| bothaner | 25.01.2014 23:43 |
Habe soeben den Frst Scan gemacht weiß leider nicht genau ob ich noch an die Logs von avira eu-Cleaner komme das war der einzige Scan den ich gemacht habe bin da leider kein Fachmann und weiß nicht wo man da rankommt hoffe der frst log hilft dir weiter.
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 25-01-2014 01
Ran by ANDREAS (administrator) on ANDREAS-PC on 25-01-2014 23:31:49
Running from C:\Users\ANDREAS\Downloads
Microsoft® Windows Vista™ Home Premium Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 7
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginService\PluginService.exe
(Cherished Technololgy LIMITED) C:\ProgramData\WPM\wprotectmanager.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Teruten) C:\Windows\System32\FsUsbExService.Exe
() C:\Program Files\ICQ6Toolbar\ICQ Service.exe
() C:\Program Files\Mobogenie\MgAssist.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Nero AG) C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Prolific Technology Inc.) C:\Windows\System32\IoctlSvc.exe
() C:\Windows\System32\PSIService.exe
() C:\Program Files\Realtek Semiconductor Corp\Realtek USB 2.0 Card Reader\reset.exe
() C:\Program Files\Mobogenie\DaemonProcess.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Google Inc.) C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Badoo) C:\ProgramData\Badoo\Badoo Desktop\1.6.58.1220\Badoo.Desktop.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
() C:\Program Files\CyberLink\Shared Files\RichVideo.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
(Google Inc.) C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\chrome.exe
() C:\Program Files\Amazon Browser Bar\ToolbarUpdaterService.exe
(X10) C:\Program Files\Common Files\X10\Common\X10nets.exe
(Google Inc.) C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\chrome.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer.exe
(Google Inc.) C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\chrome.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\tv_w32.exe
(Google Inc.) C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Google Inc.) C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(Google Inc.) C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [6609440 2008-10-31] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1111336 2008-05-08] (Synaptics, Inc.)
HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [13601312 2008-11-21] (NVIDIA Corporation)
HKLM\...\Run: [NvMediaCenter] - C:\Windows\system32\NvMcTray.dll [92704 2008-11-21] (NVIDIA Corporation)
HKLM\...\Run: [NPSStartup] - [x]
HKLM\...\Run: [] - [x]
HKLM\...\Run: [SunJavaUpdateSched] - "C:\Program Files\Java\jre7\bin\jusched.exe"
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM\...\Run: [mobilegeni daemon] - C:\Program Files\Mobogenie\DaemonProcess.exe [766656 2014-01-09] ()
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-02-21] (Google Inc.)
HKCU\...\Run: [Google Update] - C:\Users\ANDREAS\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-06-02] (Google Inc.)
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKCU\...\Run: [Badoo Desktop] - C:\ProgramData\Badoo\Badoo Desktop\1.6.58.1220\Badoo.Desktop.exe [1067232 2012-12-24] (Badoo)
HKCU\...\Run: [ConduitFloatingPlugin_lcnnhcneegeeojhgpfijnlnocjdmlaon] - C:\Users\ANDREAS\AppData\Roaming\ValueApps\CH\TBVerifier.dll [281888 2013-08-25] (Conduit Ltd.)
HKCU\...\Run: [NextLive] - C:\Users\ANDREAS\AppData\Roaming\newnext.me\nengine.dll [1283584 2014-01-06] (NewNextDotMe)
HKCU\...\RunOnce: [Shockwave Updater] - C:\Windows\System32\Adobe\SHOCKW~1\SWHELP~1.EXE -Update -1103471 -"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB0.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.5.30729; .NET CLR 3.0.30618)" -"hxxp://www.gamevial.com/linkers/spillgames.php?game=teamtanks" [447928 2008-08-06] (Adobe Systems, Inc.)
MountPoints2: {1b967737-34bc-11e0-b25d-001f1613456e} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RUNdLl32.ExE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
MountPoints2: {519e1c04-0052-11de-b969-806e6f6e6963} - E:\Autorun.exe
HKU\Default\...\Run: [WindowsWelcomeCenter] - C:\Windows\system32\oobefldr.dll [ 2008-01-21] (Microsoft Corporation)
HKU\Default User\...\Run: [WindowsWelcomeCenter] - C:\Windows\system32\oobefldr.dll [ 2008-01-21] (Microsoft Corporation)
AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL => C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll [123392 2010-08-24] (Google)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.awesomehp.com/?type=hp&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.awesomehp.com/?type=hp&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331&q={searchTerms}
URLSearchHook: HKLM - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
URLSearchHook: HKLM - ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\1011101843\ICQToolBar.dll (ICQ)
URLSearchHook: HKLM - DVDVideoSoftTB Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files\DVDVideoSoft\prxtbDVD2.dll (Conduit Ltd.)
URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.
URLSearchHook: HKCU - UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
URLSearchHook: HKCU - ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\1011101843\ICQToolBar.dll (ICQ)
URLSearchHook: HKCU - DVDVideoSoftTB Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files\DVDVideoSoft\prxtbDVD2.dll (Conduit Ltd.)
URLSearchHook: HKCU - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.awesomehp.com/?type=sc&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331&q={searchTerms}
SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
SearchScopes: HKCU - {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL = hxxp://websearch.ask.com/custom/java/redirect?client=ie&tb=ORJ&o=100000026&src=crm&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
SearchScopes: HKCU - {70D46D94-BF1E-45ED-B567-48701376298E} URL = hxxp://127.0.0.1:4664/search&s=M29tX-1SyPYf1-ot2yIDoG314HU?q={searchTerms}
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://searchqm.com/search.php?channel=sfde203fbdgy21&q={searchTerms}
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll No File
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files\SupTab\SupTab.dll (Thinknice Co. Limited)
BHO: FBDownloader - {553318DA-D010-469E-84B1-496563CAE1BF} - C:\Users\ANDREAS\AppData\Local\fbDownloader\Extensions\FBDownloader.dll (HTTO Group, Ltd)
BHO: flash-Enhancer - {5A60B6BB-FA81-4EFA-AB9C-A820E2143736} - C:\Program Files\AmiExt\flashEnhancer\ie\flashEnhancer.dll ()
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: No Name - {7E853D72-626A-48EC-A868-BA8D5E23E045} - No File
BHO: Re-markit - {8c08c976-46ad-43b0-9369-ec45c3ab24d0} - C:\Program Files\Re-markit\150.dll ()
BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: ValueApps - {93DBF2BB-A2B3-4683-A92E-57E60751F346} - C:\Program Files\Conduit\ValueApps\IE\ValueAppsLoader.dll (Conduit Ltd.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Tracker Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
BHO: DVDVideoSoftTB Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files\DVDVideoSoft\prxtbDVD2.dll (Conduit Ltd.)
BHO: AlxHelper Class - {F443A627-5009-4323-9C1D-7FD598D0D712} - C:\Program Files\Amazon Browser Bar\AmazonBrowserBar.3.0.dll (Amazon.com)
BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll No File
Toolbar: HKLM - ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\1011101843\ICQToolBar.dll (ICQ)
Toolbar: HKLM - DVDVideoSoftTB Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files\DVDVideoSoft\prxtbDVD2.dll (Conduit Ltd.)
Toolbar: HKLM - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll No File
Toolbar: HKLM - Tracker Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - Amazon Browser Bar - {EA582743-9076-4178-9AA6-7393FDF4D5CE} - C:\Program Files\Amazon Browser Bar\AmazonBrowserBar.3.0.dll (Amazon.com)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - DVDVideoSoftTB Toolbar - {E9911EC6-1BCC-40B0-9993-E0EEA7F6953F} - C:\Program Files\DVDVideoSoft\prxtbDVD2.dll (Conduit Ltd.)
Toolbar: HKCU - Tracker Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [147456] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default
FF user.js: detected! => C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\user.js
FF NewTab: hxxp://www.awesomehp.com/newtab/?type=nt&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331
FF DefaultSearchEngine: awesomehp
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: awesomehp
FF Homepage: hxxp://www.awesomehp.com/?type=hp&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331
FF Keyword.URL: hxxp://search.fbdownloader.com/search.php?channel=sfde203fbdgy21&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @google.com/npPicasa2,version=2.0.0 - C:\Program Files\Picasa2\npPicasa2.dll No File
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files\Lightspark 0.5.3-git\nplightsparkplugin.dll ( )
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\ANDREAS\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\ANDREAS\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF SearchPlugin: C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\searchplugins\askcomsearch.xml
FF SearchPlugin: C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\searchplugins\delta.xml
FF SearchPlugin: C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\searchplugins\FBDownloader.xml
FF SearchPlugin: C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\searchplugins\fbdownloader_search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\awesomehp.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Plus-HD-1.6 - C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\Extensions\6c937ed6-be66-4f72-9a60-ce5789cc7f09@53ba6712-2cae-46e2-b821-95baea44e049.com [2014-01-06]
FF Extension: Delta Toolbar - C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\Extensions\ffxtlbr@delta.com [2013-07-16]
FF Extension: Tracker Toolbar - C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\Extensions\toolbar@ask.com [2012-12-03]
FF Extension: Value Apps - C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\Extensions\{94cd2cc3-083f-49ba-a218-4cda4b4829fd} [2014-01-25]
FF Extension: Amazon 1Button App for Firefox - C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\Extensions\abb@amazon.com.xpi [2013-09-04]
FF Extension: Extension_Protected - C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\Extensions\jid0-O6MIff3eO5dIGf5Tcv8RsJDKxrs@jetpack.xpi [2014-01-25]
FF Extension: Lightning Speed Dial - C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\Extensions\lightningnewtab@gmail.com.xpi [2014-01-25]
FF Extension: OfferMosquito - C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\Extensions\om@offermosquito.com.xpi [2013-07-19]
FF Extension: ReloadEvery - C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\Extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi [2011-08-29]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
FF HKLM\...\Firefox\Extensions: [lightningnewtab@gmail.com] - C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\extensions\lightningnewtab@gmail.com.xpi
FF Extension: No Name - C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\extensions\lightningnewtab@gmail.com.xpi [2014-01-25]
FF HKLM\...\Firefox\Extensions: [ext@flashenhancer.com] - C:\Program Files\AmiExt\flashEnhancer\ff
FF Extension: flash-Enhancer - C:\Program Files\AmiExt\flashEnhancer\ff [2014-01-25]
FF HKCU\...\Firefox\Extensions: [{9caf5d89-eb75-43ab-9b57-9d4b5b6094ef}] - C:\Program Files\Re-markit\150.xpi
FF Extension: Re-markit - C:\Program Files\Re-markit\150.xpi [2014-01-25]
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe hxxp://www.awesomehp.com/?type=sc&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331
Chrome:
=======
CHR HomePage: hxxp://www.awesomehp.com/?type=hp&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331
CHR DefaultSearchKeyword: awesomehp
CHR DefaultSearchProvider: awesomehp
CHR DefaultSearchURL: hxxp://www.awesomehp.com/web/?type=ds&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331&q={searchTerms}
CHR DefaultNewTabURL:
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\32.0.1700.76\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\32.0.1700.76\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\32.0.1700.76\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (registryAccess) - C:\Users\ANDREAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaangmfdabjilefmognkgcebjgcojek\7.14.1.20932_0\background/registryAccess.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.4) - C:\Program Files\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.4) - C:\Program Files\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.4) - C:\Program Files\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.4) - C:\Program Files\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.4) - C:\Program Files\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.4) - C:\Program Files\QuickTime\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.4) - C:\Program Files\QuickTime\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Pando Web Plugin) - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Extension: (YouTube) - C:\Users\ANDREAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-13]
CHR Extension: (YouTube) - C:\Users\ANDREAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml [2014-01-25]
CHR Extension: (flash-Enhancer) - C:\Users\ANDREAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbealecnakbhfoeeipcnoboempfkbjd [2014-01-25]
CHR Extension: (Google-Suche) - C:\Users\ANDREAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-13]
CHR Extension: (Re-markit) - C:\Users\ANDREAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcpfhaghaadpjpgocojgnlhjcieeooel [2014-01-25]
CHR Extension: (OfferMosquito) - C:\Users\ANDREAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk [2013-08-12]
CHR Extension: (Value apps) - C:\Users\ANDREAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcnnhcneegeeojhgpfijnlnocjdmlaon [2014-01-25]
CHR Extension: (Google Wallet) - C:\Users\ANDREAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-26]
CHR Extension: (Amazon 1Button App for Chrome) - C:\Users\ANDREAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbjikboenpfhbbejgkoklgkhjpfogcam [2014-01-25]
CHR Extension: (Google Mail) - C:\Users\ANDREAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2011-12-13]
CHR Extension: (Lightning speedDial) - C:\Users\ANDREAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkndmigholgfjlniaohblojbhgjbkakn [2014-01-25]
CHR HKLM\...\Chrome\Extension: [cgbealecnakbhfoeeipcnoboempfkbjd] - C:\Program Files\AmiExt\flashEnhancer\ch\flashEnhancer.crx [2014-01-12]
CHR HKLM\...\Chrome\Extension: [dcpfhaghaadpjpgocojgnlhjcieeooel] - C:\Program Files\Re-markit\150.crx [2014-01-25]
CHR HKLM\...\Chrome\Extension: [pkndmigholgfjlniaohblojbhgjbkakn] - C:\Users\ANDREAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv2.crx [2014-01-25]
CHR HKCU\...\Chrome\Extension: [gbmdkmlcnbapgegninelmjbfibaghdmk] - C:\Users\ANDREAS\AppData\Local\Google\Chrome\User Data\Default\ext_offermosquito\ext_offermosquito.crx [2013-07-19]
CHR HKCU\...\Chrome\Extension: [pbjikboenpfhbbejgkoklgkhjpfogcam] - C:\Program Files\Amazon\ABB\AmazonChrome-bds-amzn.crx [2014-01-15]
========================== Services (Whitelisted) =================
R2 Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [144672 2009-08-28] (Apple Inc.)
S3 GoogleDesktopManager-051210-111108; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-08-24] (Google)
S2 gupdate1c9e85db5f245b0; C:\Program Files\Google\Update\GoogleUpdate.exe [133104 2009-06-08] (Google Inc.)
R2 ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [247096 2010-09-06] ()
R2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe [508016 2014-01-14] (Cherished Technololgy LIMITED)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [235216 2013-09-06] (McAfee, Inc.)
R2 MgAssistService; C:\Program Files\Mobogenie\MgAssist.exe [63168 2014-01-09] ()
R2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [177704 2007-06-05] ()
R2 resetWinService; C:\Program Files\Realtek Semiconductor Corp\Realtek USB 2.0 Card Reader\reset.exe [70656 2008-10-29] ()
R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [241734 2008-06-28] ()
S2 UI Assistant Service; C:\Program Files\1&1 Surf-Stick\AssistantServices.exe [270672 2011-08-25] ()
R2 Updater Service for AMZN; C:\Program Files\Amazon Browser Bar\ToolbarUpdaterService.exe [222368 2013-03-21] ()
S3 usnjsvc; C:\Program Files\Windows Live\Messenger\usnsvc.exe [98328 2007-10-18] (Microsoft Corporation)
S3 WLSetupSvc; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [266240 2007-10-25] (Microsoft Corporation)
R2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [493568 2014-01-25] (Cherished Technololgy LIMITED)
R2 x10nets; C:\Program Files\Common Files\X10\Common\X10nets.exe [20480 2001-11-12] (X10)
==================== Drivers (Whitelisted) ====================
R3 Cam5607; C:\Windows\System32\Drivers\BisonC07.sys [1461032 2008-12-04] (Bison Electronics. Inc. )
R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [36608 2009-03-31] ()
S3 massfilter; C:\Windows\System32\drivers\massfilter.sys [9216 2011-03-26] (MBB Incorporated)
S3 PhilCap; C:\Windows\System32\DRIVERS\PhilCap.sys [908896 2007-07-31] (NXP Semiconductors Germany GmbH)
S3 ss_bbus; C:\Windows\System32\DRIVERS\ss_bbus.sys [90112 2009-03-20] (MCCI)
S3 ss_bmdfl; C:\Windows\System32\DRIVERS\ss_bmdfl.sys [14976 2009-03-20] (MCCI Corporation)
S3 ss_bmdm; C:\Windows\System32\DRIVERS\ss_bmdm.sys [121856 2009-03-20] (MCCI Corporation)
R3 X10Hid; C:\Windows\System32\Drivers\x10hid.sys [13976 2006-11-17] (X10 Wireless Technology, Inc.)
S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [x]
S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 netr28u; system32\DRIVERS\netr28u.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-25 23:31 - 2014-01-25 23:33 - 00032264 _____ C:\Users\ANDREAS\Downloads\FRST.txt
2014-01-25 23:31 - 2014-01-25 23:31 - 00000000 ____D C:\FRST
2014-01-25 23:30 - 2014-01-25 23:30 - 01222144 _____ (Farbar) C:\Users\ANDREAS\Downloads\FRST.exe
2014-01-25 23:30 - 2014-01-25 23:30 - 00685888 _____ C:\Users\ANDREAS\Downloads\ZipExtractorSetup (3).exe
2014-01-25 23:30 - 2014-01-25 23:30 - 00685888 _____ C:\Users\ANDREAS\Downloads\ZipExtractorSetup (2).exe
2014-01-25 23:30 - 2014-01-25 23:30 - 00000942 _____ C:\Users\ANDREAS\Desktop\Continue Zip Extractor Installation.lnk
2014-01-25 23:25 - 2014-01-25 23:25 - 00685888 _____ C:\Users\ANDREAS\Downloads\ZipExtractorSetup (1).exe
2014-01-25 23:24 - 2014-01-25 23:24 - 00685888 _____ C:\Users\ANDREAS\Downloads\ZipExtractorSetup.exe
2014-01-25 20:10 - 2014-01-25 20:10 - 00001828 _____ C:\Users\ANDREAS\Desktop\Entfernen des Avira EU-Cleaners.lnk
2014-01-25 20:10 - 2014-01-25 20:10 - 00001772 _____ C:\Users\ANDREAS\Desktop\Avira EU-Cleaner.lnk
2014-01-25 20:09 - 2014-01-25 20:09 - 02209056 _____ C:\Users\ANDREAS\Downloads\avira-eu-cleaner_de.exe
2014-01-25 20:09 - 2014-01-25 20:09 - 02209056 _____ C:\Users\ANDREAS\Downloads\avira-eu-cleaner_de (1).exe
2014-01-25 19:47 - 2014-01-25 21:25 - 140300048 _____ C:\Users\ANDREAS\Downloads\avira_antivirus_suite_de.exe
2014-01-25 19:11 - 2014-01-25 19:11 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\Amazon Browser Bar
2014-01-25 19:10 - 2014-01-25 19:11 - 00000000 ____D C:\Program Files\Amazon Browser Bar
2014-01-25 19:10 - 2014-01-25 19:10 - 00129536 _____ C:\Users\Public\AlexaNSISPlugin.8520.dll
2014-01-25 19:10 - 2014-01-25 19:10 - 00000000 ____D C:\Program Files\Amazon
2014-01-25 19:09 - 2014-01-25 23:08 - 00000276 _____ C:\Windows\Tasks\RegClean Pro_UPDATES.job
2014-01-25 19:09 - 2014-01-25 23:08 - 00000268 _____ C:\Windows\Tasks\RegClean Pro_DEFAULT.job
2014-01-25 19:09 - 2014-01-25 19:09 - 00000851 _____ C:\Users\Public\Desktop\RegClean Pro.lnk
2014-01-25 19:09 - 2014-01-25 19:09 - 00000000 ____D C:\Users\ANDREAS\AppData\Roaming\systweak
2014-01-25 19:09 - 2014-01-25 19:09 - 00000000 ____D C:\Program Files\RegClean Pro
2014-01-25 19:09 - 2014-01-21 17:28 - 00018776 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot.exe
2014-01-25 19:07 - 2014-01-25 19:08 - 05095648 _____ (Systweak Inc ) C:\Users\ANDREAS\Downloads\rcpsetup_chip_de_chip_de.exe
2014-01-25 11:45 - 2014-01-25 11:45 - 00000000 ____D C:\Program Files\Lightspark 0.5.3-git
2014-01-25 11:44 - 2014-01-25 23:10 - 00000000 ____D C:\Users\ANDREAS\AppData\Roaming\newnext.me
2014-01-25 11:44 - 2014-01-25 11:59 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\Mobogenie
2014-01-25 11:44 - 2014-01-25 11:44 - 00000000 ____D C:\Users\ANDREAS\Documents\Mobogenie
2014-01-25 11:44 - 2014-01-25 11:44 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\genienext
2014-01-25 11:44 - 2014-01-25 11:44 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\cache
2014-01-25 11:44 - 2014-01-25 11:44 - 00000000 ____D C:\Users\ANDREAS\.android
2014-01-25 11:44 - 2014-01-25 11:44 - 00000000 ____D C:\Program Files\AmiExt
2014-01-25 11:44 - 2014-01-25 11:44 - 00000000 _____ C:\Users\ANDREAS\daemonprocess.txt
2014-01-25 11:43 - 2014-01-25 11:43 - 00000820 _____ C:\Users\ANDREAS\Desktop\Mobogenie.lnk
2014-01-25 11:43 - 2014-01-25 11:43 - 00000000 ____D C:\Users\ANDREAS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie
2014-01-25 11:42 - 2014-01-25 11:44 - 00000000 ____D C:\Program Files\Mobogenie
2014-01-25 11:42 - 2014-01-25 11:42 - 00000000 ____D C:\ProgramData\WPM
2014-01-25 11:42 - 2014-01-25 11:42 - 00000000 ____D C:\ProgramData\IePluginService
2014-01-25 11:42 - 2014-01-25 11:42 - 00000000 ____D C:\Program Files\SupTab
2014-01-25 11:40 - 2014-01-25 23:09 - 00000364 _____ C:\Windows\Tasks\Re-markit Update.job
2014-01-25 11:40 - 2014-01-25 11:41 - 00000000 _____ C:\END
2014-01-25 11:40 - 2014-01-25 11:40 - 00000000 ____D C:\Program Files\Re-markit
2014-01-25 11:39 - 2014-01-25 23:16 - 00000364 _____ C:\Windows\Tasks\AmiUpdXp.job
2014-01-25 11:39 - 2014-01-25 11:39 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\SwvUpdater
2014-01-14 20:51 - 2014-01-14 20:51 - 03230432 _____ (Badoo) C:\Users\ANDREAS\Downloads\badoo.desktop.installer-1.6.58 (1).exe
2014-01-14 20:48 - 2014-01-14 20:51 - 00000928 _____ C:\Users\ANDREAS\Desktop\Badoo.Desktop.lnk
2014-01-14 20:47 - 2014-01-14 20:48 - 03230432 _____ (Badoo) C:\Users\ANDREAS\Downloads\badoo.desktop.installer-1.6.58.exe
2014-01-11 20:02 - 2014-01-11 20:02 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\Blizzard
2014-01-11 19:30 - 2014-01-18 11:35 - 00000000 ____D C:\Program Files\Hearthstone
2014-01-11 19:30 - 2014-01-11 19:30 - 00000958 _____ C:\Users\Public\Desktop\Hearthstone.lnk
2014-01-11 19:29 - 2014-01-11 19:29 - 05933240 _____ (Blizzard Entertainment) C:\Users\ANDREAS\Downloads\Hearthstone-Beta-Setup-deDE.exe
2014-01-11 19:25 - 2014-01-25 18:29 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\Battle.net
2014-01-11 19:25 - 2014-01-11 19:28 - 00000000 ____D C:\Users\ANDREAS\AppData\Roaming\Battle.net
2014-01-11 19:25 - 2014-01-11 19:25 - 00000947 _____ C:\Users\Public\Desktop\Battle.net.lnk
2014-01-11 19:25 - 2014-01-11 19:25 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\Blizzard Entertainment
2014-01-11 19:24 - 2014-01-17 00:48 - 00000000 ____D C:\Program Files\Battle.net
2014-01-11 19:24 - 2014-01-11 19:30 - 00000000 ____D C:\Program Files\Common Files\Blizzard Entertainment
2014-01-11 19:24 - 2014-01-11 19:25 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2014-01-11 19:22 - 2014-01-11 19:22 - 00000000 ____D C:\ProgramData\Battle.net
2014-01-11 19:21 - 2014-01-11 19:21 - 05717688 _____ (Blizzard Entertainment) C:\Users\ANDREAS\Downloads\Battle.net-Beta-Setup-deDE.exe
2014-01-09 22:03 - 2014-01-09 22:04 - 01467128 _____ C:\Users\ANDREAS\Downloads\SystemCheck_deDE.exe
2014-01-06 22:03 - 2014-01-06 22:03 - 00000286 _____ C:\Users\ANDREAS\Desktop\Stromstände.txt
==================== One Month Modified Files and Folders =======
2014-01-25 23:33 - 2014-01-25 23:31 - 00032264 _____ C:\Users\ANDREAS\Downloads\FRST.txt
2014-01-25 23:31 - 2014-01-25 23:31 - 00000000 ____D C:\FRST
2014-01-25 23:30 - 2014-01-25 23:30 - 01222144 _____ (Farbar) C:\Users\ANDREAS\Downloads\FRST.exe
2014-01-25 23:30 - 2014-01-25 23:30 - 00685888 _____ C:\Users\ANDREAS\Downloads\ZipExtractorSetup (3).exe
2014-01-25 23:30 - 2014-01-25 23:30 - 00685888 _____ C:\Users\ANDREAS\Downloads\ZipExtractorSetup (2).exe
2014-01-25 23:30 - 2014-01-25 23:30 - 00000942 _____ C:\Users\ANDREAS\Desktop\Continue Zip Extractor Installation.lnk
2014-01-25 23:30 - 2008-12-16 06:12 - 00000438 ____H C:\Windows\Tasks\User_Feed_Synchronization-{103B65BD-4798-4CA0-9487-EB211B637804}.job
2014-01-25 23:28 - 2009-06-30 16:04 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-25 23:25 - 2014-01-25 23:25 - 00685888 _____ C:\Users\ANDREAS\Downloads\ZipExtractorSetup (1).exe
2014-01-25 23:24 - 2014-01-25 23:24 - 00685888 _____ C:\Users\ANDREAS\Downloads\ZipExtractorSetup.exe
2014-01-25 23:23 - 2006-11-02 13:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-25 23:23 - 2006-11-02 13:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-25 23:16 - 2014-01-25 11:39 - 00000364 _____ C:\Windows\Tasks\AmiUpdXp.job
2014-01-25 23:15 - 2011-08-31 17:42 - 01594359 _____ C:\Windows\WindowsUpdate.log
2014-01-25 23:15 - 2006-11-02 11:33 - 01418806 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-25 23:14 - 2013-10-29 22:36 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-25 23:10 - 2014-01-25 11:44 - 00000000 ____D C:\Users\ANDREAS\AppData\Roaming\newnext.me
2014-01-25 23:10 - 2009-06-30 16:04 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-25 23:10 - 2009-02-21 21:16 - 00111608 _____ C:\Users\ANDREAS\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-25 23:10 - 2008-12-15 05:47 - 00048829 _____ C:\ProgramData\nvModes.001
2014-01-25 23:09 - 2014-01-25 11:40 - 00000364 _____ C:\Windows\Tasks\Re-markit Update.job
2014-01-25 23:09 - 2006-11-02 13:47 - 02320920 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-25 23:08 - 2014-01-25 19:09 - 00000276 _____ C:\Windows\Tasks\RegClean Pro_UPDATES.job
2014-01-25 23:08 - 2014-01-25 19:09 - 00000268 _____ C:\Windows\Tasks\RegClean Pro_DEFAULT.job
2014-01-25 23:08 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-25 23:07 - 2009-08-29 22:55 - 00000012 _____ C:\Windows\bthservsdp.dat
2014-01-25 23:07 - 2006-11-02 14:01 - 00032630 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-25 22:45 - 2011-07-18 12:08 - 00001128 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-298663874-1514575747-3442136624-1000UA.job
2014-01-25 21:25 - 2014-01-25 19:47 - 140300048 _____ C:\Users\ANDREAS\Downloads\avira_antivirus_suite_de.exe
2014-01-25 20:36 - 2012-10-27 20:34 - 00001454 _____ C:\Users\ANDREAS\Desktop\org tierliste.txt
2014-01-25 20:10 - 2014-01-25 20:10 - 00001828 _____ C:\Users\ANDREAS\Desktop\Entfernen des Avira EU-Cleaners.lnk
2014-01-25 20:10 - 2014-01-25 20:10 - 00001772 _____ C:\Users\ANDREAS\Desktop\Avira EU-Cleaner.lnk
2014-01-25 20:09 - 2014-01-25 20:09 - 02209056 _____ C:\Users\ANDREAS\Downloads\avira-eu-cleaner_de.exe
2014-01-25 20:09 - 2014-01-25 20:09 - 02209056 _____ C:\Users\ANDREAS\Downloads\avira-eu-cleaner_de (1).exe
2014-01-25 19:11 - 2014-01-25 19:11 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\Amazon Browser Bar
2014-01-25 19:11 - 2014-01-25 19:10 - 00000000 ____D C:\Program Files\Amazon Browser Bar
2014-01-25 19:10 - 2014-01-25 19:10 - 00129536 _____ C:\Users\Public\AlexaNSISPlugin.8520.dll
2014-01-25 19:10 - 2014-01-25 19:10 - 00000000 ____D C:\Program Files\Amazon
2014-01-25 19:10 - 2006-11-02 12:18 - 00000000 ___RD C:\Users\Public
2014-01-25 19:09 - 2014-01-25 19:09 - 00000851 _____ C:\Users\Public\Desktop\RegClean Pro.lnk
2014-01-25 19:09 - 2014-01-25 19:09 - 00000000 ____D C:\Users\ANDREAS\AppData\Roaming\systweak
2014-01-25 19:09 - 2014-01-25 19:09 - 00000000 ____D C:\Program Files\RegClean Pro
2014-01-25 19:08 - 2014-01-25 19:07 - 05095648 _____ (Systweak Inc ) C:\Users\ANDREAS\Downloads\rcpsetup_chip_de_chip_de.exe
2014-01-25 18:45 - 2011-07-18 12:08 - 00001076 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-298663874-1514575747-3442136624-1000Core.job
2014-01-25 18:29 - 2014-01-11 19:25 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\Battle.net
2014-01-25 11:59 - 2014-01-25 11:44 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\Mobogenie
2014-01-25 11:45 - 2014-01-25 11:45 - 00000000 ____D C:\Program Files\Lightspark 0.5.3-git
2014-01-25 11:44 - 2014-01-25 11:44 - 00000000 ____D C:\Users\ANDREAS\Documents\Mobogenie
2014-01-25 11:44 - 2014-01-25 11:44 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\genienext
2014-01-25 11:44 - 2014-01-25 11:44 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\cache
2014-01-25 11:44 - 2014-01-25 11:44 - 00000000 ____D C:\Users\ANDREAS\.android
2014-01-25 11:44 - 2014-01-25 11:44 - 00000000 ____D C:\Program Files\AmiExt
2014-01-25 11:44 - 2014-01-25 11:44 - 00000000 _____ C:\Users\ANDREAS\daemonprocess.txt
2014-01-25 11:44 - 2014-01-25 11:42 - 00000000 ____D C:\Program Files\Mobogenie
2014-01-25 11:44 - 2009-02-21 21:15 - 00000000 ____D C:\Users\ANDREAS
2014-01-25 11:44 - 2008-12-15 05:37 - 00048829 _____ C:\ProgramData\nvModes.dat
2014-01-25 11:43 - 2014-01-25 11:43 - 00000820 _____ C:\Users\ANDREAS\Desktop\Mobogenie.lnk
2014-01-25 11:43 - 2014-01-25 11:43 - 00000000 ____D C:\Users\ANDREAS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie
2014-01-25 11:43 - 2009-03-06 20:40 - 00090112 _____ C:\Users\ANDREAS\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-01-25 11:42 - 2014-01-25 11:42 - 00000000 ____D C:\ProgramData\WPM
2014-01-25 11:42 - 2014-01-25 11:42 - 00000000 ____D C:\ProgramData\IePluginService
2014-01-25 11:42 - 2014-01-25 11:42 - 00000000 ____D C:\Program Files\SupTab
2014-01-25 11:41 - 2014-01-25 11:40 - 00000000 _____ C:\END
2014-01-25 11:41 - 2011-08-29 17:51 - 00001058 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-25 11:41 - 2011-07-18 12:12 - 00002256 _____ C:\Users\ANDREAS\Desktop\Google Chrome.lnk
2014-01-25 11:41 - 2011-06-23 23:30 - 00001953 _____ C:\Users\ANDREAS\Desktop\eBay.lnk
2014-01-25 11:41 - 2009-02-21 21:16 - 00001161 _____ C:\Users\ANDREAS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-25 11:41 - 2009-02-21 21:16 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\Google
2014-01-25 11:40 - 2014-01-25 11:40 - 00000000 ____D C:\Program Files\Re-markit
2014-01-25 11:40 - 2012-05-03 18:56 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\Conduit
2014-01-25 11:40 - 2010-02-08 13:27 - 00000000 ____D C:\Program Files\Conduit
2014-01-25 11:39 - 2014-01-25 11:39 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\SwvUpdater
2014-01-22 00:43 - 2012-07-27 15:10 - 00001253 _____ C:\Users\ANDREAS\Desktop\Rufausbeute.txt
2014-01-21 17:28 - 2014-01-25 19:09 - 00018776 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot.exe
2014-01-18 11:35 - 2014-01-11 19:30 - 00000000 ____D C:\Program Files\Hearthstone
2014-01-17 00:48 - 2014-01-11 19:24 - 00000000 ____D C:\Program Files\Battle.net
2014-01-14 20:51 - 2014-01-14 20:51 - 03230432 _____ (Badoo) C:\Users\ANDREAS\Downloads\badoo.desktop.installer-1.6.58 (1).exe
2014-01-14 20:51 - 2014-01-14 20:48 - 00000928 _____ C:\Users\ANDREAS\Desktop\Badoo.Desktop.lnk
2014-01-14 20:48 - 2014-01-14 20:47 - 03230432 _____ (Badoo) C:\Users\ANDREAS\Downloads\badoo.desktop.installer-1.6.58.exe
2014-01-11 20:02 - 2014-01-11 20:02 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\Blizzard
2014-01-11 19:30 - 2014-01-11 19:30 - 00000958 _____ C:\Users\Public\Desktop\Hearthstone.lnk
2014-01-11 19:30 - 2014-01-11 19:24 - 00000000 ____D C:\Program Files\Common Files\Blizzard Entertainment
2014-01-11 19:29 - 2014-01-11 19:29 - 05933240 _____ (Blizzard Entertainment) C:\Users\ANDREAS\Downloads\Hearthstone-Beta-Setup-deDE.exe
2014-01-11 19:28 - 2014-01-11 19:25 - 00000000 ____D C:\Users\ANDREAS\AppData\Roaming\Battle.net
2014-01-11 19:25 - 2014-01-11 19:25 - 00000947 _____ C:\Users\Public\Desktop\Battle.net.lnk
2014-01-11 19:25 - 2014-01-11 19:25 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\Blizzard Entertainment
2014-01-11 19:25 - 2014-01-11 19:24 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2014-01-11 19:22 - 2014-01-11 19:22 - 00000000 ____D C:\ProgramData\Battle.net
2014-01-11 19:21 - 2014-01-11 19:21 - 05717688 _____ (Blizzard Entertainment) C:\Users\ANDREAS\Downloads\Battle.net-Beta-Setup-deDE.exe
2014-01-11 19:19 - 2009-11-27 23:32 - 00000000 ____D C:\Users\ANDREAS\AppData\Roaming\Skype
2014-01-09 22:04 - 2014-01-09 22:03 - 01467128 _____ C:\Users\ANDREAS\Downloads\SystemCheck_deDE.exe
2014-01-06 22:03 - 2014-01-06 22:03 - 00000286 _____ C:\Users\ANDREAS\Desktop\Stromstände.txt
2013-12-30 16:40 - 2012-05-23 10:43 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.8520.dll
Some content of TEMP:
====================
C:\Users\ANDREAS\AppData\Local\Temp\dlLogic.exe
C:\Users\ANDREAS\AppData\Local\Temp\EnableExtDll.dll
C:\Users\ANDREAS\AppData\Local\Temp\ICReinstall_ZipExtractorSetup.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll
[2009-08-20 13:04] - [2009-03-03 05:39] - 0551424 ____A (Microsoft Corporation) 301AE00E12408650BADDC04DBC832830
ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-25 23:16
==================== End Of Log ============================
--- --- ---
#FRST Additions Logfile: Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 25-01-2014 01
Ran by ANDREAS at 2014-01-25 23:33:28
Running from C:\Users\ANDREAS\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
1&1 Surf-Stick (Version: 1.0.0.2 - )
350FS PowerC@m Flash (Version: - )
Activation Assistant for the 2007 Microsoft Office suites (Version: - Microsoft Corporation) <==== ATTENTION
Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0 - Microsoft Corporation) Hidden <==== ATTENTION
Adobe AIR (Version: 2.6.0.19140 - Adobe Systems Incorporated)
Adobe AIR (Version: 2.6.0.19140 - Adobe Systems Incorporated) Hidden
Adobe Anchor Service CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden <==== ATTENTION
Adobe Bridge CS4 (Version: 3 - Adobe Systems Incorporated) Hidden
Adobe CMaps CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color - Photoshop Specific CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color EU Recommended Settings CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color JA Extra Settings CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color NA Extra Settings CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color Video Profiles CS CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe CSI CS4 (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe Default Language CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Device Central CS4 (Version: 2 - Adobe Systems Incorporated) Hidden <==== ATTENTION
Adobe Drive CS4 (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe ExtendScript Toolkit CS4 (Version: 3.0.0 - Adobe Systems Incorporated) Hidden
Adobe Extension Manager CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 10 ActiveX (Version: 10.0.12.36 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Fonts All (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Linguistics CS4 (Version: 4.0.0 - Adobe Systems Incorporated) Hidden
Adobe Output Module (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe PDF Library Files CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS4 (Version: 11.0 - Adobe Systems Incorporated)
Adobe Photoshop CS4 (Version: 11.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS4 Support (Version: 11.0 - Adobe Systems Incorporated) Hidden
Adobe Reader X (10.1.4) - Deutsch (Version: 10.1.4 - Adobe Systems Incorporated)
Adobe Search for Help (Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Service Manager Extension (Version: 1.0 - Adobe Systems Incorporated) Hidden <==== ATTENTION
Adobe Setup (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Shockwave Player 11.5 (Version: 11.5.9.615 - Adobe Systems, Inc.)
Adobe Type Support CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe Update Manager CS4 (Version: 6.0.0 - Adobe Systems Incorporated) Hidden
Adobe WinSoft Linguistics Plugin (Version: 1.1 - Adobe Systems Incorporated) Hidden
Adobe XMP Panels CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
AdobeColorCommonSetCMYK (Version: 2.0 - Adobe Systems Incorporated) Hidden
Amazon Browser Bar (Version: 3.0.2012.0802 - Amazon.com)
Amazon Browser Settings (Version: 3.0 - Amazon)
Apple Application Support (Version: 1.0 - Apple Inc.)
Apple Mobile Device Support (Version: 2.6.0.32 - Apple Inc.) <==== ATTENTION
Apple Software Update (Version: 2.1.1.116 - Apple Inc.)
Ask Toolbar (Version: 1.15.11.0 - Ask.com) <==== ATTENTION
Azurewave Wireless LAN (Version: 1.00.0000 - RaLink)
Badoo Desktop (Version: 1.6.58.1220 - Badoo)
Battle.net (Version: - Blizzard Entertainment)
Bison Webcam (Version: 7.96.701.12a - Bison Webcam)
Bonjour (Version: 1.0.106 - Apple Inc.)
CCleaner (Version: 2.35 - Piriform)
Command & Conquer Die ersten 10 Jahre (Version: 1.00.0000 - Electronic Arts)
Compatibility Pack für 2007 Office System (Version: 12.0.6612.1000 - Microsoft Corporation) <==== ATTENTION
Connect (Version: 1.0.0.1 - Adobe Systems Incorporated) Hidden
Corel MediaOne (Version: 2.00.0000 - Corel Corporation)
CorelDRAW Essential Edition 3 (Version: - Corel Corporation)
CorelDRAW Essential Edition 3 (Version: 3.0 - Corel Corporation) Hidden
CyberLink MakeDisc (Version: 3.0.2601 - CyberLink Corp.)
CyberLink MediaShow (Version: 4.1.2318 - CyberLink Corp.)
CyberLink MediaShow (Version: 4.1.2318 - CyberLink Corp.) Hidden
CyberLink PhotoNow (Version: 1.1.5615 - CyberLink Corp.)
CyberLink PhotoNow (Version: 1.1.5615 - CyberLink Corp.) Hidden
CyberLink PowerDirector (Version: 7.0.2209b - CyberLink Corp.)
CyberLink PowerDirector (Version: 7.0.2209b - CyberLink Corp.) Hidden
CyberLink PowerDVD 8 (Version: 8.0.2217 - CyberLink Corp.)
CyberLink PowerDVD 8 (Version: 8.0.2217 - CyberLink Corp.) Hidden
CyberLink PowerProducer (Version: 5.1111 - CyberLink Corp.) <==== ATTENTION
CyberLink PowerProducer (Version: 5.1111 - CyberLink Corp.) Hidden <==== ATTENTION
CyberLink YouCam (Version: 2.0.2305 - CyberLink Corp.)
CyberLink YouCam (Version: 2.0.2305 - CyberLink Corp.) Hidden
DE (Version: 3.0 - Corel Corporation) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (Version: - Microsoft) <==== ATTENTION
Diablo II (Version: - )
DVDVideoSoft Toolbar (Version: - )
fbDownloader (HKCU Version: 1.0.0.0 - HTTO Group, Ltd.)
flash-Enhancer (Version: 2.1 - flash-Enhancer.com) <==== ATTENTION
Free Studio version 4.2 (Version: - DVDVideoSoft Limited.)
FUJIFILM FinePixViewer S Ver.2.1 (Version: 2.1.0.3 - FUJIFILM Corporation)
Google Chrome (HKCU Version: 32.0.1700.76 - Google Inc.)
Google Desktop (Version: 5.9.1005.12335 - Google)
Google Earth (Version: 4.3.7284.3916 - Google)
Google Earth Plug-in (Version: 7.1.2.2041 - Google)
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Toolbar for Internet Explorer (Version: 7.5.4805.320 - Google Inc.)
Google Update Helper (Version: 1.3.22.3 - Google Inc.) Hidden
Hearthstone (Version: - Blizzard Entertainment)
ICQ Toolbar (Version: 3.0.0 - ICQ)
ICQ7.2 (Version: 7.2 - ICQ)
IePluginService12.27.0.3326 (Version: 12.27.0.3326 - Cherished Technololgy LIMITED) <==== ATTENTION
iTunes (Version: 9.0.0.70 - Apple Inc.)
Java 7 Update 21 (Version: 7.0.210 - Oracle)
Java Auto Updater (Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden
kuler (Version: 2.0 - Adobe Systems Incorporated) Hidden
League of Legends (Version: 1.3 - Riot Games)
Lightspark 0.5.3-git (Version: 0.5.3-git - Lightspark Team)
MAESTIA Version 201101 (Version: 201101 - RocWorks)
Magic Workstation 0.94f (Version: - Magic Technology)
McAfee Security Scan Plus (Version: 3.8.130.10 - McAfee, Inc.)
Microsoft .NET Framework 3.5 SP1 (Version: - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft Office 2010 Service Pack 1 (SP1) (Version: - Microsoft) <==== ATTENTION
Microsoft Office 2010 Service Pack 1 (SP1) (Version: - Microsoft) Hidden <==== ATTENTION
Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Groove MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office PowerPoint Viewer 2007 (German) (Version: 12.0.6612.1000 - Microsoft Corporation) <==== ATTENTION
Microsoft Office Professional Plus 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) <==== ATTENTION
Microsoft Office Professional Plus 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [DEU] (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Works (Version: 9.7.0621 - Microsoft Corporation)
Mobogenie (Version: - Mobogenie.com) <==== ATTENTION
Mozilla Firefox 26.0 (x86 de) (Version: 26.0 - Mozilla)
Mozilla Maintenance Service (Version: 26.0 - Mozilla) <==== ATTENTION
MSXML 4.0 SP2 (KB936181) (Version: 4.20.9848.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB941833) (Version: 4.20.9849.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 8 Essentials (Version: 8.3.124 - Nero AG)
neroxml (Version: 1.0.0 - Nero AG) Hidden
NVIDIA Drivers (Version: - NVIDIA Corporation)
NVIDIA PhysX (Version: 9.09.0209 - NVIDIA Corporation)
Pando Media Booster (Version: 2.6.0.8 - Pando Networks Inc.)
PartyPoker.net (Version: - PartyGaming.Net)
PC Connectivity Solution (Version: 8.15.0.0 - Nokia)
PDF Settings CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
PdfEditor (32bit) (Version: 1.0 - PixelPlanet)
PDF-Viewer (Version: 2.5.207.0 - Tracker Software Products Ltd)
Photoshop Camera Raw (Version: 5.0 - Adobe Systems Incorporated) Hidden
Picasa 2 (Version: 2.0 - Google, Inc.)
PixelPlanet PdfPrinter 6 (32bit) (Version: 6.03.23 - PixelPlanet)
QuickTime (Version: 7.64.17.73 - Apple Inc.)
Realtek 8169 8168 8101E 8102E Ethernet Driver (Version: 1.00.0000 - Realtek)
Realtek High Definition Audio Driver (Version: 6.0.1.5730 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (Version: 6.0.6000.20111 - Realtek Semiconductor Corp.)
RegClean Pro (Version: 6.21 - Systweak Inc) <==== ATTENTION
Re-markit (Version: - Re-markit Software)
Samsung CLP-310 Series (Version: - Samsung Electronics CO.,LTD)
SAMSUNG Mobile Composite Device Software (Version: - ) <==== ATTENTION
Samsung Mobile Modem Device Software (Version: - ) <==== ATTENTION
SAMSUNG Mobile Modem Driver Set (Version: - )
Samsung Mobile phone USB driver Software (Version: - )
SAMSUNG Mobile USB Modem 1.0 Software (Version: - )
SAMSUNG Mobile USB Modem Software (Version: - )
Samsung New PC Studio (Version: 1.00.0000 - Samsung Electronics Co., Ltd.)
Samsung New PC Studio (Version: 1.00.0000 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Mobile Device Software (Version: - ) <==== ATTENTION
SamsungConnectivityCableDriver (Version: 6.83.6.2.1 - Samsung)
Skype™ 6.11 (Version: 6.11.102 - Skype Technologies S.A.)
Software Version Updater (Version: 1.1.3.8 - ) <==== ATTENTION
Spelling Dictionaries Support For Adobe Reader 9 (Version: 9.0.0 - Adobe Systems Incorporated)
Suite Shared Configuration CS4 (Version: 1.0 - Adobe Systems Incorporated) Hidden
SupTab (Version: 1.1.1.0 - )
Synaptics Pointing Device Driver (Version: 11.1.7.0 - Synaptics) <==== ATTENTION
TeamViewer 8 (Version: 8.0.22298 - TeamViewer)
Tracker Toolbar Updater (HKCU Version: 1.2.3.30498 - Ask.com)
Uninstall 1.0.0.1 (Version: - )
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1 - Microsoft Corporation)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (Version: - Microsoft) <==== ATTENTION
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553065) (Version: - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (Version: - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (Version: - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2566458) (Version: - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (Version: - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (Version: - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (Version: - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (Version: - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (Version: - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (Version: - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (Version: - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (Version: - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (Version: - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (Version: - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (Version: - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (Version: - Microsoft) <==== ATTENTION
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (Version: - Microsoft) <==== ATTENTION
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (Version: - Microsoft)
Update Manager (Version: 4.60 - Corel Corporation) Hidden
ValueApps (HKCU Version: 1.3.1.1 - Conduit) <==== ATTENTION
VCRedistSetup (Version: 1.0.0 - Nero AG) Hidden
VLC media player 1.1.3 (Version: 1.1.3 - VideoLAN)
Windows Live Anmelde-Assistent (Version: 5.000.818.6 - Microsoft Corporation)
Windows Live Fotogalerie (Version: 12.0.1347.0718 - Microsoft Corporation)
Windows Live installer (Version: 12.0.1471.1025 - Microsoft Corporation)
Windows Live Mail (Version: 12.0.1606.1023 - Microsoft Corporation)
Windows Live Messenger (Version: 8.5.1302.1018 - Microsoft Corporation)
Windows Live Writer (Version: 12.0.1370.0325 - Microsoft Corporation)
Windows-Treiberpaket - Nokia pccsmcfd (10/12/2007 6.85.4.0) (Version: 10/12/2007 6.85.4.0 - Nokia)
WPM17.8.0.3325 (Version: 17.8.0.3325 - Cherished Technololgy LIMITED) <==== ATTENTION
X10 Hardware(TM) (Version: - )
Yahoo! Toolbar (Version: - )
==================== Restore Points =========================
29-11-2013 19:06:08 Windows Update
03-12-2013 06:32:21 Windows Update
05-12-2013 10:46:41 Geplanter Prüfpunkt
06-12-2013 11:50:02 Windows Update
11-12-2013 00:15:08 Windows Update
11-12-2013 19:53:57 Geplanter Prüfpunkt
12-12-2013 02:00:46 Windows Update
14-12-2013 07:31:14 Windows Update
17-12-2013 11:58:15 Windows Update
20-12-2013 22:23:49 Windows Update
24-12-2013 07:24:15 Windows Update
27-12-2013 14:45:45 Windows Update
31-12-2013 10:31:08 Windows Update
03-01-2014 21:22:08 Windows Update
07-01-2014 06:38:08 Windows Update
10-01-2014 12:12:57 Windows Update
14-01-2014 17:31:21 Windows Update
16-01-2014 02:00:23 Windows Update
17-01-2014 22:40:38 Windows Update
21-01-2014 22:12:16 Windows Update
24-01-2014 06:36:13 Windows Update
25-01-2014 18:24:41 RegClean Pro Sa, Jan 25, 14 19:24
25-01-2014 21:19:02 Avira EU-Cleaner - 25.01.2014 22:18
==================== Hosts content: ==========================
2006-11-02 11:23 - 2006-09-18 22:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
::1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {1308A10A-555E-447C-857C-A59A1B58552A} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-298663874-1514575747-3442136624-1000UA => C:\Users\ANDREAS\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-02] (Google Inc.)
Task: {18016387-E742-41A4-9460-E1302CAE5CD5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2009-06-08] (Google Inc.)
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {22CB1AA0-79B8-4E03-9BC1-65F92F0617F2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-298663874-1514575747-3442136624-1000Core => C:\Users\ANDREAS\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-02] (Google Inc.)
Task: {2904E6F1-F241-4D7E-8EA2-F3CA6A52CDFB} - System32\Tasks\RegClean Pro_UPDATES => C:\Program Files\RegClean Pro\RegCleanPro.exe [2014-01-21] (Systweak Inc) <==== ATTENTION
Task: {29FC0C2B-FAE9-47B9-8217-E92268AE7AFE} - System32\Tasks\AmiUpdXp => C:\Users\ANDREAS\AppData\Local\SwvUpdater\Updater.exe [2014-01-25] (Amonetizé Ltd) <==== ATTENTION
Task: {2FD3134D-4D16-4867-94C6-8017981981BA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-10] (Adobe Systems Incorporated)
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {6D136D8F-E0AC-45DC-807A-65553A08B0BE} - System32\Tasks\Re-markit Update => C:\Program Files\Re-markit\ReMarkit_up.exe [2014-01-25] () <==== ATTENTION
Task: {7040CAAD-33A0-4CF7-8981-FA1F5E4EDD6E} - System32\Tasks\RegClean Pro_DEFAULT => C:\Program Files\RegClean Pro\RegCleanPro.exe [2014-01-21] (Systweak Inc) <==== ATTENTION
Task: {82C55255-67E4-4E26-A354-165D2CB4E4B6} - System32\Tasks\RegClean Pro => C:\Program Files\RegClean Pro\RegCleanPro.exe [2014-01-21] (Systweak Inc) <==== ATTENTION
Task: {86317127-72FA-44EB-8B39-B573E4A3C5E7} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2008-07-30] (Apple Inc.)
Task: {CF28881A-2BFC-4E3E-8F5A-BD7FC457C6C1} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files\Ask.com\UpdateTask.exe [2012-11-09] ()
Task: {DE37644A-D11A-484D-A4F0-6005B74FC832} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2009-06-08] (Google Inc.)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AmiUpdXp.job => C:\Users\ANDREAS\AppData\Local\SwvUpdater\Updater.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-298663874-1514575747-3442136624-1000Core.job => C:\Users\ANDREAS\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-298663874-1514575747-3442136624-1000UA.job => C:\Users\ANDREAS\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Re-markit Update.job => C:\Program Files\Re-markit\ReMarkit_up.exe <==== ATTENTION
Task: C:\Windows\Tasks\RegClean Pro_DEFAULT.job => C:\Program Files\RegClean Pro\RegCleanPro.exe <==== ATTENTION
Task: C:\Windows\Tasks\RegClean Pro_UPDATES.job => C:\Program Files\RegClean Pro\RegCleanPro.exe <==== ATTENTION
Task: C:\Windows\Tasks\User_Feed_Synchronization-{103B65BD-4798-4CA0-9487-EB211B637804}.job => C:\Windows\system32\msfeedssync.exe
==================== Loaded Modules (whitelisted) =============
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2014-01-25 11:43 - 2014-01-09 08:50 - 00061440 _____ () C:\Program Files\Mobogenie\Device.dll
2014-01-25 11:43 - 2014-01-09 08:51 - 00471040 _____ () C:\Program Files\Mobogenie\DCR.dll
2014-01-16 03:57 - 2014-01-11 11:29 - 04055320 _____ () C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\32.0.1700.76\pdf.dll
2014-01-16 03:57 - 2014-01-11 11:29 - 00399640 _____ () C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\32.0.1700.76\ppGoogleNaClPluginChrome.dll
2014-01-16 03:57 - 2014-01-11 11:28 - 01634584 _____ () C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\32.0.1700.76\ffmpegsumo.dll
2014-01-16 03:57 - 2014-01-11 11:29 - 13615896 _____ () C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\32.0.1700.76\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (01/25/2014 11:10:11 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/25/2014 11:09:29 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung AssistantServices.exe, Version 0.0.0.0, Zeitstempel 0x4e55b0e2, fehlerhaftes Modul AssistantServices.exe, Version 0.0.0.0, Zeitstempel 0x4e55b0e2, Ausnahmecode 0xc0000417, Fehleroffset 0x0000f4aa,
Prozess-ID 0xd38, Anwendungsstartzeit AssistantServices.exe0.
Error: (01/25/2014 10:18:57 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {8c4123c4-bc91-489a-8c33-739dec5b4351}
Error: (01/25/2014 08:06:39 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung plugin-container.exe, Version 26.0.0.5087, Zeitstempel 0x52a0d293, fehlerhaftes Modul mozalloc.dll, Version 26.0.0.5087, Zeitstempel 0x52a0af28, Ausnahmecode 0x80000003, Fehleroffset 0x0000119c,
Prozess-ID 0x1a1c, Anwendungsstartzeit plugin-container.exe0.
Error: (01/25/2014 07:24:40 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {8c4123c4-bc91-489a-8c33-739dec5b4351}
Error: (01/25/2014 11:43:12 AM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ANDREAS\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\YKQB8VJ2.DEFAULT\CACHE\9> in der Hash-Zuordnung kann nicht aktualisiert werden.
Kontext: Anwendung, SystemIndex Katalog
Details:
Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f)
Error: (01/25/2014 11:43:12 AM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ANDREAS\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\YKQB8VJ2.DEFAULT\CACHE\9> in der Hash-Zuordnung kann nicht aktualisiert werden.
Kontext: Anwendung, SystemIndex Katalog
Details:
Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f)
Error: (01/25/2014 11:43:07 AM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ANDREAS\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\YKQB8VJ2.DEFAULT\CACHE\8> in der Hash-Zuordnung kann nicht aktualisiert werden.
Kontext: Anwendung, SystemIndex Katalog
Details:
Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f)
Error: (01/25/2014 11:43:07 AM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ANDREAS\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\YKQB8VJ2.DEFAULT\CACHE\8> in der Hash-Zuordnung kann nicht aktualisiert werden.
Kontext: Anwendung, SystemIndex Katalog
Details:
Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f)
Error: (01/25/2014 11:43:05 AM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ANDREAS\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\YKQB8VJ2.DEFAULT\CACHE\7> in der Hash-Zuordnung kann nicht aktualisiert werden.
Kontext: Anwendung, SystemIndex Katalog
Details:
Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f)
System errors:
=============
Error: (01/25/2014 11:10:12 PM) (Source: Service Control Manager) (User: )
Description: UI Assistant Service%%1053
Error: (01/25/2014 11:10:12 PM) (Source: Service Control Manager) (User: )
Description: 30000UI Assistant Service
Error: (01/25/2014 11:10:12 PM) (Source: Service Control Manager) (User: )
Description: DgiVecp%%2
Error: (01/25/2014 11:10:12 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058
Error: (01/25/2014 11:08:47 PM) (Source: HTTP) (User: )
Description: \Device\Http\ReqQueueKerberos
Error: (01/25/2014 11:44:09 AM) (Source: Service Control Manager) (User: )
Description: MgAssist Service
Error: (01/23/2014 03:18:44 AM) (Source: Service Control Manager) (User: )
Description: UI Assistant Service%%1053
Error: (01/23/2014 03:18:44 AM) (Source: Service Control Manager) (User: )
Description: 30000UI Assistant Service
Error: (01/23/2014 03:18:44 AM) (Source: Service Control Manager) (User: )
Description: DgiVecp%%2
Error: (01/23/2014 03:18:44 AM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058
Microsoft Office Sessions:
=========================
Error: (01/25/2014 11:10:11 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/25/2014 11:09:29 PM) (Source: Application Error)(User: )
Description: AssistantServices.exe0.0.0.04e55b0e2AssistantServices.exe0.0.0.04e55b0e2c00004170000f4aad3801cf1a1a14d87f9d
Error: (01/25/2014 10:18:57 PM) (Source: VSS)(User: )
Description: 0x80070005
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {8c4123c4-bc91-489a-8c33-739dec5b4351}
Error: (01/25/2014 08:06:39 PM) (Source: Application Error)(User: )
Description: plugin-container.exe26.0.0.508752a0d293mozalloc.dll26.0.0.508752a0af28800000030000119c1a1c01cf19fadf8d3e8e
Error: (01/25/2014 07:24:40 PM) (Source: VSS)(User: )
Description: 0x80070005
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {8c4123c4-bc91-489a-8c33-739dec5b4351}
Error: (01/25/2014 11:43:12 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Anwendung, SystemIndex Katalog
Details:
Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f)
C:\USERS\ANDREAS\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\YKQB8VJ2.DEFAULT\CACHE\9
Error: (01/25/2014 11:43:12 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Anwendung, SystemIndex Katalog
Details:
Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f)
C:\USERS\ANDREAS\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\YKQB8VJ2.DEFAULT\CACHE\9
Error: (01/25/2014 11:43:07 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Anwendung, SystemIndex Katalog
Details:
Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f)
C:\USERS\ANDREAS\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\YKQB8VJ2.DEFAULT\CACHE\8
Error: (01/25/2014 11:43:07 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Anwendung, SystemIndex Katalog
Details:
Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f)
C:\USERS\ANDREAS\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\YKQB8VJ2.DEFAULT\CACHE\8
Error: (01/25/2014 11:43:05 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Anwendung, SystemIndex Katalog
Details:
Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f)
C:\USERS\ANDREAS\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\YKQB8VJ2.DEFAULT\CACHE\7
CodeIntegrity Errors:
===================================
Date: 2014-01-25 23:32:57.047
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-01-25 23:32:56.602
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-01-25 23:32:56.263
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-01-25 23:32:55.920
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-01-25 23:32:55.542
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-01-25 23:32:55.193
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-01-25 23:32:54.795
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-01-25 23:32:54.348
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-03-17 00:46:12.660
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\nvd3dum.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-03-17 00:46:12.386
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\nvd3dum.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 64%
Total physical RAM: 3065.95 MB
Available physical RAM: 1078.14 MB
Total Pagefile: 6348.2 MB
Available Pagefile: 4135.76 MB
Total Virtual: 2047.88 MB
Available Virtual: 1898.19 MB
==================== Drives ================================
Drive c: (BOOT) (Fixed) (Total:278.07 GB) (Free:42.96 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (RECOVER) (Fixed) (Total:20 GB) (Free:8.95 GB) FAT32
Drive e: (DE10J) (CDROM) (Total:7.01 GB) (Free:0 GB) UDF
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298 GB) (Disk ID: 10E38D74)
Partition 1: (Active) - (Size=278 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=20 GB) - (Type=0C)
==================== End Of Log ============================
--- --- --- |
FRST 32-Bit | FRST 64-Bit
Lesestoff:
Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
AdwCleaner auf deinen Desktop.
