Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   FPS von heute auf gestern stark gesunken (https://www.trojaner-board.de/152726-fps-heute-gestern-stark-gesunken.html)

Fresh_Ducks 18.04.2014 20:34
FPS von heute auf gestern stark gesunken
 
Hey, erstmal zu sagen dass mich ein Freund auf die Seite hingewisen hat und ich hier die Mitglieder als kompetent erachte :daumenhoch:

Nun aber zu meinem Problem...
Vor einigen Tagen war ich mit meinem Laptop auf einer Lan und hab auf Empfehlungen von den Anwesenden ein bisschen an meinen Einstellungen (u.A. in der msconfig) herumgeschraubt in Hoffnung auf höhere FPS gehofft..leider war nach dem nächsten Neustart das Gegenteil der Fall. Geschieht mir wahrscheinlich zurecht. :glaskugel2:

Ersteinmal hat der Laptop deutlich länger zum Hochfahren gebraucht und nun war auch schon das nächste Problem da. Habe gemerkt dass in der Symbolleiste sich nichts beim Internet tun tat. Also versuchte ich über das Symbol das Netwerkcenter aufzurufen doch das reagierte gar nicht, wie auch diverse andere Teile von Windows, da der Explorer generell nicht reagierte. Das Problem hab ich mittlerweile behoben, nicht dank Kompetenz sondern eher durch Zufall.
Der Laptop war trotz des behobenen Fehlers immer noch sehr viel langsamer als er 30Min vorher war und das Spielen konnte ich für den Rest der Lan vergessen, da die FPS am Beispiel von League of Legends, was nun wirklich kein Grafikhungriges Spiel ist, von vorher von mir selbst festgelegten 60 fps auf 20-30 gesunken ist. Achso mein System:

Windows 7 Ultimate 64-Bit
4GB Ram
Dual-Core 2,39GHz
AMD Radeon HD 6650M
In etwa 2,5 Jahre alt

Seit diesem Problem habe ich :
- Aktuelle Treiber heruntergeladen
- Autostart auf das nötigste begrenzt
- Lüfter gesäubert ( obwohl Hitze nicht das Problem hat, eher ein Akt von Hoffnungslosigkeit)
- Kompletten Viren-Scan durchgeführt ( dabei einiges an Mal -und Adware gefunden & gelöscht )
- Spiele nocheinmal auf niedrigsten Einstellungen getestet (zwar flüssiger, aber nicht viel)

Dannach wurde der Laptop an sich schneller, jeddoch sind die FPS gleich geblieben.
Auffallend ist dass ich vorher ohne problem mehrere Programme nebenbei laufen lassen konnte beim spielen und kaum merkbare FPS eingebüßt habe. Jetzt kann ich nicht mal mehr normal Spiele spielen, obwohl ich alles unnötige im Task Manager herausgesucht und mal testweise angehalten habe. Keine Besserung

Ich bin wirklich am verzweifeln... hoffe nur dass es sich nicht um nen Hardwareschaden handelt sondern einfach Schussligkeit meinerseits
Achso und Ja, die Energieoptionen stehen auf Höchstleistung :rofl: mehrmals überprüft, wurde mir schon oft zum verhängnis

Edit : Die CPU sind bei simplen Programmen wie Firefox außerdem sehr schwankend von 50 - 100%

schrauber 19.04.2014 04:49
hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


Fresh_Ducks 19.04.2014 10:59
Code:
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Adobe Systems Incorporated) c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Windows\System32\tcpsvcs.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Acer Group) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
() C:\Windows\PLFSetI.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\system32\taskmgr.exe
(Microsoft Corporation) C:\Windows\System32\perfmon.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [PLFSetI] => C:\Windows\PLFSetI.exe [206208 2010-06-09] ()
HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [324608 2010-06-10] (Alcor Micro Corp.)
HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [861216 2010-06-11] (Acer Incorporated)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11101800 2010-07-29] (Realtek Semiconductor)
HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM-x32\...\Run: [AVP] => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356128 2014-04-18] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-05-24] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-3197765660-3329619702-928005083-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-3197765660-3329619702-928005083-1001\...\Policies\Explorer: [DisallowRun] 1
HKU\S-1-5-21-3197765660-3329619702-928005083-1001\...\MountPoints2: {08319c40-16ef-11e2-9852-806e6f6e6963} - E:\setup.exe
HKU\S-1-5-21-3197765660-3329619702-928005083-1001\...\MountPoints2: {1257c478-a71b-11e0-8c9e-00ff01000001} - F:\start.exe
HKU\S-1-5-21-3197765660-3329619702-928005083-1001\...\MountPoints2: {14e681bb-b84e-11e1-a975-00ff01000001} - E:\Startme.exe
HKU\S-1-5-21-3197765660-3329619702-928005083-1001\...\MountPoints2: {29e77ec9-f5bf-11df-a0df-806e6f6e6963} - D:\Start.exe
HKU\S-1-5-21-3197765660-3329619702-928005083-1001\...\MountPoints2: {38055849-890d-11e1-a2c7-00ff01000001} - E:\unlock.exe autoplay=true
HKU\S-1-5-21-3197765660-3329619702-928005083-1001\...\MountPoints2: {4555d7b4-1289-11e0-b47e-206a8a244bbf} - F:\Setup.exe

==================== Internet (Whitelisted) ====================

ProxyEnable: Internet Explorer proxy is enabled.
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1393793096&from=cor&uid=WDCXWD6400BEVT-22A0RT0_WD-WXK1E50CNH90CNH90&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1393793096&from=cor&uid=WDCXWD6400BEVT-22A0RT0_WD-WXK1E50CNH90CNH90&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
URLSearchHook: HKLM-x32 - (No Name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - No File
URLSearchHook: HKCU - (No Name) - {9565115d-c7d6-46d3-bd63-b67b481a4368} - No File
SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2418376
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
SearchScopes: HKCU - {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} URL = hxxp://www.daemon-search.com/search/web?q={searchTerms}
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2418376
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: No Name - {a6c63b7f-2171-47fa-ab34-e64c4737169d} -  No File
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM - QuickShare Widget - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKCU - No Name - {724D43A0-0D85-11D4-9908-00400523E39A} -  No File
Toolbar: HKCU - No Name - {9565115D-C7D6-46D3-BD63-B67B481A4368} -  No File
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Denis\AppData\Roaming\Mozilla\Firefox\Profiles\zbgm8hif.default
FF NewTab: google.de
FF Homepage: hxxp://www.google.de/
FF Keyword.URL: hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbHdKIqgRJyMidKuvnhDCvIAbTsWW_5EYIVwGKlmSHwltWaYTEdTn_YSWG81a6DAssZqMY9-xY2rgspsXqdzQv4xdp8G9_jfbpL2IHpqRMN2tDsDBv0zGxugKwNkejt5eStjHMUsPVZ-knc12PPJkzRUyGruNlPU_KVCev0ykFKW7kc96g,,&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll No File
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Denis\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Denis\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Adblock Plus - C:\Users\Denis\AppData\Roaming\Mozilla\Firefox\Profiles\zbgm8hif.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-17]
FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak [2014-03-30]
FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak [2014-03-30]
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com [2014-04-18]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com [2014-04-18]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com
FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com [2014-04-18]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com [2014-04-18]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com [2014-04-18]

Chrome:
=======
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Denis\AppData\Local\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Denis\AppData\Local\Google\Chrome\Application\33.0.1750.154\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\Denis\AppData\Local\Google\Chrome\Application\33.0.1750.154\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll No File
CHR Plugin: (Battlefield Play4Free Updater) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkejhbcdagodjdndmfnhaibnealjonei\1.0.66.2_0\npBP4FUpdater.dll No File
CHR Plugin: (Battlefield Play4Free Updater) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkejhbcdagodjdndmfnhaibnealjonei\1.0.66.2_0\BP4FUpdater.exe No File
CHR Plugin: (Java Deployment Toolkit 6.0.290.11) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U29) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR Plugin: (Adobe Acrobat) - c:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\1.104.0\npesnlaunch.dll No File
CHR Plugin: (ESN Sonar API) - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll No File
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll No File
CHR Plugin: (DivX Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll No File
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Facebook Desktop) - C:\Users\Denis\AppData\Local\Facebook\Messenger\2.0.4478.0\npFbDesktopPlugin.dll No File
CHR Plugin: (Google Update) - C:\Users\Denis\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll No File
CHR Extension: (Angry Birds) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2011-09-23]
CHR Extension: (Toast Snatcher) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\fajaoajlncmbolmpccmibgjpgmiilbfe [2011-09-24]
CHR Extension: (No Name) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnjbmmemklcjgepojigaapkoodmkgbae [2011-03-20]
CHR Extension: (Keep Running) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\foohbilkkdnmfpecjkhcdiddappljefi [2011-09-23]
CHR Extension: (LineBall) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeclmehkhpookgkhkecnaanahhoglakj [2011-09-24]
CHR Extension: (Google Wallet) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-23]
CHR Extension: (No Name) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2011-03-20]
CHR Extension: (Bowman 2) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocafgnfjehoenphpclkakndfnjnmnejj [2011-09-23]
CHR Extension: (No Name) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\odhbolcphommhmhlljfdfdemgekjjhnd [2014-03-30]
CHR Extension: (Love Calculator) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\oolmcecgdmgibngcbeedeljjadklplag [2011-09-24]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2011-09-24]
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\urladvisor.crx [2012-10-25]
CHR HKLM-x32\...\Chrome\Extension: [dhkplhfnhceodhffomolpfigojocbpcb] - C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\BabylonChrome.crx [2012-10-25]
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\online_banking_chrome.crx [2012-10-25]
CHR HKLM-x32\...\Chrome\Extension: [hggpkhijoeadmdfmlbdepfbngmhaldci] - C:\Program Files (x86)\DealPly\DealPly.crx [2012-10-25]
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\content_blocker_chrome.crx [2012-10-25]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\virtkbd.crx [2012-10-25]
CHR HKLM-x32\...\Chrome\Extension: [mkcedibhemacmilmkpndpkoidlnmgngg] - C:\Users\Denis\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx [2014-01-18]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\ab.crx [2012-10-25]
CHR StartMenuInternet: Google Chrome - C:\Users\Denis\AppData\Local\Google\Chrome\Application\chrome.exe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [365568 2011-05-24] (Advanced Micro Devices, Inc.)
S4 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [122448 2014-04-15] (Avira Operations GmbH & Co. KG)
R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356128 2014-04-18] (Kaspersky Lab ZAO)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-07-25] ()
R2 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [868896 2010-06-11] (Acer Incorporated)
R2 EPSON_PM_RPCV4_06; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE [152640 2013-04-30] (SEIKO EPSON CORPORATION)
S4 GREGService; C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe [23584 2010-01-08] (Acer Incorporated)
S4 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-04-08] (LogMeIn, Inc.)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4159984 2010-12-08] (INCA Internet Co., Ltd.)
S4 NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe [255744 2010-06-29] (NewTech Infosystems, Inc.)
S4 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [18360 2013-01-02] (Overwolf Ltd)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-02-27] ()
R2 Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [243232 2010-01-29] (Acer Group)
S2 HPSLPSVC; C:\Users\Denis\AppData\Local\Temp\7zS0752\hpslpsvc64.dll [X]

==================== Drivers (Whitelisted) ====================

S3 androidusb; C:\Windows\System32\Drivers\androidusb.sys [32768 2010-04-29] (Google Inc)
S3 ESLvnic1; C:\Windows\System32\DRIVERS\ESLvnic.sys [25528 2011-04-18] (Turtle Entertainment GmbH)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-04-18] (Kaspersky Lab ZAO)
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [90208 2014-04-18] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [626272 2014-04-18] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-10-17] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2014-04-18] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2014-04-18] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2014-04-18] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2014-04-18] (Kaspersky Lab ZAO)
S3 NPPTNT2; C:\Windows\SysWOW64\npptNT2.sys [4682 2005-01-04] (INCA Internet Co., Ltd.)
S3 phaudlwr; C:\Windows\System32\DRIVERS\phaudlwr.sys [114608 2009-10-20] (Philips Applied Technologies)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19032 2013-03-07] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [9584 2013-03-07] ()
S3 s1018bus; C:\Windows\System32\DRIVERS\s1018bus.sys [113704 2009-03-25] (MCCI Corporation)
S3 s1018mdfl; C:\Windows\System32\DRIVERS\s1018mdfl.sys [19496 2009-03-25] (MCCI Corporation)
S3 s1018mdm; C:\Windows\System32\DRIVERS\s1018mdm.sys [153128 2009-03-25] (MCCI Corporation)
S3 s1018mgmt; C:\Windows\System32\DRIVERS\s1018mgmt.sys [133160 2009-03-25] (MCCI Corporation)
S3 s1018nd5; C:\Windows\System32\DRIVERS\s1018nd5.sys [34856 2009-03-25] (MCCI Corporation)
S3 s1018obex; C:\Windows\System32\DRIVERS\s1018obex.sys [128552 2009-03-25] (MCCI Corporation)
S3 s1018unic; C:\Windows\System32\DRIVERS\s1018unic.sys [146472 2009-03-25] (MCCI Corporation)
S3 SPC520; C:\Windows\System32\drivers\SPC520.sys [579072 2007-10-01] (Philips                                                    )
S3 SPC520m; C:\Windows\System32\drivers\SPC520m.sys [8192 2007-10-01] (Philips                                                    )
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [560184 2012-10-15] (Duplex Secure Ltd.)
R2 {B154377D-700F-42cc-9474-23858FBDF4BD}; C:\Program Files (x86)\CyberLink\PowerDVD9\000.fcl [146928 2010-03-19] (CyberLink Corp.)
S3 ApfiltrService; system32\DRIVERS\Apfiltr.sys [X]
S3 cpuz136; \??\C:\Users\Denis\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [X]
S3 dump_wmimmc; \??\C:\Program Files\gPotato.eu\FlyFF\GameGuard\dump_wmimmc.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 PCDSRVC{EDD8E36B-2972E254-06020101}_0; \??\c:\users\denis\appdata\local\temp\mrkltubopm8z\pcdrdiag\bin\pcdsrvc_x64.pkms [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 X6va003; \??\C:\Users\Denis\AppData\Local\Temp\0035508.tmp [X]
S3 X6va005; \??\C:\Users\Denis\AppData\Local\Temp\005B08B.tmp [X]
S3 X6va006; \??\C:\Users\Denis\AppData\Local\Temp\00674F1.tmp [X]
S3 X6va007; \??\C:\Users\Denis\AppData\Local\Temp\007DB80.tmp [X]
S3 X6va012; \??\C:\Windows\SysWOW64\Drivers\X6va012 [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-19 11:55 - 2014-04-19 11:55 - 00026182 _____ () C:\Users\Denis\Downloads\FRST.txt
2014-04-19 11:55 - 2014-04-19 11:55 - 00000000 ____D () C:\FRST
2014-04-19 11:54 - 2014-04-19 11:54 - 02158592 _____ (Farbar) C:\Users\Denis\Downloads\FRST64.exe
2014-04-19 02:14 - 2014-04-19 02:14 - 00000000 ____D () C:\Users\Denis\AppData\Local\AMD
2014-04-19 02:12 - 2014-04-19 02:12 - 00000000 ____D () C:\ProgramData\AMD
2014-04-19 02:04 - 2014-04-19 02:05 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Wise Auto Shutdown
2014-04-19 02:04 - 2014-04-19 02:05 - 00000000 ____D () C:\Program Files (x86)\PassShow-soft
2014-04-19 02:04 - 2014-04-19 02:04 - 00001188 _____ () C:\Users\Public\Desktop\Wise Auto Shutdown.lnk
2014-04-19 02:03 - 2014-04-19 02:03 - 00929416 _____ (CNET Download.com) C:\Users\Denis\Downloads\cbsidlm-cbsi188-Wise_Auto_Shutdown-BP-75755206.exe
2014-04-18 23:59 - 2014-04-18 23:59 - 00000000 ____D () C:\ProgramData\ATI
2014-04-18 23:59 - 2014-04-18 23:59 - 00000000 ____D () C:\Program Files (x86)\AMD APP
2014-04-18 23:57 - 2014-04-18 23:57 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2014-04-18 23:57 - 2010-02-18 09:18 - 00046136 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdiox64.sys
2014-04-18 23:56 - 2014-04-18 23:56 - 00000000 ____D () C:\Program Files\ATI
2014-04-18 23:49 - 2014-04-18 23:49 - 00613200 _____ (Chip Digital GmbH) C:\Users\Denis\Downloads\ATI Catalyst Mobility 64 Bit - CHIP-Downloader.exe
2014-04-18 22:05 - 2014-04-18 22:06 - 00385040 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-04-18 20:50 - 2014-04-18 20:50 - 00110808 _____ () C:\Users\Denis\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-18 17:00 - 2014-04-19 11:43 - 00000336 _____ () C:\Windows\setupact.log
2014-04-18 17:00 - 2014-04-18 17:00 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-18 13:15 - 2014-04-18 13:15 - 00003292 _____ () C:\Windows\System32\Tasks\{6B24E018-AF69-4745-8084-7CB4A8017FE7}
2014-04-18 10:10 - 2014-04-18 10:10 - 00002312 _____ () C:\Users\Denis\Desktop\Sicherer Zahlungsverkehr.lnk
2014-04-18 10:08 - 2014-04-18 10:08 - 00001118 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security 2013.lnk
2014-04-18 10:07 - 2014-04-18 10:49 - 00626272 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-04-18 10:07 - 2014-04-18 10:49 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-04-18 02:06 - 2014-04-18 02:06 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-18 02:05 - 2014-04-18 02:05 - 00001074 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-04-18 02:05 - 2014-04-18 02:05 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-18 02:05 - 2014-04-18 02:05 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-04-18 02:05 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-18 02:05 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-18 02:05 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-04-18 02:04 - 2014-04-18 02:04 - 00613200 _____ (Chip Digital GmbH) C:\Users\Denis\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe
2014-04-18 01:57 - 2014-04-18 01:57 - 00000989 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-04-18 01:55 - 2014-04-18 01:55 - 00613200 _____ (Chip Digital GmbH) C:\Users\Denis\Downloads\CCleaner - CHIP-Downloader(1).exe
2014-04-18 01:52 - 2014-04-18 01:52 - 00613200 _____ (Chip Digital GmbH) C:\Users\Denis\Downloads\CCleaner - CHIP-Downloader.exe
2014-04-17 23:46 - 2014-04-17 23:54 - 135232000 _____ () C:\Users\Denis\Downloads\setup_11.0.1.1245.x01_2014_04_17_23_03.exe
2014-04-17 23:41 - 2014-04-18 01:30 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-04-17 23:41 - 2014-04-17 23:53 - 00000000 ____D () C:\ProgramData\Avira
2014-04-17 23:41 - 2014-04-17 23:41 - 00001109 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-04-17 23:41 - 2014-04-17 23:41 - 00000000 ____D () C:\ProgramData\Package Cache
2014-04-17 23:40 - 2014-04-17 23:40 - 04464280 _____ (Avira Operations GmbH & Co. KG) C:\Users\Denis\Downloads\avira_de_av___ws.exe
2014-04-17 23:14 - 2012-07-11 17:09 - 00064856 _____ (Kaspersky Lab) C:\Windows\system32\klfphc.dll
2014-04-17 23:13 - 2014-04-18 10:07 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-04-17 23:13 - 2014-04-17 23:13 - 00000000 ____D () C:\Windows\ELAMBKUP
2014-04-17 23:12 - 2014-04-18 10:09 - 00000000 ____D () C:\ProgramData\Kaspersky Lab Setup Files
2014-04-17 21:03 - 2014-04-17 21:03 - 00003292 _____ () C:\Windows\System32\Tasks\{E3DAF802-5736-409A-B88F-37F36271399E}
2014-04-17 20:30 - 2014-04-17 20:30 - 00000991 _____ () C:\Users\Public\Desktop\Winamp.lnk
2014-04-17 20:29 - 2014-04-18 16:53 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Winamp
2014-04-17 20:29 - 2014-04-17 20:34 - 00000000 ____D () C:\Program Files (x86)\Winamp
2014-04-17 20:18 - 2014-04-17 20:18 - 00000000 _____ () C:\Windows\SysWOW64\sho48B7.tmp
2014-04-17 20:17 - 2014-04-17 20:17 - 00001280 _____ () C:\Users\Denis\Desktop\Command Prompt.lnk
2014-04-17 16:20 - 2014-04-17 16:20 - 00003028 _____ () C:\Windows\System32\Tasks\{EFE0DB13-235C-4450-AE25-819DA6F2288A}
2014-04-17 16:20 - 2014-04-17 16:20 - 00003028 _____ () C:\Windows\System32\Tasks\{5A8C3065-6BE6-4B45-9E7A-24E9BDAA5D20}
2014-04-17 16:04 - 2014-04-17 16:04 - 00000000 _____ () C:\Windows\SysWOW64\shoC190.tmp
2014-04-17 14:59 - 2014-04-17 14:59 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Apfiltr_01009.Wdf
2014-04-17 14:58 - 2010-03-26 20:44 - 01721904 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll
2014-04-17 14:54 - 2014-04-17 14:54 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\library_dir
2014-04-17 14:52 - 2014-04-17 19:19 - 00000000 ____D () C:\Program Files (x86)\Raptr
2014-04-17 14:46 - 2014-04-17 14:46 - 00000000 ____D () C:\Riot Games
2014-04-17 14:45 - 2014-03-29 19:20 - 00000000 ____D () C:\Users\Denis\Desktop\LoL Patcher v1.1 - by Varkolac
2014-04-17 14:34 - 2014-04-17 14:33 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-17 14:33 - 2014-04-17 14:33 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-16 23:47 - 2014-04-16 23:47 - 00000938 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2014-04-16 23:47 - 2014-04-16 23:47 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-04-16 05:01 - 2014-04-17 14:35 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-16 04:28 - 2014-04-16 04:28 - 00000000 ____D () C:\Users\Denis\Desktop\Alte Firefox-Daten
2014-04-15 20:04 - 2014-04-16 22:34 - 00000000 ____D () C:\Program Files\Microsoft Xbox 360 Accessories
2014-04-15 20:01 - 2014-04-16 22:34 - 00000000 ____D () C:\369448b7f3a7ca6d489e710e06c0e4
2014-04-13 18:13 - 2014-04-13 18:13 - 00001452 _____ () C:\Users\Denis\Desktop\SkyrimLauncher.exe - Verknüpfung.lnk
2014-04-13 05:24 - 2014-04-13 05:24 - 00000000 _____ () C:\Windows\SysWOW64\sho2952.tmp
2014-04-12 23:28 - 2014-04-12 23:28 - 00001358 _____ () C:\Users\Denis\Desktop\TESV.exe - Verknüpfung.lnk
2014-04-11 11:38 - 2014-04-11 11:40 - 00000000 ____D () C:\Program Files (x86)\TERA
2014-04-11 11:38 - 2014-04-11 11:38 - 00001056 _____ () C:\Users\Denis\Desktop\TERA.lnk
2014-04-11 11:38 - 2014-04-11 11:38 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\TERA
2014-04-10 23:47 - 2014-04-10 23:47 - 00000000 _____ () C:\Windows\SysWOW64\sho8452.tmp
2014-04-09 18:23 - 2014-04-17 20:02 - 419443248 ____C () C:\RAMDisk.img
2014-04-09 18:23 - 2014-04-17 19:15 - 419443248 ____C () C:\RAMDisk.img.bak
2014-04-09 17:48 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-09 17:48 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-09 17:48 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-09 17:48 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-09 17:48 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-09 17:47 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-09 17:47 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-09 17:47 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-09 17:47 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-09 17:47 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-09 17:47 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-09 17:47 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-09 17:47 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-09 17:47 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-09 17:47 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-09 17:47 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-09 17:47 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-08 22:25 - 2014-04-08 22:26 - 00000000 ____D () C:\Users\Denis\AppData\Local\Dataram_Corporation
2014-04-08 22:23 - 2014-04-17 20:03 - 00000000 ____D () C:\Program Files (x86)\RAMDisk
2014-04-06 19:23 - 2014-04-06 19:23 - 00131072 _____ (Woodgears.ca) C:\Users\Denis\Desktop\GearGenerator3(2).exe
2014-04-06 03:13 - 2014-04-06 03:13 - 00000000 _____ () C:\Windows\SysWOW64\sho98B7.tmp
2014-04-05 12:02 - 2014-04-05 13:20 - 00000063 _____ () C:\Users\Denis\Desktop\Passwort.txt
2014-03-30 13:17 - 2014-03-30 13:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-30 12:52 - 2014-03-30 12:52 - 00262144 _____ () C:\Windows\system32\config\elam
2014-03-30 12:51 - 2014-04-05 16:28 - 00000000 ____D () C:\ProgramData\RoYalCoeuppoN
2014-03-22 17:22 - 2014-03-30 12:51 - 00000000 ____D () C:\ProgramData\a1e4f9da61eca01b
2014-03-22 17:21 - 2014-04-18 00:30 - 00000000 ____D () C:\ProgramData\eiasytoshOp
2014-03-22 17:05 - 2014-03-22 17:05 - 00000000 ____D () C:\Users\Denis\AppData\Local\Skype
2014-03-22 17:04 - 2014-03-22 17:04 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-03-22 17:04 - 2014-03-22 17:04 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-03-21 21:13 - 2014-03-21 21:13 - 00001021 _____ () C:\Users\Denis\Desktop\Dropbox.lnk
2014-03-21 21:12 - 2014-04-18 22:22 - 00000000 ___RD () C:\Users\Denis\Desktop\Neuer Ordner
2014-03-21 21:04 - 2014-03-21 21:04 - 00000000 __SHD () C:\found.000

==================== One Month Modified Files and Folders =======

2014-04-19 11:55 - 2014-04-19 11:55 - 00026182 _____ () C:\Users\Denis\Downloads\FRST.txt
2014-04-19 11:55 - 2014-04-19 11:55 - 00000000 ____D () C:\FRST
2014-04-19 11:54 - 2014-04-19 11:54 - 02158592 _____ (Farbar) C:\Users\Denis\Downloads\FRST64.exe
2014-04-19 11:54 - 2010-12-24 19:48 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3197765660-3329619702-928005083-1001UA.job
2014-04-19 11:54 - 2009-07-14 06:45 - 00030272 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-19 11:54 - 2009-07-14 06:45 - 00030272 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-19 11:53 - 2010-12-24 19:44 - 00003930 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{ABBCAB68-BAD7-49E6-AC47-8657CB82DADF}
2014-04-19 11:52 - 2013-09-15 10:01 - 01763542 _____ () C:\Windows\WindowsUpdate.log
2014-04-19 11:51 - 2014-03-02 22:51 - 00000911 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Update {DDC38361-039E-4970-8E52-4DAEB0824476}.job
2014-04-19 11:51 - 2014-03-02 22:51 - 00000725 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {DDC38361-039E-4970-8E52-4DAEB0824476}.job
2014-04-19 11:51 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-04-19 11:49 - 2014-01-13 01:38 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-04-19 11:44 - 2012-04-08 10:36 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-19 11:43 - 2014-04-18 17:00 - 00000336 _____ () C:\Windows\setupact.log
2014-04-19 11:43 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-19 02:14 - 2014-04-19 02:14 - 00000000 ____D () C:\Users\Denis\AppData\Local\AMD
2014-04-19 02:12 - 2014-04-19 02:12 - 00000000 ____D () C:\ProgramData\AMD
2014-04-19 02:09 - 2012-02-12 17:43 - 00007593 _____ () C:\Users\Denis\AppData\Local\Resmon.ResmonCfg
2014-04-19 02:05 - 2014-04-19 02:04 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Wise Auto Shutdown
2014-04-19 02:05 - 2014-04-19 02:04 - 00000000 ____D () C:\Program Files (x86)\PassShow-soft
2014-04-19 02:05 - 2013-05-18 17:24 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Wise Care 365
2014-04-19 02:04 - 2014-04-19 02:04 - 00001188 _____ () C:\Users\Public\Desktop\Wise Auto Shutdown.lnk
2014-04-19 02:04 - 2013-05-18 17:24 - 00000000 ____D () C:\Program Files (x86)\Wise
2014-04-19 02:03 - 2014-04-19 02:03 - 00929416 _____ (CNET Download.com) C:\Users\Denis\Downloads\cbsidlm-cbsi188-Wise_Auto_Shutdown-BP-75755206.exe
2014-04-19 00:48 - 2012-08-01 22:04 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\.minecraft
2014-04-18 23:59 - 2014-04-18 23:59 - 00000000 ____D () C:\ProgramData\ATI
2014-04-18 23:59 - 2014-04-18 23:59 - 00000000 ____D () C:\Program Files (x86)\AMD APP
2014-04-18 23:59 - 2011-07-07 18:23 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-04-18 23:57 - 2014-04-18 23:57 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2014-04-18 23:56 - 2014-04-18 23:56 - 00000000 ____D () C:\Program Files\ATI
2014-04-18 23:49 - 2014-04-18 23:49 - 00613200 _____ (Chip Digital GmbH) C:\Users\Denis\Downloads\ATI Catalyst Mobility 64 Bit - CHIP-Downloader.exe
2014-04-18 22:22 - 2014-03-21 21:12 - 00000000 ___RD () C:\Users\Denis\Desktop\Neuer Ordner
2014-04-18 22:06 - 2014-04-18 22:05 - 00385040 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-04-18 22:04 - 2010-12-24 19:48 - 00001068 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3197765660-3329619702-928005083-1001Core.job
2014-04-18 21:52 - 2012-08-09 19:58 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Spotify
2014-04-18 20:59 - 2014-03-02 22:44 - 00000000 ____D () C:\Program Files (x86)\Browser Guard
2014-04-18 20:50 - 2014-04-18 20:50 - 00110808 _____ () C:\Users\Denis\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-18 20:48 - 2012-08-09 19:59 - 00000000 ____D () C:\Users\Denis\AppData\Local\Spotify
2014-04-18 17:00 - 2014-04-18 17:00 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-18 16:53 - 2014-04-17 20:29 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Winamp
2014-04-18 16:53 - 2012-04-27 23:06 - 00000000 ____D () C:\Users\Denis\AppData\Local\LogMeIn Hamachi
2014-04-18 16:53 - 2011-12-27 17:05 - 00000000 ____D () C:\Windows\Minidump
2014-04-18 16:53 - 2011-07-16 15:05 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-04-18 16:23 - 2012-02-12 00:46 - 00000000 ____D () C:\Windows\pss
2014-04-18 14:20 - 2013-07-16 00:39 - 00000000 ____D () C:\SG Interactive
2014-04-18 13:15 - 2014-04-18 13:15 - 00003292 _____ () C:\Windows\System32\Tasks\{6B24E018-AF69-4745-8084-7CB4A8017FE7}
2014-04-18 10:49 - 2014-04-18 10:07 - 00626272 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-04-18 10:49 - 2014-04-18 10:07 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-04-18 10:49 - 2012-10-25 12:42 - 00029280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klmouflt.sys
2014-04-18 10:49 - 2012-10-25 12:42 - 00029280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klkbdflt.sys
2014-04-18 10:49 - 2012-08-13 16:49 - 00178448 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kneps.sys
2014-04-18 10:49 - 2012-06-19 17:28 - 00458336 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys
2014-04-18 10:49 - 2012-06-08 11:38 - 00054368 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kltdi.sys
2014-04-18 10:10 - 2014-04-18 10:10 - 00002312 _____ () C:\Users\Denis\Desktop\Sicherer Zahlungsverkehr.lnk
2014-04-18 10:09 - 2014-04-17 23:12 - 00000000 ____D () C:\ProgramData\Kaspersky Lab Setup Files
2014-04-18 10:08 - 2014-04-18 10:08 - 00001118 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security 2013.lnk
2014-04-18 10:07 - 2014-04-17 23:13 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-04-18 09:56 - 2014-03-02 22:45 - 00000000 ____D () C:\ProgramData\WPM
2014-04-18 09:56 - 2014-01-22 16:34 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Iminent
2014-04-18 09:56 - 2013-11-24 23:53 - 00000000 ____D () C:\ProgramData\Iminent
2014-04-18 02:06 - 2014-04-18 02:06 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-18 02:05 - 2014-04-18 02:05 - 00001074 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-04-18 02:05 - 2014-04-18 02:05 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-18 02:05 - 2014-04-18 02:05 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-04-18 02:04 - 2014-04-18 02:04 - 00613200 _____ (Chip Digital GmbH) C:\Users\Denis\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe
2014-04-18 01:59 - 2010-12-28 19:15 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-18 01:57 - 2014-04-18 01:57 - 00000989 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-04-18 01:57 - 2011-06-13 16:42 - 00000000 ____D () C:\Program Files (x86)\CCleaner
2014-04-18 01:55 - 2014-04-18 01:55 - 00613200 _____ (Chip Digital GmbH) C:\Users\Denis\Downloads\CCleaner - CHIP-Downloader(1).exe
2014-04-18 01:52 - 2014-04-18 01:52 - 00613200 _____ (Chip Digital GmbH) C:\Users\Denis\Downloads\CCleaner - CHIP-Downloader.exe
2014-04-18 01:51 - 2011-03-20 19:34 - 00000000 ____D () C:\Program Files (x86)\DivX
2014-04-18 01:51 - 2011-03-20 19:31 - 00000000 ____D () C:\ProgramData\DivX
2014-04-18 01:50 - 2011-12-25 00:49 - 00000000 ____D () C:\Program Files (x86)\MAGIX
2014-04-18 01:50 - 2011-04-09 01:02 - 00000000 ____D () C:\ProgramData\MAGIX
2014-04-18 01:50 - 2010-09-09 04:49 - 00000000 ____D () C:\Program Files (x86)\Packard Bell
2014-04-18 01:30 - 2014-04-17 23:41 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-04-18 00:38 - 2010-12-24 19:39 - 00000000 ___RD () C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-18 00:30 - 2014-03-22 17:21 - 00000000 ____D () C:\ProgramData\eiasytoshOp
2014-04-18 00:30 - 2012-03-31 19:33 - 00000000 ____D () C:\Program Files (x86)\Left 4 Dead 2
2014-04-18 00:30 - 2012-03-22 22:59 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MP3 Firm ware Backup Tool
2014-04-18 00:30 - 2012-03-22 22:59 - 00000000 ____D () C:\Program Files\AMT
2014-04-17 23:54 - 2014-04-17 23:46 - 135232000 _____ () C:\Users\Denis\Downloads\setup_11.0.1.1245.x01_2014_04_17_23_03.exe
2014-04-17 23:53 - 2014-04-17 23:41 - 00000000 ____D () C:\ProgramData\Avira
2014-04-17 23:41 - 2014-04-17 23:41 - 00001109 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-04-17 23:41 - 2014-04-17 23:41 - 00000000 ____D () C:\ProgramData\Package Cache
2014-04-17 23:40 - 2014-04-17 23:40 - 04464280 _____ (Avira Operations GmbH & Co. KG) C:\Users\Denis\Downloads\avira_de_av___ws.exe
2014-04-17 23:13 - 2014-04-17 23:13 - 00000000 ____D () C:\Windows\ELAMBKUP
2014-04-17 22:35 - 2009-07-14 06:45 - 00021504 _____ () C:\Windows\system32\umstartup.etl
2014-04-17 21:12 - 2011-07-20 20:03 - 00000000 ____D () C:\ProgramData\Ulead Systems
2014-04-17 21:12 - 2011-07-20 20:03 - 00000000 ____D () C:\Program Files (x86)\Ulead Systems
2014-04-17 21:12 - 2010-09-09 04:37 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-04-17 21:11 - 2011-07-20 20:04 - 00000582 _____ () C:\Windows\ulead32.ini
2014-04-17 21:07 - 2012-06-17 13:51 - 00000000 ____D () C:\ProgramData\Sony Ericsson
2014-04-17 21:07 - 2012-06-17 13:51 - 00000000 ____D () C:\Program Files (x86)\Sony Ericsson
2014-04-17 21:07 - 2011-04-28 20:31 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
2014-04-17 21:03 - 2014-04-17 21:03 - 00003292 _____ () C:\Windows\System32\Tasks\{E3DAF802-5736-409A-B88F-37F36271399E}
2014-04-17 21:01 - 2012-02-19 10:58 - 00000000 ____D () C:\ProgramData\SecTaskMan
2014-04-17 21:01 - 2010-09-09 04:53 - 00000000 ____D () C:\ProgramData\WildTangent
2014-04-17 21:01 - 2010-09-09 04:53 - 00000000 ____D () C:\Program Files (x86)\Packard Bell Games
2014-04-17 20:58 - 2014-03-02 22:44 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro
2014-04-17 20:56 - 2012-10-29 17:38 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Notepad++
2014-04-17 20:56 - 2012-10-29 17:38 - 00000000 ____D () C:\Program Files (x86)\Notepad++
2014-04-17 20:56 - 2011-01-03 15:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-04-17 20:34 - 2014-04-17 20:29 - 00000000 ____D () C:\Program Files (x86)\Winamp
2014-04-17 20:30 - 2014-04-17 20:30 - 00000991 _____ () C:\Users\Public\Desktop\Winamp.lnk
2014-04-17 20:18 - 2014-04-17 20:18 - 00000000 _____ () C:\Windows\SysWOW64\sho48B7.tmp
2014-04-17 20:17 - 2014-04-17 20:17 - 00001280 _____ () C:\Users\Denis\Desktop\Command Prompt.lnk
2014-04-17 20:03 - 2014-04-08 22:23 - 00000000 ____D () C:\Program Files (x86)\RAMDisk
2014-04-17 20:02 - 2014-04-09 18:23 - 419443248 ____C () C:\RAMDisk.img
2014-04-17 19:59 - 2013-11-24 23:53 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\systweak
2014-04-17 19:26 - 2011-12-29 19:54 - 00000000 ____D () C:\Users\Denis\Documents\RCT3
2014-04-17 19:19 - 2014-04-17 14:52 - 00000000 ____D () C:\Program Files (x86)\Raptr
2014-04-17 19:15 - 2014-04-09 18:23 - 419443248 ____C () C:\RAMDisk.img.bak
2014-04-17 16:20 - 2014-04-17 16:20 - 00003028 _____ () C:\Windows\System32\Tasks\{EFE0DB13-235C-4450-AE25-819DA6F2288A}
2014-04-17 16:20 - 2014-04-17 16:20 - 00003028 _____ () C:\Windows\System32\Tasks\{5A8C3065-6BE6-4B45-9E7A-24E9BDAA5D20}
2014-04-17 16:12 - 2010-11-22 00:39 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-04-17 16:04 - 2014-04-17 16:04 - 00000000 _____ () C:\Windows\SysWOW64\shoC190.tmp
2014-04-17 14:59 - 2014-04-17 14:59 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Apfiltr_01009.Wdf
2014-04-17 14:59 - 2012-07-24 17:14 - 00000000 ____D () C:\Users\Denis\Documents\BFBC2
2014-04-17 14:54 - 2014-04-17 14:54 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\library_dir
2014-04-17 14:46 - 2014-04-17 14:46 - 00000000 ____D () C:\Riot Games
2014-04-17 14:46 - 2012-07-22 15:40 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-04-17 14:35 - 2014-04-16 05:01 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-17 14:33 - 2014-04-17 14:34 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-17 14:33 - 2014-04-17 14:33 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-17 14:33 - 2012-01-15 15:15 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-17 14:33 - 2012-01-15 15:15 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-16 23:47 - 2014-04-16 23:47 - 00000938 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2014-04-16 23:47 - 2014-04-16 23:47 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-04-16 23:13 - 2012-01-26 12:23 - 05380608 ___SH () C:\Users\Denis\Desktop\Thumbs.db
2014-04-16 23:06 - 2011-02-01 15:17 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Skype
2014-04-16 22:39 - 2010-12-24 19:38 - 00000000 ____D () C:\Users\Denis
2014-04-16 22:36 - 2014-01-30 00:12 - 00000000 ____D () C:\Users\Mcx1-DENIS-PC
2014-04-16 22:36 - 2013-08-31 16:51 - 00000000 ____D () C:\Users\Gast
2014-04-16 22:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Msdtc
2014-04-16 22:35 - 2013-07-24 10:41 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive
2014-04-16 22:35 - 2013-05-20 14:58 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Wise Game Booster
2014-04-16 22:34 - 2014-04-15 20:04 - 00000000 ____D () C:\Program Files\Microsoft Xbox 360 Accessories
2014-04-16 22:34 - 2014-04-15 20:01 - 00000000 ____D () C:\369448b7f3a7ca6d489e710e06c0e4
2014-04-16 22:34 - 2013-02-24 03:49 - 00000000 ____D () C:\Program Files (x86)\Audacity
2014-04-16 22:34 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-04-16 22:31 - 2012-09-25 22:09 - 00000000 ____D () C:\Program Files (x86)\TI Education
2014-04-16 07:41 - 2011-07-09 20:20 - 00000000 ____D () C:\Users\Denis\AppData\Local\Ubisoft Game Launcher
2014-04-16 04:28 - 2014-04-16 04:28 - 00000000 ____D () C:\Users\Denis\Desktop\Alte Firefox-Daten
2014-04-14 21:55 - 2010-12-24 19:56 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\TS3Client
2014-04-13 18:13 - 2014-04-13 18:13 - 00001452 _____ () C:\Users\Denis\Desktop\SkyrimLauncher.exe - Verknüpfung.lnk
2014-04-13 05:24 - 2014-04-13 05:24 - 00000000 _____ () C:\Windows\SysWOW64\sho2952.tmp
2014-04-12 23:28 - 2014-04-12 23:28 - 00001358 _____ () C:\Users\Denis\Desktop\TESV.exe - Verknüpfung.lnk
2014-04-12 21:00 - 2013-05-18 21:20 - 00000402 _____ () C:\Windows\Tasks\Wise Turbo Checker.job
2014-04-11 15:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-11 11:40 - 2014-04-11 11:38 - 00000000 ____D () C:\Program Files (x86)\TERA
2014-04-11 11:38 - 2014-04-11 11:38 - 00001056 _____ () C:\Users\Denis\Desktop\TERA.lnk
2014-04-11 11:38 - 2014-04-11 11:38 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\TERA
2014-04-10 23:47 - 2014-04-10 23:47 - 00000000 _____ () C:\Windows\SysWOW64\sho8452.tmp
2014-04-10 22:35 - 2013-07-25 14:51 - 00000000 ____D () C:\Users\Denis\AppData\Local\ArmA 2 OA
2014-04-10 18:15 - 2013-08-14 16:39 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-10 18:07 - 2012-05-24 22:57 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-08 22:26 - 2014-04-08 22:25 - 00000000 ____D () C:\Users\Denis\AppData\Local\Dataram_Corporation
2014-04-08 13:40 - 2010-11-22 09:26 - 00718876 _____ () C:\Windows\system32\perfh007.dat
2014-04-08 13:40 - 2010-11-22 09:26 - 00157538 _____ () C:\Windows\system32\perfc007.dat
2014-04-08 13:40 - 2009-07-14 07:13 - 01670548 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-06 19:23 - 2014-04-06 19:23 - 00131072 _____ (Woodgears.ca) C:\Users\Denis\Desktop\GearGenerator3(2).exe
2014-04-06 16:54 - 2012-04-26 21:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-06 03:13 - 2014-04-06 03:13 - 00000000 _____ () C:\Windows\SysWOW64\sho98B7.tmp
2014-04-05 23:27 - 2013-03-31 17:11 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2014-04-05 16:28 - 2014-03-30 12:51 - 00000000 ____D () C:\ProgramData\RoYalCoeuppoN
2014-04-05 13:20 - 2014-04-05 12:02 - 00000063 _____ () C:\Users\Denis\Desktop\Passwort.txt
2014-04-03 09:51 - 2014-04-18 02:05 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-03 09:51 - 2014-04-18 02:05 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-03 09:50 - 2014-04-18 02:05 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-31 09:35 - 2010-12-24 20:04 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-03-30 13:17 - 2014-03-30 13:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-30 12:52 - 2014-03-30 12:52 - 00262144 _____ () C:\Windows\system32\config\elam
2014-03-30 12:52 - 2013-12-18 17:52 - 00000095 _____ () C:\Users\Denis\AppData\Roaming\WB.CFG
2014-03-30 12:51 - 2014-03-22 17:22 - 00000000 ____D () C:\ProgramData\a1e4f9da61eca01b
2014-03-29 19:20 - 2014-04-17 14:45 - 00000000 ____D () C:\Users\Denis\Desktop\LoL Patcher v1.1 - by Varkolac
2014-03-26 18:51 - 2014-03-02 22:51 - 00000000 ____D () C:\ProgramData\EPSON
2014-03-23 21:01 - 2012-11-29 23:38 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Dropbox
2014-03-23 21:00 - 2012-11-29 23:42 - 00000000 ___RD () C:\Users\Denis\Dropbox
2014-03-22 20:34 - 2013-03-28 20:05 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-03-22 17:24 - 2014-03-02 22:45 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\sweet-page
2014-03-22 17:05 - 2014-03-22 17:05 - 00000000 ____D () C:\Users\Denis\AppData\Local\Skype
2014-03-22 17:04 - 2014-03-22 17:04 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-03-22 17:04 - 2014-03-22 17:04 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-03-22 17:04 - 2011-02-01 15:16 - 00000000 ____D () C:\ProgramData\Skype
2014-03-21 21:13 - 2014-03-21 21:13 - 00001021 _____ () C:\Users\Denis\Desktop\Dropbox.lnk
2014-03-21 21:04 - 2014-03-21 21:04 - 00000000 __SHD () C:\found.000

Files to move or delete:
====================
C:\ProgramData\hash.dat


Some content of TEMP:
====================
C:\Users\Denis\AppData\Local\Temp\avgnt.exe
C:\Users\Denis\AppData\Local\Temp\Wise_SETUP.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


testsigning: ==> Check for possible unsigned rootkit driver <===== ATTENTION!


LastRegBack: 2014-04-11 10:44

==================== End Of Log ============================
FRST.txt

Fresh_Ducks 19.04.2014 11:02
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-04-2014 01
Ran by Denis at 2014-04-19 11:56:19
Running from C:\Users\Denis\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Kaspersky Internet Security (Enabled - Up to date) {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5}
AS: Kaspersky Internet Security (Enabled - Up to date) {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {FB2ABE9A-01A4-4539-FCD2-C7EA1246D49E}

==================== Installed Programs ======================

Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.)
Adobe AIR (x32 Version: 1.5.0.7220 - Adobe Systems Inc.) Hidden
Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Photoshop Elements 8.0 (HKLM-x32\...\Adobe Photoshop Elements 8.0) (Version: 8.0 - Adobe Systems Incorporated)
Adobe Photoshop Elements 8.0 (x32 Version: 8.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop Lightroom 5.3 64-bit (HKLM\...\{2DD71ACB-552D-402C-9529-7906ACB95C30}) (Version: 5.3.1 - Adobe Systems Incorporated)
Adobe Reader 9.5.5 MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-A91000000001}) (Version: 9.5.5 - Adobe Systems Incorporated)
Alcor Micro USB Card Reader (HKLM-x32\...\InstallShield_{DD89CE29-BC88-40C6-A845-E2548682C5D6}) (Version: 1.9.17.06019 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 1.9.17.06019 - Alcor Micro Corp.) Hidden
AMD APP SDK Runtime (Version: 2.4.650.9 - Advanced Micro Devices Inc.) Hidden
AMD Fuel (Version: 2011.0524.2352.41027 - Ihr Firmenname) Hidden
AMD VISION Engine Control Center (x32 Version: 2011.0524.2352.41027 - Ihr Firmenname) Hidden
Anark Client 1.0 (HKLM-x32\...\AnarkClient) (Version:  - )
Arma 2 (HKLM-x32\...\Steam App 33910) (Version:  - Bohemia Interactive)
Arma 2: DayZ Mod (HKLM-x32\...\Steam App 224580) (Version:  - Bohemia Interactive)
Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version:  - Bohemia Interactive)
Arma 2: Operation Arrowhead Beta (HKLM-x32\...\Steam App 219540) (Version:  - )
Ashampoo Burning Studio Elements 10.0.9 (HKLM-x32\...\Ashampoo Burning Studio Elements_is1) (Version: 3.1.1 - Ashampoo GmbH & Co. KG)
Assassin's Creed II (HKLM-x32\...\{8570BEE8-0CA3-4977-9AB1-80ED93F0513C}) (Version: 1.01 - Ubisoft)
ATI Catalyst Install Manager (HKLM\...\{B39F601A-E865-7C74-48C6-821AD1312D33}) (Version: 3.0.829.0 - ATI Technologies, Inc.)
Audacity 2.0.3 (HKLM-x32\...\Audacity_is1) (Version: 2.0.3 - Audacity Team)
Avira (HKLM-x32\...\{66116465-9a0c-41ea-ba8e-c572cc3a2eaa}) (Version: 1.0.5218.31571 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.0.5218.31571 - Avira Operations GmbH & Co. KG) Hidden
Backup Manager Basic (x32 Version: 2.0.0.68 - NewTech Infosystems) Hidden
Bastion (HKLM-x32\...\Steam App 107100) (Version:  - Supergiant Games)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlefield: Bad Company 2 (HKLM-x32\...\Steam App 24960) (Version:  - DICE)
BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version:  - )
BioShock (HKLM-x32\...\{E280923D-C5D9-4728-8C79-AC9A0DC75875}) (Version: 2.62.0000 - 2K Games)
Borderlands (HKLM-x32\...\{52B65911-1559-4ED5-9461-46957FDD48CD}) (Version: 1.0.295 - 2K Games)
BRINK (HKLM-x32\...\Steam App 22350) (Version:  - Splash Damage)
Broadcom Gigabit NetLink Controller (HKLM\...\{A84DB02B-9C2B-4272-9D2D-A80E00A56513}) (Version: 14.2.4.2 - Broadcom Corporation)
Burnout(TM) Paradise The Ultimate Box (HKLM-x32\...\{9A996B6A-846E-4A89-B9C4-17546B7BE49F}) (Version: 1.0.0.0 - Electronic Arts)
Call of Duty: Black Ops II - Multiplayer (HKLM-x32\...\Steam App 202990) (Version:  - )
Call of Duty: Black Ops II - Zombies (HKLM-x32\...\Steam App 212910) (Version:  - )
Call of Duty: Modern Warfare 2 - Multiplayer (HKLM-x32\...\Steam App 10190) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 2 (HKLM-x32\...\Steam App 10180) (Version:  - Infinity Ward)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2011.0524.2352.41027 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2011.0524.2352.41027 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2011.0524.2352.41027 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2011.0524.2351.41027 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2011.0524.2351.41027 - ATI) Hidden
CCC Help Czech (x32 Version: 2011.0524.2351.41027 - ATI) Hidden
CCC Help Danish (x32 Version: 2011.0524.2351.41027 - ATI) Hidden
CCC Help Dutch (x32 Version: 2011.0524.2351.41027 - ATI) Hidden
CCC Help English (x32 Version: 2011.0524.2351.41027 - ATI) Hidden
CCC Help Finnish (x32 Version: 2011.0524.2351.41027 - ATI) Hidden
CCC Help French (x32 Version: 2011.0524.2351.41027 - ATI) Hidden
CCC Help German (x32 Version: 2011.0524.2351.41027 - ATI) Hidden
CCC Help Greek (x32 Version: 2011.0524.2351.41027 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2011.0524.2351.41027 - ATI) Hidden
CCC Help Italian (x32 Version: 2011.0524.2351.41027 - ATI) Hidden
CCC Help Japanese (x32 Version: 2011.0524.2351.41027 - ATI) Hidden
CCC Help Korean (x32 Version: 2011.0524.2351.41027 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2011.0524.2351.41027 - ATI) Hidden
CCC Help Polish (x32 Version: 2011.0524.2351.41027 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2011.0524.2351.41027 - ATI) Hidden
CCC Help Russian (x32 Version: 2011.0524.2351.41027 - ATI) Hidden
CCC Help Spanish (x32 Version: 2011.0524.2351.41027 - ATI) Hidden
CCC Help Swedish (x32 Version: 2011.0524.2351.41027 - ATI) Hidden
CCC Help Thai (x32 Version: 2011.0524.2351.41027 - ATI) Hidden
CCC Help Turkish (x32 Version: 2011.0524.2351.41027 - ATI) Hidden
ccc-utility64 (Version: 2011.0524.2352.41027 - ATI) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.12 - Piriform)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - )
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)
Crossfire Keyboard Layout by -Sp0ng3B0b- v2 (HKLM\...\{744D08ED-C523-40AD-886A-0CAD5B770924}) (Version: 1.0.3.40 - Crossfire-GermanY.eu)
Crysis (HKLM-x32\...\Steam App 17300) (Version:  - Crytek)
CyberLink PowerDVD 9 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.2723.50 - CyberLink Corp.)
CyberLink PowerDVD 9 (x32 Version: 9.0.2723.50 - CyberLink Corp.) Hidden
DayZ Commander (HKLM-x32\...\{0B74EC0B-2A85-4542-A167-3DE2132E7DAA}) (Version: 0.92.85 - Dotjosh Studios)
Derive 6 (HKLM-x32\...\Derive 6) (Version: 6.1 - Texas Instruments Incorporated)
Die Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.18.9 - Electronic Arts)
DiRT2 (x32 Version: 1.0.0002.133 - Codemasters) Hidden
Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - Valve )
Driver Detective (HKLM-x32\...\{3839C2FF-2CD0-4601-91A8-B1E40A9BE8A8}) (Version: 7 - PC Drivers HeadQuarters)
Dropbox (HKCU\...\Dropbox) (Version: 2.4.11 - Dropbox, Inc.)
EPSON XP-215 217 Series Printer Uninstall (HKLM\...\EPSON XP-215 217 Series) (Version:  - SEIKO EPSON Corporation)
Evernote v. 4.6.1 (HKLM-x32\...\{9D8BAA74-5B7D-11E2-8273-984BE15F174E}) (Version: 4.6.1.7860 - Evernote Corp.)
FIFA 11 (HKLM-x32\...\{3FEA6CD1-EA13-4CE7-A74E-A74A4A0A7B5C}) (Version: 1.0.0.0 - Electronic Arts)
Free Studio version 2013 (HKLM-x32\...\Free Studio_is1) (Version: 6.1.7.717 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.20.1230 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.20.1230 - DVDVideoSoft Ltd.)
GameSpy Comrade (HKLM-x32\...\{5F4C776F-8CBD-4C4F-892F-B568ABDD70C8}) (Version: 1.5.0.156 - GameSpy)
GIMP 2.6.11 (HKLM-x32\...\WinGimp-2.0_is1) (Version: 2.6.11 - The GIMP Team)
Google Chrome (HKCU\...\Google Chrome) (Version: 33.0.1750.154 - Google Inc.)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
ICQ7.5 (HKLM-x32\...\{7578ADEA-D65F-4C89-A249-B1C88B6FFC20}) (Version: 7.5 - ICQ)
ImagXpress (x32 Version: 7.0.74.0 - Nero AG) Hidden
Iminent (x32 Version: 6.46.1.0 - Iminent) Hidden <==== ATTENTION
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java(TM) 7 Update 3 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417003FF}) (Version: 7.0.30 - Oracle)
Junk Mail filter update (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Kaspersky Internet Security 2013 (HKLM-x32\...\InstallWIX_{560985FB-4B76-4121-9189-7A2CDC7886D6}) (Version: 13.0.1.4190 - Kaspersky Lab)
Kaspersky Internet Security 2013 (x32 Version: 13.0.1.4190 - Kaspersky Lab) Hidden
League of Legends (HKLM-x32\...\{918A9082-6287-4D25-9002-5E5D5E4971CB}) (Version: 1.02.0000 - Riot Games)
League of Legends (HKLM-x32\...\{92606477-9366-4D3B-8AE3-6BE4B29727AB}) (Version: 1.3 - Riot Games)
Left 4 Dead (HKLM-x32\...\Left 4 Dead) (Version:  - Valve)
Left 4 Dead 2 - 2.0.0.6 (HKLM-x32\...\Left4Dead2-hohesC_is1) (Version:  - hohesC)
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version:  - Valve)
LEGO® Indiana Jones™ (HKLM-x32\...\InstallShield_{A14C40E7-F7E5-498D-B8BD-A3EAE942EED0}) (Version: 1.00.0000 - LucasArts)
LEGO® Indiana Jones™ (x32 Version: 1.00.0000 - LucasArts) Hidden
LightZone 4.0.0 (HKLM-x32\...\3263-1164-2624-0047) (Version: 4.0.0 - LightZone Project)
LIMBO (HKLM-x32\...\Steam App 48000) (Version:  - Playdead)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.188 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.188 - LogMeIn, Inc.) Hidden
LOLReplay (HKLM-x32\...\LOLReplay) (Version: 0.8.6 - www.leaguereplays.com)
MAGIX Speed burnR (MSI) (HKLM-x32\...\MAGIX_{C7411D97-EF5E-46B2-8B49-E408A344DF82}) (Version: 7.0.2.6 - MAGIX AG)
MAGIX Speed burnR (MSI) (x32 Version: 7.0.2.6 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Choice Guard (x32 Version: 2.0.48.0 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft XML Parser (x32 Version: 8.0.7820.0 - Microsoft Corporation) Hidden
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
MiniTool Partition Wizard Home Edition 7.0 (HKLM-x32\...\{DE59B901-18EA-4CB9-ADE4-291BF5C1E12E}_is1) (Version:  - MiniTool Solution Ltd.)
MiniTool Partition Wizard Home Edition 7.8 (HKLM-x32\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version:  - MiniTool Solution Ltd.)
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
MSVCRT (x32 Version: 14.0.1468.721 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
neroxml (x32 Version: 1.0.0 - Nero AG) Hidden
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.46.0 - Black Tree Gaming)
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
OpenOffice.org 3.3 (HKLM-x32\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)
Origin (HKLM-x32\...\Origin) (Version: 9.1.13.85 - Electronic Arts, Inc.)
Overwolf (HKLM-x32\...\{C8508BC4-52AF-46A9-986D-814775FC6670}) (Version: 0.40.228 - Overwolf)
Packard Bell MyBackup (HKLM-x32\...\InstallShield_{72B776E5-4530-4C4B-9453-751DF87D9D93}) (Version: 2.0.0.68 - NewTech Infosystems)
Packard Bell Power Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 5.00.3005 - Packard Bell)
Packard Bell Recovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3013 - Packard Bell)
Packard Bell Registration (HKLM-x32\...\Packard Bell Registration) (Version: 1.03.3003 - Packard Bell)
Packard Bell Social Networks (HKLM-x32\...\InstallShield_{64EF903E-D00A-414C-94A4-FBA368FFCDC9}) (Version: 1.0.1901 - CyberLink Corp.)
Packard Bell Social Networks (x32 Version: 1.0.1901 - CyberLink Corp.) Hidden
Packard Bell Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3001 - Packard Bell)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Portal (HKLM-x32\...\Steam App 400) (Version:  - Valve)
Portal 2 (HKLM-x32\...\Steam App 620) (Version:  - Valve)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6167 - Realtek Semiconductor Corp.)
SDFormatter (HKLM-x32\...\{15EB20D6-5F13-41D0-BEF9-C9C44D6AC620}) (Version: 3.0.0 - SD Association)
Shutdown Timer (HKLM-x32\...\{0B1BBEE3-C10D-44BE-A6BE-EEC867315F87}) (Version: 3.3.4 - Sinvise Systems)
Shutdown7 2.0 (HKLM-x32\...\Shutdown7 2.0) (Version:  - )
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
Sony Ericsson PC Companion 1.50.52 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 1.50.52 - Sony Ericsson)
Spotify (HKCU\...\Spotify) (Version: 0.9.8.296.g91f68827 - Spotify AB)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
System Requirements Lab Detection (HKLM-x32\...\{A407FC22-36BF-4C82-A516-59D94BC505A9}) (Version: 1.0.5.0 - Husdawg, LLC)
System Requirements Lab Test (HKLM-x32\...\{D62576C2-C084-4698-974A-5BE77714FDDD}) (Version: 5.0.6.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TeamViewer 8 (HKLM-x32\...\TeamViewer 8) (Version: 8.0.16447 - TeamViewer)
TERA (HKLM-x32\...\{A2F166A0-F031-4E27-A057-C69733219434}_is1) (Version: 7 - Gameforge Productions GmbH)
Text-To-Speech-Runtime (HKLM-x32\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)
Tom Clancy's Splinter Cell: Conviction (HKLM-x32\...\Steam App 33220) (Version:  - Ubisoft)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
Torchlight II (HKLM-x32\...\Steam App 200710) (Version:  - )
Ulead Photo Explorer 8.6 (HKLM-x32\...\{025C3792-E9C6-432A-92C1-661F99D021CA}) (Version:  - Ulead Systems, Inc.)
VDMSound (HKLM-x32\...\VDMSound) (Version: 2.1.0 - Vlad Romascanu)
Video Web Camera (HKLM-x32\...\{6D9021DC-CF1B-4148-8C80-6D8E8A8A33EB}) (Version: 0.5.37.3 - SuYin)
VirtualDJ Home FREE (HKLM-x32\...\{B515962D-C979-44AC-9912-F7BB499B4B2C}) (Version: 7.3 - Atomix Productions)
VLC media player 1.1.11 (HKLM-x32\...\VLC media player) (Version: 1.1.11 - VideoLAN)
Welcome Center (HKLM-x32\...\Packard Bell Welcome Center) (Version: 1.02.3005 - Packard Bell)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
Windows Live Call (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
Windows Live Mail (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM-x32\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation)
Windows Live Writer (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Windows Mobile-Gerätecenter (HKLM\...\{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}) (Version: 6.1.6965.0 - Microsoft Corporation)
WinRAR (HKLM-x32\...\WinRAR archiver) (Version:  - )
Wise Auto Shutdown 1.39 (HKLM-x32\...\Wise Auto Shutdown_is1) (Version: 1.39 - WiseCleaner.com, Inc.)
Wise Care 365 version 2.45 (HKLM-x32\...\{E864A1C8-EEE1-47D0-A7F8-00CC86D26D5E}_is1) (Version: 2.45 - WiseCleaner.com, Inc.)
Wise Game Booster 1.12 (HKLM-x32\...\Wise Game Booster_is1) (Version: 1.12 - WiseCleaner.com, Inc.)
XSplit (HKLM-x32\...\{15C49338-59E5-472E-94F7-D5AE15EE23C9}) (Version: 1.0.1206.0203 - SplitMediaLabs)

==================== Restore Points  =========================

17-04-2014 17:13:20 Removed Norton Online Backup
17-04-2014 17:24:38 Entfernt RollerCoaster Tycoon 3
17-04-2014 18:00:53 Removed RAMDisk
17-04-2014 18:50:04 eBay Worldwide wird entfernt
17-04-2014 18:54:35 Removed LPT System Updater Service
17-04-2014 18:55:32 Removed Microsoft Games for Windows Marketplace
17-04-2014 19:03:14 Removed SpeechRedist
17-04-2014 19:04:20 Removed TomTom HOME.
17-04-2014 19:04:51 Removed Ubisoft Game Launcher
17-04-2014 19:06:56 Removed System Requirements Lab CYRI
17-04-2014 19:08:07 Sony Vegas Pro 8.0 wird entfernt
17-04-2014 19:09:14 Removed TomTom HOME.
17-04-2014 19:10:40 Entfernt Ulead PhotoImpact
17-04-2014 19:12:02 Entfernt Ulead Photo Explorer
17-04-2014 23:58:51 Removed Java(TM) 6 Update 22
18-04-2014 11:32:43 Removed BlueStacks Notification Center
18-04-2014 13:36:00 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {00328C57-0590-4F96-9589-CE04F5C52E4F} - System32\Tasks\{F3A0DD37-8D9F-4869-9320-29D887B626FA} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {005D4ED6-0310-4EAC-95D6-3D9501B1BCD5} - System32\Tasks\{A14532C6-1706-468F-ADBB-E389ACF16049} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {00B27A19-F3E8-47F1-A0E6-EC091DB0CA5F} - System32\Tasks\{52CA0024-5D1C-41CC-8F11-4B9887CE3688} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {01107536-ABDA-4407-98A7-441732CD7B54} - System32\Tasks\{C3A070DF-A5C9-4126-A33E-CFEA03EC9004} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {0116DFD7-4E0A-429E-B919-FE81F42EFA1F} - System32\Tasks\{B9F9F77D-22C8-421F-96D5-723CA72B075D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {01921D4F-7C57-4A30-AC89-867D6370EDA3} - System32\Tasks\{7BE37FBE-4E4B-4FF2-ABC7-7BE4BB1559D5} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {02913F59-1528-4CB6-A050-6A395DA6BD02} - System32\Tasks\{010A3FAB-41CA-48EB-B3F0-5AA044D3FCD3} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {041132CF-184A-4E0C-8594-C5E6EB280D12} - System32\Tasks\{E2834930-FCC7-4873-A135-12846ED7AF7A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {04EBBD28-A4FD-4E37-B7BE-5DC4C958D9FB} - System32\Tasks\{7A919FD1-5C43-4E19-8BE1-DE41A688DB8F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {084EDD1D-6E9C-476C-A91F-9D103F77F380} - System32\Tasks\{A94EB478-F0C7-4EFE-A430-DBEDBB5472AF} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {0934AA95-0639-4EEB-B09D-0BCC3D5FC2AF} - System32\Tasks\{7B1FD04E-3024-4296-8E73-B5C589ECF5DE} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {097E20F4-5CF9-466A-BD39-FCBD3D2F3412} - System32\Tasks\{4729669E-066C-4BC7-9E74-BE170D8F428A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {0A139574-03BC-48A1-9E5B-737142FCD2E6} - System32\Tasks\{634FDDEB-029C-4788-8075-8B7865ABF103} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {0AC838BD-8587-4FF2-B722-2E32AD92437C} - System32\Tasks\{E6BD8113-51C0-4EC1-ACEB-1BB97C7E1064} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {0ACC568E-B260-4B07-86A1-6710E2E13E04} - System32\Tasks\{1B2D15DD-8DCA-4504-8BEE-0B3B977474FF} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {0CC0B9FB-C64A-4D6D-8182-2A2A6EE71880} - System32\Tasks\{282D92ED-A3B4-45D6-AC6C-887DF3775EBB} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {0DE50B7B-5C64-4A53-BAAD-674B9364A1A2} - System32\Tasks\{22DAE061-3452-4E6A-BD4E-B16B7E1432D8} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {0F7B5BE1-E488-4A3C-9BE3-951D34086C48} - System32\Tasks\{F254FB5A-8519-4A11-829A-DA1F153D0AB0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {10FE4D84-C464-484A-A3CC-FE5DD3D3E7C3} - System32\Tasks\{B58B2629-97C7-406D-B00E-0C58E4A98496} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {111E5EBF-FDE8-4F18-A90E-F09D4DFE26AA} - System32\Tasks\{54CC3118-1619-4F07-95A6-D49E136FF3DB} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {115AF1CB-8069-43B8-BDFC-3FAB6C627643} - System32\Tasks\Wise Turbo Checker => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe [2013-05-13] (WiseCleaner.COM)
Task: {11CD0534-2284-4627-AC2C-ABF5BA8E56C3} - System32\Tasks\{79C9C150-AA8F-4BAD-A6B8-A7DF367EE409} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {12840DC0-8B63-42C7-AF03-9DC7B33C360E} - System32\Tasks\{DAED76BE-BFBC-4EB3-8313-8E9A3C92F878} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {141525C8-4BF7-4B0A-B9DE-51534EA93976} - System32\Tasks\{549D84D8-DB79-4E19-B7E6-1C6490AFB9CE} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {142222E8-8E67-4ECC-884C-4558305BA0D8} - System32\Tasks\{78C38068-7040-4735-A90E-B9FF9134A2D2} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {15DC5116-F00A-4F67-B660-28D71F6EC18F} - System32\Tasks\{3374ACB2-EA7C-4DE8-9EA0-060348604F93} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {17AD4F91-B1B4-48DC-A4F5-FA426A672FA4} - System32\Tasks\{D74CF776-CDF4-4129-8A56-3D36E68CCC5D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {1B927BF5-375D-4CEA-873C-359D7A44860C} - System32\Tasks\{35568D9C-C860-46DA-96B3-F23F170541A9} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {1BA9DEBA-89E1-4752-A684-62AAE2E751A6} - System32\Tasks\{2124C4CC-E670-4615-BCF9-7AF85DD70B2E} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {1BC7046C-F502-429E-87F8-BCFC26ED7ED9} - System32\Tasks\{273665EA-2F49-42BB-A66B-7EB92FEC8306} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {1C28854E-B840-49B5-AA08-65F7BD719B89} - System32\Tasks\{66EC6E8D-4549-46DE-A218-26F30766FA9F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {1DF2503F-EF01-421E-8761-F28B9168DFC9} - System32\Tasks\{DB4223C7-E1D6-4874-BD3B-7902A70CB282} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {1F58E370-25DB-4F34-875D-C25F63A7C76C} - System32\Tasks\{048180B6-7D46-481B-BD15-2F647204038C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {22FC0815-3BE4-40A5-8EFB-E24550E732F0} - System32\Tasks\{EFE0DB13-235C-4450-AE25-819DA6F2288A} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe [2013-10-17] (Kaspersky Lab ZAO)
Task: {2437C855-F9D0-4803-BB35-3498D65F9496} - System32\Tasks\{11E8F9D5-C249-41E0-9361-F8B2999F5C6B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {24992ADA-AA8C-44A7-ABEE-E2BEB60822BE} - System32\Tasks\{A18F83E6-534C-4163-9C49-656D83407E86} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {24E0D5C9-93D8-40B2-B9E6-9420A1C4D7F4} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3197765660-3329619702-928005083-1001Core => C:\Users\Denis\AppData\Local\Google\Update\GoogleUpdate.exe [2010-12-24] (Google Inc.)
Task: {2518FE97-753C-4DDF-8484-39B5C96725ED} - System32\Tasks\{19DADD0F-F9FF-4C9A-9B2E-CC52A161032E} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {25F688BD-D9A8-4D85-A523-358C5A7551C2} - System32\Tasks\{41EFCB91-FF0A-4720-8A64-9148BF1C5520} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {2788B1C4-613E-4FC7-8B17-DAF4B17C2EE9} - System32\Tasks\{BB032967-CDE2-48C2-8159-26E5E5286044} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {29034EF2-8199-4BA9-A5BA-820A24BAF40D} - System32\Tasks\{662082A3-5F7C-446F-80B5-C2104BC1C0D0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {291698C9-3121-4195-B94D-074779DDB728} - System32\Tasks\{C51DFE80-9423-4F6B-A93D-D0A3199300F0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {29F2DD10-1FF3-4544-9C57-E742BA790D7E} - System32\Tasks\{BA392D86-114C-4FBF-BF01-B7AE60715C67} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {2DA485AE-0BE6-4C34-A229-8B7562AB62D6} - System32\Tasks\{D4907E7C-AEDB-4EE6-AD22-86E779AA9B30} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {2E0131CA-CD81-4E3A-B4F8-439B28E2B810} - System32\Tasks\{BBC0E969-29A7-4EE2-B437-582B2C05928A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {2E42E5B3-08A1-4AEB-BF82-781E09B35218} - System32\Tasks\{98ECA9A9-2025-43FA-B12C-B029A2FC0542} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {2F1F674B-3425-4716-8D2C-622E27B615B6} - System32\Tasks\{7A8CDE29-5AEC-40AD-B67E-CE1426B39A15} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {304A8977-9F43-491C-9491-38A0D3FACEBE} - System32\Tasks\{1432627B-9B0A-4BD5-B760-04288EE864DB} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {30578428-CF11-48D8-BEA2-836328ED7A73} - System32\Tasks\{3E230631-72AB-45D7-958F-228EF656F6B9} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {3671CE3D-5FC3-4F9B-B0A9-AD6A23D080E3} - System32\Tasks\{F2929BC4-7429-486A-BC02-676E7D65147C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {37B1C62D-1D88-42A8-9604-379270C4A970} - System32\Tasks\{D7F08680-2EAC-493B-AA44-9CD28E50BF51} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {38F138C2-3DA2-4AF2-A4FF-8DBB7421D13B} - System32\Tasks\{D50CDF9B-ED05-4AE3-9179-E25A1494CE35} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {3B9FD7B0-CCF0-4742-96BA-C6A31061F054} - System32\Tasks\{79EBDDD8-DCD5-4535-BAF7-416C3BED5C37} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {3D107FAC-92E7-4D21-8CE3-8E8AABABBB1B} - System32\Tasks\{A251DFC2-BC68-46A5-AAB5-FF99224E2359} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {3F383A5F-336B-4145-915F-5081BEB61691} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
Task: {41F31EAA-E4A0-49B6-92A4-FEB4E22AD42B} - System32\Tasks\{D38850BA-59CA-488B-88D9-49CF2A7E0594} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {46BF8BEE-B62A-439B-AFF7-F15669DC1178} - System32\Tasks\{905392F7-6672-4FF9-B530-6E07995C3E46} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {46E5D604-1636-4AAF-BE39-34222EDE80B0} - System32\Tasks\{AF9349A8-1484-4012-B64F-2D8F1109BE93} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {46E8F857-A811-4FE6-9C46-474EBBCE7C0A} - System32\Tasks\{BE99C6D9-F2F4-4E2C-866A-50A10652CD0B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {4713673F-77C7-490E-8881-D25216692E14} - System32\Tasks\{3448F9E3-73A9-49FC-BCBE-307E20BCAE3A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {48390F69-E24C-4B54-B1D5-F7B5193EEA12} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-15] (Adobe Systems Incorporated)
Task: {49F750E0-296E-46F5-8D94-BCFDD95FA0A7} - System32\Tasks\{EDD9AB63-62BF-4285-B760-CE6DCA92FFC5} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {4AE96EA3-EECC-48DE-9152-346A5A781EF3} - System32\Tasks\{D7AE59F8-F96A-472D-8B6D-FCB00EC1F18B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {4C68191F-C0E1-41AA-9748-DD705C7211D7} - System32\Tasks\{BFC910E2-16D5-46CF-9128-218D8DE700E8} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {4D74E667-F51B-4EC6-A75E-F6191FFF1662} - System32\Tasks\{8EA62F19-923B-449A-ADD2-A8353E56CCE8} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {4FE41EC2-2263-41D9-84EB-FDEDBE69CF17} - System32\Tasks\{85461B22-1C85-4DDD-A1DA-5761C5479143} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {50EBEEFD-435F-4E2B-B968-947D6B439A6D} - System32\Tasks\{886A2E49-5098-459F-8F78-70C946363C7A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {5303D9B7-5D06-4C3B-B460-3C8D57A6A48A} - System32\Tasks\{D5EAB102-022E-4B59-B0A8-7F89287FA88A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {53A97B9F-F313-4298-B803-902D88D6CE6C} - System32\Tasks\{4227E1C6-7A2D-46DC-9D08-9425EEADC856} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {544BB1A5-6380-43EC-B231-6EF3E4E52C0D} - System32\Tasks\{57CCB21C-3A19-4E9D-8F7D-681AE5BF7546} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {552FD8C3-12DA-44FE-B2D1-73D45E933816} - System32\Tasks\{33187027-1815-4340-9789-09C74A83D1D1} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {56206036-0D9A-472B-8A70-82D27EFEDD6D} - System32\Tasks\{18FA20B7-763E-4408-B8EF-A11AA30AADED} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {584EDB58-730F-4F77-B4FD-41D529F73BB8} - System32\Tasks\{5624E1D0-804D-4543-AAD7-9272F2EF19F7} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {58B5D418-11FB-4669-BDCC-0AF1491F88C9} - System32\Tasks\{9403E089-6A3F-49F2-A7B9-6048A5B9F90E} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {5A9C8EA6-8CB5-497E-A43A-F44BFCF8E2AB} - System32\Tasks\{4943DCB3-767C-4461-BF1D-654EB072CAF0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {5B437A13-AA62-43BB-942F-F9C1B4C1A1FF} - System32\Tasks\{C37DEC7E-1EAB-4425-8C3A-2ACF3FB66786} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {5B630498-0591-4E9B-A96E-39B57F6F8972} - System32\Tasks\{C88E8538-F9DC-4A61-8832-12776EE7D803} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {5C4BA84F-3D70-466A-AA89-148BDEB81309} - System32\Tasks\{3AC7564B-970F-4A7C-A2A5-33E24DC99220} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {5DBCEF58-EF77-409B-B520-61597EE4C261} - System32\Tasks\{13E5289E-C6DC-4069-A216-9002C8C099DF} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {5EC1C0D2-432A-4CF7-A2EA-0CA3A7109919} - System32\Tasks\{021411C2-BD1D-4024-9306-A746DB7A4236} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {5F7C88E6-045D-407A-9594-5CD85DB8CD71} - System32\Tasks\{011CDECF-5F74-4057-B76E-E4A23EEB1B5A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {63DE7DDA-218A-4767-A3EE-047CAA5ED5BF} - System32\Tasks\{E1936510-7A76-46CD-AC11-895E33D3C35F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {648E9A08-6306-483D-A3FA-335E955E39D8} - System32\Tasks\{BAAEDB76-7400-4D37-A68B-A39886E66F24} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {64FA9254-BB3C-419A-90F2-3D3342B47C40} - System32\Tasks\{E0885C11-D4F0-4EEF-BA98-4AEEA72A691B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {650F7AB1-E1B8-42F8-B75A-5E3B469691CB} - System32\Tasks\{9DF9E7A6-05E9-45BE-B058-F53D8B1BF4C8} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {66BA677F-7412-4012-8B5E-8EC7824D967F} - System32\Tasks\{9F7CA816-3F13-42F4-A40E-1E15E5623429} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {68B74F23-4589-409B-BFFD-0673E5D92625} - System32\Tasks\{BDC8F05D-F0C4-49FC-9271-295538919963} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {68CC91DB-73FF-4DF3-8F0B-40407CEFB68F} - System32\Tasks\{C71DBAE8-CA6A-48B6-938E-F7A79437C7CA} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {6AF44BBA-C8B8-46F0-B565-49D74834118B} - System32\Tasks\{C6E09939-04AC-4B0C-B9A9-13D5A6FDBF31} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {709AFAF9-A2CD-4032-807F-4B9B5B0BDAEC} - System32\Tasks\{C99F9D9E-A683-4D7D-A7FA-5D676A9FA202} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {71437FD7-0B0F-4941-A093-E5552215F916} - System32\Tasks\{2C45F9C2-E816-46A6-9332-CC5931FCE25A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {71CA33A6-AA7B-475C-B7E7-C8D275377F7E} - System32\Tasks\EPSON XP-215 217 Series Update {DDC38361-039E-4970-8E52-4DAEB0824476} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {72BB98DF-E9AC-425B-A521-1AD4B5409EC2} - System32\Tasks\{7F4087BD-F396-465A-B964-A42D6F705402} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {73903738-B7FC-4FDD-909D-644839D1BA11} - System32\Tasks\{1195CFB7-A1AE-4972-8DC9-5AFB2D08F960} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {746117BC-54BA-423E-9E7D-881B58E1F762} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3197765660-3329619702-928005083-1001UA => C:\Users\Denis\AppData\Local\Google\Update\GoogleUpdate.exe [2010-12-24] (Google Inc.)
Task: {74679DE0-6F6D-4400-AABF-9ECF538FD72A} - System32\Tasks\{9E92C56F-310A-476E-92BC-7642C4CBA24D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {74F9D878-C26D-4A45-B56C-967EFDBD6FA1} - System32\Tasks\{FE5C6CDD-2F26-4A4D-9693-4D51FB1B8788} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {76122B5F-7878-4BE4-B36E-67A6AD08D770} - System32\Tasks\{4DB44E0C-D389-4E79-BB22-CC8F47D06A51} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {777D4DCE-2874-4AB3-A1E4-7C61BC21AD9E} - System32\Tasks\{C776DA16-9465-4FF4-AB23-3DEFF650EA8D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {77AD1636-CFC9-4789-A899-1CA3244DFC5E} - System32\Tasks\{DA07F9B3-6A0E-4DC4-9976-D7E0A8D0CBF6} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {78A539E7-FEB1-4FE7-B86E-A59E6ACAD8A8} - System32\Tasks\{C1C795C8-0125-4BE0-AF06-93777CA75E88} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {79F6400C-1249-4D3B-97C4-982BFF350F55} - System32\Tasks\{8D017295-7D66-40C1-B849-B9DF64BFCD83} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7A2D8E62-1720-4CF6-B477-554E8F82AFDB} - System32\Tasks\{7234B013-3F4B-404B-8E3B-4732C98EDE05} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7DE3187A-58EC-4746-92BD-15AE69D3D46B} - System32\Tasks\{C9969BA2-6075-408B-B4CD-0A8579D546E3} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7ED563BF-0A58-4917-8BDD-A4DD6DECF8FC} - System32\Tasks\{13DF9098-F5DD-4A17-96C2-16272AA5F2E9} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {81151358-3B30-41BD-944A-7D770F01FDDD} - System32\Tasks\Go to RoboForm Install page => Rundll32.exe url.dll,FileProtocolHandler "hxxp://www.roboform.com/test-pass.html?aaa=KICMOJMMNMOMLMOMHMMMCNKMLJMJJJCNLMOMLMIMCNOJKMPMMJCNMMPMNJGMKMGMNMJMNMOJKJIMJNJICMIMCNOMCNJMFMHMCNPMCNIMJMPMPMFMJMCNOMCNIMJMPMPMCNNMJNPICMLMFMEKMICNJJCKFMPMJNHICMEKMICNJJCKJNBJCMLLKJBJGJMIJNKJCMJNNICMJNDJCMLJKJ"
Task: {816530FD-6376-4882-A509-8BC7CB140EC2} - System32\Tasks\{4A719B84-DF06-41E0-A996-B1247FFE1573} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {837773B0-5002-4A50-98F2-6C3CA9AD87CC} - System32\Tasks\{93B68892-A43E-43A2-BCFA-1205DB3A6E25} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {84E3B0DA-6F40-4ED7-A8FC-A6F2B7C1BF01} - System32\Tasks\{6B3FEC86-4E31-43CB-8CB8-94D218D0375A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {85D47B90-6934-4F57-BD5E-DA86562FBD4C} - System32\Tasks\{9584D973-CA46-4B24-AAC5-27909B2938D3} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {86D95E44-0C18-4F39-B084-3C2281726222} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {8827E7C2-B908-402D-980F-4B1CB7EDA521} - System32\Tasks\{A5FA6775-8A94-411F-B9A0-27B921F20AAB} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {88E05365-B7D2-4991-8723-FF9F6455FE69} - System32\Tasks\{5EECEC6B-891D-4BB0-A05E-78377E59379E} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {89E57B26-DD08-45EC-A793-BBD1E099C8C8} - System32\Tasks\{88839F1C-95FB-4E47-995B-3DB593CFB0FA} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {8D045073-56A1-4B11-B7F1-4AD9B6067563} - System32\Tasks\{3F105F61-DFEC-473E-8BED-63B238A22CD5} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {8E1B7190-B7C0-4B03-AF39-22A769971E86} - System32\Tasks\{3767B1A6-2F42-4071-AB10-83E031196255} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {8EA6C3DD-FB7C-40C0-84A3-E646A8A60659} - System32\Tasks\{3B9472EB-5BA4-4929-B474-5D3D964E90D0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {8F6362CF-8615-48BE-8EE8-32B53FAF632E} - System32\Tasks\{79F01D28-6855-4EF4-B799-BDE3F3F45B62} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {91062EBF-430D-473D-8E9E-E7952A2B5D2D} - System32\Tasks\{42FFB040-892C-4CC5-A928-8682E5A38BC3} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {92A8EA03-0459-415C-8ACA-F9D51FCD46B2} - System32\Tasks\{55216F0C-1D16-461C-A246-A2A3EB56D9C2} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {93D1AB5A-8462-47CB-81AC-F54CE80E2A33} - System32\Tasks\{250C5912-388A-4A1E-80E6-BCCDAD5727D5} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {94621435-5C83-499C-A5C7-5B86375F3337} - System32\Tasks\{6BE1EC90-8A63-4BC3-8686-BE9AA0219F29} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {94FA7D1D-5211-41B4-961A-3C597589AA98} - System32\Tasks\DealPlyUpdate => C:\Program <==== ATTENTION
Task: {959CB312-00D8-49B0-BB5A-53F80BEF5642} - System32\Tasks\{8D49F1DC-8B82-400E-B1EF-34D596B06BCC} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {96E0118C-C3B0-4DF0-8713-D5393375C7AE} - System32\Tasks\{BB1D2BCD-A012-4CEF-81C0-B9866D7A58C7} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {98603CFC-99B6-4BB2-A089-7B7150F3B19C} - System32\Tasks\{9BA38838-C0BE-4E72-A4C9-C1DE77D448A3} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {9B00AF96-3C61-4CDA-ADF0-14DDDD6799D2} - System32\Tasks\{BF46AD99-0B02-40F2-BFEE-2ACFFF2E5A8D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {9B183308-6A39-4CC6-980C-46D480EF496F} - System32\Tasks\{2AB7862F-5482-4D0A-968D-77436447FF4C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {9CF9EFED-8F19-49F0-9D02-71AC00C46C9D} - System32\Tasks\{1FE34338-9CD9-4F15-BCDB-2AD083B636DC} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {9EB0A611-688F-40C3-AC9D-AD15B75DAD98} - System32\Tasks\{6EF4E52D-8CDE-4CD8-83DD-C41E0BE7CF89} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {9EF7CE0C-A43F-4A27-9840-B699EEB1DB88} - System32\Tasks\{DB86932D-7C8E-49BF-B9CC-455CA479C452} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {9FE7EB8E-AC6A-4D8A-AAEA-A8F0DE8629AF} - System32\Tasks\{BB217A1E-811E-4553-8103-ED539E3C6F8B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A0C20198-8A5A-41B8-8E63-C375D5F0AFC9} - System32\Tasks\{0FE72915-EBDE-4666-B9EE-84EA470A488F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A1ACCCF8-4794-41C2-8E52-6DB38A33E849} - System32\Tasks\{55379707-96F8-4AE5-BBC8-71FEE642298B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A20A85C2-40F7-463E-9234-670044115E28} - System32\Tasks\{D90252D1-86A5-4690-A876-E4862A2F40F3} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A222A6AB-A00A-4B27-A6E4-3B2420ED4262} - System32\Tasks\{E5F5A995-0FBA-4E52-81FE-687F53604198} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A2230A04-44DB-471C-8EFB-0FCB6554AD18} - System32\Tasks\{E52F7C69-97F8-4E1B-856E-F89DA047B947} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A27DE7E7-FA49-4639-B7C8-3EA215FB8468} - System32\Tasks\{C082C0E8-3293-4995-BBAB-92E01AE38091} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A31A3D62-58FC-4969-8631-722AB2059F4D} - System32\Tasks\{9DD81B27-A865-4546-B96A-E54ABABCD2A4} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A4A38723-B979-45C4-989E-6593AD098E07} - System32\Tasks\{EDCEFDA2-C341-4D89-9943-D2D174496B41} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A4DB15F2-FA16-4FBA-98EC-06EF16128600} - System32\Tasks\{D5F48129-A799-461A-9A47-8F241468751C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A500E6DA-D4F5-463A-B796-F76AEE903920} - System32\Tasks\{1F997B5A-AEF0-4AFC-946E-4BF970F74A0A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A59F8105-2872-4811-9CB2-4DFEF41EA11A} - System32\Tasks\{89A6242C-38F5-408E-A301-2CB82845FF8F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A5F9057B-A89F-4649-A3F5-5FE3E5B1F228} - System32\Tasks\{47E3B516-C9EE-485E-B183-AF3DD4AE9CB0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A68F2C1B-1C67-4A22-8606-B94077BD1F64} - System32\Tasks\{B63490A3-ACE7-45B6-94DF-43B8B2B67FD3} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A813DAE3-7415-4EE2-8298-6BBB9ABC6812} - System32\Tasks\{5FEA8085-8158-44E1-8FEA-626306DF789D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A81A8051-73AC-4561-9102-D52E8E0B3625} - System32\Tasks\{FE4F1367-A026-4F94-8A43-2BFC7CD2C634} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {AC6B41CD-B7D8-45DB-9BC3-436FDB57B32F} - System32\Tasks\{B894CD67-C644-40FF-B9EF-47E1CBF525FE} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {ADECCAAD-CA63-4BBA-89DD-BCD0B375CCF0} - System32\Tasks\{BCC113C4-E8BA-4EEB-AAFF-B3BB1EA0A1F2} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {AEFB8194-068C-4F16-B436-EC1C26603DD6} - System32\Tasks\{DD27F228-7C86-4557-8CED-6D9367EDFABB} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {B155F47D-E546-4A11-99B1-DF68915FE396} - System32\Tasks\{5A8C3065-6BE6-4B45-9E7A-24E9BDAA5D20} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe [2013-10-17] (Kaspersky Lab ZAO)
Task: {B170F9FE-6D33-49F0-A9A5-F27434BFCE66} - System32\Tasks\{EFA23710-240A-4140-83B5-C8780CF13212} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {B26C8B25-0337-45A7-91F9-6E389F0A8C8D} - System32\Tasks\{2D62629A-2796-47C5-AF11-EE73B5DF28BB} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {B43CD969-8916-41C5-9572-AF12154C32D5} - System32\Tasks\{EEC15860-30C3-4DD2-8B0A-53740FE41BAE} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {B6C6FDE7-2DA9-4D60-9C07-3F817E0815FC} - System32\Tasks\{C8C0EAC0-4E1B-47EF-8F7F-EE7CAA4ECEDC} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {B76F3395-300E-4D2B-9D7E-AABA993F7F79} - System32\Tasks\{BADBF11F-062C-4F06-9068-C1BF295FAD82} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {B86BA4D1-0919-4522-9D7A-44436B6B0CD2} - System32\Tasks\{60557ED6-7B1F-44AB-90BD-ABC9AB602B0D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {B8AE3B7F-68E1-46BD-9EA0-5E27C2E07924} - System32\Tasks\{9A78B321-A9B8-43FE-9123-4DF0A30ACCFA} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {B9B14BD6-CD01-4512-9A9D-263F4D9D7C28} - System32\Tasks\{915A5BAB-C6C8-4467-8303-76D4339D21C6} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {BA9B4918-3B90-4B6D-AF46-08D227293AE6} - System32\Tasks\{4BB12CFF-5FCA-4A99-A991-2687544F174B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {BAAA6107-3551-429F-AD1A-4C4074B235C3} - System32\Tasks\{54228E28-5031-4DA8-B56F-4DC7CDBFDCB5} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {BC9B4630-04D9-4703-B76A-1A31868BB1C2} - System32\Tasks\Microsoft\Windows\Media Center\Extender\Update media permissions for Mcx1-DENIS-PC => C:\Windows\ehome\McxTask.exe [2009-07-14] (Microsoft Corporation)
Task: {BDBBBF4F-6F4C-4B36-AA82-4364691B8B27} - System32\Tasks\{0F689F5D-2088-4CA0-9B59-AEBD5A8B9042} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {BE965B00-9790-4D1A-9C2C-013A7E60DFED} - System32\Tasks\{45A56F52-98D6-4348-847B-9B9743C9E678} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {BFF3AD5A-C5E6-4F10-8E68-7E9FA979F8E4} - System32\Tasks\{3AF97267-FDFE-43EE-947D-CB39CE5797DA} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {C262F4AD-B8C4-4294-9228-28DB5F5512CE} - System32\Tasks\{A209FB7B-A1E0-46B4-B8E8-4C6AFB57B344} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {C6546009-3C52-4E48-88DB-4CC1061BE96D} - System32\Tasks\{1C4C2723-F3BE-42F6-9A10-3ADF63D895EE} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {C69F9893-9C5F-4F5F-AD92-F56A1932EAC9} - System32\Tasks\{DB2E1E1B-3631-48EB-BBC0-DCE8A16E3F92} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {C86A823F-1497-4F02-A2FD-0636F4D9D1C9} - System32\Tasks\{C704D656-643B-46DB-83B6-EB972A5B2D59} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {C8868AEE-D7BE-48E0-A8FB-4ABA18535BF0} - System32\Tasks\{C9AED139-5906-40BE-9DDE-066F16E5C920} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {C8D8F13B-DCE1-421D-8B3F-AA7AB4460027} - System32\Tasks\{F7BFCC61-287D-48FB-A612-F1C5228E2023} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {C8F86219-1126-41C7-AB9F-66224B16DB5B} - System32\Tasks\{64A9AF82-4712-45BC-91BB-D4644C549B3A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {C95937D2-EB2A-4D3E-BB07-FF419375F4DC} - System32\Tasks\{AA54010B-689C-48B2-BDB0-05FB0E67895D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {C9E53075-F35B-4C25-A335-20BE53B08C17} - System32\Tasks\{C1EB77D1-379B-4A00-82E4-1B0DDEE6A990} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {CC774D4A-D9F5-48F2-B132-6201CF1B8A8F} - System32\Tasks\{DD50C188-69D4-4C44-B191-EA3195151023} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {CD8CCD53-E484-4DF2-9ECE-DEE1ADC6874D} - System32\Tasks\{E9FB953C-0385-4C78-9521-167EEA2405B2} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {CF0A090A-E2C8-4F6A-A464-40CF1BD33DDC} - System32\Tasks\{299DD240-A552-42C1-BC02-4BD61F81EE5C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D05A8118-AB1A-40FF-BE6F-A457144038E7} - System32\Tasks\{D1284AD2-8DF2-4E68-BE27-1B2E035E9891} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D252BF6D-2619-45D8-9E4F-DA22A807EDA5} - System32\Tasks\{8AB55871-3AF7-47E1-888F-07B277134F92} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D25F5727-E0F4-4AA1-A99F-C7A3343F9D93} - System32\Tasks\{CAB6F43F-6144-4C2A-B32D-9F19A6B2B1D5} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D301F0FB-52DD-4401-A2C6-F40E9C780416} - System32\Tasks\{D841BC2E-8349-4E10-82DB-408BD78AB0EE} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D3459D6E-7B5E-4B7F-B91D-94CEF235D4FA} - System32\Tasks\{513123D0-0609-42A0-8F1E-399502A9A8F0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D421D0CD-0EB8-4635-95CF-155BE4781157} - System32\Tasks\{FE341796-9A82-4F7A-AF1C-10754AD7394C} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D573FADC-8ECF-4DA2-8585-511887DAC189} - System32\Tasks\{9946B1A1-31C4-4013-B764-3A59D29ADBCD} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D69B414E-E874-4BFC-BFD5-929673FE8E87} - System32\Tasks\{E3E16448-52BF-4B32-A68C-65A61A955865} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D719516C-4900-4791-A3D5-A65ED2DCC919} - System32\Tasks\{B744259D-6362-4ED8-BF02-CF6B5AFFA66B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D7710362-52DC-477F-8EDB-34817FB8D860} - System32\Tasks\{D924D890-8008-47D0-963B-CF8734C42906} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D89C495D-CC1F-4FA7-ADFF-89CD42A4F5D4} - System32\Tasks\{5114EBF8-AA7D-494C-AF78-AAAF29EE4A8D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {DA94A228-B0FB-4792-8517-03F5B997703F} - System32\Tasks\{63488FAF-A407-4C3C-AFA7-A9BC08CBDB8F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {DABA528F-A0A1-4936-94AF-28593EC598DC} - System32\Tasks\{356CA2D9-A1DD-42B2-9E31-C581EAEF840B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {DB8379DE-E9BE-4F43-BE27-698C8AA1F2A9} - System32\Tasks\{B4583CE9-37E7-44BB-9B15-A15D3C0A0740} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {DB99063F-AA08-4A97-9C5E-8106128A7E87} - System32\Tasks\{BF950CFD-11CB-4B27-80EB-C07FDA081FCA} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {DDD0BDE6-01C7-44F4-9F8F-42EE1F7FEE4C} - System32\Tasks\{91EA52DF-F98A-45FD-A41C-81AF48DB654E} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {DF5D92AC-9839-4735-B6E6-CF568A7EEDBB} - System32\Tasks\{4EBD958B-A504-4FC8-9E5E-55EE0F24676D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {DF78A713-C9ED-46E5-97E3-1CC8C14C35BC} - System32\Tasks\{0E2A304F-7874-43A3-BA85-93F92EC9E046} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {E0E036F7-372A-4E94-AE90-74C79DE16685} - System32\Tasks\{B83A2D7D-6DE6-493E-A435-1960764A8B8C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {E110ED59-DDEF-49CF-81E5-CFA8BB16A50F} - System32\Tasks\{B09A0DEA-B308-4F5F-8E0B-34C81EA882CA} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {E163A231-9742-4887-9BB4-CA192C5743D1} - System32\Tasks\{EC8C06F3-D851-4785-9C38-29A0149BEAF4} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {E25B8DFC-6FD2-48BB-9AD0-0AA641C1B53B} - System32\Tasks\{EA513FDB-6173-4218-BC23-B2EBCB3F51B9} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {E3749FF4-CE93-484A-AA6C-FCA4C5DBA0DD} - System32\Tasks\{C3A2CD5E-99CE-4D50-8C3F-836F91AEDC75} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {E41B3470-6B4E-438A-9B74-5300323F3C9C} - System32\Tasks\{3560A361-D9B6-4F67-BE96-303D9FC903A5} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {E592D5C8-35BB-4B4C-B347-9595391DD56F} - System32\Tasks\{A5D7C1D4-00D4-4454-8B32-4C0E03170365} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {E5B8A55D-C60E-4BAF-A716-64228F3B7B83} - System32\Tasks\{D40F65F1-C0BE-4150-B744-CA56174B3C7A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {E6B8896A-ABAA-44F8-92A5-3EC2251ABEF8} - System32\Tasks\{76CA622A-6DFF-4792-BCFC-3FA57235B232} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {E6E694B1-ABE1-40A1-BE81-AE95FF624668} - System32\Tasks\{81FC9CE1-BC59-4D67-8684-DA707613EAF4} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {E7C0AA05-B8FE-4A9A-AB81-145380339BCC} - System32\Tasks\{3EC10CC2-47F3-4589-9F0C-6796797963B2} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {E945E6D0-FED9-4A14-A2C4-C68456F9C1C7} - System32\Tasks\{018EB2F4-944D-4FAF-83C1-E5E07ABBA6FC} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {E966DFBE-F278-4840-A4F9-FEFF9FC9320B} - System32\Tasks\{14FF8FF8-2939-45B0-B0F0-D34644B1CEC6} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {E9F4C1F8-8AF4-401B-ABB6-BBB6790BD4DB} - System32\Tasks\{890BFFC0-A01E-4B81-B153-BDDD9C3435AA} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {EA0E150F-9494-4D2C-92FD-24D8015C0F3C} - System32\Tasks\{AE3C8C85-CD4D-4997-8968-124245EADEA2} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {EA815BBF-317E-4370-A61A-A5C124EC97E8} - System32\Tasks\{B50C2F47-9E34-4B32-8E34-A27CF964E0EA} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {EB08C6C7-F57B-4147-8CC2-F2BB97FEA4AB} - System32\Tasks\{648F2CB0-136B-4138-8581-0B6C5554FE8E} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {F085927E-E489-4046-95A7-6A0C64C153D1} - System32\Tasks\{BA1EA685-7C3E-4539-8F58-70DD368F9B8B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {F0E9E1B7-4E04-4062-9896-B253500DE5E7} - System32\Tasks\{4A41E6B9-10F9-483B-8D0C-A5E4F536FDA5} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {F7FF6FE9-C343-492B-8AB7-EDC21E2DFC15} - System32\Tasks\{7993D465-DDC3-47F1-9027-6CCE29CABDB3} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {F931ECE9-0F61-4259-A2F1-001725B02F34} - System32\Tasks\EPSON XP-215 217 Series Invitation {DDC38361-039E-4970-8E52-4DAEB0824476} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {F9642572-96D3-4C96-A642-542BEBBFE467} - System32\Tasks\{1110B025-C6D9-4C1F-9902-BBFC67EE0D5C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {FA8343FB-99C4-4CB0-8981-3D6929215440} - System32\Tasks\{F011BEE6-3F45-4E47-98FB-49CFD6E7A7D9} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {FB4C8C05-F697-4FAF-A331-DE2D71EAAB88} - System32\Tasks\{622ACB01-D2F6-47AF-BE3F-3CD21DA3F9E6} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {FD21DFED-CDFE-45CB-A071-019638EFC896} - System32\Tasks\{B200F223-60F3-460B-91A5-446A72A8A5BE} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {FD51DCAB-AC48-4502-92B5-44099AA3D732} - System32\Tasks\{D9338D34-896C-4B6A-9969-7A51ABC3FC96} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {FDAD6CBC-BF14-4D8C-8D95-1380E0C814D6} - System32\Tasks\{4A055680-D446-4173-B7B2-6F07DB451B63} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {FDB84972-6F2A-491B-B350-F28AA22A9D41} - System32\Tasks\{C013051E-980D-48FD-A4AB-8C8C93D93545} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {DDC38361-039E-4970-8E52-4DAEB0824476}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Update {DDC38361-039E-4970-8E52-4DAEB0824476}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3197765660-3329619702-928005083-1001Core.job => C:\Users\Denis\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3197765660-3329619702-928005083-1001UA.job => C:\Users\Denis\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Wise Turbo Checker.job => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe

==================== Loaded Modules (whitelisted) =============

2011-05-24 23:18 - 2011-05-24 23:18 - 00073728 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2011-12-11 19:48 - 2013-02-27 23:04 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2010-11-22 00:42 - 2010-06-09 19:54 - 00206208 _____ () C:\Windows\PLFSetI.exe
2011-05-24 23:18 - 2011-05-24 23:18 - 00103424 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2011-03-14 14:21 - 2011-03-14 14:21 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2011-05-24 23:50 - 2011-05-24 23:50 - 00243712 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2012-08-17 21:39 - 2014-04-18 10:28 - 01310136 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\kpcengine.2.2.dll
2012-08-17 21:38 - 2012-08-17 21:38 - 00479160 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\dblite.dll
2014-03-30 13:17 - 2014-03-30 13:17 - 03642480 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:373E1720
AlternateDataStreams: C:\ProgramData\Temp:888AFB86

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== Disabled items from MSCONFIG ==============

MSCONFIG\Services: Avira.OE.ServiceHost => 2
MSCONFIG\Services: BstHdAndroidSvc => 2
MSCONFIG\Services: BstHdLogRotatorSvc => 2
MSCONFIG\Services: Fax => 3
MSCONFIG\Services: GREGService => 2
MSCONFIG\Services: gusvc => 3
MSCONFIG\Services: Hamachi2Svc => 2
MSCONFIG\Services: IDriverT => 3
MSCONFIG\Services: LMIGuardianSvc => 2
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: NTI IScheduleSvc => 2
MSCONFIG\Services: OverwolfUpdaterService => 3
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^LOLRecorder.lnk => C:\Windows\pss\LOLRecorder.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk => C:\Windows\pss\McAfee Security Scan Plus.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Denis^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MegaCloud Backup.lnk => C:\Windows\pss\MegaCloud Backup.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Denis^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MegaCloud.lnk => C:\Windows\pss\MegaCloud.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Denis^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3.lnk => C:\Windows\pss\OpenOffice.org 3.3.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: Avira Systray => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
MSCONFIG\startupreg: Babylon Client => C:\Program Files (x86)\Babylon\Babylon-Pro\Babylon.exe -AutoStart
MSCONFIG\startupreg: BackupManagerTray => "C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe" -h -k
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: DivXUpdate => "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
MSCONFIG\startupreg: EA Core => "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent
MSCONFIG\startupreg: EADM => "C:\Program Files (x86)\Electronic Arts\EADM\EADMUI\EADMUI.exe"
MSCONFIG\startupreg: ESL Wire => "C:\Program Files\EslWire\wire.exe" --tray
MSCONFIG\startupreg: Facebook Update => "C:\Users\Denis\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
MSCONFIG\startupreg: facemoods => "C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.3\facemoodssrv.exe" /md I
MSCONFIG\startupreg: Google Update => "C:\Users\Denis\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: ICQ => "C:\Program Files (x86)\ICQ7.5\ICQ.exe" silent loginmode=4
MSCONFIG\startupreg: Iminent => C:\Program Files (x86)\Iminent\Iminent.exe /warmup "F77F87E5-A6BD-4922-A530-EDF63D7E9F8C"
MSCONFIG\startupreg: IminentMessenger => C:\Program Files (x86)\Iminent\Iminent.Messengers.exe
MSCONFIG\startupreg: LManager => C:\Program Files (x86)\Launch Manager\LManager.exe
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: msnmsgr => "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
MSCONFIG\startupreg: Norton Online Backup => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
MSCONFIG\startupreg: OKAYFREEDOM_Agent => "C:\Program Files (x86)\OkayFreedom\OkayFreedomClient.exe" -agent
MSCONFIG\startupreg: Overwolf => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
MSCONFIG\startupreg: PDFPrint => C:\Program Files (x86)\PDF24\pdf24.exe
MSCONFIG\startupreg: Remote Control Server => C:\Program Files (x86)\Remote Control Server\Remote Control Server.exe
MSCONFIG\startupreg: RoboForm => "C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
MSCONFIG\startupreg: Shutdown => C:\Program Files (x86)\Shutdown7\Shutdown7.exe /Run
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Sony Ericsson PC Companion => "C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe" /systray /nologon
MSCONFIG\startupreg: Spotify => "C:\Users\Denis\AppData\Roaming\Spotify\spotify.exe" /uri spotify:autostart
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Denis\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\steam.exe" -silent
MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe"
MSCONFIG\startupreg: Ulead AutoDetector v2 => C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\monitor.exe
MSCONFIG\startupreg: VideoWebCamera => "C:\Program Files (x86)\VideoWebCamera\VideoWebCamera.exe" -a

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/19/2014 00:51:05 AM) (Source: Application Hang) (User: )
Description: Programm javaw.exe, Version 7.0.30.5 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1288

Startzeit: 01cf5b588365b4c0

Endzeit: 349

Anwendungspfad: C:\Program Files\Java\jre7\bin\javaw.exe

Berichts-ID: e4c52b2a-c74b-11e3-b5df-06659d31f130

Error: (04/18/2014 04:56:27 PM) (Source: Windows Search Service) (User: )
Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80040d07, "iehistory://{S-1-5-21-3197765660-3329619702-928005083-1001}/">.

Error: (04/18/2014 04:52:54 PM) (Source: Windows Search Service) (User: )
Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80040d07, "iehistory://{S-1-5-21-3197765660-3329619702-928005083-1001}/">.

Error: (04/18/2014 01:27:23 PM) (Source: System Restore) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\msiexec.exe /V; Beschreibung = Removed BlueStacks Notification Center; Fehler = 0x81000101).

Error: (04/18/2014 01:16:11 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 6.1.7601.17567, Zeitstempel: 0x4d6727a7
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x6a636c6a
ID des fehlerhaften Prozesses: 0x1700
Startzeit der fehlerhaften Anwendung: 0xexplorer.exe0
Pfad der fehlerhaften Anwendung: explorer.exe1
Pfad des fehlerhaften Moduls: explorer.exe2
Berichtskennung: explorer.exe3

Error: (04/18/2014 01:12:29 PM) (Source: Application Hang) (User: )
Description: Programm firefox.exe, Version 28.0.0.5186 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1238

Startzeit: 01cf5af67f77b18b

Endzeit: 694

Anwendungspfad: C:\Program Files (x86)\Mozilla Firefox\firefox.exe

Berichts-ID: 49956f16-c6ea-11e3-8751-06659d31f130

Error: (04/18/2014 00:23:37 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 28.0.0.5186, Zeitstempel: 0x53240e37
Name des fehlerhaften Moduls: xul.dll, Version: 28.0.0.5186, Zeitstempel: 0x53240e04
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00184729
ID des fehlerhaften Prozesses: 0x5d8
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3

Error: (04/18/2014 01:55:16 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 6.1.7601.17567, Zeitstempel: 0x4d6727a7
Name des fehlerhaften Moduls: AcXtrnal.DLL, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bd98a
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00216c6a
ID des fehlerhaften Prozesses: 0xf44
Startzeit der fehlerhaften Anwendung: 0xexplorer.exe0
Pfad der fehlerhaften Anwendung: explorer.exe1
Pfad des fehlerhaften Moduls: explorer.exe2
Berichtskennung: explorer.exe3

Error: (04/18/2014 01:47:50 AM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.

Error: (04/18/2014 01:33:44 AM) (Source: MsiInstaller) (User: Denis-PC)
Description: Programm: Kaspersky Internet Security 2013 -- Bevor die Installation fortgesetzt wird, müssen die Programme geschlossen werden, die den Zugriff auf die lokalen Netzwerkeinstellungen sperren. Wenn Sie nicht wissen, um welche Programme es sich handelt, starten Sie den Computer neu.


System errors:
=============
Error: (04/19/2014 11:52:46 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/19/2014 11:47:07 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "HP Network Devices Support" wurde mit folgendem Fehler beendet:
%%126

Error: (04/19/2014 02:15:06 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "HP Network Devices Support" wurde mit folgendem Fehler beendet:
%%126

Error: (04/19/2014 02:12:16 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎19.‎04.‎2014 um 02:09:23 unerwartet heruntergefahren.

Error: (04/19/2014 02:07:45 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (04/19/2014 02:06:18 AM) (Source: DCOM) (User: )
Description: C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}5{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (04/19/2014 01:57:45 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (04/19/2014 01:47:46 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (04/19/2014 01:37:46 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (04/19/2014 01:27:46 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)


Microsoft Office Sessions:
=========================
Error: (04/19/2014 00:51:05 AM) (Source: Application Hang)(User: )
Description: javaw.exe7.0.30.5128801cf5b588365b4c0349C:\Program Files\Java\jre7\bin\javaw.exee4c52b2a-c74b-11e3-b5df-06659d31f130

Error: (04/18/2014 04:56:27 PM) (Source: Windows Search Service)(User: )
Description: 300x80040d07iehistory://{S-1-5-21-3197765660-3329619702-928005083-1001}/

Error: (04/18/2014 04:52:54 PM) (Source: Windows Search Service)(User: )
Description: 300x80040d07iehistory://{S-1-5-21-3197765660-3329619702-928005083-1001}/

Error: (04/18/2014 01:27:23 PM) (Source: System Restore)(User: )
Description: C:\Windows\system32\msiexec.exe /VRemoved BlueStacks Notification Center0x81000101

Error: (04/18/2014 01:16:11 PM) (Source: Application Error)(User: )
Description: explorer.exe6.1.7601.175674d6727a7unknown0.0.0.000000000c00000056a636c6a170001cf5af799b0b2f1C:\Windows\SysWOW64\explorer.exeunknownd889eb01-c6ea-11e3-8751-06659d31f130

Error: (04/18/2014 01:12:29 PM) (Source: Application Hang)(User: )
Description: firefox.exe28.0.0.5186123801cf5af67f77b18b694C:\Program Files (x86)\Mozilla Firefox\firefox.exe49956f16-c6ea-11e3-8751-06659d31f130

Error: (04/18/2014 00:23:37 PM) (Source: Application Error)(User: )
Description: firefox.exe28.0.0.518653240e37xul.dll28.0.0.518653240e04c0000005001847295d801cf5addc95e1188C:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Program Files (x86)\Mozilla Firefox\xul.dll805c61d9-c6e3-11e3-8751-06659d31f130

Error: (04/18/2014 01:55:16 AM) (Source: Application Error)(User: )
Description: explorer.exe6.1.7601.175674d6727a7AcXtrnal.DLL6.1.7600.163854a5bd98ac000000500216c6af4401cf5a987a3de4f7C:\Windows\SysWOW64\explorer.exeC:\Windows\AppPatch\AcXtrnal.DLLb8fa93ec-c68b-11e3-8622-06659d31f130

Error: (04/18/2014 01:47:50 AM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.

Error: (04/18/2014 01:33:44 AM) (Source: MsiInstaller)(User: Denis-PC)
Description: Programm: Kaspersky Internet Security 2013 -- Bevor die Installation fortgesetzt wird, müssen die Programme geschlossen werden, die den Zugriff auf die lokalen Netzwerkeinstellungen sperren. Wenn Sie nicht wissen, um welche Programme es sich handelt, starten Sie den Computer neu.(NULL)(NULL)(NULL)(NULL)(NULL)


CodeIntegrity Errors:
===================================
  Date: 2014-04-18 10:07:23.839
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-04-18 10:07:23.839
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-04-18 10:07:06.523
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-04-18 10:07:06.523
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-04-18 10:06:59.191
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-04-18 10:06:59.191
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-04-18 10:06:58.832
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-04-18 10:06:58.832
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-04-18 10:02:56.474
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-04-18 10:02:56.474
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info ===========================

Percentage of memory in use: 50%
Total physical RAM: 4094.17 MB
Available physical RAM: 2042.5 MB
Total Pagefile: 8186.52 MB
Available Pagefile: 5984.8 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: (Packard Bell) (Fixed) (Total:540.41 GB) (Free:181.08 GB) NTFS
Drive d: (MATHE_SII) (CDROM) (Total:0.31 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596 GB) (Disk ID: 37C837C7)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=540 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=20 GB) - (Type=OF Extended)

==================== End Of Log ============================
Addition.txt

schrauber 19.04.2014 19:41
hi,

Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Fresh_Ducks 19.04.2014 20:50
Code:
Microsoft Windows 7 Ultimate  6.1.7601.1.1252.49.1031.18.4094.2438 [GMT 2:00]
ausgeführt von:: c:\users\Denis\Desktop\ComboFix.exe
AV: Kaspersky Internet Security *Disabled/Updated* {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5}
FW: Kaspersky Internet Security *Disabled* {FB2ABE9A-01A4-4539-FCD2-C7EA1246D49E}
SP: Kaspersky Internet Security *Disabled/Updated* {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\CFLog
c:\cflog\CrashLog_20110102.txt
c:\cflog\CrashLog_20110110.txt
c:\cflog\CrashLog_20110114.txt
c:\cflog\CrashLog_20110211.txt
c:\cflog\CrashLog_20110215.txt
c:\cflog\CrashLog_20110217.txt
c:\cflog\CrashLog_20110412.txt
c:\cflog\CrashLog_20110418.txt
c:\cflog\CrashLog_20110427.txt
c:\cflog\CrashLog_20110516.txt
c:\cflog\CrashLog_20110528.txt
c:\cflog\CrashLog_20111219.txt
c:\cflog\CrashLog_20111222.txt
c:\cflog\EPLog.txt
c:\windows\IsUn0407.exe
c:\windows\SysWow64\tmp5947.tmp
c:\windows\SysWow64\tmp5977.tmp
c:\windows\SysWow64\tmp9FC.tmp
.
.
(((((((((((((((((((((((  Dateien erstellt von 2014-03-19 bis 2014-04-19  ))))))))))))))))))))))))))))))
.
.
2014-04-19 19:43 . 2014-04-19 19:43        --------        d-----w-        c:\users\Mcx1-DENIS-PC\AppData\Local\temp
2014-04-19 19:43 . 2014-04-19 19:43        --------        d-----w-        c:\users\Gast\AppData\Local\temp
2014-04-19 19:43 . 2014-04-19 19:43        --------        d-----w-        c:\users\Default\AppData\Local\temp
2014-04-19 09:55 . 2014-04-19 09:57        --------        d-----w-        C:\FRST
2014-04-19 00:14 . 2014-04-19 00:14        --------        d-----w-        c:\users\Denis\AppData\Local\AMD
2014-04-19 00:12 . 2014-04-19 00:12        --------        d-----w-        c:\programdata\AMD
2014-04-19 00:04 . 2014-04-19 00:05        --------        d-----w-        c:\users\Denis\AppData\Roaming\Wise Auto Shutdown
2014-04-19 00:04 . 2014-04-19 00:05        --------        d-----w-        c:\program files (x86)\PassShow-soft
2014-04-18 22:01 . 2014-04-19 11:24        75888        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{EFCE05C8-9687-4E9B-8F4A-0C1D892B5433}\offreg.dll
2014-04-18 21:59 . 2014-04-18 21:59        --------        d-----w-        c:\programdata\ATI
2014-04-18 21:59 . 2014-04-18 21:59        --------        d-----w-        c:\program files (x86)\AMD APP
2014-04-18 21:57 . 2010-02-18 07:18        46136        ----a-w-        c:\windows\system32\drivers\amdiox64.sys
2014-04-18 21:57 . 2014-04-18 21:57        --------        d-----w-        c:\program files (x86)\ATI Technologies
2014-04-18 21:56 . 2014-04-18 21:56        --------        d-----w-        c:\program files\ATI
2014-04-18 20:00 . 2014-04-19 11:28        --------        d-----w-        c:\users\Denis\AppData\Local\ElevatedDiagnostics
2014-04-18 13:37 . 2014-04-17 03:31        10651704        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{EFCE05C8-9687-4E9B-8F4A-0C1D892B5433}\mpengine.dll
2014-04-18 08:07 . 2014-04-18 08:49        90208        ----a-w-        c:\windows\system32\drivers\klflt.sys
2014-04-17 21:12 . 2014-04-18 08:09        --------        d-----w-        c:\programdata\Kaspersky Lab Setup Files
2014-04-17 18:29 . 2014-04-18 14:53        --------        d-----w-        c:\users\Denis\AppData\Roaming\Winamp
2014-04-17 18:29 . 2014-04-17 18:34        --------        d-----w-        c:\program files (x86)\Winamp
2014-04-17 18:18 . 2014-04-17 18:18        0        ----a-w-        c:\windows\SysWow64\sho48B7.tmp
2014-04-17 14:04 . 2014-04-17 14:04        0        ----a-w-        c:\windows\SysWow64\shoC190.tmp
2014-04-17 12:58 . 2010-03-26 18:44        1721904        ----a-w-        c:\windows\system32\WdfCoInstaller01009.dll
2014-04-17 12:54 . 2014-04-17 12:54        --------        d-----w-        c:\users\Denis\AppData\Roaming\library_dir
2014-04-17 12:52 . 2014-04-17 17:19        --------        d-----w-        c:\program files (x86)\Raptr
2014-04-17 12:46 . 2014-04-17 12:46        --------        d-----w-        C:\Riot Games
2014-04-17 12:34 . 2014-04-17 12:34        --------        d-----w-        c:\program files (x86)\Common Files\Java
2014-04-17 12:33 . 2014-04-17 12:33        96168        ----a-w-        c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-04-16 21:47 . 2014-04-16 21:47        --------        d-----w-        c:\program files (x86)\LogMeIn Hamachi
2014-04-16 03:01 . 2014-04-17 12:35        --------        d-----w-        c:\programdata\Oracle
2014-04-15 18:04 . 2014-04-16 20:34        --------        d-----w-        c:\program files\Microsoft Xbox 360 Accessories
2014-04-15 18:01 . 2014-04-16 20:34        --------        d-----w-        C:\369448b7f3a7ca6d489e710e06c0e4
2014-04-13 03:24 . 2014-04-13 03:24        0        ----a-w-        c:\windows\SysWow64\sho2952.tmp
2014-04-11 09:38 . 2014-04-11 09:38        --------        d-----w-        c:\users\Denis\AppData\Roaming\TERA
2014-04-11 09:38 . 2014-04-11 09:40        --------        d-----w-        c:\program files (x86)\TERA
2014-04-10 21:47 . 2014-04-10 21:47        0        ----a-w-        c:\windows\SysWow64\sho8452.tmp
2014-04-09 15:48 . 2014-02-04 02:35        190912        ----a-w-        c:\windows\system32\drivers\storport.sys
2014-04-09 15:48 . 2014-02-04 02:35        274880        ----a-w-        c:\windows\system32\drivers\msiscsi.sys
2014-04-09 15:48 . 2014-02-04 02:35        27584        ----a-w-        c:\windows\system32\drivers\Diskdump.sys
2014-04-09 15:48 . 2014-02-04 02:28        2048        ----a-w-        c:\windows\system32\iologmsg.dll
2014-04-09 15:48 . 2014-02-04 02:00        2048        ----a-w-        c:\windows\SysWow64\iologmsg.dll
2014-04-09 15:47 . 2014-03-04 09:44        362496        ----a-w-        c:\windows\system32\wow64win.dll
2014-04-09 15:47 . 2014-03-04 09:44        243712        ----a-w-        c:\windows\system32\wow64.dll
2014-04-09 15:47 . 2014-03-04 09:44        13312        ----a-w-        c:\windows\system32\wow64cpu.dll
2014-04-09 15:47 . 2014-03-04 09:44        16384        ----a-w-        c:\windows\system32\ntvdm64.dll
2014-04-09 15:47 . 2014-03-04 09:44        1163264        ----a-w-        c:\windows\system32\kernel32.dll
2014-04-09 15:47 . 2014-03-04 09:17        14336        ----a-w-        c:\windows\SysWow64\ntvdm64.dll
2014-04-09 15:47 . 2014-03-04 09:16        25600        ----a-w-        c:\windows\SysWow64\setup16.exe
2014-04-09 15:47 . 2014-03-04 09:16        5120        ----a-w-        c:\windows\SysWow64\wow32.dll
2014-04-09 15:47 . 2014-03-04 08:09        7680        ----a-w-        c:\windows\SysWow64\instnm.exe
2014-04-09 15:47 . 2014-03-04 08:09        2048        ----a-w-        c:\windows\SysWow64\user.exe
2014-04-09 15:47 . 2014-01-24 02:37        1684928        ----a-w-        c:\windows\system32\drivers\ntfs.sys
2014-04-08 20:25 . 2014-04-08 20:26        --------        d-----w-        c:\users\Denis\AppData\Local\Dataram_Corporation
2014-04-08 20:23 . 2014-04-17 18:03        --------        d-----w-        c:\program files (x86)\RAMDisk
2014-04-06 01:13 . 2014-04-06 01:13        0        ----a-w-        c:\windows\SysWow64\sho98B7.tmp
2014-03-30 10:51 . 2014-04-05 14:28        --------        d-----w-        c:\programdata\RoYalCoeuppoN
2014-03-22 15:22 . 2014-03-30 10:51        --------        d-----w-        c:\programdata\a1e4f9da61eca01b
2014-03-22 15:21 . 2014-04-17 22:30        --------        d-----w-        c:\programdata\eiasytoshOp
2014-03-22 15:05 . 2014-03-22 15:05        --------        d-----w-        c:\users\Denis\AppData\Local\Skype
2014-03-22 15:04 . 2014-03-22 15:04        --------        d-----r-        c:\program files (x86)\Skype
2014-03-21 19:04 . 2014-03-21 19:04        --------        d-----w-        C:\found.000
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-04-18 08:49 . 2012-08-13 14:49        178448        ----a-w-        c:\windows\system32\drivers\kneps.sys
2014-04-18 08:49 . 2012-06-08 09:38        54368        ----a-w-        c:\windows\system32\drivers\kltdi.sys
2014-04-18 08:49 . 2012-10-25 10:42        29280        ----a-w-        c:\windows\system32\drivers\klmouflt.sys
2014-04-18 08:49 . 2012-10-25 10:42        29280        ----a-w-        c:\windows\system32\drivers\klkbdflt.sys
2014-04-18 08:49 . 2012-06-19 15:28        458336        ----a-w-        c:\windows\system32\drivers\kl1.sys
2014-04-10 16:07 . 2012-05-24 20:57        90655440        ----a-w-        c:\windows\system32\MRT.exe
2014-03-31 07:35 . 2010-12-24 18:04        270496        ------w-        c:\windows\system32\MpSigStub.exe
2014-03-15 14:44 . 2012-04-08 08:36        71048        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-03-15 14:44 . 2012-04-08 08:36        692616        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe
2014-03-04 09:17 . 2014-04-09 15:47        44032        ----a-w-        c:\windows\apppatch\acwow64.dll
2014-02-27 23:50 . 2014-02-27 23:50        0        ----a-w-        c:\windows\SysWow64\sho80F.tmp
2014-02-25 15:00 . 2014-02-25 15:00        0        ----a-w-        c:\windows\SysWow64\sho2EB0.tmp
2014-02-07 01:23 . 2014-03-15 13:51        3156480        ----a-w-        c:\windows\system32\win32k.sys
2014-02-04 02:32 . 2014-03-15 13:51        1424384        ----a-w-        c:\windows\system32\WindowsCodecs.dll
2014-02-04 02:32 . 2014-03-15 13:51        624128        ----a-w-        c:\windows\system32\qedit.dll
2014-02-04 02:04 . 2014-03-15 13:51        1230336        ----a-w-        c:\windows\SysWow64\WindowsCodecs.dll
2014-02-04 02:04 . 2014-03-15 13:51        509440        ----a-w-        c:\windows\SysWow64\qedit.dll
2014-01-29 22:11 . 2012-10-24 20:37        893552        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
2014-01-29 22:11 . 2012-10-24 20:37        42168        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
2014-01-29 02:32 . 2014-03-15 13:51        484864        ----a-w-        c:\windows\system32\wer.dll
2014-01-29 02:06 . 2014-03-15 13:51        381440        ----a-w-        c:\windows\SysWow64\wer.dll
2014-01-28 02:32 . 2014-03-15 13:51        228864        ----a-w-        c:\windows\system32\wwansvc.dll
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54        131248        ----a-w-        c:\users\Denis\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54        131248        ----a-w-        c:\users\Denis\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54        131248        ----a-w-        c:\users\Denis\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54        131248        ----a-w-        c:\users\Denis\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AVP"="c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe" [2014-04-18 356128]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-05-24 336384]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS;c:\windows\SYSNATIVE\drivers\AmUStor.SYS [x]
R3 androidusb;ADB Interface Driver;c:\windows\system32\Drivers\androidusb.sys;c:\windows\SYSNATIVE\Drivers\androidusb.sys [x]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
R3 BEService;BattlEye Service;c:\program files (x86)\Common Files\BattlEye\BEService.exe;c:\program files (x86)\Common Files\BattlEye\BEService.exe [x]
R3 cpuz136;cpuz136;c:\users\Denis\AppData\Local\Temp\cpuz136\cpuz136_x64.sys;c:\users\Denis\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [x]
R3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys;c:\windows\SYSNATIVE\DRIVERS\dc3d.sys [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 dump_wmimmc;dump_wmimmc;c:\program files\gPotato.eu\FlyFF\GameGuard\dump_wmimmc.sys;c:\program files\gPotato.eu\FlyFF\GameGuard\dump_wmimmc.sys [x]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x]
R3 ESLvnic1;ESLvnic Virtual Network 64 Bit;c:\windows\system32\DRIVERS\ESLvnic.sys;c:\windows\SYSNATIVE\DRIVERS\ESLvnic.sys [x]
R3 MotioninJoyXFilter;MotioninJoy Virtual Xinput device Filter Driver;c:\windows\system32\DRIVERS\MijXfilt.sys;c:\windows\SYSNATIVE\DRIVERS\MijXfilt.sys [x]
R3 nmwcdnsux64;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsux64.sys;c:\windows\SYSNATIVE\drivers\nmwcdnsux64.sys [x]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des;c:\windows\SYSNATIVE\GameMon.des [x]
R3 PCDSRVC{EDD8E36B-2972E254-06020101}_0;PCDSRVC{EDD8E36B-2972E254-06020101}_0 - PCDR Kernel Mode Service Helper Driver;c:\users\denis\appdata\local\temp\mrkltubopm8z\pcdrdiag\bin\pcdsrvc_x64.pkms;c:\users\denis\appdata\local\temp\mrkltubopm8z\pcdrdiag\bin\pcdsrvc_x64.pkms [x]
R3 phaudlwr;Philips Audio Filter;c:\windows\system32\DRIVERS\phaudlwr.sys;c:\windows\SYSNATIVE\DRIVERS\phaudlwr.sys [x]
R3 pwdrvio;pwdrvio;c:\windows\system32\pwdrvio.sys;c:\windows\SYSNATIVE\pwdrvio.sys [x]
R3 pwdspio;pwdspio;c:\windows\system32\pwdspio.sys;c:\windows\SYSNATIVE\pwdspio.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 s1018bus;Sony Ericsson Device 1018 driver (WDM);c:\windows\system32\DRIVERS\s1018bus.sys;c:\windows\SYSNATIVE\DRIVERS\s1018bus.sys [x]
R3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s1018mdfl.sys;c:\windows\SYSNATIVE\DRIVERS\s1018mdfl.sys [x]
R3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s1018mdm.sys;c:\windows\SYSNATIVE\DRIVERS\s1018mdm.sys [x]
R3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s1018mgmt.sys;c:\windows\SYSNATIVE\DRIVERS\s1018mgmt.sys [x]
R3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS);c:\windows\system32\DRIVERS\s1018nd5.sys;c:\windows\SYSNATIVE\DRIVERS\s1018nd5.sys [x]
R3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s1018obex.sys;c:\windows\SYSNATIVE\DRIVERS\s1018obex.sys [x]
R3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM);c:\windows\system32\DRIVERS\s1018unic.sys;c:\windows\SYSNATIVE\DRIVERS\s1018unic.sys [x]
R3 SPC520;Philips SPC520NC PC Camera;c:\windows\system32\drivers\SPC520.sys;c:\windows\SYSNATIVE\drivers\SPC520.sys [x]
R3 SPC520m;Philips SPC520NC PC Cameram;c:\windows\system32\drivers\SPC520m.sys;c:\windows\SYSNATIVE\drivers\SPC520m.sys [x]
R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 WSDScan;WSD-Scanunterstützung durch UMB;c:\windows\system32\DRIVERS\WSDScan.sys;c:\windows\SYSNATIVE\DRIVERS\WSDScan.sys [x]
R3 X6va003;X6va003;c:\users\Denis\AppData\Local\Temp\0035508.tmp;c:\users\Denis\AppData\Local\Temp\0035508.tmp [x]
R3 X6va005;X6va005;c:\users\Denis\AppData\Local\Temp\005B08B.tmp;c:\users\Denis\AppData\Local\Temp\005B08B.tmp [x]
R3 X6va006;X6va006;c:\users\Denis\AppData\Local\Temp\00674F1.tmp;c:\users\Denis\AppData\Local\Temp\00674F1.tmp [x]
R3 X6va007;X6va007;c:\users\Denis\AppData\Local\Temp\007DB80.tmp;c:\users\Denis\AppData\Local\Temp\007DB80.tmp [x]
R3 X6va012;X6va012;c:\windows\SysWOW64\Drivers\X6va012;c:\windows\SysWOW64\Drivers\X6va012 [x]
R4 Avira.OE.ServiceHost;Avira Service Host;c:\program files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe;c:\program files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [x]
R4 GREGService;GREGService;c:\program files (x86)\Packard Bell\Registration\GREGsvc.exe;c:\program files (x86)\Packard Bell\Registration\GREGsvc.exe [x]
R4 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]
R4 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [x]
R4 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe;c:\program files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe [x]
R4 OverwolfUpdaterService;Overwolf Updater Service;c:\program files (x86)\Overwolf\OverwolfUpdater.exe;c:\program files (x86)\Overwolf\OverwolfUpdater.exe [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys;c:\windows\SYSNATIVE\DRIVERS\klim6.sys [x]
S1 klpd;klpd;c:\windows\system32\DRIVERS\klpd.sys;c:\windows\SYSNATIVE\DRIVERS\klpd.sys [x]
S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys;c:\windows\SYSNATIVE\DRIVERS\kltdi.sys [x]
S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys;c:\windows\SYSNATIVE\DRIVERS\kneps.sys [x]
S2 {B154377D-700F-42cc-9474-23858FBDF4BD};Power Control [2011/04/25 19:13];c:\program files (x86)\CyberLink\PowerDVD9\000.fcl;c:\program files (x86)\CyberLink\PowerDVD9\000.fcl [x]
S2 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8;c:\program files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe;c:\program files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
S2 ePowerSvc;Acer ePower Service;c:\program files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe;c:\program files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [x]
S2 EPSON_PM_RPCV4_06;EPSON V3 Service4(06);c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE;c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE [x]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]
S2 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [x]
S2 Updater Service;Updater Service;c:\program files\Packard Bell\Packard Bell Updater\UpdaterService.exe;c:\program files\Packard Bell\Packard Bell Updater\UpdaterService.exe [x]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys;c:\windows\SYSNATIVE\DRIVERS\k57nd60a.sys [x]
S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys;c:\windows\SYSNATIVE\DRIVERS\klkbdflt.sys [x]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys;c:\windows\SYSNATIVE\DRIVERS\klmouflt.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
iissvcs        REG_MULTI_SZ          w3svc was
apphost        REG_MULTI_SZ          apphostsvc
.
Inhalt des "geplante Tasks" Ordners
.
2014-04-19 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-08 14:44]
.
2014-04-19 c:\windows\Tasks\EPSON XP-215 217 Series Invitation {DDC38361-039E-4970-8E52-4DAEB0824476}.job
- c:\windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2014-03-02 02:42]
.
2014-04-19 c:\windows\Tasks\EPSON XP-215 217 Series Update {DDC38361-039E-4970-8E52-4DAEB0824476}.job
- c:\windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2014-03-02 02:42]
.
2014-04-19 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3197765660-3329619702-928005083-1001Core.job
- c:\users\Denis\AppData\Local\Google\Update\GoogleUpdate.exe [2010-12-24 17:48]
.
2014-04-19 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3197765660-3329619702-928005083-1001UA.job
- c:\users\Denis\AppData\Local\Google\Update\GoogleUpdate.exe [2010-12-24 17:48]
.
2014-04-19 c:\windows\Tasks\Wise Turbo Checker.job
- c:\program files (x86)\Wise\Wise Care 365\WiseTurbo.exe [2013-05-18 14:40]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54        164016        ----a-w-        c:\users\Denis\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54        164016        ----a-w-        c:\users\Denis\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54        164016        ----a-w-        c:\users\Denis\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54        164016        ----a-w-        c:\users\Denis\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PLFSetI"="c:\windows\PLFSetI.exe" [2010-06-09 206208]
"AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2010-06-10 324608]
"Acer ePower Management"="c:\program files\Packard Bell\Packard Bell Power Management\ePowerTray.exe" [2010-06-11 861216]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-07-29 11101800]
"Windows Mobile Device Center"="c:\windows\WindowsMobile\wmdc.exe" [2007-05-31 660360]
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = about:blank
uLocal Page = c:\windows\system32\blank.htm
uDefault_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1393793096&from=cor&uid=WDCXWD6400BEVT-22A0RT0_WD-WXK1E50CNH90CNH90&q={searchTerms}
mStart Page = about:blank
mDefault_Page_URL = about:blank
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
mSearchAssistant = hxxp://www.bing.com/search?q={searchTerms}
mCustomizeSearch = hxxp://www.bing.com/search?q={searchTerms}
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Free YouTube Download - c:\users\Denis\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm
IE: Zu Evernote 4 hinzufügen - c:\program files (x86)\Evernote\Evernote\IE8Clipper\EvernoteIE.dll/204
IE: {{7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - c:\program files (x86)\ICQ7.5\ICQ.exe
FF - ProfilePath - c:\users\Denis\AppData\Roaming\Mozilla\Firefox\Profiles\zbgm8hif.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/
FF - prefs.js: keyword.URL - hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbHdKIqgRJyMidKuvnhDCvIAbTsWW_5EYIVwGKlmSHwltWaYTEdTn_YSWG81a6DAssZqMY9-xY2rgspsXqdzQv4xdp8G9_jfbpL2IHpqRMN2tDsDBv0zGxugKwNkejt5eStjHMUsPVZ-knc12PPJkzRUyGruNlPU_KVCev0ykFKW7kc96g,,&q=
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
URLSearchHooks-{9565115d-c7d6-46d3-bd63-b67b481a4368} - (no file)
BHO-{a6c63b7f-2171-47fa-ab34-e64c4737169d} - (no file)
Toolbar-Locked - (no file)
Toolbar-Locked - (no file)
WebBrowser-{9565115D-C7D6-46D3-BD63-B67B481A4368} - (no file)
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\PCDSRVC{EDD8E36B-2972E254-06020101}_0]
"ImagePath"="\??\c:\users\denis\appdata\local\temp\mrkltubopm8z\pcdrdiag\bin\pcdsrvc_x64.pkms"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\X6va003]
"ImagePath"="\??\c:\users\Denis\AppData\Local\Temp\0035508.tmp"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\X6va005]
"ImagePath"="\??\c:\users\Denis\AppData\Local\Temp\005B08B.tmp"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\X6va006]
"ImagePath"="\??\c:\users\Denis\AppData\Local\Temp\00674F1.tmp"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\X6va007]
"ImagePath"="\??\c:\users\Denis\AppData\Local\Temp\007DB80.tmp"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\X6va012]
"ImagePath"="\??\c:\windows\SysWOW64\Drivers\X6va012"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\{B154377D-700F-42cc-9474-23858FBDF4BD}]
"ImagePath"="\??\c:\program files (x86)\CyberLink\PowerDVD9\000.fcl"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-3197765660-3329619702-928005083-1001\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:f4,26,9c,57,05,21,55,66,04,a7,13,b3,2e,83,ae,a3,11,97,c4,80,95,20,ff,
  a4,6a,20,fd,b5,8a,3d,b5,69,73,5b,9c,f9,32,ec,85,2b,a5,17,ed,6b,21,10,f7,65,\
"??"=hex:41,e0,42,8c,cf,55,c7,95,2b,14,4d,f8,66,7b,0c,1b
.
[HKEY_USERS\S-1-5-21-3197765660-3329619702-928005083-1001\Software\SecuROM\License information*]
"datasecu"=hex:4b,93,07,98,03,6b,7e,e0,1b,54,dd,a6,8c,e1,a2,e7,23,e1,cc,75,bb,
  96,31,5d,ea,7d,3d,9c,dd,28,ae,64,80,6f,45,cf,11,b7,12,77,d5,98,71,70,9c,17,\
"rkeysecu"=hex:7d,40,10,cb,c7,39,e0,67,0a,69,a8,47,07,da,5b,5c
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_77_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_77_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_77_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_77_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.12"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Windows CE Services]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
  00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-04-19  21:47:29
ComboFix-quarantined-files.txt  2014-04-19 19:47
.
Vor Suchlauf: 19 Verzeichnis(se), 194.059.972.608 Bytes frei
Nach Suchlauf: 25 Verzeichnis(se), 194.212.237.312 Bytes frei
.
- - End Of File - - F97DA7C66D24CCE3601ACDA005A0AFA0
A36C5E4F47E84449FF07ED3517B43A31
Kein Meckern wegen Antivirenprogrammen seitens combofix

schrauber 20.04.2014 18:07
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

Fresh_Ducks 21.04.2014 00:38
Gut, werde die Scans mal machen. Ergebnisse kommen gegen Wochenende. Bin bis dahin leider verhindert.

Schonmal Danke für die Hilfe !

schrauber 21.04.2014 20:36
ok :)

Fresh_Ducks 26.04.2014 19:03
Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 26.04.2014
Suchlauf-Zeit: 19:31:30
Logdatei: logfile mam.txt
Administrator: Ja

Version: 2.00.1.1004
Malware Datenbank: v2014.04.26.03
Rootkit Datenbank: v2014.03.27.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Chameleon: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer:

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 384333
Verstrichene Zeit: 2 Std, 9 Min, 19 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Tiefer Rootkit-Suchlauf: Aktiviert
Shuriken: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 3
PUP.Optional.HelperBar.A, C:\Users\Denis\AppData\Roaming\Mozilla\Firefox\Profiles\zbgm8hif.default\prefs.js, Gut: (), Schlecht: (user_pref("keyword.URL", "hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbHdKIqgRJyMidKuvnhDCvIAbTsWW_5EYIVwGKlmSHwltWaYTEdTn_YSWG81a6DAssZqMY9-xY2rgspsXqdzQv4xdp8G9_jfbpL2IHpqRMN2tDsDBv0zGxugKwNkejt5eStjHMUsPVZ-knc12PPJkzRUyGruNlPU_KVCev0ykFKW7kc96g,,&q=");), ,[40c0ac5429d7ec14defeaead27ddad53]
PUP.Optional.Conduit.A, C:\Users\Denis\AppData\Roaming\Mozilla\Firefox\Profiles\zbgm8hif.default\prefs.js, Gut: (), Schlecht: (user_pref("CT2269050.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&q=");), ,[80806c94f20eac54c2cfb1ab679d12ee]
PUP.Optional.Conduit.A, C:\Users\Denis\AppData\Roaming\Mozilla\Firefox\Profiles\zbgm8hif.default\prefs.js, Gut: (), Schlecht: (user_pref("CT2418376.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2418376&q=");), ,[1fe1e21eb84821df93fe76e692723dc3]

Physische Sektoren: 0
(No malicious items detected)


(end)
MBAM.txt

Code:
# AdwCleaner v3.203 - Bericht erstellt am 26/04/2014 um 19:38:04
# Aktualisiert 26/04/2014 von Xplode
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits)
# Benutzername : Denis - DENIS-PC
# Gestartet von : C:\Users\Denis\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\ICQ\ICQToolbar
Ordner Gelöscht : C:\ProgramData\Iminent
Ordner Gelöscht : C:\ProgramData\WPM
Ordner Gelöscht : C:\ProgramData\RoYalCoeuppoN
Ordner Gelöscht : C:\Program Files (x86)\Babylon
Ordner Gelöscht : C:\Program Files (x86)\Browser Guard
Ordner Gelöscht : C:\Program Files (x86)\ICQ6Toolbar
Ordner Gelöscht : C:\Program Files (x86)\Optimizer Pro
Ordner Gelöscht : C:\Program Files (x86)\Common Files\Umbrella
Ordner Gelöscht : C:\Program Files\Babylon
Ordner Gelöscht : C:\Users\Denis\AppData\Local\eSupport.com
Ordner Gelöscht : C:\Users\Denis\AppData\Local\PackageAware
Ordner Gelöscht : C:\Users\Denis\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\Denis\AppData\LocalLow\facemoods.com
Ordner Gelöscht : C:\Users\Denis\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\Denis\AppData\Roaming\sweet-page
Ordner Gelöscht : C:\Users\Denis\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\Denis\Documents\Optimizer Pro
Ordner Gelöscht : C:\Users\Gast\AppData\Roaming\Iminent
Datei Gelöscht : C:\Windows\SysWOW64\conduitEngine.tmp
Datei Gelöscht : C:\Windows\System32\Tasks\DealPlyUpdate

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\mkcedibhemacmilmkpndpkoidlnmgngg
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\BabylonHelper.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\WLXQuickTimeShellExt.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\facemoods_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\facemoods_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\optimizerpro_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\optimizerpro_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\optprostart_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\optprostart_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_all-video-downloader_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_all-video-downloader_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_bittorrent_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_bittorrent_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_cyberlink-youcam_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_cyberlink-youcam_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_hypercam_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_hypercam_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_simple-shutdown-timer_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_simple-shutdown-timer_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_vegas_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_vegas_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_virtual-dj_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_virtual-dj_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{01994268-3C10-4044-A1EA-7A9C1B739A11}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{6536801B-F50C-449B-9476-093DFD3789E3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{AD25754E-D76C-42B3-A335-2F81478B722F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{7E84186E-B5DE-4226-8A66-6E49C6B511B4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{99066096-8989-4612-841F-621A01D54AD7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{542FA950-C57A-4E17-B3E1-D935DFE15DEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5B035F86-41B5-40F1-AAAD-3D219F30244E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6365AC7B-9920-4D8B-AF5D-3BDFEAC340A8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6A934270-717F-4BC3-BA59-BC9BED47A8D2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{74C012C4-00FB-4F04-9AFB-4AD5449D2018}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{78888F8B-D5E4-43CE-89F5-C8C18223AF64}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{79B13431-CCAC-4097-8889-D0289E5E924F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8B8558F6-DC26-4F39-8417-34B8934AA459}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C8D5C57-3CAD-4CF9-BCAD-F873678DA883}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{981334CB-7B8B-431F-B86D-67B7426B125B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E393F82-2644-4AB6-B994-1AD39D6C59EE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A3A2A5C0-1306-4D1A-A093-9CECA4230002}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C1C2FC43-F042-4F17-AEDB-C5ABF3B42E4B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C58D664A-3DBC-4925-AE74-0382007DF113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F7EC6286-297C-4981-9DCC-FD7F57BC24C9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{12A5F606-B1EC-474C-83ED-95E99FD8058E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{A9CAF365-EA35-45DA-BD8B-2EFA09D374AC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{AD25754E-D76C-42B3-A335-2F81478B722F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A6C63B7F-2171-47FA-AB34-E64C4737169D}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FFDF9EF3-3C3A-4F05-9A6E-5D3B778EC567}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB8}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0BF91075-F457-4A8B-99EF-140B52D2F22A}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{37425600-CB21-49A0-8659-476FBAB0F8E8}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{431FB0E5-2CBB-4602-9FE6-F1D64488ADD7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{542FA950-C57A-4E17-B3E1-D935DFE15DEE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5B035F86-41B5-40F1-AAAD-3D219F30244E}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5C9A230D-70A5-11D5-AFB0-0050DAC67890}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5F339F0B-716F-408F-A627-DEEB5DEB4020}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{6365AC7B-9920-4D8B-AF5D-3BDFEAC340A8}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{6A934270-717F-4BC3-BA59-BC9BED47A8D2}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{74C012C4-00FB-4F04-9AFB-4AD5449D2018}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{78888F8B-D5E4-43CE-89F5-C8C18223AF64}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{79B13431-CCAC-4097-8889-D0289E5E924F}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8911483C-C00A-4183-9FBC-6C9C00946C15}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8B8558F6-DC26-4F39-8417-34B8934AA459}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8C8D5C57-3CAD-4CF9-BCAD-F873678DA883}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{95734BDE-B702-45B9-86E5-27676729F904}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{981334CB-7B8B-431F-B86D-67B7426B125B}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9E393F82-2644-4AB6-B994-1AD39D6C59EE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A3A2A5C0-1306-4D1A-A093-9CECA4230002}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B7EA2226-F876-4BE4-B478-76EBAE2A668A}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C1C2FC43-F042-4F17-AEDB-C5ABF3B42E4B}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C3F058A9-407D-4CD1-8F66-B75605B54B69}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C58D664A-3DBC-4925-AE74-0382007DF113}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D0482C8E-BAEA-4943-911A-B661060F56A7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D54C859C-6066-4F31-8FE0-2AAEDCAE67D7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EFDCAF05-D29C-4D4D-9836-8CDCD606A6B2}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F7EC6286-297C-4981-9DCC-FD7F57BC24C9}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\UpdateStar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gelöscht : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gelöscht : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Schlüssel Gelöscht : HKLM\Software\dt soft\daemon tools toolbar
Schlüssel Gelöscht : HKLM\Software\ICQ\ICQToolbar
Schlüssel Gelöscht : HKLM\Software\supWPM
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP

***** [ Browser ] *****

-\\ Internet Explorer v0.0.0.0

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]

-\\ Mozilla Firefox v28.0 (de)

[ Datei : C:\Users\Denis\AppData\Roaming\Mozilla\Firefox\Profiles\zbgm8hif.default\prefs.js ]

Zeile gelöscht : user_pref("CT2269050.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Zeile gelöscht : user_pref("CT2269050.CTID", "CT2269050");
Zeile gelöscht : user_pref("CT2269050.CurrentServerDate", "7-4-2012");
Zeile gelöscht : user_pref("CT2269050.DialogsAlignMode", "LTR");
Zeile gelöscht : user_pref("CT2269050.DownloadReferralCookieData", "");
Zeile gelöscht : user_pref("CT2269050.EMailNotifierPollDate", "Sat Apr 07 2012 15:10:36 GMT+0200");
Zeile gelöscht : user_pref("CT2269050.FirstServerDate", "12-3-2011");
Zeile gelöscht : user_pref("CT2269050.FirstTime", true);
Zeile gelöscht : user_pref("CT2269050.FirstTimeFF3", true);
Zeile gelöscht : user_pref("CT2269050.FirstTimeSettingsDone", true);
Zeile gelöscht : user_pref("CT2269050.FixPageNotFoundErrors", true);
Zeile gelöscht : user_pref("CT2269050.GroupingServerCheckInterval", 1440);
Zeile gelöscht : user_pref("CT2269050.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Zeile gelöscht : user_pref("CT2269050.Initialize", true);
Zeile gelöscht : user_pref("CT2269050.InitializeCommonPrefs", true);
Zeile gelöscht : user_pref("CT2269050.InstallationAndCookieDataSentCount", 3);
Zeile gelöscht : user_pref("CT2269050.InstallationType", "UnknownIntegration");
Zeile gelöscht : user_pref("CT2269050.InstalledDate", "Sat Mar 12 2011 17:36:03 GMT+0100");
Zeile gelöscht : user_pref("CT2269050.InvalidateCache", false);
Zeile gelöscht : user_pref("CT2269050.IsGrouping", false);
Zeile gelöscht : user_pref("CT2269050.IsMulticommunity", false);
Zeile gelöscht : user_pref("CT2269050.IsOpenThankYouPage", false);
Zeile gelöscht : user_pref("CT2269050.IsOpenUninstallPage", false);
Zeile gelöscht : user_pref("CT2269050.LanguagePackLastCheckTime", "Fri Apr 06 2012 22:04:04 GMT+0200");
Zeile gelöscht : user_pref("CT2269050.LanguagePackReloadIntervalMM", 1440);
Zeile gelöscht : user_pref("CT2269050.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
Zeile gelöscht : user_pref("CT2269050.LastLogin_2.7.2.0", "Sat Apr 07 2012 15:10:37 GMT+0200");
Zeile gelöscht : user_pref("CT2269050.LatestVersion", "3.10.0.1");
Zeile gelöscht : user_pref("CT2269050.Locale", "en");
Zeile gelöscht : user_pref("CT2269050.LoginCache", 4);
Zeile gelöscht : user_pref("CT2269050.MCDetectTooltipHeight", "83");
Zeile gelöscht : user_pref("CT2269050.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Zeile gelöscht : user_pref("CT2269050.MCDetectTooltipWidth", "295");
Zeile gelöscht : user_pref("CT2269050.RadioIsPodcast", false);
Zeile gelöscht : user_pref("CT2269050.RadioLastCheckTime", "Fri Apr 06 2012 22:04:04 GMT+0200");
Zeile gelöscht : user_pref("CT2269050.RadioLastUpdateIPServer", "3");
Zeile gelöscht : user_pref("CT2269050.RadioLastUpdateServer", "129132338014870000");
Zeile gelöscht : user_pref("CT2269050.RadioMediaID", "12473383");
Zeile gelöscht : user_pref("CT2269050.RadioMediaType", "Media Player");
Zeile gelöscht : user_pref("CT2269050.RadioMenuSelectedID", "EBRadioMenu_CT226905012473383");
Zeile gelöscht : user_pref("CT2269050.RadioStationName", "Hotmix%20108");
Zeile gelöscht : user_pref("CT2269050.RadioStationURL", "hxxp://67.202.67.18:8082");
Zeile gelöscht : user_pref("CT2269050.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2269050&octid=EB_ORIGINAL_CTID&SearchSource=1");
Zeile gelöscht : user_pref("CT2269050.SearchFromAddressBarIsInit", true);
Zeile gelöscht : user_pref("CT2269050.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&q=");
Zeile gelöscht : user_pref("CT2269050.SearchInNewTabEnabled", true);
Zeile gelöscht : user_pref("CT2269050.SearchInNewTabIntervalMM", 1440);
Zeile gelöscht : user_pref("CT2269050.SearchInNewTabLastCheckTime", "Fri Apr 06 2012 22:04:03 GMT+0200");
Zeile gelöscht : user_pref("CT2269050.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
Zeile gelöscht : user_pref("CT2269050.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID");
Zeile gelöscht : user_pref("CT2269050.SettingsCheckIntervalMin", 120);
Zeile gelöscht : user_pref("CT2269050.SettingsLastCheckTime", "Sat Apr 07 2012 15:10:36 GMT+0200");
Zeile gelöscht : user_pref("CT2269050.SettingsLastUpdate", "1333626561");
Zeile gelöscht : user_pref("CT2269050.ThirdPartyComponentsInterval", 504);
Zeile gelöscht : user_pref("CT2269050.ThirdPartyComponentsLastCheck", "Fri Apr 06 2012 22:04:02 GMT+0200");
Zeile gelöscht : user_pref("CT2269050.ThirdPartyComponentsLastUpdate", "1312887586");
Zeile gelöscht : user_pref("CT2269050.TrusteLinkUrl", "hxxp://trust.conduit.com/EB_ORIGINAL_CTID");
Zeile gelöscht : user_pref("CT2269050.UserID", "UN57820860042164684");
Zeile gelöscht : user_pref("CT2269050.ValidationData_Toolbar", 2);
Zeile gelöscht : user_pref("CT2269050.WeatherNetwork", "");
Zeile gelöscht : user_pref("CT2269050.WeatherPollDate", "Sat Apr 07 2012 15:10:38 GMT+0200");
Zeile gelöscht : user_pref("CT2269050.WeatherUnit", "C");
Zeile gelöscht : user_pref("CT2269050.alertChannelId", "666138");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e+x305", "247E27413334363379453A3D2A722C797A7E7A3128333B4D474549484C5952594B335E5356432C45333438334A414C546660576364676F6A5E4B766B6E5B445D4B4C504A6259646C787A2[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e,x305", "247E28412F3F3E3779453A3D2A722C797B787D3128333C4748402C574C4F3C253E2C2E2B2F433A454E59505B57676A66426D62455E69543D56444643465B525D66716C216E6B587D73675[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e-x305", "247E2936303C363679453A3D2A722C797A207B3128333D462B554A4D4B4749594D33535D4F432C45333439344A414C565B5E6C656E706C7164736D4D786D705D465F4D4E534D645B66705[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e.:2z527", "247E707571777278333228702A7B797B7B7E30273224262A442B564B4E3B243D2F2D2F2F33433A45373838615D61406A644F38514341424545574E594B4B4B767E727D69207B7224787[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e.x305", "247E2A4137374434337A463B3E2B732D7A7D7C213229343F564654524C474A595A4851505E51523964595C49324B393C3B3E5047525D6C6A6B6F786D68506A6F7171742256227679664F6[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e/x305", "247E2B413536327844393C29712B787C7B773027323E4C4343534E2D585B3C253E2C302E34433A45515862695E675A416C6164513A5341454348584F5A666D7B7C7174726E702174745B2[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e06cg5el8:", "6E6D6E6F6B7471747473");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e06cg5el;8i:k", "247E2D2F226A74737475717A777A7A79242F4B49474F42357D5D5C3D");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e0x305", "247E2C403A407743383B28702A777C757D2F26313E41295547484D515A4E5A59325D5255422B443237303749404B585E685E706E6E6674626E696B4D786D705D465F4D524B51645B66732[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e1x305", "247E2D41313D403279453A3D2A722C7A77797E31283341473E454745482F5A4F523F2841302D2F33463D48566265685C6B675F6D70604873686B58415A4946484B5F56616F7C217D74747[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e2x305", "247E2E3542313D3D393A7B473C3F2C742E79207D3229344356554E472E594E51325E4F412A4335373231483F4A59655F5F626C5B717369756975744D786D70517E6B60496252505451675[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e3x305", "247E2F413F3B36333F47463F7D493E412E76307E222421352C37474B59574B4A4858584E5E3762573A535E49324B3A3D3F3B504752626C625D75786D766A7C517C7174614A63525557526[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e4x305", "247E302C407642373A276F29777B74762E2530413E4F494A522B55553A233C2B2F282941384354515E5D56615F56685C426D6265523B544346494A59505B6C697A7E21702370765925797[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e5x305", "247E3136422B7743383B28702A79757A772F2631434B3D49564A50592E594E314A55402942322E332F473E495B5D595A6A5E58707262674974696C59425B4B474B51605762747C2473737[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e6x305", "247E322C3E32323238453E7C483D402D752F7E7B2424342B364953545259585A5A50524E36615659462F4838353D3C4D444F626C6D6B72716A77614D786D705D465F4F4C5451645B66797[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e7x305", "247E333D2C3F3E3F79453A3D2A722C7B7A797A312833474745445159575B504B504B4D5E545553533A655A5D4A334C3C3B3A3951485367756363677575676B65527D7275624B645453515[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e8x305", "247E343D3F3B35373B3F367C47472C742E7E782332293449565540472E594E513E274030323533453C475C5558636A656E625E6C616B7068734B766B6E5B445D4D4F524F6259647927252[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e9x305", "247E35332C3F327844393C29712B7B757979302732484C4F4F44504C4754585C5048345F5457442D46373135344B424D636B5D5F5F73696B4A756A6D5A435C4D474B4961586379226F742[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e:x305", "247E36333B38327844393C29712B7B76797A30273249485545442C574C4F3C253E2F2A2D2D433A455C67555B5E3F6A5F624F3851423D403F564D586F7A68786C717154207477644D66575[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e;x305", "247E373F333F3738422F7B473C3F2C742E7E7A7A22332A354D462C574C4F3C253E2F2B2B31433A455D6356575C5C5A416C6164513A5344404045584F5A7273717A786D2256227679664F6[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e<x305", "247E38343030442F463644377D493E412E7630217D2426352C37502E4F4747315C5154412A4334313738483F4A635F5A6A645E625A4772676A5740594A474D4D5E55607971246E7778257[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e=x305", "247E3933363F41413739357C483D402D752F207E2022342B36505459574C554F515B345F5457442D46373637384B424D676B706E606F61666B63664D786D705D465F504F5050645B66212[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e>x305", "247E3A41363F323238387B473C3F2C742E7E20217C332A35504F5346482F5A4F523F28413233342F463D48635C5D66626A436E6366533C55464748425A515C77707773202371215925797[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e?x305", "247E3B2D2F2F334134403A3A7D494C2D752F2023207E342B3652504C5249555256525C35605558452E47383B38364C434E6A706F5F65635D736F677578684C65706B54207477644D66575[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7e@x305", "247E3C40422B7743383B28702A7B767E782F26314E52543D2A554A2D46513C253E302B332C433A45626756516259655F5F436E63465F6A553E5749444C445C535E7B21747C7821745A267[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7eax305", "247E3D3D37387743383B28702A7B7A757E2F26314F4F544A52404548564F58315C5154412A4335342F37483F4A68646B645D5E626462616D6971726B6C786A517C7174614A6355544F566[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7ebe3g=;d9n9=d", "372C2D326975762E3A3C7B3A39434A494841434B265146492965504656496571734D334B57");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7ebx305", "247E3E393141303D33454036327E4A3F422F77317B7D23352C37565949484E4F51525C4E4C55535B54605A5A3E695E614E37503B3D41544B567575656D7367796D6D7C55217578654E675[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7ecx305", "247E3F3D303043312E7A463B3E2B732D7B207E3128335351565551575A4F584C5E335E5356432C4534383649404B6B59566C686B46716669563F58474B485C535E7E6C6956227679664F6[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7edx305", "247E4035422A363879453A3D2A722C7D202F26315247543C484A2C574C2F48533E27403233433A45665B68505C5E406B6E4F38514343544B56776C79616D6F517C71547873634C6557566[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b+7etx305", "247E6E2F2E3B323342357B44392B732D7A7B7B7C322934215642542D584D503D263F2D2E2E2E443B4635645E6669595C6062686F5C7363716F696467764F7A6F725F48614F50504F665D6[...]
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b-0?3g>d", "3B3A6B70426E40447A74797247204A49497C257C217C212A2621552227592A2A295B602D");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b-0?3g@6:5;", "");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b-0?3gfa7ef", "2B2E2C3D");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b-3=3eccja=f>", "247E333D2C452F4135276F292A212C393D44307832332A354448584C3A232E333E58604F6456604F6852645858635E604E376B7167617059");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b/>01=9a6k6<im;krie@pdawm", "6A696B7273747576");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b3=>@44i48?", "372C2D326975763342363341484778213F3E484F4E4D4648502B564B4E2E5959595F4C564F3764535750");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b5ba==9cjag", "3E3F703C6B7473747A7672737A464B75767B7B227A");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b6b11g4c56b>f;p;anr@p", "6E6D6E6F6B747174746F777979");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b9643g3/9e", "6A");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b<:222h64<", "393F352F3E");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b=+03eh8h8j?:", "4443");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b?+e2a52d8", "372C2D326975762E3A3C7B3A39434A494841434B2651464929655046566470727951555E5E52");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9b?b0d:8aj62<h", "6D");
Zeile gelöscht : user_pref("CT2269050.backendstorage./9ba@0<0bi6a7gn:6@l?", "6E6B");
Zeile gelöscht : user_pref("CT2269050.backendstorage.shoppingapp.gk.exipres", "");
Zeile gelöscht : user_pref("CT2269050.backendstorage.shoppingapp.gk.geolocation", "");
Zeile gelöscht : user_pref("CT2269050.clientLogIsEnabled", true);
Zeile gelöscht : user_pref("CT2269050.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Zeile gelöscht : user_pref("CT2269050.myStuffEnabled", true);
Zeile gelöscht : user_pref("CT2269050.myStuffPublihserMinWidth", 400);
Zeile gelöscht : user_pref("CT2269050.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
Zeile gelöscht : user_pref("CT2269050.myStuffServiceIntervalMM", 1440);
Zeile gelöscht : user_pref("CT2269050.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
Zeile gelöscht : user_pref("CT2269050.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Zeile gelöscht : user_pref("CT2418376.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Zeile gelöscht : user_pref("CT2418376.CTID", "CT2418376");
Zeile gelöscht : user_pref("CT2418376.CurrentServerDate", "5-8-2011");
Zeile gelöscht : user_pref("CT2418376.DialogsAlignMode", "LTR");
Zeile gelöscht : user_pref("CT2418376.DownloadReferralCookieData", "");
Zeile gelöscht : user_pref("CT2418376.ExternalComponentPollDate5694225620172914022", "Fri Aug 05 2011 20:11:09 GMT+0200");
Zeile gelöscht : user_pref("CT2418376.FirstServerDate", "5-5-2011");
Zeile gelöscht : user_pref("CT2418376.FirstTime", true);
Zeile gelöscht : user_pref("CT2418376.FirstTimeFF3", true);
Zeile gelöscht : user_pref("CT2418376.FirstTimeSettingsDone", true);
Zeile gelöscht : user_pref("CT2418376.FixPageNotFoundErrors", true);
Zeile gelöscht : user_pref("CT2418376.GroupingServerCheckInterval", 1440);
Zeile gelöscht : user_pref("CT2418376.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Zeile gelöscht : user_pref("CT2418376.Initialize", true);
Zeile gelöscht : user_pref("CT2418376.InitializeCommonPrefs", true);
Zeile gelöscht : user_pref("CT2418376.InstallationAndCookieDataSentCount", 3);
Zeile gelöscht : user_pref("CT2418376.InstallationType", "UnknownIntegration");
Zeile gelöscht : user_pref("CT2418376.InstalledDate", "Thu May 05 2011 06:31:57 GMT+0200");
Zeile gelöscht : user_pref("CT2418376.IsGrouping", false);
Zeile gelöscht : user_pref("CT2418376.IsMulticommunity", false);
Zeile gelöscht : user_pref("CT2418376.IsOpenThankYouPage", false);
Zeile gelöscht : user_pref("CT2418376.IsOpenUninstallPage", true);
Zeile gelöscht : user_pref("CT2418376.LanguagePackLastCheckTime", "Fri Aug 05 2011 20:11:12 GMT+0200");
Zeile gelöscht : user_pref("CT2418376.LanguagePackReloadIntervalMM", 1440);
Zeile gelöscht : user_pref("CT2418376.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
Zeile gelöscht : user_pref("CT2418376.LastLogin_2.7.2.0", "Fri Aug 05 2011 20:11:11 GMT+0200");
Zeile gelöscht : user_pref("CT2418376.LatestVersion", "3.3.5.1");
Zeile gelöscht : user_pref("CT2418376.Locale", "en");
Zeile gelöscht : user_pref("CT2418376.LoginCache", 4);
Zeile gelöscht : user_pref("CT2418376.MCDetectTooltipHeight", "83");
Zeile gelöscht : user_pref("CT2418376.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Zeile gelöscht : user_pref("CT2418376.MCDetectTooltipWidth", "295");
Zeile gelöscht : user_pref("CT2418376.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2418376&octid=EB_ORIGINAL_CTID&SearchSource=1");
Zeile gelöscht : user_pref("CT2418376.SearchFromAddressBarIsInit", true);
Zeile gelöscht : user_pref("CT2418376.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2418376&q=");
Zeile gelöscht : user_pref("CT2418376.SearchInNewTabEnabled", true);
Zeile gelöscht : user_pref("CT2418376.SearchInNewTabIntervalMM", 1440);
Zeile gelöscht : user_pref("CT2418376.SearchInNewTabLastCheckTime", "Fri Aug 05 2011 20:11:09 GMT+0200");
Zeile gelöscht : user_pref("CT2418376.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
Zeile gelöscht : user_pref("CT2418376.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
Zeile gelöscht : user_pref("CT2418376.SettingsCheckIntervalMin", 120);
Zeile gelöscht : user_pref("CT2418376.SettingsLastCheckTime", "Fri Aug 05 2011 20:11:09 GMT+0200");
Zeile gelöscht : user_pref("CT2418376.SettingsLastUpdate", "1311226770");
Zeile gelöscht : user_pref("CT2418376.ThirdPartyComponentsInterval", 504);
Zeile gelöscht : user_pref("CT2418376.ThirdPartyComponentsLastCheck", "Wed Jul 20 2011 21:16:57 GMT+0200");
Zeile gelöscht : user_pref("CT2418376.ThirdPartyComponentsLastUpdate", "1246786978");
Zeile gelöscht : user_pref("CT2418376.TrusteLinkUrl", "hxxp://trust.conduit.com/EB_ORIGINAL_CTID");
Zeile gelöscht : user_pref("CT2418376.UserID", "UN77885202253500844");
Zeile gelöscht : user_pref("CT2418376.alertChannelId", "812740");
Zeile gelöscht : user_pref("CT2418376.clientLogIsEnabled", false);
Zeile gelöscht : user_pref("CT2418376.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Zeile gelöscht : user_pref("CT2418376.myStuffEnabled", true);
Zeile gelöscht : user_pref("CT2418376.myStuffPublihserMinWidth", 400);
Zeile gelöscht : user_pref("CT2418376.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
Zeile gelöscht : user_pref("CT2418376.myStuffServiceIntervalMM", 1440);
Zeile gelöscht : user_pref("CT2418376.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
Zeile gelöscht : user_pref("CT2418376.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Zeile gelöscht : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://pgcff.pricegong.com/agreement/agree.html#pg_ext_msg_key_207c39cb", "356x332");
Zeile gelöscht : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties");
Zeile gelöscht : user_pref("CommunityToolbar.ToolbarsList", "CT2269050,CT2418376");
Zeile gelöscht : user_pref("CommunityToolbar.ToolbarsList2", "CT2269050,CT2418376");
Zeile gelöscht : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
Zeile gelöscht : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sat Apr 07 2012 15:10:36 GMT+0200");
Zeile gelöscht : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Zeile gelöscht : user_pref("CommunityToolbar.alert.locale", "en");
Zeile gelöscht : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Zeile gelöscht : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Fri Apr 06 2012 22:04:01 GMT+0200");
Zeile gelöscht : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1313487611");
Zeile gelöscht : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Zeile gelöscht : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Zeile gelöscht : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Zeile gelöscht : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Zeile gelöscht : user_pref("CommunityToolbar.alert.userId", "{47e93ea7-b660-48b4-bb96-e1746d5eb842}");
Zeile gelöscht : user_pref("extensions.enabledItems", "{7e3a16e0-b1bc-4152-2709-a19698c93988}:1.0,{872b5b88-9db5-4310-bdd0-ac189557e5f5}:2.7.2.0,{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}:6.0.25,plugin@yontoo.com:1.20.00,[...]
Zeile gelöscht : user_pref("extensions.helperbar.BackPageActive", true);
Zeile gelöscht : user_pref("extensions.helperbar.DockingPositionDown", false);
Zeile gelöscht : user_pref("extensions.helperbar.SmartbarDisabled", false);
Zeile gelöscht : user_pref("extensions.helperbar.SmartbarStateMinimaized", false);
Zeile gelöscht : user_pref("extensions.helperbar.Visibility", false);
Zeile gelöscht : user_pref("extensions.helperbar.backPageCapacity", 3);
Zeile gelöscht : user_pref("extensions.helperbar.backPageCounter", 2);
Zeile gelöscht : user_pref("extensions.helperbar.backPageDay", 22);
Zeile gelöscht : user_pref("extensions.helperbar.backPageLastEvent", "1395512910671");
Zeile gelöscht : user_pref("extensions.helperbar.backPageMinInterval", 15);
Zeile gelöscht : user_pref("extensions.helperbar.barcodeid", "94613");
Zeile gelöscht : user_pref("extensions.helperbar.countryiso", "de");
Zeile gelöscht : user_pref("extensions.helperbar.downloadprovider", "ob_103");
Zeile gelöscht : user_pref("extensions.helperbar.externalJsFiles", "");
Zeile gelöscht : user_pref("extensions.helperbar.fromautoupdate", "true");
Zeile gelöscht : user_pref("extensions.helperbar.installationid", "7e3a16e0-b1bc-4152-2709-a19698c93988");
Zeile gelöscht : user_pref("extensions.helperbar.installdate", "24/11/2013");
Zeile gelöscht : user_pref("extensions.helperbar.keepAliveLastevent", "1394901590");
Zeile gelöscht : user_pref("extensions.helperbar.lastExternalJsUpdate", "1395501154648");
Zeile gelöscht : user_pref("extensions.helperbar.publisher", "quickobrw");
Zeile gelöscht : user_pref("extensions.vshare@toolbar.update.enabled", false);
Zeile gelöscht : user_pref("extentions.y2layers.installId", "20e7e2b8-854c-4ccb-85b7-07fe0c36013f");
Zeile gelöscht : user_pref("iminent.LayoutId", "1");
Zeile gelöscht : user_pref("iminent.ShowThankyouPixel", "0");
Zeile gelöscht : user_pref("iminent.adapters", "{\"iminent\":{\"CountryCode\":\"DE\",\"NoAds\":false,\"Status\":1,\"expireTime\":\"1385330034747254706\"},\"musetips\":{\"CountryCode\":\"DE\",\"NoAds\":false,\"Status\"[...]
Zeile gelöscht : user_pref("iminent.newtabredirect", "false");
Zeile gelöscht : user_pref("iminent.registerToolbarEvent109", "1385330196893");
Zeile gelöscht : user_pref("iminent.registerToolbarEvent111", "1385330196907");
Zeile gelöscht : user_pref("iminent.registerToolbarEvent122", "1385330196921");
Zeile gelöscht : user_pref("iminent.registerToolbarEvent140", "1385330139312");
Zeile gelöscht : user_pref("iminent.searchindex", "1");
Zeile gelöscht : user_pref("iminent.version", "7.47.2.1");
Zeile gelöscht : user_pref("iminent.versioning", "{\"CurrentVersion\":\"7.47.2.1\",\"InstallEventCTime\":1385330026933,\"InstallEvent\":\"True\"}");
Zeile gelöscht : user_pref("keyword.URL", "hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbHdKIqgRJyMidKuvnhDCvIAbTsWW_5EYIVwGKlmSHwltWaYTEdTn_YSWG81a6DAssZqMY9-xY2rgspsXqdzQv4xdp8G9_jfbpL2IHpqRMN2tDsDBv0zGxugKwNkejt5eStjH[...]

[ Datei : C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\w61eepg5.default\prefs.js ]

Zeile gelöscht : user_pref("extensions.enabledAddons", "webbooster%40iminent.com:7.47.2.1,%7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:26.0");
Zeile gelöscht : user_pref("iminent.LayoutId", "1");
Zeile gelöscht : user_pref("iminent.adapters", "{\"google\":{\"CountryCode\":\"DE\",\"NoAds\":false,\"Status\":1,\"expireTime\":\"13904013244901814400\"},\"wikipedia\":{\"CountryCode\":\"DE\",\"NoAds\":false,\"Status\[...]
Zeile gelöscht : user_pref("iminent.registerToolbarEvent102", "1390401327914");
Zeile gelöscht : user_pref("iminent.version", "7.47.2.1");
Zeile gelöscht : user_pref("iminent.versioning", "{\"CurrentVersion\":\"7.47.2.1\",\"InstallEventCTime\":1390401304259,\"InstallEvent\":\"True\"}");
Zeile gelöscht : user_pref("browser.search.selectedEngine", "Web Search");

-\\ Google Chrome v

[ Datei : C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht [Extension] : blbkdnmdcafmfhinpmnlhhddbepgkeaa

*************************

AdwCleaner[R0].txt - [50615 octets] - [26/04/2014 19:35:06]
AdwCleaner[S0].txt - [49585 octets] - [26/04/2014 19:38:04]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [49646 octets] ##########
AdwCleaner.txt

Code:
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Ultimate x64
Ran by Denis on 26.04.2014 at 19:46:04,97
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\pricepeep0311_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\pricepeep0311_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\pricepeep0311_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\pricepeep0311_RASMANCS



~~~ Files

Successfully deleted: [File] C:\Windows\syswow64\sho1131.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho22FD.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho255D.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho26D9.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho2952.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho2B55.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho2DBA.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho2EB0.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho3616.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho365B.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho390C.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho3BAB.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho41DA.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho466A.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho488A.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho48B7.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho4E12.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho532E.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho536F.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho555A.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho5572.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho55A0.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho589C.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho5D7F.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho5EC8.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho602A.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho6642.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho6DFE.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho709E.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho7111.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho7300.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho797A.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho7A24.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho7BE5.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho7D0.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho80F.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho8221.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho8452.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho8557.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho88A5.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho8C9.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho94A7.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho9712.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho98B7.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho9C50.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho9CCE.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoA30D.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoA61E.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoB4B5.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoB64B.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoBA4B.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoBCAD.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoBCAF.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoC190.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoC4AA.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoC64.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoC9E4.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoD80F.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoDBE0.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoDD29.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoDF77.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoE49A.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoE4A6.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoE4E3.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoE54F.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoE58F.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoE89A.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoEB41.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoEC05.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoEF40.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoEFDE.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoF048.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoFD11.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoFEC7.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoFFD7.tmp



~~~ Folders

Successfully deleted: [Folder] "C:\Users\Denis\AppData\Roaming\getrighttogo"



~~~ FireFox

Emptied folder: C:\Users\Denis\AppData\Roaming\mozilla\firefox\profiles\zbgm8hif.default\minidumps [9 files]



~~~ Chrome

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\hggpkhijoeadmdfmlbdepfbngmhaldci



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 26.04.2014 at 19:56:56,29
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Jrt.txt


FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-04-2014 03
Ran by Denis (administrator) on DENIS-PC on 26-04-2014 19:58:57
Running from C:\Users\Denis\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Adobe Systems Incorporated) c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Windows\System32\tcpsvcs.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
() C:\Windows\PLFSetI.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Thisisu) C:\Users\Denis\Desktop\JRT.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [PLFSetI] => C:\Windows\PLFSetI.exe [206208 2010-06-09] ()
HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [324608 2010-06-10] (Alcor Micro Corp.)
HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [861216 2010-06-11] (Acer Incorporated)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11101800 2010-07-29] (Realtek Semiconductor)
HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM-x32\...\Run: [AVP] => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356128 2014-04-18] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-05-24] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-3197765660-3329619702-928005083-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKCU - No Name - {724D43A0-0D85-11D4-9908-00400523E39A} -  No File
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\Denis\AppData\Roaming\Mozilla\Firefox\Profiles\zbgm8hif.default
FF NewTab: google.de
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll No File
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Denis\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Denis\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Adblock Plus - C:\Users\Denis\AppData\Roaming\Mozilla\Firefox\Profiles\zbgm8hif.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-17]
FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak [2014-03-30]
FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak [2014-03-30]
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com [2014-04-18]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com [2014-04-18]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com
FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com [2014-04-18]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com [2014-04-18]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com [2014-04-18]

Chrome:
=======
CHR HomePage:
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Denis\AppData\Local\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Denis\AppData\Local\Google\Chrome\Application\33.0.1750.154\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\Denis\AppData\Local\Google\Chrome\Application\33.0.1750.154\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll No File
CHR Plugin: (Battlefield Play4Free Updater) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkejhbcdagodjdndmfnhaibnealjonei\1.0.66.2_0\npBP4FUpdater.dll No File
CHR Plugin: (Battlefield Play4Free Updater) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkejhbcdagodjdndmfnhaibnealjonei\1.0.66.2_0\BP4FUpdater.exe No File
CHR Plugin: (Java Deployment Toolkit 6.0.290.11) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U29) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR Plugin: (Adobe Acrobat) - c:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\1.104.0\npesnlaunch.dll No File
CHR Plugin: (ESN Sonar API) - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll No File
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll No File
CHR Plugin: (DivX Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll No File
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Facebook Desktop) - C:\Users\Denis\AppData\Local\Facebook\Messenger\2.0.4478.0\npFbDesktopPlugin.dll No File
CHR Plugin: (Google Update) - C:\Users\Denis\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll No File
CHR Extension: (Angry Birds) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2011-09-23]
CHR Extension: (Toast Snatcher) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\fajaoajlncmbolmpccmibgjpgmiilbfe [2011-09-24]
CHR Extension: (No Name) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnjbmmemklcjgepojigaapkoodmkgbae [2011-03-20]
CHR Extension: (Keep Running) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\foohbilkkdnmfpecjkhcdiddappljefi [2011-09-23]
CHR Extension: (LineBall) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeclmehkhpookgkhkecnaanahhoglakj [2011-09-24]
CHR Extension: (Google Wallet) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-23]
CHR Extension: (No Name) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2011-03-20]
CHR Extension: (Bowman 2) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocafgnfjehoenphpclkakndfnjnmnejj [2011-09-23]
CHR Extension: (No Name) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\odhbolcphommhmhlljfdfdemgekjjhnd [2014-03-30]
CHR Extension: (Love Calculator) - C:\Users\Denis\AppData\Local\Google\Chrome\User Data\Default\Extensions\oolmcecgdmgibngcbeedeljjadklplag [2011-09-24]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2011-09-24]
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\urladvisor.crx [2012-10-25]
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\online_banking_chrome.crx [2012-10-25]
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\content_blocker_chrome.crx [2012-10-25]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\virtkbd.crx [2012-10-25]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\ab.crx [2012-10-25]
CHR StartMenuInternet: Google Chrome - C:\Users\Denis\AppData\Local\Google\Chrome\Application\chrome.exe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [365568 2011-05-24] (Advanced Micro Devices, Inc.)
S4 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [122448 2014-04-15] (Avira Operations GmbH & Co. KG)
R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356128 2014-04-18] (Kaspersky Lab ZAO)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-07-25] ()
R2 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [868896 2010-06-11] (Acer Incorporated)
R2 EPSON_PM_RPCV4_06; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE [152640 2013-04-30] (SEIKO EPSON CORPORATION)
S4 GREGService; C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe [23584 2010-01-08] (Acer Incorporated)
S4 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-04-08] (LogMeIn, Inc.)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4159984 2010-12-08] (INCA Internet Co., Ltd.)
S4 NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe [255744 2010-06-29] (NewTech Infosystems, Inc.)
S4 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [18360 2013-01-02] (Overwolf Ltd)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-02-27] ()
S2 Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [243232 2010-01-29] (Acer Group)
S2 HPSLPSVC; C:\Users\Denis\AppData\Local\Temp\7zS0752\hpslpsvc64.dll [X]

==================== Drivers (Whitelisted) ====================

S3 androidusb; C:\Windows\System32\Drivers\androidusb.sys [32768 2010-04-29] (Google Inc)
S3 ESLvnic1; C:\Windows\System32\DRIVERS\ESLvnic.sys [25528 2011-04-18] (Turtle Entertainment GmbH)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-04-18] (Kaspersky Lab ZAO)
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [90208 2014-04-18] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [626272 2014-04-18] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-10-17] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2014-04-18] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2014-04-18] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2014-04-18] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2014-04-18] (Kaspersky Lab ZAO)
S3 NPPTNT2; C:\Windows\SysWOW64\npptNT2.sys [4682 2005-01-04] (INCA Internet Co., Ltd.)
S3 phaudlwr; C:\Windows\System32\DRIVERS\phaudlwr.sys [114608 2009-10-20] (Philips Applied Technologies)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19032 2013-03-07] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [9584 2013-03-07] ()
S3 s1018bus; C:\Windows\System32\DRIVERS\s1018bus.sys [113704 2009-03-25] (MCCI Corporation)
S3 s1018mdfl; C:\Windows\System32\DRIVERS\s1018mdfl.sys [19496 2009-03-25] (MCCI Corporation)
S3 s1018mdm; C:\Windows\System32\DRIVERS\s1018mdm.sys [153128 2009-03-25] (MCCI Corporation)
S3 s1018mgmt; C:\Windows\System32\DRIVERS\s1018mgmt.sys [133160 2009-03-25] (MCCI Corporation)
S3 s1018nd5; C:\Windows\System32\DRIVERS\s1018nd5.sys [34856 2009-03-25] (MCCI Corporation)
S3 s1018obex; C:\Windows\System32\DRIVERS\s1018obex.sys [128552 2009-03-25] (MCCI Corporation)
S3 s1018unic; C:\Windows\System32\DRIVERS\s1018unic.sys [146472 2009-03-25] (MCCI Corporation)
S3 SPC520; C:\Windows\System32\drivers\SPC520.sys [579072 2007-10-01] (Philips                                                    )
S3 SPC520m; C:\Windows\System32\drivers\SPC520m.sys [8192 2007-10-01] (Philips                                                    )
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [560184 2012-10-15] (Duplex Secure Ltd.)
R2 {B154377D-700F-42cc-9474-23858FBDF4BD}; C:\Program Files (x86)\CyberLink\PowerDVD9\000.fcl [146928 2010-03-19] (CyberLink Corp.)
S3 ApfiltrService; system32\DRIVERS\Apfiltr.sys [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz136; \??\C:\Users\Denis\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [X]
S3 dump_wmimmc; \??\C:\Program Files\gPotato.eu\FlyFF\GameGuard\dump_wmimmc.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 PCDSRVC{EDD8E36B-2972E254-06020101}_0; \??\c:\users\denis\appdata\local\temp\mrkltubopm8z\pcdrdiag\bin\pcdsrvc_x64.pkms [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 X6va003; \??\C:\Users\Denis\AppData\Local\Temp\0035508.tmp [X]
S3 X6va005; \??\C:\Users\Denis\AppData\Local\Temp\005B08B.tmp [X]
S3 X6va006; \??\C:\Users\Denis\AppData\Local\Temp\00674F1.tmp [X]
S3 X6va007; \??\C:\Users\Denis\AppData\Local\Temp\007DB80.tmp [X]
S3 X6va012; \??\C:\Windows\SysWOW64\Drivers\X6va012 [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-26 19:58 - 2014-04-26 19:58 - 00023174 _____ () C:\Users\Denis\Desktop\FRST.txt
2014-04-26 19:58 - 2014-04-26 19:58 - 00000000 ____D () C:\Users\Denis\Desktop\FRST-OlderVersion
2014-04-26 19:56 - 2014-04-26 19:56 - 00006078 _____ () C:\Users\Denis\Desktop\JRT.txt
2014-04-26 19:46 - 2014-04-26 19:46 - 00000000 ____D () C:\Windows\ERUNT
2014-04-26 19:41 - 2014-04-26 19:41 - 00050071 _____ () C:\Users\Denis\Desktop\AdwCleaner[S0].txt
2014-04-26 19:36 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-04-26 19:35 - 2014-04-26 19:38 - 00000000 ____D () C:\AdwCleaner
2014-04-26 17:22 - 2014-04-26 17:22 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\42BD39F9.sys
2014-04-26 17:22 - 2014-04-26 17:22 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\157958D9.sys
2014-04-26 16:43 - 2014-04-26 16:43 - 01330861 _____ () C:\Users\Denis\Desktop\adwcleaner.exe
2014-04-26 16:43 - 2014-04-26 16:43 - 01016261 _____ (Thisisu) C:\Users\Denis\Desktop\JRT.exe
2014-04-20 22:14 - 2014-04-20 22:14 - 00000552 _____ () C:\Windows\PFRO.log
2014-04-19 21:47 - 2014-04-19 21:47 - 00034640 _____ () C:\ComboFix.txt
2014-04-19 21:27 - 2014-04-19 21:47 - 00000000 ____D () C:\Qoobox
2014-04-19 21:27 - 2014-04-19 21:47 - 00000000 ____D () C:\ComboFix
2014-04-19 21:27 - 2014-04-19 21:45 - 00000000 ____D () C:\Windows\erdnt
2014-04-19 21:27 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-04-19 21:27 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-04-19 21:27 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-04-19 21:27 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-04-19 21:27 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-04-19 21:27 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-04-19 21:27 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-04-19 21:27 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-04-19 21:25 - 2014-04-19 21:26 - 05195329 ____R (Swearware) C:\Users\Denis\Desktop\ComboFix.exe
2014-04-19 11:56 - 2014-04-19 11:57 - 00086464 _____ () C:\Users\Denis\Downloads\Addition.txt
2014-04-19 11:55 - 2014-04-26 19:58 - 00000000 ____D () C:\FRST
2014-04-19 11:55 - 2014-04-19 11:57 - 00057084 _____ () C:\Users\Denis\Downloads\FRST.txt
2014-04-19 11:54 - 2014-04-26 19:58 - 02061824 _____ (Farbar) C:\Users\Denis\Desktop\FRST64.exe
2014-04-19 02:14 - 2014-04-19 02:14 - 00000000 ____D () C:\Users\Denis\AppData\Local\AMD
2014-04-19 02:12 - 2014-04-19 02:12 - 00000000 ____D () C:\ProgramData\AMD
2014-04-19 02:04 - 2014-04-19 02:05 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Wise Auto Shutdown
2014-04-19 02:04 - 2014-04-19 02:05 - 00000000 ____D () C:\Program Files (x86)\PassShow-soft
2014-04-19 02:04 - 2014-04-19 02:04 - 00001188 _____ () C:\Users\Public\Desktop\Wise Auto Shutdown.lnk
2014-04-19 02:04 - 2014-04-19 02:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Auto Shutdown
2014-04-19 02:03 - 2014-04-19 02:03 - 00929416 _____ (CNET Download.com) C:\Users\Denis\Downloads\cbsidlm-cbsi188-Wise_Auto_Shutdown-BP-75755206.exe
2014-04-18 23:59 - 2014-04-18 23:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD VISION Engine Control Center
2014-04-18 23:59 - 2014-04-18 23:59 - 00000000 ____D () C:\ProgramData\ATI
2014-04-18 23:59 - 2014-04-18 23:59 - 00000000 ____D () C:\Program Files (x86)\AMD APP
2014-04-18 23:57 - 2014-04-18 23:57 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2014-04-18 23:57 - 2010-02-18 09:18 - 00046136 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdiox64.sys
2014-04-18 23:56 - 2014-04-18 23:56 - 00000000 ____D () C:\Program Files\ATI
2014-04-18 23:49 - 2014-04-18 23:49 - 00613200 _____ (Chip Digital GmbH) C:\Users\Denis\Downloads\ATI Catalyst Mobility 64 Bit - CHIP-Downloader.exe
2014-04-18 22:05 - 2014-04-18 22:06 - 00385040 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-04-18 20:50 - 2014-04-18 20:50 - 00110808 _____ () C:\Users\Denis\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-18 17:00 - 2014-04-26 19:40 - 00001400 _____ () C:\Windows\setupact.log
2014-04-18 17:00 - 2014-04-18 17:00 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-18 13:15 - 2014-04-18 13:15 - 00003292 _____ () C:\Windows\System32\Tasks\{6B24E018-AF69-4745-8084-7CB4A8017FE7}
2014-04-18 10:10 - 2014-04-18 10:10 - 00002312 _____ () C:\Users\Denis\Desktop\Sicherer Zahlungsverkehr.lnk
2014-04-18 10:08 - 2014-04-18 10:08 - 00001118 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security 2013.lnk
2014-04-18 10:08 - 2014-04-18 10:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security 2013
2014-04-18 10:07 - 2014-04-18 10:49 - 00626272 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-04-18 10:07 - 2014-04-18 10:49 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-04-18 02:06 - 2014-04-26 16:47 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-18 02:05 - 2014-04-18 02:05 - 00001074 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-04-18 02:05 - 2014-04-18 02:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-04-18 02:05 - 2014-04-18 02:05 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-18 02:05 - 2014-04-18 02:05 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-04-18 02:05 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-18 02:05 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-18 02:05 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-04-18 02:04 - 2014-04-18 02:04 - 00613200 _____ (Chip Digital GmbH) C:\Users\Denis\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe
2014-04-18 01:57 - 2014-04-18 01:57 - 00000989 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-04-18 01:55 - 2014-04-18 01:55 - 00613200 _____ (Chip Digital GmbH) C:\Users\Denis\Downloads\CCleaner - CHIP-Downloader(1).exe
2014-04-18 01:52 - 2014-04-18 01:52 - 00613200 _____ (Chip Digital GmbH) C:\Users\Denis\Downloads\CCleaner - CHIP-Downloader.exe
2014-04-17 23:46 - 2014-04-17 23:54 - 135232000 _____ () C:\Users\Denis\Downloads\setup_11.0.1.1245.x01_2014_04_17_23_03.exe
2014-04-17 23:41 - 2014-04-18 01:30 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-04-17 23:41 - 2014-04-18 01:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-04-17 23:41 - 2014-04-17 23:53 - 00000000 ____D () C:\ProgramData\Avira
2014-04-17 23:41 - 2014-04-17 23:41 - 00001109 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-04-17 23:41 - 2014-04-17 23:41 - 00000000 ____D () C:\ProgramData\Package Cache
2014-04-17 23:40 - 2014-04-17 23:40 - 04464280 _____ (Avira Operations GmbH & Co. KG) C:\Users\Denis\Downloads\avira_de_av___ws.exe
2014-04-17 23:14 - 2012-07-11 17:09 - 00064856 _____ (Kaspersky Lab) C:\Windows\system32\klfphc.dll
2014-04-17 23:13 - 2014-04-18 10:07 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-04-17 23:13 - 2014-04-17 23:13 - 00000000 ____D () C:\Windows\ELAMBKUP
2014-04-17 23:12 - 2014-04-18 10:09 - 00000000 ____D () C:\ProgramData\Kaspersky Lab Setup Files
2014-04-17 21:03 - 2014-04-17 21:03 - 00003292 _____ () C:\Windows\System32\Tasks\{E3DAF802-5736-409A-B88F-37F36271399E}
2014-04-17 20:30 - 2014-04-17 20:30 - 00000991 _____ () C:\Users\Public\Desktop\Winamp.lnk
2014-04-17 20:30 - 2014-04-17 20:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2014-04-17 20:29 - 2014-04-18 16:53 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Winamp
2014-04-17 20:29 - 2014-04-17 20:34 - 00000000 ____D () C:\Program Files (x86)\Winamp
2014-04-17 20:17 - 2014-04-17 20:17 - 00001280 _____ () C:\Users\Denis\Desktop\Command Prompt.lnk
2014-04-17 16:20 - 2014-04-17 16:20 - 00003028 _____ () C:\Windows\System32\Tasks\{EFE0DB13-235C-4450-AE25-819DA6F2288A}
2014-04-17 16:20 - 2014-04-17 16:20 - 00003028 _____ () C:\Windows\System32\Tasks\{5A8C3065-6BE6-4B45-9E7A-24E9BDAA5D20}
2014-04-17 14:59 - 2014-04-17 14:59 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Apfiltr_01009.Wdf
2014-04-17 14:58 - 2010-03-26 20:44 - 01721904 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll
2014-04-17 14:54 - 2014-04-17 14:54 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\library_dir
2014-04-17 14:52 - 2014-04-17 19:19 - 00000000 ____D () C:\Program Files (x86)\Raptr
2014-04-17 14:46 - 2014-04-17 14:46 - 00000000 ____D () C:\Riot Games
2014-04-17 14:34 - 2014-04-17 14:33 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-17 14:33 - 2014-04-17 14:33 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-17 14:33 - 2014-04-17 14:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-16 23:47 - 2014-04-16 23:47 - 00000938 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2014-04-16 23:47 - 2014-04-16 23:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-04-16 23:47 - 2014-04-16 23:47 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-04-16 05:01 - 2014-04-17 14:35 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-16 04:28 - 2014-04-16 04:28 - 00000000 ____D () C:\Users\Denis\Desktop\Alte Firefox-Daten
2014-04-15 20:04 - 2014-04-16 22:34 - 00000000 ____D () C:\Program Files\Microsoft Xbox 360 Accessories
2014-04-15 20:01 - 2014-04-16 22:34 - 00000000 ____D () C:\369448b7f3a7ca6d489e710e06c0e4
2014-04-13 18:13 - 2014-04-13 18:13 - 00001452 _____ () C:\Users\Denis\Desktop\SkyrimLauncher.exe - Verknüpfung.lnk
2014-04-12 23:28 - 2014-04-12 23:28 - 00001358 _____ () C:\Users\Denis\Desktop\TESV.exe - Verknüpfung.lnk
2014-04-11 11:38 - 2014-04-11 11:40 - 00000000 ____D () C:\Program Files (x86)\TERA
2014-04-11 11:38 - 2014-04-11 11:38 - 00001056 _____ () C:\Users\Denis\Desktop\TERA.lnk
2014-04-11 11:38 - 2014-04-11 11:38 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\TERA
2014-04-11 11:38 - 2014-04-11 11:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TERA
2014-04-09 18:23 - 2014-04-17 20:02 - 419443248 ____C () C:\RAMDisk.img
2014-04-09 18:23 - 2014-04-17 19:15 - 419443248 ____C () C:\RAMDisk.img.bak
2014-04-09 17:48 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-09 17:48 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-09 17:48 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-09 17:48 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-09 17:48 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-09 17:47 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-09 17:47 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-09 17:47 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-09 17:47 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-09 17:47 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-09 17:47 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-09 17:47 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-09 17:47 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-09 17:47 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-09 17:47 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-09 17:47 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-09 17:47 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-08 22:25 - 2014-04-08 22:26 - 00000000 ____D () C:\Users\Denis\AppData\Local\Dataram_Corporation
2014-04-08 22:23 - 2014-04-17 20:03 - 00000000 ____D () C:\Program Files (x86)\RAMDisk
2014-04-06 19:23 - 2014-04-06 19:23 - 00131072 _____ (Woodgears.ca) C:\Users\Denis\Desktop\GearGenerator3(2).exe
2014-04-05 12:02 - 2014-04-05 13:20 - 00000063 _____ () C:\Users\Denis\Desktop\Passwort.txt
2014-03-30 13:17 - 2014-03-30 13:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-30 12:52 - 2014-03-30 12:52 - 00262144 _____ () C:\Windows\system32\config\elam

==================== One Month Modified Files and Folders =======

2014-04-26 19:59 - 2014-04-26 19:58 - 00023174 _____ () C:\Users\Denis\Desktop\FRST.txt
2014-04-26 19:58 - 2014-04-26 19:58 - 00000000 ____D () C:\Users\Denis\Desktop\FRST-OlderVersion
2014-04-26 19:58 - 2014-04-19 11:55 - 00000000 ____D () C:\FRST
2014-04-26 19:58 - 2014-04-19 11:54 - 02061824 _____ (Farbar) C:\Users\Denis\Desktop\FRST64.exe
2014-04-26 19:56 - 2014-04-26 19:56 - 00006078 _____ () C:\Users\Denis\Desktop\JRT.txt
2014-04-26 19:54 - 2010-12-24 19:48 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3197765660-3329619702-928005083-1001UA.job
2014-04-26 19:51 - 2014-03-02 22:51 - 00000911 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Update {DDC38361-039E-4970-8E52-4DAEB0824476}.job
2014-04-26 19:51 - 2014-03-02 22:51 - 00000725 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {DDC38361-039E-4970-8E52-4DAEB0824476}.job
2014-04-26 19:51 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-04-26 19:49 - 2009-07-14 06:45 - 00030272 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-26 19:49 - 2009-07-14 06:45 - 00030272 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-26 19:46 - 2014-04-26 19:46 - 00000000 ____D () C:\Windows\ERUNT
2014-04-26 19:45 - 2013-09-15 10:01 - 01847333 _____ () C:\Windows\WindowsUpdate.log
2014-04-26 19:44 - 2014-01-13 01:38 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-04-26 19:44 - 2012-04-08 10:36 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-26 19:41 - 2014-04-26 19:41 - 00050071 _____ () C:\Users\Denis\Desktop\AdwCleaner[S0].txt
2014-04-26 19:40 - 2014-04-18 17:00 - 00001400 _____ () C:\Windows\setupact.log
2014-04-26 19:40 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-26 19:38 - 2014-04-26 19:35 - 00000000 ____D () C:\AdwCleaner
2014-04-26 19:38 - 2010-12-24 19:48 - 00001068 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3197765660-3329619702-928005083-1001Core.job
2014-04-26 19:34 - 2011-02-01 15:17 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Skype
2014-04-26 17:22 - 2014-04-26 17:22 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\42BD39F9.sys
2014-04-26 17:22 - 2014-04-26 17:22 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\157958D9.sys
2014-04-26 16:47 - 2014-04-18 02:06 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-26 16:43 - 2014-04-26 16:43 - 01330861 _____ () C:\Users\Denis\Desktop\adwcleaner.exe
2014-04-26 16:43 - 2014-04-26 16:43 - 01016261 _____ (Thisisu) C:\Users\Denis\Desktop\JRT.exe
2014-04-26 16:36 - 2010-12-24 19:44 - 00003930 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{ABBCAB68-BAD7-49E6-AC47-8657CB82DADF}
2014-04-20 22:14 - 2014-04-20 22:14 - 00000552 _____ () C:\Windows\PFRO.log
2014-04-20 22:09 - 2012-08-09 19:58 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Spotify
2014-04-20 19:06 - 2010-11-22 09:26 - 00718876 _____ () C:\Windows\system32\perfh007.dat
2014-04-20 19:06 - 2010-11-22 09:26 - 00157538 _____ () C:\Windows\system32\perfc007.dat
2014-04-20 19:06 - 2009-07-14 07:13 - 01670676 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-20 19:01 - 2012-08-01 22:04 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\.minecraft
2014-04-20 13:29 - 2012-02-12 17:43 - 00007597 _____ () C:\Users\Denis\AppData\Local\Resmon.ResmonCfg
2014-04-19 21:47 - 2014-04-19 21:47 - 00034640 _____ () C:\ComboFix.txt
2014-04-19 21:47 - 2014-04-19 21:27 - 00000000 ____D () C:\Qoobox
2014-04-19 21:47 - 2014-04-19 21:27 - 00000000 ____D () C:\ComboFix
2014-04-19 21:47 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-04-19 21:45 - 2014-04-19 21:27 - 00000000 ____D () C:\Windows\erdnt
2014-04-19 21:44 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-04-19 21:26 - 2014-04-19 21:25 - 05195329 ____R (Swearware) C:\Users\Denis\Desktop\ComboFix.exe
2014-04-19 21:00 - 2013-05-18 21:20 - 00000402 _____ () C:\Windows\Tasks\Wise Turbo Checker.job
2014-04-19 11:57 - 2014-04-19 11:56 - 00086464 _____ () C:\Users\Denis\Downloads\Addition.txt
2014-04-19 11:57 - 2014-04-19 11:55 - 00057084 _____ () C:\Users\Denis\Downloads\FRST.txt
2014-04-19 02:14 - 2014-04-19 02:14 - 00000000 ____D () C:\Users\Denis\AppData\Local\AMD
2014-04-19 02:12 - 2014-04-19 02:12 - 00000000 ____D () C:\ProgramData\AMD
2014-04-19 02:05 - 2014-04-19 02:04 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Wise Auto Shutdown
2014-04-19 02:05 - 2014-04-19 02:04 - 00000000 ____D () C:\Program Files (x86)\PassShow-soft
2014-04-19 02:05 - 2013-05-18 17:24 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Wise Care 365
2014-04-19 02:04 - 2014-04-19 02:04 - 00001188 _____ () C:\Users\Public\Desktop\Wise Auto Shutdown.lnk
2014-04-19 02:04 - 2014-04-19 02:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Auto Shutdown
2014-04-19 02:04 - 2013-05-18 17:24 - 00000000 ____D () C:\Program Files (x86)\Wise
2014-04-19 02:03 - 2014-04-19 02:03 - 00929416 _____ (CNET Download.com) C:\Users\Denis\Downloads\cbsidlm-cbsi188-Wise_Auto_Shutdown-BP-75755206.exe
2014-04-18 23:59 - 2014-04-18 23:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD VISION Engine Control Center
2014-04-18 23:59 - 2014-04-18 23:59 - 00000000 ____D () C:\ProgramData\ATI
2014-04-18 23:59 - 2014-04-18 23:59 - 00000000 ____D () C:\Program Files (x86)\AMD APP
2014-04-18 23:59 - 2011-07-07 18:23 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-04-18 23:57 - 2014-04-18 23:57 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2014-04-18 23:56 - 2014-04-18 23:56 - 00000000 ____D () C:\Program Files\ATI
2014-04-18 23:49 - 2014-04-18 23:49 - 00613200 _____ (Chip Digital GmbH) C:\Users\Denis\Downloads\ATI Catalyst Mobility 64 Bit - CHIP-Downloader.exe
2014-04-18 22:22 - 2014-03-21 21:12 - 00000000 ___RD () C:\Users\Denis\Desktop\Neuer Ordner
2014-04-18 22:06 - 2014-04-18 22:05 - 00385040 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-04-18 20:50 - 2014-04-18 20:50 - 00110808 _____ () C:\Users\Denis\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-18 20:48 - 2012-08-09 19:59 - 00000000 ____D () C:\Users\Denis\AppData\Local\Spotify
2014-04-18 17:00 - 2014-04-18 17:00 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-18 16:53 - 2014-04-17 20:29 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Winamp
2014-04-18 16:53 - 2012-04-27 23:06 - 00000000 ____D () C:\Users\Denis\AppData\Local\LogMeIn Hamachi
2014-04-18 16:53 - 2011-12-27 17:05 - 00000000 ____D () C:\Windows\Minidump
2014-04-18 16:53 - 2011-07-16 15:05 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-04-18 16:23 - 2012-02-12 00:46 - 00000000 ____D () C:\Windows\pss
2014-04-18 14:20 - 2013-07-16 00:39 - 00000000 ____D () C:\SG Interactive
2014-04-18 13:15 - 2014-04-18 13:15 - 00003292 _____ () C:\Windows\System32\Tasks\{6B24E018-AF69-4745-8084-7CB4A8017FE7}
2014-04-18 10:49 - 2014-04-18 10:07 - 00626272 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-04-18 10:49 - 2014-04-18 10:07 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-04-18 10:49 - 2012-10-25 12:42 - 00029280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klmouflt.sys
2014-04-18 10:49 - 2012-10-25 12:42 - 00029280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klkbdflt.sys
2014-04-18 10:49 - 2012-08-13 16:49 - 00178448 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kneps.sys
2014-04-18 10:49 - 2012-06-19 17:28 - 00458336 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys
2014-04-18 10:49 - 2012-06-08 11:38 - 00054368 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kltdi.sys
2014-04-18 10:10 - 2014-04-18 10:10 - 00002312 _____ () C:\Users\Denis\Desktop\Sicherer Zahlungsverkehr.lnk
2014-04-18 10:09 - 2014-04-17 23:12 - 00000000 ____D () C:\ProgramData\Kaspersky Lab Setup Files
2014-04-18 10:08 - 2014-04-18 10:08 - 00001118 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security 2013.lnk
2014-04-18 10:08 - 2014-04-18 10:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security 2013
2014-04-18 10:07 - 2014-04-17 23:13 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-04-18 02:05 - 2014-04-18 02:05 - 00001074 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-04-18 02:05 - 2014-04-18 02:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-04-18 02:05 - 2014-04-18 02:05 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-18 02:05 - 2014-04-18 02:05 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-04-18 02:04 - 2014-04-18 02:04 - 00613200 _____ (Chip Digital GmbH) C:\Users\Denis\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe
2014-04-18 01:59 - 2010-12-28 19:15 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-18 01:57 - 2014-04-18 01:57 - 00000989 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-04-18 01:57 - 2011-06-13 16:42 - 00000000 ____D () C:\Program Files (x86)\CCleaner
2014-04-18 01:55 - 2014-04-18 01:55 - 00613200 _____ (Chip Digital GmbH) C:\Users\Denis\Downloads\CCleaner - CHIP-Downloader(1).exe
2014-04-18 01:52 - 2014-04-18 01:52 - 00613200 _____ (Chip Digital GmbH) C:\Users\Denis\Downloads\CCleaner - CHIP-Downloader.exe
2014-04-18 01:51 - 2011-03-20 19:34 - 00000000 ____D () C:\Program Files (x86)\DivX
2014-04-18 01:51 - 2011-03-20 19:31 - 00000000 ____D () C:\ProgramData\DivX
2014-04-18 01:50 - 2011-12-25 00:49 - 00000000 ____D () C:\Program Files (x86)\MAGIX
2014-04-18 01:50 - 2011-04-09 01:02 - 00000000 ____D () C:\ProgramData\MAGIX
2014-04-18 01:50 - 2010-09-09 04:49 - 00000000 ____D () C:\Program Files (x86)\Packard Bell
2014-04-18 01:30 - 2014-04-17 23:41 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-04-18 01:28 - 2014-04-17 23:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-04-18 00:38 - 2010-12-24 19:39 - 00000000 ___RD () C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-18 00:30 - 2014-03-22 17:21 - 00000000 ____D () C:\ProgramData\eiasytoshOp
2014-04-18 00:30 - 2012-03-31 19:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Left 4 Dead 2
2014-04-18 00:30 - 2012-03-31 19:33 - 00000000 ____D () C:\Program Files (x86)\Left 4 Dead 2
2014-04-18 00:30 - 2012-03-22 22:59 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MP3 Firm ware Backup Tool
2014-04-18 00:30 - 2012-03-22 22:59 - 00000000 ____D () C:\Program Files\AMT
2014-04-17 23:54 - 2014-04-17 23:46 - 135232000 _____ () C:\Users\Denis\Downloads\setup_11.0.1.1245.x01_2014_04_17_23_03.exe
2014-04-17 23:53 - 2014-04-17 23:41 - 00000000 ____D () C:\ProgramData\Avira
2014-04-17 23:41 - 2014-04-17 23:41 - 00001109 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-04-17 23:41 - 2014-04-17 23:41 - 00000000 ____D () C:\ProgramData\Package Cache
2014-04-17 23:40 - 2014-04-17 23:40 - 04464280 _____ (Avira Operations GmbH & Co. KG) C:\Users\Denis\Downloads\avira_de_av___ws.exe
2014-04-17 23:13 - 2014-04-17 23:13 - 00000000 ____D () C:\Windows\ELAMBKUP
2014-04-17 22:35 - 2009-07-14 06:45 - 00021504 _____ () C:\Windows\system32\umstartup.etl
2014-04-17 21:12 - 2011-07-20 20:03 - 00000000 ____D () C:\ProgramData\Ulead Systems
2014-04-17 21:12 - 2011-07-20 20:03 - 00000000 ____D () C:\Program Files (x86)\Ulead Systems
2014-04-17 21:12 - 2010-09-09 04:37 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-04-17 21:11 - 2011-07-20 20:04 - 00000582 _____ () C:\Windows\ulead32.ini
2014-04-17 21:07 - 2012-06-17 13:51 - 00000000 ____D () C:\ProgramData\Sony Ericsson
2014-04-17 21:07 - 2012-06-17 13:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony Ericsson
2014-04-17 21:07 - 2012-06-17 13:51 - 00000000 ____D () C:\Program Files (x86)\Sony Ericsson
2014-04-17 21:07 - 2011-04-28 20:31 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
2014-04-17 21:03 - 2014-04-17 21:03 - 00003292 _____ () C:\Windows\System32\Tasks\{E3DAF802-5736-409A-B88F-37F36271399E}
2014-04-17 21:01 - 2012-02-19 10:58 - 00000000 ____D () C:\ProgramData\SecTaskMan
2014-04-17 21:01 - 2010-09-09 04:53 - 00000000 ____D () C:\ProgramData\WildTangent
2014-04-17 21:01 - 2010-09-09 04:53 - 00000000 ____D () C:\Program Files (x86)\Packard Bell Games
2014-04-17 21:01 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-04-17 20:56 - 2012-10-29 17:38 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Notepad++
2014-04-17 20:56 - 2012-10-29 17:38 - 00000000 ____D () C:\Program Files (x86)\Notepad++
2014-04-17 20:56 - 2011-01-03 15:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-04-17 20:34 - 2014-04-17 20:29 - 00000000 ____D () C:\Program Files (x86)\Winamp
2014-04-17 20:30 - 2014-04-17 20:30 - 00000991 _____ () C:\Users\Public\Desktop\Winamp.lnk
2014-04-17 20:30 - 2014-04-17 20:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2014-04-17 20:17 - 2014-04-17 20:17 - 00001280 _____ () C:\Users\Denis\Desktop\Command Prompt.lnk
2014-04-17 20:03 - 2014-04-08 22:23 - 00000000 ____D () C:\Program Files (x86)\RAMDisk
2014-04-17 20:02 - 2014-04-09 18:23 - 419443248 ____C () C:\RAMDisk.img
2014-04-17 19:26 - 2011-12-29 19:54 - 00000000 ____D () C:\Users\Denis\Documents\RCT3
2014-04-17 19:24 - 2010-09-09 04:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Packard Bell - Security & Support
2014-04-17 19:19 - 2014-04-17 14:52 - 00000000 ____D () C:\Program Files (x86)\Raptr
2014-04-17 19:15 - 2014-04-09 18:23 - 419443248 ____C () C:\RAMDisk.img.bak
2014-04-17 16:20 - 2014-04-17 16:20 - 00003028 _____ () C:\Windows\System32\Tasks\{EFE0DB13-235C-4450-AE25-819DA6F2288A}
2014-04-17 16:20 - 2014-04-17 16:20 - 00003028 _____ () C:\Windows\System32\Tasks\{5A8C3065-6BE6-4B45-9E7A-24E9BDAA5D20}
2014-04-17 16:12 - 2010-11-22 00:39 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-04-17 14:59 - 2014-04-17 14:59 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Apfiltr_01009.Wdf
2014-04-17 14:59 - 2012-07-24 17:14 - 00000000 ____D () C:\Users\Denis\Documents\BFBC2
2014-04-17 14:54 - 2014-04-17 14:54 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\library_dir
2014-04-17 14:46 - 2014-04-17 14:46 - 00000000 ____D () C:\Riot Games
2014-04-17 14:46 - 2012-07-22 15:40 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-04-17 14:35 - 2014-04-16 05:01 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-17 14:33 - 2014-04-17 14:34 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-17 14:33 - 2014-04-17 14:33 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-17 14:33 - 2014-04-17 14:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-17 14:33 - 2012-01-15 15:15 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-17 14:33 - 2012-01-15 15:15 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-16 23:47 - 2014-04-16 23:47 - 00000938 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2014-04-16 23:47 - 2014-04-16 23:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-04-16 23:47 - 2014-04-16 23:47 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-04-16 23:21 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-16 23:13 - 2012-01-26 12:23 - 05380608 ___SH () C:\Users\Denis\Desktop\Thumbs.db
2014-04-16 22:39 - 2010-12-24 19:38 - 00000000 ____D () C:\Users\Denis
2014-04-16 22:38 - 2012-09-25 22:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Derive 6
2014-04-16 22:36 - 2014-01-30 00:12 - 00000000 ____D () C:\Users\Mcx1-DENIS-PC
2014-04-16 22:36 - 2013-08-31 16:51 - 00000000 ____D () C:\Users\Gast
2014-04-16 22:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Msdtc
2014-04-16 22:35 - 2013-07-24 10:41 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive
2014-04-16 22:35 - 2013-05-20 14:58 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Wise Game Booster
2014-04-16 22:35 - 2012-06-17 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-04-16 22:34 - 2014-04-15 20:04 - 00000000 ____D () C:\Program Files\Microsoft Xbox 360 Accessories
2014-04-16 22:34 - 2014-04-15 20:01 - 00000000 ____D () C:\369448b7f3a7ca6d489e710e06c0e4
2014-04-16 22:34 - 2013-02-24 03:49 - 00000000 ____D () C:\Program Files (x86)\Audacity
2014-04-16 22:34 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-04-16 22:31 - 2012-09-25 22:09 - 00000000 ____D () C:\Program Files (x86)\TI Education
2014-04-16 07:41 - 2011-07-09 20:20 - 00000000 ____D () C:\Users\Denis\AppData\Local\Ubisoft Game Launcher
2014-04-16 04:28 - 2014-04-16 04:28 - 00000000 ____D () C:\Users\Denis\Desktop\Alte Firefox-Daten
2014-04-14 21:55 - 2010-12-24 19:56 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\TS3Client
2014-04-13 18:13 - 2014-04-13 18:13 - 00001452 _____ () C:\Users\Denis\Desktop\SkyrimLauncher.exe - Verknüpfung.lnk
2014-04-12 23:28 - 2014-04-12 23:28 - 00001358 _____ () C:\Users\Denis\Desktop\TESV.exe - Verknüpfung.lnk
2014-04-11 15:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-11 11:40 - 2014-04-11 11:38 - 00000000 ____D () C:\Program Files (x86)\TERA
2014-04-11 11:38 - 2014-04-11 11:38 - 00001056 _____ () C:\Users\Denis\Desktop\TERA.lnk
2014-04-11 11:38 - 2014-04-11 11:38 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\TERA
2014-04-11 11:38 - 2014-04-11 11:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TERA
2014-04-10 22:35 - 2013-07-25 14:51 - 00000000 ____D () C:\Users\Denis\AppData\Local\ArmA 2 OA
2014-04-10 18:15 - 2013-08-14 16:39 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-10 18:07 - 2012-05-24 22:57 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-09 21:52 - 2013-05-18 17:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Game Booster
2014-04-08 22:26 - 2014-04-08 22:25 - 00000000 ____D () C:\Users\Denis\AppData\Local\Dataram_Corporation
2014-04-08 16:02 - 2013-07-25 14:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dotjosh Studios
2014-04-06 19:23 - 2014-04-06 19:23 - 00131072 _____ (Woodgears.ca) C:\Users\Denis\Desktop\GearGenerator3(2).exe
2014-04-06 16:54 - 2012-04-26 21:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-05 23:27 - 2013-03-31 17:11 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2014-04-05 13:20 - 2014-04-05 12:02 - 00000063 _____ () C:\Users\Denis\Desktop\Passwort.txt
2014-04-03 09:51 - 2014-04-18 02:05 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-03 09:51 - 2014-04-18 02:05 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-03 09:50 - 2014-04-18 02:05 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-31 09:35 - 2010-12-24 20:04 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-03-30 13:17 - 2014-03-30 13:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-30 12:52 - 2014-03-30 12:52 - 00262144 _____ () C:\Windows\system32\config\elam
2014-03-30 12:52 - 2013-12-18 17:52 - 00000095 _____ () C:\Users\Denis\AppData\Roaming\WB.CFG
2014-03-30 12:51 - 2014-03-22 17:22 - 00000000 ____D () C:\ProgramData\a1e4f9da61eca01b

Files to move or delete:
====================
C:\ProgramData\hash.dat


Some content of TEMP:
====================
C:\Users\Denis\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


testsigning: ==> Check for possible unsigned rootkit driver <===== ATTENTION!


LastRegBack: 2014-04-19 13:14

==================== End Of Log ================
--- --- ---


FRST.txt

schrauber 27.04.2014 18:13

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)


Alle Zeitangaben in WEZ +1. Es ist jetzt 09:10 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131