugins\177_crossriderDashboard.js.vir        --a---- 25020 bytes        [17:07 28/12/2013]        [10:02 20/12/2013] 306771DB489474E586B858C1B7ED094A
C:\AdwCleaner\Quarantine\C\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\Extensions\94ae0976-89df-4347-9771-5371c6e203bf@3796dc63-d06d-4575-a997-9b5c935fe915.com\extensionData\plugins\78_CrossriderInfo.js.vir        --a---- 3321 bytes        [17:07 28/12/2013]        [10:02 20/12/2013] 1C594708F53D8C880540EFE03DF9C416
C:\AdwCleaner\Quarantine\C\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\Extensions\94ae0976-89df-4347-9771-5371c6e203bf@3796dc63-d06d-4575-a997-9b5c935fe915.com\skin\crossrider_statusbar.png.vir        --a---- 1361 bytes        [17:07 28/12/2013]        [10:02 20/12/2013] 8B1EB9CB80417EC0022D278A44AB1DC7

Searching for "*Pricora*"
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Pricora\Pricora-bg.exe.vir        --a---- 738304 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] 4140179092E1890C49419209203C2C73
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Pricora\Pricora-bho.dll.vir        --a---- 598528 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] 97D6857070A76ACC3530E7DA80E0A741
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Pricora\Pricora-bho64.dll.vir        --a---- 940544 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] 906C54F99336FD4829623A18F409F3E4
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Pricora\Pricora-buttonutil.dll.vir        --a---- 400896 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] B887E66A7850792CDF91AD9B16148328
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Pricora\Pricora-buttonutil.exe.vir        --a---- 338944 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] 993FB729E11EAFC713B657049048D70E
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Pricora\Pricora-buttonutil64.dll.vir        --a---- 486912 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] AE7838EC3447B31E0CA7ECF1119B1DA6
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Pricora\Pricora-buttonutil64.exe.vir        --a---- 443392 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] 80A338314040A40815A91A8E22BF959D
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Pricora\Pricora-chromeinstaller.exe.vir        --a---- 484864 bytes        [17:55 05/10/2013]        [17:55 05/10/2013] A4867262FAD7107158EC3879F74A6D33
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Pricora\Pricora-codedownloader.exe.vir        --a---- 487424 bytes        [17:55 05/10/2013]        [17:55 05/10/2013] D68D26C1BD7689866E1D152C342B94F2
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Pricora\Pricora-enabler.exe.vir        --a---- 346624 bytes        [17:56 05/10/2013]        [17:48 16/10/2013] 3E581AAF131FCB652DF45813D57844BF
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Pricora\Pricora-firefoxinstaller.exe.vir        --a---- 722944 bytes        [17:55 05/10/2013]        [17:55 05/10/2013] 90C77712976C0DE19D64935346AFDB43
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Pricora\Pricora-helper.exe.vir        --a---- 311296 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] 819F3F119741EA0F20A53DCFB7D7B2BE
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Pricora\Pricora-updater.exe.vir        --a---- 363520 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] A6452E03B0A2C9EF15B1355B24EC404B
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Pricora\Pricora.ico.vir        --a---- 9662 bytes        [14:07 09/09/2013]        [14:07 09/09/2013] AF9018042FC99182AF16A7343996AE46
C:\AdwCleaner\Quarantine\C\Users\genz\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.84_0\extensionData\plugins\128_superfish_pricora_m.js.vir        --a---- 771 bytes        [17:55 05/10/2013]        [17:55 05/10/2013] 2FBD69E201E67E39D4236D569B6FDD07
C:\AdwCleaner\Quarantine\C\Users\genz\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.24.50_0\extensionData\plugins\128_superfish_pricora_m.js.vir        --a---- 771 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] 2FBD69E201E67E39D4236D569B6FDD07
C:\AdwCleaner\Quarantine\C\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\128_superfish_pricora_m.js.vir        --a---- 593 bytes        [15:57 17/12/2013]        [15:57 17/12/2013] 8A860596E4A5351BB16A81645733684B
C:\AdwCleaner\Quarantine\C\Users\genz\AppData\Roaming\Mozilla\Firefox\Profiles\1ast7zep.default\Extensions\94ae0976-89df-4347-9771-5371c6e203bf@3796dc63-d06d-4575-a997-9b5c935fe915.com\extensionData\plugins\128_superfish_pricora_m.js.vir        --a---- 739 bytes        [17:07 28/12/2013]        [10:02 20/12/2013] F0C374D6CF1E93B74E618A37B6EBCED3
C:\AdwCleaner\Quarantine\C\Windows\System32\Tasks\Pricora-chromeinstaller.vir        --a---- 4898 bytes        [17:55 05/10/2013]        [17:55 05/10/2013] 2C59406A9A444554DB2C078B484EF4BA
C:\AdwCleaner\Quarantine\C\Windows\System32\Tasks\Pricora-codedownloader.vir        --a---- 4198 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] 01A679C89A55764C53EFA48E6B2E759A
C:\AdwCleaner\Quarantine\C\Windows\System32\Tasks\Pricora-enabler.vir        --a---- 4098 bytes        [17:56 05/10/2013]        [17:56 05/10/2013] BC4CA3A0B44AEC7BA8E73250825F36F7
C:\AdwCleaner\Quarantine\C\Windows\System32\Tasks\Pricora-firefoxinstaller.vir        --a---- 4822 bytes        [17:55 05/10/2013]        [17:55 05/10/2013] D7CF66746C5F297D4DBBBFCD0D3C657C
C:\AdwCleaner\Quarantine\C\Windows\System32\Tasks\Pricora-updater.vir        --a---- 4294 bytes        [17:56 05/10/2013]        [17:48 16/10/2013] 0D01DD963A6CA19DDF670D3F936A1BEF
C:\AdwCleaner\Quarantine\C\Windows\Tasks\Pricora-chromeinstaller.job.vir        --a---- 1868 bytes        [17:55 05/10/2013]        [13:17 02/01/2014] 772BAC14B58B0520B9593F315B77FAB6
C:\AdwCleaner\Quarantine\C\Windows\Tasks\Pricora-codedownloader.job.vir        --a---- 1168 bytes        [17:56 05/10/2013]        [13:17 02/01/2014] FC3DFB7D5CEFFF277921393A56C31C31
C:\AdwCleaner\Quarantine\C\Windows\Tasks\Pricora-enabler.job.vir        --a---- 1068 bytes        [17:56 05/10/2013]        [13:17 02/01/2014] 58963949FFD445B7FB277E3A0E085394
C:\AdwCleaner\Quarantine\C\Windows\Tasks\Pricora-firefoxinstaller.job.vir        --a---- 1792 bytes        [17:55 05/10/2013]        [13:17 02/01/2014] 856223D6C05652573C20E14718253C75
C:\AdwCleaner\Quarantine\C\Windows\Tasks\Pricora-updater.job.vir        --a---- 1264 bytes        [17:56 05/10/2013]        [13:17 02/01/2014] A031DA8CE7A99FD9855594CB7B56B2A1
C:\Users\genz\AppData\Local\Temp\PricoraInstaller_1380995736.log        --a---- 303100 bytes        [17:55 05/10/2013]        [17:56 05/10/2013] B3F35C58A9F8F8CB3A4C0D0B4353FC72
C:\Users\genz\AppData\Local\Temp\silent_pricora_DE.exe        --a---- 6093512 bytes        [17:54 05/10/2013]        [17:55 05/10/2013] 9171FD79AACB84507DDCE6907F153E1D
C:\Windows\Temp\PricoraInstaller_1381945719.log        --a---- 913 bytes        [17:48 16/10/2013]        [17:48 16/10/2013] 5C326E81FD884ADF2ACEA36570FD5906

Searching for "*Iminent*"
C:\Users\genz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1X9DYWJV\IminentMinibarIE[1].exe        --a---- 963840 bytes        [18:37 17/02/2013]        [18:37 17/02/2013] 0C370709A5656468D516D3FAD17F9D47
C:\Users\genz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1X9DYWJV\Iminent[1].js        --a---- 3431 bytes        [18:36 17/02/2013]        [18:36 17/02/2013] B959AEBD986EC65CFEA796437452CA09
C:\Users\genz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T639S10B\geoloc_iminent_com[1].js        --a---- 61 bytes        [18:36 17/02/2013]        [18:36 17/02/2013] 09289F246306460748888BD9937C5820
C:\Users\genz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T639S10B\Iminent-6.4.56.0[1].MSI        --a---- 10149888 bytes        [18:36 17/02/2013]        [18:37 17/02/2013] BF54A357AB751C3BE9259CF88E7A96C6

========== folderfind ==========

Searching for "*DSearchLink*"
C:\AdwCleaner\Quarantine\C\ProgramData\DSearchLink        d------        [17:03 02/01/2014]

Searching for "*ChatZum*"
C:\AdwCleaner\Quarantine\C\Program Files (x86)\ChatZum Toolbar        d------        [17:03 02/01/2014]

Searching for "*LyricsContainer*"
C:\AdwCleaner\Quarantine\C\Program Files (x86)\LyricsContainer        d------        [17:03 02/01/2014]

Searching for "*Plus-HD-2.6*"
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.6        d------        [17:03 02/01/2014]
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_Plus-HD-2.6-code_b853698862a5b2da1e3a75226ba9a5f2c3fca9_040a8861        d----c-        [17:20 06/10/2013]
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_Plus-HD-2.6-code_b853698862a5b2da1e3a75226ba9a5f2c3fca9_046a6f74        d----c-        [06:37 06/10/2013]
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_Plus-HD-2.6-enab_9c3ae119b8b61848d30a9009a3fec8ca28c3d_2306476d        d----c-        [17:57 05/10/2013]
C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppCrash_Plus-HD-2.6-code_b853698862a5b2da1e3a75226ba9a5f2c3fca9_040a8861        d----c-        [17:20 06/10/2013]
C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppCrash_Plus-HD-2.6-code_b853698862a5b2da1e3a75226ba9a5f2c3fca9_046a6f74        d----c-        [06:37 06/10/2013]
C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppCrash_Plus-HD-2.6-enab_9c3ae119b8b61848d30a9009a3fec8ca28c3d_2306476d        d----c-        [17:57 05/10/2013]

Searching for "*Crossrider*"
No folders found.

Searching for "*Pricora*"
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Pricora        d------        [17:03 02/01/2014]

Searching for "*Iminent*"
C:\Users\genz\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_iminent.exe_3e1a3fe63885796379529bea99abb9b7670d1bd_1c5bed89        d----c-        [08:33 25/07/2013]

========== regfind ==========

Searching for "DSearchLink"
No data found.

Searching for "ChatZum"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\28171594C2124079986D38D7A0A44D98]
"DisplayName"="ChatZum Search"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\28171594C2124079986D38D7A0A44D98]
"URL"="hxxp://search.chatzum.com/?orig=DS&affid=61&cztbid=372675200&q={searchTerms}"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\28171594C2124079986D38D7A0A44D98]
"FaviconURL"="hxxp://cdn.chatzum.com/favicon.ico"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\28171594C2124079986D38D7A0A44D98]
"TopResultURLFallback"="hxxp://search.chatzum.com/?orig=DS&affid=61&cztbid=372675200&q={searchTerms}"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\28171594C2124079986D38D7A0A44D98]
"TopResultURL"="hxxp://search.chatzum.com/?orig=DS&affid=61&cztbid=372675200&q={searchTerms}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes]
"DisplayName"="ChatZum Search"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes]
"URL"="hxxp://search.chatzum.com/?orig=DS&affid=61&cztbid=372675200&q={searchTerms}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes]
"TopResultURLFallback"="hxxp://search.chatzum.com/?orig=DS&affid=61&cztbid=372675200&q={searchTerms}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes]
"TopResultURL"="hxxp://search.chatzum.com/?orig=DS&affid=61&cztbid=372675200&q={searchTerms}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes]
"FaviconURL"="hxxp://cdn.chatzum.com/favicon.ico"
[HKEY_USERS\S-1-5-21-3395060028-306035869-1869503064-1001\Software\Microsoft\Internet Explorer\SearchScopes\28171594C2124079986D38D7A0A44D98]
"DisplayName"="ChatZum Search"
[HKEY_USERS\S-1-5-21-3395060028-306035869-1869503064-1001\Software\Microsoft\Internet Explorer\SearchScopes\28171594C2124079986D38D7A0A44D98]
"URL"="hxxp://search.chatzum.com/?orig=DS&affid=61&cztbid=372675200&q={searchTerms}"
[HKEY_USERS\S-1-5-21-3395060028-306035869-1869503064-1001\Software\Microsoft\Internet Explorer\SearchScopes\28171594C2124079986D38D7A0A44D98]
"FaviconURL"="hxxp://cdn.chatzum.com/favicon.ico"
[HKEY_USERS\S-1-5-21-3395060028-306035869-1869503064-1001\Software\Microsoft\Internet Explorer\SearchScopes\28171594C2124079986D38D7A0A44D98]
"TopResultURLFallback"="hxxp://search.chatzum.com/?orig=DS&affid=61&cztbid=372675200&q={searchTerms}"
[HKEY_USERS\S-1-5-21-3395060028-306035869-1869503064-1001\Software\Microsoft\Internet Explorer\SearchScopes\28171594C2124079986D38D7A0A44D98]
"TopResultURL"="hxxp://search.chatzum.com/?orig=DS&affid=61&cztbid=372675200&q={searchTerms}"

Searching for "LyricsContainer"
[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"{cd288a68-7b21-4f14-b789-82cc44992259}"="C:\Program Files (x86)\LyricsContainer\133.xpi"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{21C2C80C-7C6C-4C80-874F-6DC961505704}\1.0\0\win32]
@="C:\Program Files (x86)\LyricsContainer\128.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{21C2C80C-7C6C-4C80-874F-6DC961505704}\1.0\HELPDIR]
@="C:\Program Files (x86)\LyricsContainer"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{64997015-1cf6-437f-ae62-0876060859ed}\1.0\0\win32]
@="C:\Program Files (x86)\LyricsContainer\133.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{64997015-1cf6-437f-ae62-0876060859ed}\1.0\HELPDIR]
@="C:\Program Files (x86)\LyricsContainer"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{21C2C80C-7C6C-4C80-874F-6DC961505704}\1.0\0\win32]
@="C:\Program Files (x86)\LyricsContainer\128.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{21C2C80C-7C6C-4C80-874F-6DC961505704}\1.0\HELPDIR]
@="C:\Program Files (x86)\LyricsContainer"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{64997015-1cf6-437f-ae62-0876060859ed}\1.0\0\win32]
@="C:\Program Files (x86)\LyricsContainer\133.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{64997015-1cf6-437f-ae62-0876060859ed}\1.0\HELPDIR]
@="C:\Program Files (x86)\LyricsContainer"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{24D3A466-8B19-40CB-B3E8-6332EEBEC444}]
"Path"="\LyricsContainer Update"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyricsContainer Update]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d07a13d9-0763-4d61-b23a-3e133e87ef96}]
"DisplayName"="LyricsContainer"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d07a13d9-0763-4d61-b23a-3e133e87ef96}]
"UninstallString"="C:\Program Files (x86)\LyricsContainer\Uninstall.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{21C2C80C-7C6C-4C80-874F-6DC961505704}\1.0\0\win32]
@="C:\Program Files (x86)\LyricsContainer\128.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{21C2C80C-7C6C-4C80-874F-6DC961505704}\1.0\HELPDIR]
@="C:\Program Files (x86)\LyricsContainer"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{64997015-1cf6-437f-ae62-0876060859ed}\1.0\0\win32]
@="C:\Program Files (x86)\LyricsContainer\133.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{64997015-1cf6-437f-ae62-0876060859ed}\1.0\HELPDIR]
@="C:\Program Files (x86)\LyricsContainer"
[HKEY_USERS\S-1-5-21-3395060028-306035869-1869503064-1001\Software\Mozilla\Firefox\Extensions]
"{cd288a68-7b21-4f14-b789-82cc44992259}"="C:\Program Files (x86)\LyricsContainer\133.xpi"

Searching for "Plus-HD-2.6"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{95F80218-43FD-4A89-BDA0-A87242F57629}]
"Path"="\Plus-HD-2.6-codedownloader"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AA9FC572-9B1B-4544-BCCA-98E82C1D90A2}]
"Path"="\Plus-HD-2.6-enabler"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B326316C-6648-47C6-9333-DCD5787718F4}]
"Path"="\Plus-HD-2.6-firefoxinstaller"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F53A4B1D-764E-44FB-81B8-99A1D609CB48}]
"Path"="\Plus-HD-2.6-chromeinstaller"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F8B8EAFA-813A-4215-8047-FA62EF087053}]
"Path"="\Plus-HD-2.6-updater"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Plus-HD-2.6-chromeinstaller]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Plus-HD-2.6-codedownloader]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Plus-HD-2.6-enabler]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Plus-HD-2.6-firefoxinstaller]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Plus-HD-2.6-updater]

Searching for "Crossrider"
No data found.

Searching for "Pricora"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{070F1EFB-F1ED-43EE-9F27-927CCF1157B9}]
"Path"="\Pricora-codedownloader"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{70510374-F12E-4562-B4AB-5960736FF107}]
"Path"="\Pricora-firefoxinstaller"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{79446154-5327-4F36-934D-298A18D07D3E}]
"Path"="\Pricora-enabler"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B4A7EC0B-1232-4DC4-8877-76FD5D109B12}]
"Path"="\Pricora-chromeinstaller"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CAB10BAA-6AC6-4750-88D2-6A3FB2269D12}]
"Path"="\Pricora-updater"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Pricora-chromeinstaller]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Pricora-codedownloader]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Pricora-enabler]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Pricora-firefoxinstaller]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Pricora-updater]

Searching for "Iminent"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Iminent\inst\Bootstrapper\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Iminent\inst\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Iminent\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5]
"00000000000000000000000000000000"="C:\Program Files (x86)\Iminent\inst\Bootstrapper\Bootstrapper.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375]
"00000000000000000000000000000000"="02:\SOFTWARE\Iminent\AppInstanceUid"

-= EOF =-
soweit läuft alles gut und öffnet schneller die programme läuft alles wieder flüssiger als vorher.
das einzige was mir noch aufgefallen ist das wenn ich ein programm bzw. ordner öffne es mal vorkommt das er lädt und es denn grau wird und da steh keine rückmeldung und dann aber wieder normal läuft weis jetzt nicht ob es mit maleware was zu tun hat oder nicht das war das einzige was mir aufgefallen war
wie kann man sich am besten gege maleware schützen?

schonmal vielen dank für die hilfe

M-K-D-B 03.01.2014 22:01
Servus,



Wir entfernen die letzten Reste und kontrollieren nochmal alles. ESET kann länger (> 2 h) dauern.
Im Anschluss daran räumen wir auf und ich gebe dir noch ein paar Tipps mit auf den Weg.



Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument


Code:
start
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - URL hxxp://search.chatzum.com/?orig=DS&affid=61&cztbid=372675200&q={searchTerms}
SearchScopes: HKLM-x32 - TopResultURLFallback hxxp://search.chatzum.com/?orig=DS&affid=61&cztbid=372675200&q={searchTerms}
SearchScopes: HKLM-x32 - TopResultURL hxxp://search.chatzum.com/?orig=DS&affid=61&cztbid=372675200&q={searchTerms}
SearchScopes: HKCU - 28171594C2124079986D38D7A0A44D98 URL = hxxp://search.chatzum.com/?orig=DS&affid=61&cztbid=372675200&q={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FF HKCU\...\Firefox\Extensions: [{cd288a68-7b21-4f14-b789-82cc44992259}] - C:\Program Files (x86)\LyricsContainer\133.xpi
Task: {070F1EFB-F1ED-43EE-9F27-927CCF1157B9} - \Pricora-codedownloader No Task File
Task: {24D3A466-8B19-40CB-B3E8-6332EEBEC444} - \LyricsContainer Update No Task File
Task: {70510374-F12E-4562-B4AB-5960736FF107} - \Pricora-firefoxinstaller No Task File
Task: {79446154-5327-4F36-934D-298A18D07D3E} - \Pricora-enabler No Task File
Task: {95F80218-43FD-4A89-BDA0-A87242F57629} - \Plus-HD-2.6-codedownloader No Task File
Task: {AA9FC572-9B1B-4544-BCCA-98E82C1D90A2} - \Plus-HD-2.6-enabler No Task File
Task: {B326316C-6648-47C6-9333-DCD5787718F4} - \Plus-HD-2.6-firefoxinstaller No Task File
Task: {B4A7EC0B-1232-4DC4-8877-76FD5D109B12} - \Pricora-chromeinstaller No Task File
Task: {CAB10BAA-6AC6-4750-88D2-6A3FB2269D12} - \Pricora-updater No Task File
Task: {F53A4B1D-764E-44FB-81B8-99A1D609CB48} - \Plus-HD-2.6-chromeinstaller No Task File
Task: {F8B8EAFA-813A-4215-8047-FA62EF087053} - \Plus-HD-2.6-updater No Task File
Reg: reg delete "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\28171594C2124079986D38D7A0A44D98" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{21C2C80C-7C6C-4C80-874F-6DC961505704}" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{64997015-1cf6-437f-ae62-0876060859ed}" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{21C2C80C-7C6C-4C80-874F-6DC961505704}" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{64997015-1cf6-437f-ae62-0876060859ed}" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d07a13d9-0763-4d61-b23a-3e133e87ef96}" /f
end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.






Schritt 2
Downloade dir die passende Version von HitmanPro auf deinen Desktop: HitmanPro - 32 Bit | HitmanPro - 64 Bit.
  • Starte die HitmanPro.exe
  • Klicke auf
  • Entferne den Haken bei
  • Klicke auf
    und
  • Akzeptiere die Lizenzbedingungen und klicke auf
  • Klicke auf

    und auf
  • Wenn der Scan beendet wurde, nichts löschen lassen etc. sondern wähle unten links auf der Button-Leiste
    und speichere die Logdatei auf Deinem Desktop.
  • Schließe HitmanPro und poste mir das Log.

 






Schritt 3

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset






Schritt 4
Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.






Bitte poste mit deiner nächsten Antwort
  • die Logdatei von FRST,
  • die Logdatei von HitmanPro,
  • die Logdatei von ESET,
  • die Logdatei von SecurityCheck.

M-K-D-B 07.01.2014 16:49
Fehlende Rückmeldung
Dieses Thema wurde aus den Abos gelöscht. Somit bekomme ich keine Benachrichtigung über neue Antworten.
PM an mich falls Du denoch weiter machen willst.

Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner schon sauber ist.

Jeder andere bitte hier klicken und einen eigenen Thread erstellen!


Alle Zeitangaben in WEZ +1. Es ist jetzt 02:53 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19